Shared systems: An upper-level assessment

Sep 1, 2000 12:00 PM, KEITH HENSON

"Can the new system be integrated with our local area network?" As an engineer and systems integrator of access control/security applications, I hear such requests with increasing frequency. This demand for integration will be a catalyst in the drive to standardize facility networks. Facility managers see other building control and information systems communicating over common networks and want to integrate their access control/security systems.

Facility managers have become comfortable with the advantages of networked systems. We can share personnel databases and manufacturing orders/inventory data, and we can interconnect process control systems, so why not add access control/security systems?

Advantages of integrating an access control/security system to a universal facility network can be significant. The ability to share existing cabling is quite beneficial. Cabling costs are reduced by using a common network, and the systems are automatically expandable.

The Internet has proven that a system that communicates via acommon network can be shared with the world. Proven protocols exist and are supported universally. These features enable remote reporting of alarms to multiple users and remote monitoring of multiple remote sites such as pump houses, storage centers and other utility facilities. Twenty years ago, most remote monitoring circuits used dedicated copper lines or polled radio circuits. As the availability of wide-bandwidth circuits accelerates, even real-time, multiple video channels from remote sites are a reality.

Network communication is a natural for remotely addressable (smart) sensors. As more smart sensors become available, communication via existing networks will enable complete system reconfiguration, remote testing and sensitivity adjustments for weather changes and heightened security or safety situations.

Despite the benefits, obstacles remain. Although, there has been progress in access control/security networking over the past 20 years, many systems still operate over separate proprietary networks. Most access control/security systems - except for the very smallest - are networked, using copper and fiber-optic cables. By means of gateways and other interfaces, information from other systems can be shared. But will our industry ever have a universally accepted network with equipment from various manufacturers?

According to conversations with developers of the larger access/control systems, attempts at network standardization are definitely under way. Both BACnet and LonWorks - standards evolved from the energy manage-ment/building automation industries - are being examined. The protocols are strongly supported by professional organizations as well as major industrial manufacturers. Typically, an access control/security system interface benefits energy management/building automation systems the most. Some manufacturers are now producing Ethernet-based systems that should enable data-sharing with traditionally Ethernet-based departments such as human resources and information technology.

Underwriters Laboratory (UL) testing requirements present an additional problem. I am not aware of any access control/security system with primary communications over an open systems network that has a UL listing. Obtaining a UL listing may be a requirement of your insurance carrier and is a likely requirement for fire and life safety systems. Currently, the UL Listed stamp almost certainly requires proprietary components and communications network to be tested and certified to function properly as a system. Note that with a UL Listed proprietary network, a remote convenience display (beyond the minimum requirements) can be used without affecting the UL Label.

To determine requirements of your system, we recommend first that you identify other systems you need to exchange data with. Keep in mind that data exchange works both ways. Access codes and cards are unique to each employee. Depending on the level of authorization established, the same credential can be used to control other building functions such as lights, HVAC, photocopy machines and office equipment.

Data from other systems can be imported to the access control/security system. Personnel data can be imported to establish level of access. Access control points and intrusion detection zones can be reconfigured depending on external stimuli.

Second, consult your insurance carrier. Being UL Listed may be a requirement or may reduce your premiums. The requirements are found more often in fire and safety systems; however, depending on the level of security involved and your insurance carrier, being UL Listed may be a requirement for your access control/security system.

Third, once your system requirements have been identified, consider these requirements as you perform your threat and vulnerability assessment. As you prepare to mitigate your identified greatest threats, you may need to redefine system requirements. Both your security and facility master plans should include networks and systems interconnectivity. Continue to watch the industry and adjust your master plan accordingly.

Is a multi-system network secure? No. No network cable that is routed into uncontrolled territory can be totally secure, but with proper precautions you can usually obtain an acceptable level of security. Each time you interface with another system, you create another point where an intruder can enter and steal information or insert viruses. Limiting the number of persons with access, requiring double passwords, encryption, firewalls, and limiting the distribution of your network can enhance security. Line supervision, parallel paths and physical protections such as rigid conduit protect against system defeat or accidental damage.

Another issue is the long-term maintenance needs of combining multiple systems on a common network. Who is responsible for troubleshooting and repair? It can be a significant concern unless one company contracts to operate and maintain all systems and the communications network. Otherwise, even with the best network diagnostic equipment, there will be disputes over who is responsible for a problem. We warn customers not to offer their own network as the communications pathway for access control/security systems.

In summary, you should make sure that you need your access control/security system integrated with other systems before purchasing. If you determine that you do, find a manufacturer that can provide, and remain responsible for, the whole integrated system. Unless the manufacturer can provide a UL-Listed fire/life safety system as the primary system within your integrated package, consider making it independent. Be prepared to discover that initial costs associated with a fully integrated system may be greater than with independent systems. Theoretically, operational and maintenance savings enable you to recover much of the added cost.

There are many questions regarding integration of access control/security systems with other building systems. The industry is working toward providing what the market is demanding. Agencies are working toward standardization of the minimum requirements for open network architecture for our industry. Once these standards are established, the manufacturers who see a future in providing an access control/security system that is open-system-compatible will make every effort to get it to the market.

Want to use this article? Click here for options!
© 2012 Penton Media Inc.

This month in Access Control

• Targeting The Customer
• Electronic Pedigrees
• One Hero Among Many
• Who? What? When? Where? Why?
• More from September's issue