Disclaimer
LoX is currently in beta testing and may contain bugs or interface issues. Do not rely solely on this authentication method, even though it is extremely convenient.
A comprehensive whitepaper detailing the technology is currently in preparation and will be released soon.
Introduction to LoX Authentication
LoX (pronouced Locks) Authentication is a next-generation security solution built on MIFARE DESFire EV3 technology, designed to deliver fast, passwordless, and highly secure authentication across InfenX applications. Acting as a digital keyring, LoX securely stores critical credentials, including a cryptographically secure, unique, and disposabble user UID, the instance address, and a secure token. This design enables straightforward credential revocation and robust identity protection.
With LoX, users no longer need to manage complex usernames, passwords or memorize app instance address. Authentication is completed in seconds using only a simple 6-digit PIN, providing both ease of use and strong cryptographic assurance. LoX works seamlessly on Android devices and web browsers through the LoX Gateway app, available on the Microsoft Store, ensuring secure and effortless access across platforms.
LoX Authentication will be progressively required for administrative roles in InfenX apps.
Authenticate in your browser with LoX
In a browser context, the instance address is determined by the current view. Your LoX Card functions as a simple key, the keyring itself is not accessed and only the key corresponding to the active application is requested for authentication.
NFC Reader
Most PCs are not natively equipped with an NFC reader. To enable LoX authentication, you’ll need to add a plug-and-play, ISO/IEC 14443A-compliant contactless NFC reader. For this purpose, we recommend the uTrust 3700F reader.
WARNING : Avoid using hybrid card readers that support both contact and contactless interfaces, as they can interfere with proper card detection and disrupt the communication flow.
Gateway
To connect the NFC reader with our browser application, we developed a Gateway application that handles authentication challenges through a three-part process. This Gateway, which must run on the same PC as the browser, is available on the Microsoft Store (upon request) and only requires internet access to communicate with the Secure Access Module.
Authenticate on MiceManager
Once the LoX Gateway is running, MiceManager Authentication automatically selects the LoX authentication method and prompts you for your 6-digit PIN. After entering the PIN, a new access request is sent to the Secure Access Module (SAM), which waits for the cryptographic challenge to complete before proceeding with user authentication.
Upon successful authentication, LoX Gateway verifies your identity, and your MiceManager instance is logged in automatically.
That’s all!
Authenticate in MiceManager Team
Since version v25.9.x, the MiceManager Team app is available on the Google Play Store and is designed for use on professional tablets with NFC capabilities. We recommend the Galaxy Tab Active5 Pro 5G Enterprise Edition, though any other large-screen Android device with NFC will also work.
Select the appropriate key from your keyring.
Authentication on the Android app is quick and easy. Simply hold your LoX Card over the device’s NFC area to scan your keyring and reveal the available keys for the MiceManager Team App. Your card can store multiple keys for different instances. A handy feature for animal facility managers !
Authenticate on MiceManager
The next steps for LoX Authentication on Android are the same as described earlier: enter your 6-digit PIN and hold your LoX Card over the device to complete the cryptographic challenge. If successful, you’ll be authenticated in just a second.
Failed on Authentication
In the event of a failure (for example, if LoX is not activated or revoked for the user, the card is incorrect, or the PIN is wrong) an authentication failed error will be displayed.
Due to the “zero-knowledge” security design, neither the Gateway, the app, nor the SAM can determine the exact cause of the failure. If any security component is incorrect, the cryptographic challenge cannot be completed, and authentication fails.
To resolve this issue (if applicable):
- Make sure you are using your LoX Card.
- Retry the authentication process.
- Restart the LoX Gateway (or the Android app, which includes the Gateway).
- If the problem persists, ask your supervisor to reassign your card with valid credentials.
Register a LoX Authentication card
Registering a LoX card is quick and simple, and it is available to any user or admin of InfenX-compatible applications.
First, navigate to the user profile, either your own or one selected from the user dashboard. And click on “Manage LoX Authentication” if available.
Next, click on “Format & Create LoX Key” or “Create LoX Key” (this option will be available in version 1.0).
LoX Bridge, either the desktop Gateway or the in-app view on mobile, will prompt you to tap your LoX Card and will then register your key.
The user will receive their PIN by email and will be able to authenticate with the card on any NFC-capable device, until a new key for the same app is registered or the current key is revoked.
