1

Access control

SiPass integratedThe perfect balance between security and accessibility

Answers for infrastructure.

2

SiPass integrated:freedom of movement in asecure environmentSiPass® integrated is an extremely powerful and flexibleaccess control system that provides a very high level ofsecurity without compromising convenience and ease ofaccess for system users. Designed to fit into a state-of-the-art IT environment, the modular structure and scala-bility of SiPass integrated make it easy to adjust to keeppace with the changing needs of any organization.

As a result, thousands of corporations, airports, ports,government agencies, hospitals and universities, andother organizations in all parts of the world have chosento rely on SiPass integrated access control systems.

Universities

3

Flexible and highly secureSiPass integrated is built to meet accesscontrol requirements that range fromnon-critical to critical and from quite sim-ple to very complex. Designed for organi-zations of all sizes with operations onone or more sites, it is ideal both for exist-ing facilities and for newly constructedbuildings. The total number of cardholdersand doors in a SiPass integrated system isvirtually limitless. System managementcan be handled by many different opera-tors with varying levels of authority.

Infinitely flexible, SiPass integrated canbe used to manage access to anythingfrom a single low-rise office or residentialbuilding with just a few doors to massivehigh-rise complexes with tens of thou-sands of doors, gates, barriers and eleva-tors at multiple sites around the globe.

Customizable functionalitySiPass integrated is particularly useful inenvironments where information is highlysensitive and concerns about potentialespionage exist. Standardized interfacesenable easy integration with existing security processes and business systems.

Access control that is tailored to your specific needs

Highlights

Virtually unlimited number of card-holders and controllers to suit any facility size

Supports a broad range of readers –various technologies/manufacturers

Intuitively designed software that iseasy to use and administer

Modular system architecture enables tailoring to suit the needsof any facility

Operates in an existing IT environ-ment using TCP/IP over WAN/LAN

Advanced card management, multi-media alarm handling and completeevent logging in a single system

Comprehensive audit trail thatmonitors all administrative changeswithin the system

A wide variety of software extensions can be used to customize the system tomeet any organization’s specific needs. Incases where an organization has out-grown its current access control system,a new SiPass integrated system can in -corporate previously installed readers (Siemens or third-party), as well as existingcards and cardholder data. There is noneed to take a loss on previous securityinvestments – everything is simply mi-grated to the new system.

Integration with other systemsAs well as providing top-of-the-line accesscontrol functionality, SiPass integratedfully supports the integration of videosurveillance and intrusion detection systems – either Siemens’ own or third-party – thereby creating a total security system. Basic integration withfire safety systems is also available.

Siemens’ decades of experience with sys-tem integration and standardized tech-nologies enable us to offer integrated access control, intrusion detection, videosurveillance and fire safety systems thatprovide unparalleled functionality, qualityand investment protection.

Government agencies Hospitals

4

1

?

2 3

4 5 6

7 8 9

1

SiPass integratedserver

SiPass integratedclient

VisitorManagement

HumanResources

SecurityController

SystemAdministration

SiPass integratedclient

SiPass integratedclient

SISTOREDVR

RS4

85

net

wor

k

AC5100

*

ADE5300

ADD5100

ADD5100

AFO5100

AFI5100

ADD5160

AFO5200

Card reader

PIN/card readerarming/disarming

Card reader

Card readerinside elevator

Elevatorcontrol

The AFI5100 provides a localinterface between the AC5100 andthe devices used to monitor a facility,such as infrared detectors.

PIN/card reader

PIN/card reader

PIN/card reader

Card reader

Alarm and controloutputs

Intrunet SI series

AC5160

Corporate HRdatabase

Visitormanagementworkstation

Graphicworkstation

Video surveillanceworkstation withvideo surveillance

interface

SIMATRIXUSB Camera

Camera

WAN/LAN

SiPass integratedclient

Card printer

AC5110

CameraCamera

IP Camera

IAT010Intelligentarming terminal* One of the six ports on the AC5100 is a multi-purpose IS interface

that can be used for Intrunet SI series, high-level elevator control, Securitel or, if none of these are in use, for any other FLN.

SiPass integrated system architecture

SiPass integrated is fully customized tomeet the needs of the organization atwhich it is installed. It can be set up tomonitor entries only, or both entries andexits (anti-passback), and/or it can beused to control the operation of eleva-tors. Areas of a building that have a high-er security requirement than others can besecured with video surveillance technology.

A SiPass integrated system is built using avariety of different hardware components:advanced central controllers (known asACCs and ACC-Lites), door modules, sig-nal modules, readers and cards. Auto-matic backup and restoration of the sys-tem database ensures system integrity.Secure data transmission throughout theentire transmission path – from the IDcard to the server – provides a consistentlyhigh level of security.

Controllers The AC5100 advanced central controller(ACC) and the AC5200 (ACC-Lite) play acrucial role in the SiPass integrated sys-tem, as they are the interface betweenthe SiPass integrated software and thefield-level devices (reader interface mod-ules, input-point modules, and output-point modules).

The AC5200 provides nearly all the func-tions of the AC5100 and both types ofcontroller can be mixed on the same site.Communication between all the con-trollers in the system takes place peer-to-peer, independent of the SiPass server, so if the connection to the server is inter-rupted, system operation is unaffected.

The AC5100 is generally used in larger installations while the AC5200 is ideal forsmaller ones. Based on the SR34i hard-ware of the SiPass® Entro system, theAC5200 can control up to 8 doors and isa very cost-efficient alternative forbranch locations or remote sites.

Readers and cardsVirtually any Wiegand standard readercan be connected to SiPass integrated,thanks to Siemens’ custom Wiegand in-terface. The SiPass range of readers in-cludes the following technology types:proximity (125 kHz), vicinity (13.56 MHz),Mifare smart card, Cotag and magneticstripe. These can be combined freely tocreate a truly tailor-made system thatsuits the specific security needs of anyorganization, including functions such assecure PC login, vehicle identification,and cashless payment, for example.

SiPass integrated – hardware components

5

Robust and user-friendly, SiPass integratedsoftware is the heart of any SiPass inte-grated system. The total number of con-trollers that can be connected is virtuallyunlimited. The Windows-certified soft-ware has a powerful client/server archi-tecture, and it is easy to install and ad-minister via its graphical user interface.

Features such as advanced audit-trail log-ging, advanced alarm management, anti-passback functionality (including work-group anti-passback), door interlocking,escort control mode, video surveillance

and DVR interfaces – as well as Siemens’exclusive custom Wiegand functionalityand advanced device firmware download– are all standard in SiPass integrated. Awide variety of other advanced featuresare also available as add-ons.

SiPass integrated also offers the possibilityto set up customized interfaces to otherapplications in order to ensure smoothcommunication at all times. The softwarealso supports CITRIX for remote services,where required.

SiPass integrated – software components

6

SiPass integrated includes all the accesscontrol features you would expect – suchas time scheduling, manual system over-ride, dynamic graphical status screen, in-structional alarm response windows anda full system archiving and restorationfunction – as well as many more ad-vanced ones. The following features arethe ones that customers tend to find themost interesting:

Advanced reporting toolThe SiPass integrated report generatorensures fast identification and evaluationof system events. The software includesa visual online reporting tool, databaseinformation reporting, audit-trail infor-mation reporting, the ability to run simultaneous reports, advanced filteringoptions, advanced search criteria, andtree view for simplified use. The systemoffers point-and-click report availability, a highly configurable information struc-ture, and targeted sorting of information.

Comprehensive audit-trail loggingSiPass integrated provides clear traceabil-ity of all changes in the system via audit-trail logging, which ensures that all data-base changes are logged in full detail.The exact changes are both logged anddisplayed on screen, including a record ofthe operator who made them. This func-tionality makes SiPass integrated very

well suited for market segments in whichthere are strict requirements for trace-ability. SiPass integrated MP2.4 can beused to build access control systems thatare compliant with 21 CRF Part 11.

Advanced alarm managementSiPass integrated’s standardized alarmmanagement system enables the config-uration of up to 1,000 alarm priority levels.To facilitate faster handling, the alarms aredisplayed and highlighted graphically according to priority. It also offers cus-tomizable alarm instructions that supportsecurity personnel.

Anti-passback and roll call The purpose of anti-passback is to pre-vent the same card from being used togain access twice. Entries to and exitsfrom an anti-passback area must match,otherwise subsequent entries or exits canbe denied. Anti-passback also enables rollcall, which ensures the accuracy ofcounts of how many, and which, employ-ees are in which rooms at a particularpoint in time, information that may becrucial in the case of an emergency.

SiPass integrated also includes a work-group anti-passback feature, whichmeans that once an anti-passback area isset up, it is also possible to control howmany individuals from a particular work-

group are allowed in that area at onetime. This can be done while at the sametime maintaining overall area limits.

Partitioning of operator privilegesPartitioning can be used to split operatorprivileges so that operators only have ac-cess to the fields they need to maintain.The system can control which cardhold-ers, units, FLN devices and time periodscan be modified by which operators. Atree-based structure makes it easy to drilldown and select the appropriate privi-leges for operator assignment. When par-titioning by cardholder, it is possible tolimit access to the workgroup field and/orlimit access to the cardholder and visitordialogs themselves. The result is greatercontrol over information security and theability to prevent unauthorized assignmentof access privileges.

Escort controlSiPass integrated provides an escort con-trol feature (a.k.a. dual custody), whichmeans that before a door can be un-locked two valid cards must be presentedat the door. This feature can be useful inhigh-security areas that require visitors orjunior employees to be escorted by a se-curity guard or supervisor. Both self-au-thorize mode and supervisor/escortmode are available, and it is possible toconfigure the on/off times and timeout.

Core features

7

Door interlockingThis feature makes it possible to define agroup of doors and ensures that whenone door in that group is open, none ofthe others can be unlocked. Door inter-locking enables the creation of man trapsand air locks, which are often of interestin medical, bio-tech, airport and otherhigh-security applications.

SIMATRIX video surveillance interface

This interface to the SIMATRIX video matrixswitching system makes it possible to sendcommands from SiPass integrated to SIMA-TRIX video surveillance equipment eithermanually or using automated tasks, there-by creating a more comprehensive securitysystem.

SISTORE™ DVR interfaceThe SISTORE DVR interface makes it pos-sible to use all SISTORE functionality viaSiPass integrated, including advancedfunctions such as recording based on activity in the SiPass integrated systemand single-click event playback. Depend-ing on the DVR chosen, analog and/or IPcameras can be used.

Advanced device firmware downloadSiPass integrated provides a quick andeasy method for changing the operationof hardware devices directly in the SiPassintegrated graphical user interface (GUI).

The firmware on all connected devicescan be easily upgraded at the same timeto ensure that all are running the latestversion available. All of this can be donein a fraction of the time it would take tophysically visit each device, thereby sav-ing a great deal of time and money.

Custom WiegandSiPass integrated can read virtually anyWiegand output-based card technology,which enables existing sites to easily up-or cross-grade without the expense andhassle of having to purchase new cards.

Networking options for global reachVarious networking options (LAN/WAN/PSTN) enable the system to be expandedto include a number of buildings and locations all over the world. The connec-tion to individual locations can be secured by redundant communicationpathways that are activated automaticallyif the main connection fails.

Upgrade paths for investment protection

SiPass integrated includes upgrade pathsfor the following Siemens systems:CerPass®, SiPass networked, advaNTageand SiPass Entro (including support forSR34i controllers). These upgrade pathsmake it very easy and cost-effective forusers of those systems to upgrade toSiPass integrated.

Highlights

Advanced reporting tool

Comprehensive audit-trail logging

Anti-passback and roll call

Partitioning of operator privileges

Escort control

Door interlocking

SIMATRIX video surveillance interface

SISTORE DVR interface

Advanced device firmware download

Custom Wiegand

Networking options for global reach

Upgrade paths for investment protection

8

Add-on features

The optional software modules for SiPassintegrated make it possible to tailor thesystem to meet almost any access controlrequirement.

Photo ID and image verificationThe photo ID and image verification option enhances the cardholder record-keeping function by making it easy tocapture photographs and signatures.Once captured, images can be incorpo-rated on an access card and/or be used as a means of visual verification.

Time and attendance exportUsing this feature it is easy to extract allof the logged activity data in SiPass integrated and export it to the time and attendance application of your choice, in the appropriate format.

Elevator managementWhen the elevator management inter-face is used, each floor is treated like anyother entry point in SiPass integrated,with associated access control optionssuch as the time during which access ispossible, daily code access, PIN assign-ment and even image verification forcomplete security.

Guard tourThe guard tour option uses a combina-tion of existing access or input points inthe SiPass system to define routes forguard tours. It also tracks guards’progress and logs time and “tour stop”data about all tours.

Message forwardingThe message forwarding option enablesthe system to automatically send cus-tomized text messages to the pagers, mo-bile telephones or e-mail addresses of keypersonnel whenever security is breachedor other important events occur.

HR application programminginterface (API)

The HR API allows cardholder and otheraccess control data in SiPass integratedto be accessed and modified using athird-party application, such as a humanresources system or a Web browser.

Visitor managementThe visitor management option enablesthe use of the same graphical user inter-face that is used for permanent cardhold-ers to also be used to register visitors. Itis possible to capture visitors’ facial im-ages, paste in existing image files, recordpersonal details, print access cards andlocate a visitor easily.

GraphicsThe graphics option makes it possible todesign, import and construct customizedgraphic maps that are used by securityoperators to visually handle alarm condi-tions and continually monitor the statusof all points within the system.

Mifare card encodingMifare card technology makes it possibleto use a single card for a variety of purpos-es, including unlocking doors and payingfor goods and services. Complete Mifarecard encoding and profile configuration isa unique feature of SiPass integrated. Thesystem can also support the encoding of4K Mifare cards.

9

Third-party video surveillance matrix interface

This software extension enables you tointerface with a wide range of video sur-veillance systems to transform your stan-dard SiPass client into an interactivevideo surveillance station, thereby con-trolling the operation of video surveil-lance components from the convenienceof the SiPass graphical user interface.

Video surveillance enabled workstation

This powerful add-on feature makes itpossible to view video surveillance imagesdirectly in the SiPass integrated client.Using a video capture card you can viewthe output of virtually any camera anduse the screen tools for standard videosurveillance functions like zoom, pan, tiltand camera movement.

Third-party DVR interfaceUsing this software interface, it is possi-ble to begin recording from any camerawith a single click of the mouse buttonusing recording-based shortcuts that canbe easily created and placed on graphicalmaps. All recording events and their sta-tuses appear in real time in the audittrail, and can be played back instantly bysimply clicking on the recording event.

Intrusion moduleThe intrusion module in SiPass integratedprovides native intrusion detection func-tionality. When it is installed, motion detectors can be connected directly toSiPass integrated and the system can beused both as an access control systemand an intrusion detection system. Thesame card readers are then used both foraccess control purposes and to turn theintrusion detection system on and off.

Alternatively, in cases where a certifiedintrusion detection system is required,the intrusion module can be used to inte-grate a dedicated Intrunet SI series intru-sion control panel into a SiPass integratedsystem.

It is also possible for existing Intrunet SIseries customers to use the SiPass inte-grated intrusion module to add a fullyfeatured access control application totheir suite of building management tools.

Highlights

Photo ID and image verification

Time and attendance export

Elevator management

Guard tour

Message forwarding

HR application programming interface (API)

Visitor management

Graphics

Mifare card encoding

Third-party video surveillance matrix interface

Video surveillance enabled workstation

Third-party DVR interface

Intrusion module

10

The flexibility, robustness, and superiorexpandability of SiPass integrated ensurethat it can be implemented in nearly anyenvironment – large office buildings,government agencies, commercialpremises, pharmaceutical corporations,and financial institutions are all good ex-amples. The advanced functionality ofSiPass integrated can help different typesof organizations overcome real-life challenges in a variety of different ways,such as:

Universities and other campusesSiPass integrated is ideal for campuses asit can easily manage access to multiplebuildings with differing security require-ments, as well as storing and processinglarge amounts of cardholder data. Duringparticularly busy times like enrolment periods, it has no difficulty assigning access rights, issuing card numbers, andprinting large numbers of cards while simultaneously communicating with theuniversity’s student database systems.

AirportsSince SiPass integrated is built to managevery large amounts of access control traf-fic, it is the perfect choice for airports. Itprovides a complete access control andsecurity solution with integration tovideo surveillance systems and other air-port infrastructure. The simple-to-use interface ensures that airport securitystaff can easily and effectively monitortheir security systems at all times.

Multi-segment complexes SiPass integrated includes tenancy func-tionality that enables a number of com-panies to use the same access controlsystem completely independently of oneanother. This is particularly useful in en-vironments with residential units, com-mercial offices and retail outlets all undera single roof. All levels of the system arecapable of handling client groups. Existinginstallations can be integrated without dif-ficulty, and the use of different card tech-nologies is not a problem.

SiPass integrated applicationsHospitals

Striking the right balance between secu-rity and accessibility is of critical impor-tance in hospital environments. The largetraffic flow typically associated with ahospital and the combination of low-security and high-security areas make aflexible and user-friendly system likeSiPass integrated the obvious access control choice.

Manufacturing operationsSafety is of paramount importance with-in a manufacturing or industrial facility.SiPass integrated helps address occupa-tional health and safety issues by control-ling access, providing anti-passback fea-tures, and carrying out head counts sothat it is fast and easy to produce a mus-tering report and track cardholders dur-ing emergency situations.

11

InnovationFor the last 160 years, Siemens has beeninvesting a great deal in both manpowerand research and development. This hasensured a constant stream of newinsights, technologies and inventions thatenable us to continuously improve thereliability of our products and systems tomake them easier to install and operate.

Advances in digital technologies arecreating a whole new world of possibili-ties. Siemens has been at the leadingedge of progress in this field and contin-ues to redefine both current and futuretechnologies.

InteroperabilityInteroperable systems are now suppliedalongside such basic requirements aslighting, heating and water in a building.As a company, we know that integrationsupports the business environmentthrough the interaction of products andsystems. We break down the barriersbetween our access control, intrusiondetection and video surveillance productlines in our security portfolio and listen towhat the market actually wants. We thendevelop to deliver both fully integratedand interoperable security systems, basedon our 30 years of know-how in security.

Welcome to the world ofinnovative thinking

SiPass integrated features overview

System

Number of doors Up to 96 per controller (depending upon the system configuration)

Number of registered cardholders (users) Up to 500,000 per controller (depending upon the system configuration)

Number of controllers Up to 499 per system

Hardware installation Plug & play (ACC requires initial configuration)

Client/server architecture Yes

Networking options for controllers and servers LAN/WAN/PSTN (redundancy possible)

Core languages English, German, French, Spanish (additional languages may also be available)

Interfaces

Integrated Siemens video surveillance interface SIMATRIX

Third-party video surveillance integration Optional

Integrated Siemens DVR interface SISTORE AX, SISTORE CX, SISTORE MX

Third-party DVR integration Optional

HR API Optional

Operation

Intuitive graphical user interface Windows XP certified

Report generator Manual or automatic with more than 60 standard reports

Alarm management 1,000 alarm priority levels and multimedia alarm notification

Extended access control functions Administration of access rights (individuals or groups), temporary access profiles, global anti-passback, four-eyes access control

Event log Real-time update

Graphical status window Yes

Operator log Yes

Database

Extensive personal data administration Yes

Additional database fields User-definable

Backup/restoration of system data Manual or automatic

System requirements

Operating system Windows XP, Windows 2000, Windows 2000 Server, Windows 2003 Server, Windows Vista

Database management systems MS SQL Server 2005 Standard Edition, MS SQL Server 2005 Express Edition, MS SQL Server 2000, Microsoft MSDE (max. five workstations)

12

www.siemens.com/access

Siemens Switzerland LtdBuilding Technologies DivisionInternational HeadquartersGubelstrasse 226301 ZugSwitzerlandTel +41 41 724 24 24Fax +41 41 724 35 22

Siemens Building TechnologiesA Division of Siemens Ltd (Australia)885 Mountain HwyBayswater, VIC, 3153AustraliaTel +61 3 9721 2000Fax +61 3 9720 9966

Siemens LimitedBuilding TechnologiesUnits 1006-1010/F, China Resources Building26 Harbour RoadWanchaiHong KongTel +852 2870 7888Fax +852 2407 4457

Siemens Pte LimitedBuilding TechnologiesThe Siemens Center60 MacPherson Road348615SingaporeTel +65 6490 6000 Fax +65 6490 6001

Siemens Building TechnologiesSecurity Products LimitedBrecon HouseLlantarnam Park CwmbranNP44 3ABUnited KingdomTel +44 871 386 0800Fax +44 871 386 0888

The information in this document contains general descriptions of technical options available, which do not always have to be present in individual cases. The required features should therefore be specified in each individual case at the time of closing the contract.

Windows is a registered trademark of Microsoft Corporation

Subject to change • Order no. A24205-A335-B255 • © Siemens Switzerland Ltd • Printed in Switzerland • XXXXXX Ah