TABLE OF CONTENTS. I. Purpose and Scope... 2 II. Standards... 3

Transcription

1 Technical Team: CFM Group Approval: Page 1 of 14 TABLE OF CONTENTS I. Purpose and Scope... 2 II. Standards Section 1: Mandatory Requirements Section 2: Access Card - General Features Section 3: Access Cards - Hardware and Software Section 4 : Access Card - Credential Options Section 5: Access Card - Format Options Section 6: Card Reader Features and Functionalities Section 7: Card Reader Hardware Configurations Options Section 8: Door Type and Operational Role (table) sample below Section 9: Industry Standards / Applicable Codes Section 10: Warranty III. Related Standards IV. Exceptions or Waiver Requirements V. Requests for Clarification VI. References VII. Key Terms & Glossary VIII. Document History... 14

2 Technical Team: CFM Group Approval: Page 2 of 14 I. PURPOSE AND SCOPE The purpose of the One Card System Standard is to enable the, Districtwide, (the District, nine colleges, and related satellite offices) to have one database allowing a single Card for all students, staff, and faculty to access services, parking and secure areas (such as doors, labs, etc.) bookstore and cafeteria transactions, and financial aid services. The goal is to standardize on a single card format that will deliver enhanced security, improved usability and performance, and reduce the system configuration complexity and effort in managing card holder administration. The card format must support a large number of users and automate provisioning of accounts to reduce college staff needed to support these systems. A. Standardize on a Single Card One card that will work districtwide, eliminate duplicate card numbers, one location to manage versus many. B. One Database One enterprise database reduces admin costs, support, training, back-ups, data base administration, and licensing. C. Factor existing equipment into plan Costs are kept down by utilizing the existing infrastructure such as wiring, electric locking hardware, power supplies and sensors. D. Trend ownership costs to zero Utilize latest card reader technology to move toward NFC (Near field communication); thus the need for physical cards may be phased out. This standard is intended for use in all construction or for renovation projects, which revamp existing classroom and facility space throughout the. This standard will ensure that the One Card System Standard throughout the will adhere to established performance criteria, design standards, and operation specifications. This standard will provide parameters but will require interpretation and adjustment to the specific situations presented by instructional and academic needs across the and its diverse programs, departments and facilities.

3 Technical Team: CFM Group Approval: Page 3 of 14 II. STANDARDS 1. Section 1: Mandatory Requirements The Physical Security One Card System must have the following mandatory requirements: 1.1 Scalable and integrates with existing physical security systems 1.2 Meets ISO 15693/14443B for contactless communications 1.3 Diversified read/write keys that allow complex applications and provide for future expansion 1.4 No-battery design MHz read/write contactless smart card technology for high-speed, reliable communications with high data integrity 1.6 Offers consistent read range not affected by body shielding or variable environmental conditions 1.7 Upgradable, extensible features 2. Section 2: Access Card - General Features The District has selected the HID iclass SE MHz contactless smartcard as the standard for all new construction. This card is highly secure, delivers trust based security, and provides new levels of use and performance. The iclass SE MHz smartcard platform will be used with the iclass SE card readers. The access card shall have the following general features: 2.1 Photo ID Compatible Print directly to the card with a direct image or thermal transfer printer. 2.2 Trusted Identity Platform (TIP) Enabled Provides trusted identity within a secure ecosystem of interoperable products. 2.3 Multi-Layered Security Ensures data authenticity and privacy through the multi-layered security of HID s SIO. 2.4 SIO Data Binding Inhibits data cloning by binding an object to specific credential. 2.5 Mutual authentication, encrypted data transfer, and 64-bit diversified keys for read/write capabilities.

4 Technical Team: CFM Group Approval: Page 4 of 14 Extends private security by protecting uniquely keyed credentials, SIOs and programming update keys. 3. Section 3: Access Cards - Hardware and Software 3.1 Hardware Sensors Locking hardware Lenel panels 3.2 Software Capable of using assigned passwords to define levels of system operation for each operator from basic monitoring to full control of the system databases User-friendly, menu-driven Windows environment; and unlimited capacity to accommodate doors, supervised alarm inputs, control relays, controllers, and users Capable of arming and disarming alarm points both manually and automatically by time of day and day of week Capability to display alarm information on a graphic floor plan.

5 Technical Team: CFM Group Approval: Page 5 of Near Field Communication (NFC) (Recommended) NFC is the latest technology in the credential field. The most recent mobile devices are NFC compatible and can be used as a credential. More and more students have personal mobile devices that they carry with them. By deploying NFC compatible card readers, is in a position to leverage the use of mobile devices as the holder of the end users credentials Utilizes ones personal mobile device as a credential Very secure Adds no operating costs 4. Section 4: Access Card - Credential Options 4.1 Form factors Most people are familiar with access cards; the expected shape for access cards is often referred to as CR80 and has a nominal size of x The shape is derived from the ISO 7810 specification which governs Banking and ID cards. 4.2 Mobile Device The future direction is to leverage the public s overwhelming adoption of the personal mobile device. Not only can these devices incorporate access control technology, but they can add additional layers of security with device authentication. 5. Section 5: Access Card - Format Options The District has selected the 46-bit format to be used with the iclass SE family of credentials, readers, and programming cards. This section defines the access card format Bit (Recommended) Upcoming custom format developed due to the managed 35-bit format being exhausted The reserved segments of this format have been consumed forcing the adoption of a new standard. Many end users are exceeding the 1 million unique card number limit Supports approximately 1 billion unique card numbers Compatible with Lenel OnGuard (OnGuard can be configured to support this format) Can be managed by manufacturer

6 Technical Team: CFM Group Approval: Page 6 of Section 6: Card Reader Features and Functionalities This section defines features and functionalities of the card reader. 6.1 Securely read, interpret, and authenticate access control data from MHz contactless smart card credentials by providing: Customized security protection through support of the device-independent Secure Identity Object (SIO) portable credential methodology to provide enhanced security and performance features Unique read selection that enables reading of the Secure Identity Object (SIO) Participates in an advanced, bounded and trust-based security system utilizing the Trusted Identity Platform TM (TIP) architecture Guaranteed compatibility to read all HID data formats and ensuring card-to-reader interoperability in multi-location installations and multi-card and reader populations when used with genuine HID products Backwards compatibility with legacy MHz contactless smart card access control formats (E.g. 26-bit, 32, 35-bit, 37-bit, 56-bit, and HID Corporate 1000 formats).

7 Technical Team: CFM Group Approval: Page 7 of 14 Compatibility across the product line shall be assured without the need of special programming 6.2 Security Technology and Features Secure Identity Object (SIO) enabled Support the standards-based, device-independent Security Identity Object (SIO) portable credential methodology to ensure data authenticity and privacy Reside on any number of identity devices, such as iclass SE, MIFARE Classic SE, and MIFARE DESFire EV1 SE credentials Certified end-point (TIP Node) within a Trusted Identity Platform (TIP) infrastructure TIP shall provide a scalable, on-demand, secure identity delivery system that validates, registers and provides lifecycle management support for certified trusted end-point contactless smart card readers Increase security by narrowing the possibility of unwanted configuration changes and denials of service. The contactless smart card reader shall utilize TIP-enabled secure configuration of contactless smart card readers with counters and uniquely diversified configuration cards Utilize Secure Element Technology to protect keys and cryptographic functions to the international standard Evaluation Assurance Level (EAL) Configurable to utilize Velocity Checking to provide breach resistance against electronic attacks that invoke multiple improper authentication attempts Configurable to provide multiple hierarchical degrees of key compatibility for accessing the smart card access control data. Compatibility shall be provided for the following key structure options: Compatibility with the standard SIO and iclass access control application data model to ensure convenient off the shelf compatibility with iclass SE and iclass credentials Compatibility with higher security SE Elite credential programmer that uniquely assigns a reader and credential keyset that provides site-specific security.

8 Technical Team: CFM Group Approval: Page 8 of Usability Features Simplify troubleshooting through Anti-passback Notification that the card has already been processed and it must be removed from reader field temporarily prior to processing again Provide enhanced user feedback options through the use of clear and bright tri-colored LEDs configurable to support any three color combinations (RGB - Red, Green, and Blue) Enable ease of installation through identical wiring methods as legacy and 125 khz proximity readers Enable backwards compatibility with legacy MHz access control formats (E.g. 26- bit, 32, 35-bit, 37-bit, 56-bit, and HID Corporate 1000 formats) Provide a full product line of compatible products including readers, readers with integral keypads and, credentials and cards without the need of special programming Universal compatibility with most access control systems by outputting card data in compliance with the SIA AC-01 Wiegand standard Configurable to provide Clock-and-Data output Allow reader firmware to be upgraded in the field without the need to remove the reader from the wall through the use of factory-provided Programming Cards Allow for secure installation practices through mounting methods utilizing tamper resistant screws Ability to transmit an alarm signal via and integrated optical tamper switch if an attempt is made to remove the reader from the wall. The tamper switch shall be programmable to provide a selectable action to provide a selectable action compatible with various tamper communication schemes provided by access control panel manufacturers. The selectable action shall include one of the following: The reader open collector line changes from a high state (5V) to a low state (Ground) During a tamper state, the I m Alive message is inverted..

9 Technical Team: CFM Group Approval: Page 9 of Ability of an on-line I m Alive message so the reader s functional health can be monitored at all times when paired with a compatible access control panel Customizable reader behavior options either from the factory, or defined in the field through the use of pre-configured command cards. Reader behavior programming options shall include: Audio/Visual Templates for card reads, and attack detection Velocity Check timing and thresholds Optical tamper actions RF scan delay Hold Mode Intelligent Power Management Key diversifiers Key rolling CSN output configuration Data Model prioritization Default LED color Hold mode Programmable audio/visual indication An audio beeper shall provide various tone sequences to signify: access granted, access denied, power up, and diagnostics A high-intensity red/green/blue (RGB) light bar shall provide clear visual status. The light bar shall provide uniform distribution of light eliminating individual bright spots Ability to upgrade its application code through the use of pre-configured firmware cards. This feature shall allow previously installed readers be reconfigured to modify their behavior and capabilities as the project environment evolves Ability for mounting to standard electrical boxes through the use of universal international mounting holes. 6.4 Performance Features Enable user prioritization of high-frequency/high-frequency credential reads. Technology prioritization shall synchronize a site s credential technology read priority to the access panel configuration while reducing unintended credential reads.

10 Technical Team: CFM Group Approval: Page 10 of Provide consistent optimal read range by implementing an auto-tune function that adjusts for manufacturing tolerances to enhance consistency of performance from reader to reader Field programmable to provide secure upgrades for migration and extended lifecycle Provide optimal read range and read speed for increased access control throughput. 6.5 Environmental and Sustainability Features Reduce power consumption by as much as 75% through the use of Intelligent Power Management (IPM) technology Manufactured with 10% recycled material to provide the potential of LEEDS building credits in new construction projects Compliant with Restriction of Hazardous Substances directive (RoHS) restricting the use of specific hazardous materials found in electrical and electronic products. The substances banned under RoHS are lead (Pb), mercury (Hg), cadmium (Cd), hexavalent chromium (CrVI), polybrominated biphenyls (PBB) and polybrominated diphenyl ethers (PBDE) Contactless smart card reader shall be manufacturers with 10.5% (Pigtail) and 11% (Terminal Strip). 6.6 Designed for low current operation to enable contactless smart card migration from most legacy proximity applications without the need to replace existing access control panels and/or power supplies. 6.7 Provisioned through secure connections utilizing Trusted Identity Platform s TM Secure Delivery Infrastructure (SDI) where all cryptographic keys governing system security are delivered with end-to-end privacy and integrity. 7. Section 7: Card Reader Hardware Configurations Options The District has selected the iclass SE card readers that support the secure MHz contactless reader technology. This section defines the card reader hardware configuration. 7.1 Single Technology Card/Reader and Lenel Panels (Recommended) Higher initial cost One card

11 Technical Team: CFM Group Approval: Page 11 of One database Lowest operational cost due to training, database administration, licensing and roadmap to use of NFC a card-less system. 8. Section 8: Door Type and Operational Role (table) sample below No. DOOR TYPE & OPERATIONAL ROLE 1. Doors Public to Secure Areas To electronically secure, monitor, record and grant access control of locked doors leading from public areas to secure areas including open/closed conditions and to prevent unauthorized attempts to access through them. 2. Doors from public to sterile areas To electronically secure, monitor, record and grant access control of locked doors leading from public areas to sterile areas including open/closed conditions and to prevent unauthorized attempts to access through them. 3. Elevator doors from public to sterile areas To electronically secure, monitor, record and grant access control of elevator doors per floor leading from public areas to sterile areas including open/closed conditions and to prevent unauthorized attempts to access through them. 4. Vehicle or pedestrian gates To electronically secure, monitor, record and grant access control of vehicle and pedestrian gates leading from public areas to secured areas including open/closed conditions and to prevent unauthorized attempts to access through them. 5. Monitored roof hatch/door alarm point. To electronically monitor, and record doors leading from any area to the roof including open/closed conditions and to detect unauthorized attempts to access through them. 6. Manually activated emergency alarm point. To electronically monitor, and record a manually activated emergency button type alarm resulting in the dispatch to specific location. 7. Doors from public to restricted areas To electronically secure, monitor, record and grant access control of locked doors leading from public areas to restricted areas including open/closed conditions and to prevent unauthorized attempts to access through them.

12 Technical Team: CFM Group Approval: Page 12 of 14 No. DOOR TYPE & OPERATIONAL ROLE 8. Doors from restricted to public areas To electronically secure, monitor, record and grant access control of locked doors leading from restricted areas to public areas including open/closed conditions and to prevent unauthorized attempts to access through them. 9. Section 9: Industry Standards / Applicable Codes 9.1 Meet worldwide radio and safety regulatory compliance including: UL294 (US) cul (Canada) FCC Certification (US) IC (Canada) CE (EU) C-tick (Australia, New Zealand) SRRC (China) MIC (Korea) NCC (Taiwan) ida (Singapore) 9.2 Comply with the following 13.56MHz-related standards to ensure product compatibility and predictability of performance: ISO ISO 14443A ISO 14443B 10. Section 10: Warranty 10.1 Lifetime warranty against defects in materials and workmanship.

13 Technical Team: CFM Group Approval: Page 13 of 14 III. RELATED STANDARDS *These standards will be made available at a date and time to be determined by the District. Instructions on how to access these standards will be supplied at that time. IV. EXCEPTIONS OR WAIVER REQUIREMENTS Compliance Failure to comply with the exception or waiver requirements and process will lead to [insert] V. REQUESTS FOR CLARIFICATION A request for clarification on any of the standards listed above may be ed to [insert address]. In order to be considered, the request must include the following information: The specific standard number and title What aspect of the standard needs clarification One or two solutions VI. REFERENCES Convergint Technologies Subject Matter Experts (SME s) VII. KEY TERMS & GLOSSARY Key Terms Must means that the item or course of action is absolutely required. Shall means that the District intends that the supplier or consultant adhere to the instruction or command. Will means that the existing District systems or conditions require the item or course of action. Optional means that the consultant may choose to include or omit a particular item according to its preference. However, the item chosen must still interoperate or function with the District s existing systems.

14 Technical Team: CFM Group Approval: Page 14 of 14 Minimum of means that the stated item or course of action meets the standard but may be superseded. Glossary The following terms are defined as follows: Need means that the item or course of action is essential and it will be absolutely required at the time indicated in the standard. (e.g., a high level risk assessment needs to be performed ) Call for means that the item or course of action is absolutely required. Are to be provided means that the item or course of action must be supplied in order to meet the standard. May be required if means that if the condition stated in the standard is met, the capability, performance expectation, or any other description in the standard is absolutely required. Recommended means that the course of action is in accordance with (Insert Applicable Area such as Security) Best Practices and should be adopted. Not Recommended means that a course of action is not consistent with (Insert Applicable Area) Best Practices and/or other laws, codes, or requirements and should not be adopted. May/Might/Can mean optional. The items specified using this language may be included or omitted depending upon the consultant/vendor s preferences. However, even if one particular item is optional, the item chosen must still interoperate or function with the District s existing systems. Preferred/encouraged mean that one item or course of action is favored over other optional courses of action because of proven favorable outcomes. Acceptable means that the item or course of action is only a minimum, and the consultant may supersede the quality or performance of that item or course of action. VIII. DOCUMENT HISTORY REV # DATE PAGE, PARA # CHANGE DESCRIPTION OF CHANGE APPROVAL SIGNATURE & DATE