Session isolation
Each session is bound to the correct kiosk and subject; data never appears to the next user.
KIOWARE AGENT
A secure, transparent kiosk experience with safe alternatives
KioWare Agent orchestrates end-user journeys, device states, session protection, accessibility, remote assistance and incident recovery.
END-USER EXPERIENCE
42 intentional end-user states
Success, warning, error, maintenance and recovery states explain impact, protected data and the best next action.
SECURITY BY DESIGN
Default session protection
Encrypted temporary data
Drafts and buffers are encrypted and purged by session policy.
Consent-based assistance
Support sees masked data only, with limited and revocable rights.
Safe recovery
Restore from committed checkpoints, reauthenticate and prevent duplicate submission.
SERVICE MODE
Detect, bind and validate peripherals
Technicians review required/optional devices, serials, firmware, connection ports, drivers, health tests and attestation before activating a kiosk.
- Operational preflight
- Replacement device rebind
- Recovery Mode & Golden Image
- Controlled support bundle
EDGE RUNTIME · SESSION · DEVICE CONTROL
KioWare Agent is the execution layer at the Kiosk
The Agent manages session lifecycle, orchestrates peripherals through HAL, applies local policy, creates recovery checkpoints and protects temporary data in public environments.
Session isolation
Data isolation, timeout, screen lock and safe termination.
Device orchestration
Capabilities, state, commands and fallback through device adapters.
Recovery
Checkpoints, backend reconciliation and duplicate-submission prevention.
User protection
Masking, accessibility, consent and revocable remote support.
OPERATIONAL STATESInitializeAttestation and device checks. ReadyAccept sessions only when policy passes. TransactionMaintain checkpoints and evidence. SupportView-only by default; re-consent for privilege. IncidentLock data and reconcile state. EndRevoke tokens and purge temporary data.