SMI Server V3.1 - Detailed descriptiongulfsecuritysafety.com/public/pdoducts_img/890ee97734c44ca902f7abadbab... · Data communicated by the SM100+ and/or WavePad and/or WaveIO units

Electronic Security Gunnebo Electronic Security 23 route de Schwobsheim 67600 Baldenheim France www.gunnebo.com

Visiting address: 7 rue Paul Dautier 78140 Vélizy Villacoublay France Phone +33 810 000 800 Fax + 33 1 34 65 41 39

Electronic Security

Version 3.1

Detailed Description

A02001H

Electronic Security Gunnebo Electronic Security 23 route de Schwobsheim 67600 Baldenheim France www.gunnebo.com

Visiting address: 7 rue Paul Dautier 78140 Vélizy Villacoublay France Phone +33 810 000 800 Fax + 33 1 34 65 41 39

Copyright This document is the exclusive property of Gunnebo Electronic Security, a company belonging to the Gunnebo Security Group. All reproduction is strictly prohibited. Gunnebo Electronic Security reserves the right to make changes without prior notice.

The brands referred to in this document belong to their respective owners.

Copyright © Gunnebo Electronic Security 2008

SMI Server V3.1: Detailed Description A02001H – 100021948 – Ed. 09 - DTD – November 2015

A02001H SMI SERVER - DETAILED DESCRIPTION

3

Contents

1 General introduction ............................................................................................. 5

2 Architecture and communications ........................................................................ 6 2.1 Architecture .................................................................................................................... 6

2.1.1 JBUS/MODBUS serial link ....................................................................................... 7 2.1.2 Ethernet TCP/IP network ........................................................................................ 7 2.1.3 Inter-Station network ............................................................................................ 7 2.1.4 Encrypted communications ..................................................................................... 8

2.2 Multi-property ................................................................................................................. 9

3 Hardware characteristics .................................................................................... 10 3.1 Computer features ......................................................................................................... 10

3.1.1 Software environment ......................................................................................... 10 3.1.2 Hardware environment ........................................................................................ 10

3.2 Access Controllers .......................................................................................................... 11 3.2.1 The SM400 concentrator ...................................................................................... 13 3.2.2 The SM100+ access controller .............................................................................. 14 3.2.3 The SM200+ access controller .............................................................................. 15 3.2.4 The SM220+ access controller .............................................................................. 17

3.3 Readers ........................................................................................................................ 19 3.3.1 Controller readers for the SM100+ range ............................................................... 20 3.3.2 Operator readers ................................................................................................ 22

3.4 Management of technical I/Os and intrusion ...................................................................... 23 3.4.1 Management with the SM400 access controller (WaveIO modules) ................................ 23 3.4.2 Management with the SecurWave intrusion/transmission module .............................. 24 3.4.3 Interfacing with the Master central intrusion unit .................................................... 28

3.5 Managing stand-alone electronic locks: IDLock .................................................................. 29 3.6 Managing wireless locks: ProxLock ................................................................................... 30

4 Software characteristics ..................................................................................... 32 4.1 Access control - SMI Server............................................................................................. 32 4.2 Integrated intrusion control – SMI Server ......................................................................... 33 4.3 Operating principles ....................................................................................................... 33 4.4 Principles of exploitation ................................................................................................. 34

4.4.1 Alarm typology ................................................................................................... 34 4.4.2 Workstation configuration function ........................................................................ 34 4.4.3 Classification and Description of users in the system ............................................... 35 4.4.4 Area management ............................................................................................... 35 4.4.5 Access adaptation & selection ............................................................................... 35 4.4.6 Access rights configuration function ....................................................................... 36 4.4.7 Backup, restore and archiving function .................................................................. 37 4.4.8 Log printing functions .......................................................................................... 37 4.4.9 System access security function ............................................................................ 38 4.4.10 Password management ........................................................................................ 38 4.4.11 View exploitation function .................................................................................... 39 4.4.12 Alarms and states processing function ................................................................... 40 4.4.13 Remote command on/off function ......................................................................... 41 4.4.14 Elevator management .......................................................................................... 41 4.4.15 Biometrics .......................................................................................................... 42 4.4.16 Real-time events editor ........................................................................................ 43

4.5 The other modules ......................................................................................................... 44 4.5.1 Map chaining module (Tree structure) ................................................................... 44 4.5.2 Guard tour management ...................................................................................... 46 4.5.3 Intranet module .................................................................................................. 46 4.5.4 Graphic personalization ........................................................................................ 46 4.5.5 Visitor management ............................................................................................ 47 4.5.6 Attendance time calculation .................................................................................. 48

4.6 Communication with connected applications ...................................................................... 49 4.6.1 Management of external JBUS Master alarms ......................................................... 49 4.6.2 Synchronization with user databases: SI2 interface ................................................. 49 4.6.3 Events channel ................................................................................................... 50 4.6.4 Software connector ............................................................................................. 50

5 Video management in SMI Server ....................................................................... 51 5.1 Video interfacing ............................................................................................................ 51

SMI SERVER - DETAILED DESCRIPTION A02001H

4

5.2 Video integration ........................................................................................................... 52 5.2.1 Functions .......................................................................................................... 52

6 Access connection diagrams ............................................................................... 55 6.1 Connection diagram with SM100+, SM101+ – One-way door .............................................. 55 6.2 Connection diagram with SM100+, SM102+ – Double-way door .......................................... 56 6.3 Connection diagram with SM100+, SM102+ – 2 one-way doors .......................................... 57 6.4 Connection diagram with SM400 and SM101+ – SM102+ ................................................... 58 6.5 Connection diagram with SM400 and related heads ........................................................... 59

SMI SERVER - DETAILED DESCRIPTION 1. GENERAL INTRODUCTION

5

1 GENERAL INTRODUCTION

SMI Server: Integrated electronic security system.

The solution for global and centralised security management and supervision.

SMI Server is built around an integrated electronic security solution designed for use with a range of security requirements, from the most basic to the most advanced.

SMI Server is an upgradeable system consisting of several modules for managing all electronic security functions:

Access control.

Intrusion detection.

Video surveillance.

Supervision.

Additional functions make SMI Server a powerful and user-friendly solution:

Multi-site management

Web interfacing,

Openness to other systems,

Guard tour management,

Logic controllers,

etc.

SMI Server is a fully modular, scalable system that can be adapted for use with all configurations, from the most basic to the most advanced, and with all kinds of architecture, from the simplest to the most complex.

SMI Server system can be used to meet the requirements of industrial and service site environments: airports, nuclear power stations, military areas, public services, administrative buildings, business centres, embassies, universities, bank head offices, etc.


6

2 ARCHITECTURE AND COMMUNICATIONS

2.1 Architecture

3000 or 4000 series Maser

SM100+, WaveIO, WavePad

SMI Server

2 RS485/RS422 serial buses (JBUS/MODBUS)

SM220+

SM200+

SM400

SecurWave

Operating workstations

Intranet

SMI SERVER - DETAILED DESCRIPTION 2. ARCHITECTURE AND COMMUNICATIONS

7

2.1.1 JBUS/MODBUS serial link SMI Server can use 2 serial connections in order to communicate with equipment that supports the JBUS/MODBUS protocol.

Programmable industrial automatons can be supervised over these connections so that information about statuses and analogue values can be sent back.

2.1.2 Ethernet TCP/IP network SMI Server uses the TCP/IP Ethernet network in order to communicate with other devices and equipment installed at the site:

The SM200+ and SM220+ access controllers, and the SM400 concentrator are stand-alone devices and integrate their own local intelligence for the purposes of providing access control and intrusion functions. Information exchanged over the network is rendered confidential (depending on configuration) by AES-128 encryption.

Specialist break-in and transmission equipment: SecurWave and Master central unit

Video equipment: digital video storage devices as well as complete systems

2.1.3 Inter-Station network In the case of an installation requiring several workstations, it is possible to connect several operating workstations to the SMI Server system via an Ethernet network. The security of data carried on the network is ensured via AES 128 bit encryption.

Some functions can be accessed with a standard web browser, via the Intranet. The security of communications over the Intranet can be managed by the IIS server (https:// …).


8

2.1.4 Encrypted communications The data exchanged between the various components of the SMI Server system can be encrypted in order to ensure that it remains confidential.

Communications between Operating workstations and Field server are always encrypted (AES 128 bits).

The IIS Server and workstations on the intranet can be configured to use the secure SSL protocol (https).

Data communicated over the Ethernet network between the Field server (main station) and the SM400s can be encrypted (128-bit AES with encryption and authentication).

Data communicated by the SM100+ and/or WavePad and/or WaveIO units over the RS485 buses can be encrypted (128-bit AES with encryption and authentication.

Data communicated between the SM400 and the SM100 is not encrypted. Only the security keys file is encrypted using 128-bit AES.

Communication between the SM100+ controller and ProStyl (RS485) is based on the transparent mode (as for a coaxial connection). Secure data exchange is performed between the card and the controller. Reading security is brought up to level of the SM100+. ProStyl behaves as an antenna.

SMI SERVER - DETAILED DESCRIPTION 2. ARCHITECTURE AND COMMUNICATIONS

9

2.2 Multi-property

The principle of “multi-property” consists in logically splitting the database.

Each operator can only work (i.e., create, modify, run commands, visualize, etc.) on elements (users, access, families, logs, etc.) that belong to their property or properties.

Depending on applications, these “properties” can be equivalent to companies, departments, sites, etc.

In the architecture, it is possible to modify the properties of these elements. Moreover, properties can be defined for: • the SM400 concentrators, • the SM100/SM100+ access controllers, • the intrusion inputs/outputs.

With only one single physical system and one single database, the multi-property feature manages several independent entities, while maintaining the confidentiality of each entity.


10

3 HARDWARE CHARACTERISTICS

3.1 Computer features

3.1.1 Software environment From SMI Server V3.1, the software is qualified to run in the following environments:

Operating systems:

Windows 7 (32 & 64 bits)

Windows 8.1 (64 bits)

Windows Server 2008 R2 (64 bits)

Windows Server 2012 R2 (64 bits)

Databases engines:

SQL Server 2008 R2

SQL Server 2014

Browsers & Web :

Internet Explorer 6 and higher

3.1.2 Hardware environment The recommended hardware configuration depends on parameters such as:

Number of units,

Number of users,

Number of events,

Number of alarms,

Etc.

The PCs to be used should be sized according to the above elements. For information, the following can be considered as an “average” configuration:

2.4 GHz or more multiprocessors (2 or 4 cores depending on the application characteristics), 4M Cache, 1066 MHz FSB.

4 GB of RAM

80 GB of disk space, 15,000 RPM, for the operating system and SMI Server

Additional disk space for storing the database

Screen resolution 1280x1024

100/1000 Mbps network card

CD/DVD ROM drive.

SMI SERVER - DETAILED DESCRIPTION 3. HARDWARE CHARACTERISTICS

11

3.2 Access Controllers

There are several types of access controllers available according to the constraints of the installation and the functional characteristics required:

The SM400

The SM100+

The SM200+

The SM220+

The tables below summarize the functions available.

General functions SM100+ SM400, SM200+ & SM220+ Programme upload YES YES Users upload YES YES Number of users 1,000 50,000 Logic controllers NO YES Inputs 4 or 2 states 4 or 2 states

Types of access SM100+ SM400, SM200+ & SM220+ One-way or revolving door YES YES One-way or revolving door without inhibition YES YES Free exit swing door NO NO Manual exit door NO NO Free exit door YES YES Free exit door without inhibition YES YES Free exit sliding door NO NO Free exit sliding door without inhibition NO NO(1) One-way interlocking door NO NO(1) Elevator NO YES Two-way interlocking door NO NO(1) Revolving free exit door NO NO Two-way door YES YES Two-way revolving door NO NO Two-way door without inhibition NO NO Laperche lock NO NO Two-way swing door NO NO

Access management SM100+ SM400, SM200+ & SM220+ Visual confirmation YES YES Digicode management YES YES Free entry YES YES Pass confirmation (card, PB) NO YES(2) Non-dedicated entries/exits NO NO Exit – Open too long NO NO(1) Shunt exit NO NO Exit – Alarm NO NO(1) Green timeout indicator NO YES Free entry schedule NO YES Free exit schedule NO NO Keypad alone PIN code PIN code Reader inhibition command NO YES Free entry activation command NO NO Anti passback timeout control NO YES Reader activation/deactivation NO YES Access under constraint NO NO Anti passback YES YES Key function NO YES

(1): Possible with logic controllers (2): Confirmation on the same reader


12

Intrusion management SM100+ SM400, SM200+ & SM220+

Shunt schedule NO NO Entry - Immediate YES YES Entry - Crisis mode NO YES Entry – Area arming postponement NO YES Entry – Area arming/disarming NO YES Entry – Shunt NO YES Entry – Entry/exit route NO YES Exit – Transaction surveillance NO YES Exit – Area status NO YES Arming/Disarming – Card + code NO YES Arming postponed – Card + code NO NO


13

3.2.1 The SM400 concentrator This hub, which is natively integrated into the Ethernet TCP/IP network, can manage up to 48 readers, 576 inputs, 384 outputs and a maximum of 50,000 users via SM100+ family access controllers and WaveIO intrusion modules.

In "disconnected” mode, stand-alone operation is possible at 2 levels:

• The SM400 (without communication with the server):

Its downloadable database of up to 50,000 users is always available - irrespective of network status. The SM400 can be used locally to manage access control, intrusion detection and logic controllers. And up to 10,000 events can be stored locally and then restored to the server when communication is resumed.

The SM10x+ (without communication with the SM400): With 1000 users stored in its memory, it can be used - also in disconnected mode - to manage local accesses and logic controllers. Up to 1700 events can be stored locally and then restored to the SM400 when communication is resumed.

Architecture The SM400 concentrator has a number of different connections:

An RJ45 connection for Ethernet/IP dialog with the server,

4 serial connections:

3 RS485 buses on which the following can be connected:

o SM10x+ access controllers o WaveIOs o WavePads

The SM400 can manage up to 16 peripheral devices per bus, among which up to 8 peripheral devices of the same type per bus (WaveIO, SM100+, WavePad.

1 Echelon-type bus on which up to 30 MIB intrusion modules can be connected (8 inputs and 4 outputs per MIB).

Communications Communications between the server/SM400 and SM400/SM10x+ can be AES-128 encrypted depending on requirements (simply by making changes to the configuration).

Power supply The SM400 power supply can be from 9 to 24Vdc. It can detect low power supply voltage (about 8.5V).

It also has a second 12V power supply input for on-site peripherals (limited to 4A). Physical characteristics Dimensions (casing) 217.7 x 112 x 62 mm Weight 460g Protection index IP 44. Environmental characteristics Temperature -10° to +70°C Relative humidity Up to 80% (protection by varnish). Electrical characteristics Power supply From 9 to 24 Vdc max. Consumption 0.14A (at 13 Vdc)

SM100+ or WaveIO or WavePad

SM400

SMI Server

Ethernet IP network

MIB


14

3.2.2 The SM100+ access controller It permits the connection of reader heads (a maximum of 2) and offers card reading and code input functions.

The maximum distance between the reader heads and the SM10x depends on the type of reader heads used (between 10 and 80 metres for a Wiegand link; up to 1000 metres for an RS485 link).

Each SM10x+ permits the control, via a 4-state (monitoring, alarm, short-circuit, cable cut) or 2-state balanced loop, of a choice of 6 inputs intended for access control (door contact, free exit, push-button, etc.) and alarms, and the control of 2 relay outputs intended for access control (open command, alarm).

Independent management of users by the SM10x+ controllers ensures, in disconnected mode, the operation of local accesses and automatic operations corresponding to access permissions, times of access and the validity date of 1,000 users (data stored in the SM100+’s memory). In circumstances where the connection to the server is cut, a backup of the history is made by the SM10x+ (backup of 1,700 events).

The SM10x+ can manage:

Up to 2 reader heads and 1 keypad installed on 1 or 2 accesses.

Up to 1,000 users in disconnected mode (connection lost with the SM400 or the PC).

6 inputs and 2 outputs.

Physical details External dimensions 217.7 x 112 x 62 mm Weight of the unit 450g Protection index IP 44. Environmental details Temperature -10° to +70°C Relative humidity up to 80% (protected by varnish).

Communications with the Host

Power supply 9V – 24V DC

SM100+


15

Communications with SMI Server

Power supply 9V – 24V DC

SM200+

3.2.3 The SM200+ access controller It permits the connection of 2 reader heads and offers card reading and code input functions. It is supplied without a reader head.

The maximum distance between the reader heads and the controller depends on the type of reader heads used (between 10 and 80 meters for a WIEGAND-type link; up to 1000 metres for an RS485 link).

Each SM200+ unit can manage, in a 4-state balanced loop (stand-by, alarm, short-circuit, cable cut) or 2-state balanced loop, 6 inputs for access control (door contact, push button,, etc.) and alarms, and can manage 2 relay outputs for access control (action codes, alarms).

Standalone management of users via SM200+ controllers provides, in disconnected mode, the operation of local accesses and automatic operations corresponding to access permissions, times of access and the validity date of 50,000 users. In circumstances where the connection to the server is cut, a backup of the history is performed.

The SM200+ unit can manage:

Up to 2 reader heads and 1 keypad installed on 1 or 2 access,

Up to 50,000 users in standalone mode (when connection with the PC is lost),

6 inputs and 2 outputs Physical characteristics Dimensions 255 x 150 x 90 mm Weight 880 Protection index IP 44. Environmental characteristics Temperature -10° to +70°C Relative humidity From 0% to 80% RH without condensation


16

3.2.3.1 The SM200+ Access Controller (Ref.: A10520) The SM200+ permits the connection of 2 ISO or Wiegand reader heads, or 2 ProStyl readers.

It contains is a library of pre-configured reader heads. A careful check should be made of the suitability between the request and this library (list available from Gunnebo Electronic Security).

The following antennas can be connected using an RS485 link:

ProStyl reader – Ref.: A10512

• Link: RS485 • Case in Polyarylamine (IK08) • Front panel in Polycarbonate • IP 54, indoor and outdoor use • Power supply: 9 to 28 Vdc, consumption 40 mA with 12 Vdc • Dimensions: 85 x 85 x 14 mm • Weight: 90 g

ProStyl reader (screw-on version) – Ref.: A10532

• Type de liaison : RS485 • Case in Polyarylamine (IK08) • IP 54, indoor and outdoor use • Power supply: 9 to 28 Vdc, consumption 40 mA with 12 Vdc • Dimensions: 85 x 85 x 14 mm • Weight: 90 g

3.2.3.2 The SM200+ Smart Access Controller (Ref.: A10519) The SM200+-Smart permits the connection of 2 Mifare® Smart reader heads (recessed, wall-mounted or ISO 14443 keypad antennas).

The maximum distance between the antenna and the access controller is 10 meters.

The following antennas can be connected using the composite cable (ref.: ANR430):

Smart S Wall-mounted Antenna– Ref.: A19664

• Black ABS, IP 55 • Dimensions: 130 x 54 x 32 mm

Smart E Recessed Antenna– Ref.: A19766

• PMMA IP 67 (front face); polycarbonate front glass • Dimensions: 139 x 82 x 8 mm

Smart K Keypad Antenna– Ref.: A10407

• Dark grey moulded ABS case; IP 54 (IP 67 front face) • Dimensions: 136 x 50 x 20 mm

Technical characteristics Power supply from 9 to 28 Vdc Consumption with 12 Vdc: 290 mA (idle), 450 mA, with strike relay command

with 24 Vdc : 210 mA (idle), 360 mA, with strike relay command


17

3.2.4 The SM220+ access controller When connected natively to the Ethernet TCP/IP network, this controller can be used to manage two reader heads and 50,000 users for monitoring two single accesses or one two-way access.

As an optional extra, it can manage two additional reader heads, as well as 2 WaveIO intrusion modules.

When used in stand-alone mode, independently of the server, it can be used to locally manage access control.

The maximum distance between the reader heads and the controller depends on the type of reader head links used (between 10 and 80 meters for a WIEGAND-type link; up to 1000 metres for an RS485 link).

Each SM220+ unit can manage, in a 4-state balanced loop (stand-by, alarm, short-circuit, cable cut) or 2-state balanced loop, 6 inputs for access control (door contact, push button,, etc.) and alarms, and can manage 2 relay outputs for access control (action codes, alarms).

Standalone management of users via SM200+ controllers provides, in disconnected mode, the operation of local accesses and automatic operations corresponding to access permissions, times of access and the validity date of 50,000 users. In circumstances where the connection to the server is cut, a backup of the history is performed.

The SM220+ unit can manage:

Up to 2 reader heads and 1 keypad installed on 1 or 2 access,

Up to 50,000 users in standalone mode (when connection with the PC is lost),

6 inputs and 2 outputs

As an option, it is possible to add 1 SM100+ (management of 1 or 2 access) and 2 MIBs or 2 WaveIOs for managing additional inputs/outputs.

Physical characteristics Dimensions 500 x 300 x 200 mm Weight 10 kg without a battery Protection index IP 52. Environmental characteristics Temperature -10° to +70°C Relative humidity From 0% to 90% RH without condensation Electrical characteristics

Consumption With 12v: no head=310 mA, 1 head=340 mA, 2 heads=495 mA With 24v: no head=220 mA, 1 head=220 mA, 2 heads=305 mA

D.c. supply From 9 to 30 Vdc

Communications with SMI Server

SM220+

Power supply 220V AC

1 x SM100+ and 2 x additional MIBs or WaveIOs (as an option)


18

3.2.4.1 The SM220+ access controller (ref.: A10521) The SM200+ permits the connection of 2 ISO or Wiegand reader heads, or 2 ProStyl readers.

The following antennas can be connected using an RS485 link:

ProStyl reader – Ref.: A10512

• Link: RS485 • Case in Polyarylamine (IK08) • Front panel in Polycarbonate • IP 54, indoor and outdoor use • Power supply: 9 to 28 Vdc, consumption 40 mA with 12 Vdc • Dimensions: 85 x 85 x 14 mm • Weight: 90 g

ProStyl reader (screw-on version) – Ref.: A10532

• Type de liaison : RS485 • Case in Polyarylamine (IK08) • IP 54, indoor and outdoor use • Power supply: 9 to 28 Vdc, consumption 40 mA with 12 Vdc • Dimensions: 85 x 85 x 14 mm • Weight: 90 g

Using an RFID card (ref.: A19A31)

The following antennas can be connected using the composite cable (ref.: ANR430):

Smart S wall-mounted antenna – Ref.: A19664

• ABS noir IP 55 • Dimensions : 130 x 54 x 32 mm

Smart E recessed antenna – Ref.: A19766

• Front face IP 67 PMMA; polycarbonate pane • Dimensions: 139 x 82 x 8 mm

Smart K keypad antenna – Ref.: A10407

• Dark grey moulded ABS; IP 54 (front face IP 67) • Dimensions: 136 x 50 x 20 mm


19

3.3 Readers

Conventions The following conventions are used in the names of antennas and readers:

PASS: 3.25 MHz technology

Smart: 13.56MHz technology

S: Standard (wall-mounted) antenna

E: recessed (Embedded) antenna

K: Keypad antenna

R: Reader

X: with eXtension of inputs/outputs locally on the decoder

Examples:

mPASS E: 3.25MHz-technology recessed antenna

mPASS RE: reader including a 3.25MHz-technology recessed antenna and a decoder

Smart E: 13.56MHz-technology recessed antenna

Smart REX: reader including a 13.56MHz-technology recessed antenna and a decoder with inputs/outputs

Smartcard technologies The systems developed by Gunnebo are able to support the most widespread identification technologies on the access control market, and also on the centralized administration management market.

Main identification technologies available:

125 KHz proximity cards

Magnetic stripe cards

Cards with a barcode (in maintenance or taking over management of installations)

Wiegand cards (in maintenance or taking over management of installations)

13,56 KHz read/write chip cards (Mifare® Classic 1Kb, 4Kb, Mifare® DESFire EV1)

Biometric readers

Hyper-frequency cards

UHF tags

DALLAS keys

Readers families There are two families of card readers:

Controller readers for the SM100+ range (access controller + antenna or reader head)

Operator readers


20

3.3.1 Controller readers for the SM100+ range

3.3.1.1 The SM100+ controller reader The SM100+ permits the connection of one ISO or Wiegand reading head. It is supplied without a reader head.

Possible extension of a second reader head via an ISO/Wiegand card.

Possible extension of a Smart antenna via a Mifare® extension card.

There is a library of pre-configured reader heads. A careful check should be made of the suitability between the request and this library (list available from Gunnebo Electronic Security).

Controller Reader SM100+

• Weight: 450 gr • Dimensions (hxwxd): 117.7 x 217.7 x 75.5 mm • Operating voltage: 9 to 28 Vdc • Consumption: 110mA • Operating temperature: 0°C to +55C° • Relative humidity: 5% to 80% without condensation

3.3.1.2 The SM101+ controller reader The SM101+ controller reader is made up of:

1 access controller,

1 RFID card,

1 ISO14443 antena (recessed antenna, wall-mounted antenna or keypad antenna),

5-meterf specific cables.

Maximum distance between the antenna and the access controller: 10 meters.

Controller reader SM101+ S - Ref.: A19A44

Smart S antenna: • Black ABS; IP 55 • Dimensions: 130 x 54 x 32 mm Access controller: • Consumption: 105 mA

Controller reader SM101+ E - Ref.: A19A46

Smart E antenna: • PMMA; IP 67 (front face); polycarbonate • Dimensions: 139 x 82 x 8 mm Access controller: • Consumption: 105 mA

Controller reader SM101+ K - Ref.: A19A45

Smart K antenna: • Moulded ABS case; dark grey; IP 54 (IP 67 front face) • Dimensions: 136 x 50 x 20 mm Access controller: • Consumption: 145 mA

Smart S Wall-mounted antenna

Access controller

Access controller

Smart E Recessed antenna

Smart K Keypad antenna

Access controller


21

3.3.1.3 The SM102+ controller reader The SM102+ controller reader is made up of:

1 access controller and it antenna extension card,

1 RFID card,

2 ISO14443 antennas (either recessed or wall-mounted),

2 x 5-meter specific cables.

Maximum distance between the antenna and the access controller: 10 meters.

Characteristics identical to the SM101+ controller reader.

Controller reader SM102+ S - Ref.: A19A35

Smart S antenna: • Black ABS; IP 55 • Dimensions: 130 x 54 x 32 mm Access controller: • Consumption: 295mA

Controller reader SM102+ E - Ref.: A19A36

Smart E antenna: • PMMA IP 57 (front face); polycarbonate • Dimensions: 139 x 82 x 8 mm Access controller: • Consumption: 295mA

2 Smart S wall-mounted antennas

Access controller

2 Smart E recessed antennas

Access controller


22

3.3.2 Operator readers Operator readers connected directly to the SMI Server workstation allow cards to be enrolled and checked.

3.3.2.1 The SM101+ operator reader It enables reading/writing of ISO 14443- Smart PASS and Mifare® (compatible; reading of UID or Mifare® sector zone) cards for enrolment on an SMI-Server workstation.

It comprises a complete unit that includes an integrated antenna and decoder, supplied with a mains adaptor and an RS232 connection for a PC.

Operator reader SM101+ – Ref.: A19A42 • Weight: 280 g

• Dimensions (hxwxd): 70 x 200 x 150 mm

3.3.2.2 The SM100+ operator reader This reader for an SMI Server workstation accommodates a related reader head and allows cards to be enrolled and checked.

A reader head with the following maximum dimensions can be connected:

Length = 150mm x width = 50 mm x height = 25 mm

It is supplied with a mains adaptor, a 230 V AC/ 12V DC power supply and an RS232 connection for a PC. Operator reader SM100+ – Ref.: A19A47

• Weight: 280 g • Dimensions (hxwxd): 70 x 200 x 150 mm • For the MSPASS technology: integrate, in the console case, the STID LXS-R21

reference reader head.

Note: Product supplied without a reader head.

3.3.2.3 Smart Secure Operator reader It enables reading/writing of ISO 14443 - Mifare® DESFire EV1 (4K or 8K) cards for enrolment on SMI Server workstations.

Connection to the USB port. Smart Secure Operator reader – Ref. : A10486B

• Weight: 110 g • Dimensions (h x w x d): 105 x 80 x 30m


23

3.4 Management of technical I/Os and intrusion

Technical inputs and intrusion can be managed in two ways:

Either with SM400 access concentrators,

Or with a separate SecurWave intrusion/transmission module for more complete intrusion management (with alarm transmission to a monitoring centre, automatic functions and more enhanced management functions).

3.4.1 Management with the SM400 access controller (WaveIO modules)

3.4.1.1 Elements that can be connected to the communication bus The WaveIOs

The WavePad consoles

On the “peripheral” buses: WavePad command consoles have back-lit display screens and permit commands to be given.

WavePad - Ref.: A22710 or A22745

The main functions available on WavePad are: • Area Management • Arming/Disarming

Input/Output modules for intrusion detection – The WaveIOs:

WaveIO12 - Ref.: A19A05

Main features: • 8 multi-level inputs • 4 transistorised outputs • The levels of inputs can be configured by software to adapt to already balanced

sensors • AES 128-bit encryption





Main features: • 24 multi-level inputs, among which 8 analogue inputs (4-20mA/0-10V) • 8 transistorised outputs • 8 relayed outputs • The levels of inputs can be configured by software to adapt to already balanced



24

3.4.2 Management with the SecurWave intrusion/transmission module SecurWave is a central control facility which permits the management of intrusion and transmission from a site equipped with SMI Server (version 2.0 and higher), retaining all its intrusion and transmission functions even in disconnected mode.

3.4.2.1 Presentation of the SecurWave central control facility SecurWave in the SMI Server architecture:

SecurWave is capable of dialoguing with remote surveillance units using the following main protocols: SMB and Contact ID.

Information is transmitted to SMI Server via a LAN network. SMI Server can then use this information to display it on the maps and save it to history.

In the same way, SMI Server can transmit alarm information intended for a remote monitoring device to SecurWave (a maximum of 256 items of information). SecurWave manages the protocols, networks (IP/RTC) and listening if necessary.

In both cases, SecurWave must be configured to receive or transmit SMI Server messages.

SecurWave remains independent in case of operation in disconnected mode and thus retains all available functionality for broadcasting and managing events and alarms.

SecurWave functionality: In its basic form, the system permits the following intrusion detection functionality:

Area arming postponement.

Automatic area arming/disarming (schedule, empty area), on request by the operator, in local mode (smartcard + code, push-button or digicode).

Management of “ejectable” circuits”.

Audible switch-on pre-signalling.

Refusal of smartcard access in an armed area.

Time-delayed entry/exit route.

Automatic reaction to an alarm (action code).

Selection of information forwarded to the specialist workstations.

Exchange of data with other applications with automatic transfer of information. This avoids wiring physical inputs and outputs between several systems, which is painstaking and costly.

IP network

SMI Server

Alarms

Remote monitoring PC

SecurWave

SM400


25

Safe management.

Audio.

Transmission to a remote monitoring centre.

Control, automatic functions.

All these functions are fully integrated and inter-operable.

SecurWave comes in the form of a box, 500X300X200 in size and weighing 9 Kg.

Control and automatic functions: The system enables you to programme all sorts of logical equations between the physical inputs and outputs, internal events (card presented, system messages, fault detected, etc.), and “virtual” inputs transmitted by third-party systems via a variety of communications protocols.

You can thus customize the customer’s installation and create functionality that is appropriate and suited to the site’s operation.

Examples of these controls:

“man-trap” effects between several doors.

interaction between several alarm areas, presenting the card, counting, the state of alarm inputs.

waiting for authorization information transmitted by a third-party system before executing a command.

SecurWave architecture: SecurWave can manage 3 communications buses:

3 peripheral buses for the possible connection of one or more operating keypads & input/output modules

Up to 240 intrusion points and 8 management keypads for local operation.


26

3.4.2.2 Elements that can be connected to the communication bus The WaveIOs

The WavePad consoles

On the “peripheral” buses: WavePad command consoles have back-lit display screens and permit commands to be given, configuration to be carried out and events to be looked up locally, depending on the model.

WavePad - Ref.: A22710 or A22745

The main functions available on WavePad are: • Area Management • Arming/Disarming • Derogation of automatic arming • Arming anticipation • Delayed arming • User management

Input/Output modules for intrusion detection – The WaveIOs:








Main features: • 24 multi-level inputs, among which 8 analogue inputs (4-20mA/0-10V) • 8 transistorised outputs • 8 relayed outputs • The levels of inputs can be configured by software to adapt to already balanced



27

3.4.2.3 SecurWave’s transmission connections (Ethernet, serial, modem, etc.) SecurWave has a variety of connections that let you connect it to transmission networks of the LAN or WAN type and older generation transmission systems for delivering alarms to remote monitoring centres.

SecurWave has an Ethernet 10/100 base TP (Twisted Pairs) connection as standard.

Optionally, SecurWave offers transmission via modems and various adaptors.

Protocols supported:

COMPACT ES protocol: native protocol of the SMB COMPACT range.

CONTACT ID protocol: international alarm protocol.

CEI protocol: protocol dedicated to the Italian market.

CESA200 protocol: with a specific modem for compatibility with older transmitters.

SOP protocol: bidirectional data exchange protocol using TCP/IP (input, output, events status).

Physical media:

Ethernet TCP/IP - 10/100 Mbits half/full duplex auto sense.

DHCP.

DNS + Automatic DNS (DHCP).

TCP ports can be defined freely.

PPP on RS232 under TCP/IP.

PAP /CHAP authentication.

DNS.

TCP ports can be defined freely.

X25 (X28 synchronous access).

ISDN (via an optional adapter).

PSTN (via an optional modem).

Local connection on the RS232 port.

Connection modes (mainly for X25 access):

Permanent: a connection is established to the remote system by the central control unit and polling is carried out on this connection.

Switched: a connection is established when necessary in multi-master mode.

3.4.2.4 Modem option + 4-, 8- or 16-channel listening The “listening and modem” option is connected directly to the CPU board via a daughter board itself comprising an on-board modem.

It lets you manage 4 microphones in order to carry out remote confirmation.

Functions available:

Alarm followed by listening.

Listening started by an automatic function, for example pressing an alarm button, lets you start a call directly to a pre-programmed number.

Incoming listening on a call and authentication.

Outgoing listening on external remote command, for example from a remote monitoring front end.


28

3.4.2.5 Maintenance functionality In order to make preventive and curative maintenance easier, as well as to provide traceability of events, SecurWave incorporates a certain number of maintenance functionalities.

They enable you to find out the state of the installation at a given moment, and also to ascertain all the events that have taken place in the past.

Among these areas of functionality are:

Real-time information, displaying changes in state of physical and “virtual” inputs in real time.

Generation of an acceptance report which includes the history of all the tests carried out and confirms that all the states of all the inputs have been tested.

“Solo” maintenance, a tool similar to the previous one that lets you trace all the events triggered during a preventive maintenance visit.

A system report which is a statistical report of all the main events over a period of one month. It contains information concerning for example, system re-initialization, alarms transmitted, communication failures with the various peripherals, etc.

Polling tests that let you find out about network quality.

3.4.3 Interfacing with the Master central intrusion unit This interfacing is for handling (viewing, logging, printing, triggering action codes, etc.) information from the Master central intrusion unit.

The main functions provided by the system are:

Area arming/disarming

Inhibition/Activation of entry points

Sending back information about the status of intrusion points, surveillance areas and exits,

Controlling exits,

Management of communication with the central unit,

Management of the Master central unit's peripheral intrusion devices.

SMI Server can manage up to 128 series 3000 and 4000 MASTER central units.


29

3.5 Managing stand-alone electronic locks: IDLock

No cabling, no power supply, but still supervised: the card serves as the communications media.

SMI Server can be used to manage electronic locks, meaning that a single card can be used to manage connected readers and other non-connected devices.

This system does not require a specific power supply or cabling. Power is provided by an internal battery, and the “keys” are Mifare® (Classic ou DESFire EV1) cards which contain the access rights.

This door equipment can either be supplied in the form of "cylinders" (European key bush) or in the form of a "lever handle and back plate assembly".

The cards also function as a medium for communication, and can send back information about card swipes, battery faults, etc. to the central system.

The reader used for enrolling, which is connected to SMI Server, initializes the card (security parameters) and writes the desired access rights to it.

Stand-alone access enables:

Access rights to be read & managed

Passage events and information about faults to be written to the card memory (low battery, etc.)

The Hot Spot reader, connected to the Ethernet network, enables:

Card data (such as access rights, etc.) to be updated (written),

Events to be sent back to the central unit (reading then resetting)

Hot Spot reader

Standalone access

Encoder reader

Ethernet TCP/IP network


30

3.6 Managing wireless locks: ProxLock

PROXLock is an integrated solution that works with SMI Server for centrally managing new accesses that use wireless electronic lock equipment and which use 13.56 MHz RFID for identification purposes.

PROXLock meets the market's requirements for fitting existing doors with electronic locks that work using contactless cards.

The SMI-PROXLock solution centrally and securely manages access rights for scalable and flexible installations which group together all types of online access:

• So-called "conventional" cabled access • So-called "wireless" access

ProxLock communicates with the wireless devices via routers and radio nodes.

ProxLock communicates with SMI Server via SM400 units.

Available door equipment:

Node 1

Node x

Ethernet TCP/IP or RS485

Router

SM400

SMI Server

Single-head cylinder (Ref.: AUE459)

Lever-handle/backplate (Ref.: AUI027)

Double-head cylinder (Ref.: AUE464)

Half cylinder (Ref.: AUE462)

Ethernet TCP/IP

Bus RS485


31

An SM400 unit can manage:

• Either a single IP ProxLock router

• Or 1 to 3 RS485 ProxLock routers

The SM400 unit can be used in “mixed” mode: ProxLock + SM100+.

The following table summarises the various capacities:

RS485 Router 0 1 2 3

IP Router 1 0 0 0

ProxLock equipment 64 16 32 48

SM100+ bus 3 2 1 0

SM100+ / WavePad 16 16 8 0

Readers 32 32 16 0


32

4 SOFTWARE CHARACTERISTICS

4.1 Access control - SMI Server

The system provides access control for pedestrians and vehicles, as well as access control in elevators. Thanks to an open and evolutionary architecture, our SMI Server integrated security management system takes a variety of complementary security disciplines into consideration:

Access Control

Intrusion detection

Video surveillance

Graphical supervision

SMI Server’s modularity is the best answer to the needs of each site.

SMI Server manages several ids from different types of technology (smartcards, biometric readers, etc.) per user, providing an answer to the following needs in particular:

Providing temporary smartcards to permanent staff who have forgotten or lost their card.

Making the transition from one smartcard technology to another “easy”.

Having different levels of security according to the access (smartcard, biometrics, etc.).

SMI Server also offers:

User administration, because the system lets you manage rights for 64 operators depending on passwords, command authorization levels and rights over the system’s files (creation, modification, deletion and display). A configurable “Time Out" function permits disconnection from the system with a request for a password on reconnection after a workstation has been idle for a given period of time.

Management of printout codes according to schedules:

Printing in real time of configured events and operators’ actions.

Storage of history on the hard disk, with the option of restoring archives.

Acknowledgement of alarms configured as such with display of instructions.

Car park management with assignment and limitation of spaces by access family. The number of spaces occupied per family and overall can be displayed.

The use of graphical maps, with signalling of the states of sensors, the option of looking up sensor configuration, their status and activating them. The operator can display the appearance of alarms on a screen, simply and effectively.

SMI SERVER - DETAILED DESCRIPTION 4. SOFTWARE CHARACTERISTICS

33

4.2 Integrated intrusion control – SMI Server

The system permits intrusion control for accesses being monitored.

It allows supplementary alarm points to be managed via access controllers.

Intrusion area management:

Automatic arming/disarming (schedule, empty area), on operator's request, locally (card + code, push-button, keypad)

Pre-signalling of area arming

Access forbidden in an armed area

Time delay for entry/exit route

Automatic functions upon alarm

IMPORTANT: For more complete intrusion management (with transmission of alarms to a monitoring centre, automatic functions and more enhanced area management functions), it is possible to connect a separate SecurWave intrusion/transmission module (see § 3.4.2).

4.3 Operating principles

Between the SMI Server server and the SM400 controllers: Acquisition of users’ access rights, access times and validity dates by the controllers is carried out in self-training mode and they operate in “real time”. The devices retain all the advantages of independent, local decision making, and supplement this with the benefits of permanent communication with a central unit (the SMI Server system architecture is of the semi-centralized type). Events are transferred in real time to the central unit via permanent polling of the devices.

With configurations based on SM400 and SM100+ units, users are loaded in the SM400 and SM100+ units, upon loading request.

Disconnected mode of operation: Autonomous management of users by the controllers ensures operation of the local accesses and automatic functions in disconnected mode corresponding to access rights, access times and validity date.

Performance:

Simultaneous processing: Processing of information is carried out at controller level and on-demand at SMI Server level if a user’s access rights, access times and validity dates are not in the controller’s memory during the first use of a smartcard, the so-called training mode. The system is real time and multi-tasking (alarm processing, recording history, printing a report, etc.).

Time to accept a smartcard: The normal time to accept a smartcard is less than 250 ms. (1.5 seconds for the first passage through a reader).

Time to forward an alarm: The time taken to forward an alarm is less than 2 seconds.

Time taken for uploading: When the system is initialized, all the local controller operating configurations are uploaded. However, given the size of the user population the system may have to process, the system does not upload the files of users authorized for a reader during the initialization phase (a solution that is heavy in its use of network resources and takes too long). Hence the importance of the self-training operation on the part of the management device.

When a user comes to a reader for the first time, the associated controller makes a request to the central unit to find out the users rights. The system transfers the information


34

concerning the user (if it exists) to the controller that made the request, and the controller memorizes it. Where the controller’s memory becomes overloaded, the system replaces the users who have not used this access the longest with the new ones.

4.4 Principles of exploitation

4.4.1 Alarm typology In order to differentiate processing of the various Safety, Operating and Technical alarms, we define, during our configuration service, printout codes which will from then on be associated with each input circuit.

A printout code is a task triggered automatically when an event occurs.

It can be associated, via configuration, with any type of event that is part of the system's life: alarms, area arming/disarming, access authorized or refused, etc.

They have to do with recording history, displaying information on the screen and printing events, on each workstation and its associated printer.

The information below lets you make exploitation of events more flexible and customize it according to the type of alarms being processed: fire, technical, intrusion, by combining them all with times and forwarding options.

You can also associate a WAV sound file to each of the 20 possible alarm levels in order to alert the operator.

4.4.2 Workstation configuration function Several workstations can be created with their own specific environment.

In effect, depending on the configuration of the system, it is possible to distinguish between the areas of functionality of the workstations. It is possible to direct each alarm to one or more workstations.

In addition, each station can serve as a transfer station to another workstation when the latter is switched off.

This means that all the information intended for the workstation that is switched off, will be sent automatically in real time to the transfer workstation for the whole period it is switched off.

The system can manage up to 24 workstations simultaneously, in addition to the main workstation.

Each workstation gives access to all the system’s areas of functionality.

Access to commands and functions is only limited by operators’ specific rights (level of authorization for commands and prerogatives in the tables).


35

4.4.3 Classification and Description of users in the system Definition of categories or groups of people authorized to access the site.

Staff, Companies, visitors, etc.

Definition of peoples’ identification fields to be filled in, in the data.

Definition of access areas and the associated readers.

Definition of areas or periods of time to be assigned to smartcard holders.

Definition of timetables and exceptional periods.

Other criteria.

4.4.4 Area management Area assignment represents the link between access control and intrusion control, and it lets you monitor the geographical progress of a predetermined user as well as the precise time of the last presentation of their card.

Area management:

Counting

Differentiating vehicles from users

Management of thresholds

Actions triggered when a threshold has been reached

Anti-passback function (geographical and time)

4.4.5 Access adaptation & selection The system can configure each access according to its specific features:

Code only

Card + Code

Card only

Card + Biometric reader

Anti Passback

Counting

Pass confirmation (double smartcarding)

Visual pass confirmation

“Secured” tag


36

4.4.6 Access rights configuration function

Access rights can be defined for each individual or for groups of people. Access rights are a function of:

The person.

The group or category to which they belong.

The time zones, calendar and schedule.

The period of validity of the smartcard.

The access areas (Readers - Area).

Validity start and end dates for access rights,

The condition of the smartcard with regard to the anti-passback function (APB).

Several access families can be assigned to the same user.

Resident Card

IT Service Valid from 01/03/211 to 31/08/2015


37

4.4.7 Backup, restore and archiving function Everything that is recorded (printing criteria, change of states, constitution of remote command sequences, sequences of automatic functions, remote command times, etc.) are the subject of verbose dialogues.

Data recorded can be listed in the form of printed reports in order to keep the installation’s technical documentation up-to-date. Events (faults, alarms) and operators’ system access transactions are recorded automatically on the hard disk in a history database.

A specific procedure makes it possible to backup the current history for archiving purposes on computer media either manually or automatically.

After restoration, the archives or history are available for future consultation or report printing.

Backup of the single user, histories and configuration database can be done automatically according to the period chosen. In addition, the operator can manually create a backup of this database at any time.

The history is protected by the database. Archiving is available in encrypted format only visible by the SMI Server system or in open .CSV format.

All backup operations are carried out as a background task and the system continues to permanently monitor changes of state processed by the "real time" module.

4.4.8 Log printing functions Printing and reports: Report printing is directed exclusively towards the printer declared on the workstation under Windows (network printer, etc.).

Reports of real-time events: Real-time report printing is directed exclusively towards the workstation’s serial or parallel printer.

Configuration reports: It is possible to selectively print the whole of each of the application’s tables:

Input circuits.

Output circuits.

Readers.

Areas.

Schedules.

Etc.


38

4.4.9 System access security function It is possible to define the operator’s access to the system’s operating commands accessible via the command menus.

An operator can also have the right to the “open access command” function except for access to certain areas. Each operator is given a black list of areas in which he cannot control access and inhibit radars.

In addition, a list of prerogatives assigned to each operator determines his capacity of access to each configuration (creation, modification, deletion, display) and to each operating function. Functions that are not accessible are not visible to the operator.

Each operator has an individual code and a password which gives him access to the system within the strict context of the rights that have been granted.

Each action in the system can be printed in real time and stored in the history, with the time of intervention and the name of the operator.

4.4.10 Password management

Configuring the “security strategy” to apply to the SMI Server application makes it possible to further secure access to various workstations:

Forcing the operator to change their password every x days, and preventing them from re-using any of the last y passwords used,

Defining the maximum and minimum number of characters that can be used for their passwords, as well as their complexity (use of uppercase and lowercase letters, digits, etc.),

Warning operators x days before their passwords are due to expire,

Warning, logging and then blocking an operator once they have entered one or several incorrect passwords,

Using Windows authentication for logging on to SMI Server (single sign-on authentication).


39

4.4.11 View exploitation function Apart from archiving and printing information received, alarms processing consists of displaying events on a screen, in order to quickly comprehend the situation before acknowledging.

Each state includes the following data:

On the screen:

Identification of the circuit.

The nature of the information.

A verbose description of the circuit concerned.

The state of the circuit (appearance or disappearance of an alarm, fault).

The status of the circuit (shunt, inhibition, etc.).

The date and time the event occurred.

The number of times the event occurred.

The priority level of the event.

The instructions to be applied by the operator.

The map and representation of the circuit.

On the printer:

Identification of the circuit.

The nature of the information.

A verbose description of the circuit concerned.

The state of the circuit (appearance or disappearance of an alarm or fault).

The order number.

The date and time the event occurred.

If a colour printer is available, it is also possible to choose a printing colour depending on the type of event.


40

4.4.12 Alarms and states processing function On the appearance of an alarm, the screen displays a button / indicator at the top of the screen indicating a new alarm, called Alarms to be acknowledged.

This button gives access to detailed information concerning the alarms.

Depending on the configuration, an audible alarm triggered by the workstation may be activated when an alarm that needs acknowledging appears.

This audible alarm stops automatically after a predetermined length of time or when the operator activates the Cut audible alarm function in the top banner.

When the operator clicks on the button / indicator indicating there are alarms to be acknowledged, two windows open and display:

under the left-hand tab, a detailed list of all the current alarms.

under the right-hand tab, all the current alarms for the selected circuit.

This window lets the operator:

Acknowledge an alarm by clicking on the Acknowledge button.

Look up the other alarms for the selected circuit.

The list presents events in their order of priority, and with the same priority in chronological order.

The system displays the circuit where the alarm has occurred (detector, reader, door contact, map, etc.), the order number for printing, the level of priority, the nature of the alarm, etc.

He can also browse the list of alarms by using the scroll bar with the mouse and display, in the Map window, the alarm map showing the circuit selected.

Acknowledgement causes the event to disappear from the queue of alarms to be processed.

The counter counting alarms waiting for acknowledgement and the current alarms counter are updated.

The window giving detailed information concerning the next alarm is then displayed.

This sequence is continued until the queue of alarms waiting to be acknowledged is empty.


41

4.4.13 Remote command on/off function Processing information represents the purpose of a system used for centralizing alarms or access control.

This means generating automatic programmed reactions (automatic activation of equipment or the printing of relevant information for operators) to return the site to a secure state.

In most computerized systems, configuration complexity increases very rapidly with the power and flexibility of the functions that generate automatic operation.

One of the certain advantages of the SMI Server system lies in the modular construction of its database, which makes configuration easier while multiplying its power and flexibility.

Basic principle: When an event occurs, the following can be defined:

What actions should the system generate?

How should information be presented to the operator?

It is possible therefore to create ACTION CODES in order to define remote commands that will be activated as a reaction by the system, and PRINTING CODES in order to define precisely how events will be displayed on a supervisor’s screen, printed on a printer or stored on the system’s hard disk.

This approach enables you to avoid repeating all the details of the automatic functions to be activated for each of the many events that may be generated by sensors, readers, controllers, and other of the system’s circuits.

4.4.14 Elevator management As remote commands driven by action codes are connected on cut-off to the control buttons of the protected floors, these will only be accessible to users associated with the correct action codes.

This function lets you associate the control of access requests to the floors with the use of smartcards. The card reader must be located in the elevator cabin. Access to the different floors is by the use of output circuits defined in the action codes.

The electrical principle is as follows:

Depending on the user’s rights, the output circuits “validate” the buttons (corresponding to the floors). The user can then press the button of his/her choice.

Selection plate in the cabin

Automatic control

SMI Server output circuits


42

4.4.15 Biometrics

4.4.15.1 1:1 biometrics Identification & Authentication with Mifare® Classic or DESFire® EV1 card

SMI Server is able to manage 1:1 biometrics, enrolling fingerprints, then writing information to the Mifare® card memory and then configuring the readers (creating "master" cards).

4.4.15.2 1:N biometrics Cardless Identification & Authentication

SMI Server can be transparently interfaced with the Morpho server (formerly Sagem) in order to enrol, store, upload and manage various pieces of biometric information.

SMI Server can be used to enrol users' fingerprints via a single man-machine interface.

Once biometric information has been uploaded via the Ethernet network from the Morpho readers, access rights are managed by our SM100+/SM400 controllers.

SMI Server also manages multi-modal biometrics through Morpho readers that combine the finger vein network and fingerprint:

Biometric information

SMI Server Main station

Rights, cards, etc.

Ethernet TCP/IP network


43

4.4.16 Real-time events editor Real-time and interactive display of events.

Events can be displayed in real time in several windows.

Double-clicking on an event opens up a window containing more details about it.

Right-clicking on an event opens up a contextual menu with a range of further options, depending on the event type: access to commands of the circuit concerned or the user sheet, etc.

Several filters can be configured, resulting in specific windows for the display of specific information:

Events (alarm, default, etc.)

Circuits (reader, device, etc.)

Users (tracking)

Families


44

4.5 The other modules

4.5.1 Map chaining module (Tree structure) The map and graph management feature can be used to display and take control of any installation via a simple and intuitive interface.

Navigation can be performed easily via a tree structure, or by implementing control buttons.

The acts of clicking and double-clicking on an object can be configured so as to perform various actions, such as, for example:

• Direct control (opening a door, inhibition, etc.),

• Opening a "Command" window

• Opening the "Log" window

• etc.


45

The various animations that are available and the combinations in which they can be used mean that the graphic display can be modified to meet the requirements of each client:

• Changing symbol

• Using animated symbols (xaml format),

• Animating text

• etc.

A large library of symbols is supplied as standard and can easily be added to by each client.

In association with a video system:

Automatically display a video vignette of the camera linked to the element posting an alarm.

Display from the camera selected by the operator.


46

4.5.2 Guard tour management A guard tour is a circuit carried out by a guard in the context of his mission of surveillance of the premises. A guard tour is characterized by a succession of CIRCUITS (readers, detectors, push buttons) by which the guard indicates his presence (presenting his card, pressing a button, etc.). These different points in the guard tour must be covered in the order in which they have been defined. The guard’s progress is timed and he has a certain amount of time (defined by min. and max thresholds) to travel between two points on the guard tour.

If, for whatever reason, the guard does not reach a certain part of the circuit within the predefined time, an alarm is generated, but the guard tour continues normally.

The guard tour management module can manage up to 32 guard tours, which can be executed simultaneously.

Each time a circuit is passed during the guard tour, it is possible to programme automatic arming or disarming of one or more areas.

4.5.3 Intranet module The SMI Server system lets you connect to an Intranet in order to:

manage users: creation, modification,… sorting. NB: management of the operator reader for enrolling smartcards is not possible on a general purpose workstation,

look up history,

manage graphic maps (except video).

This option requires a server with at least 1 GB of RAM.

4.5.4 Graphic personalization The role of this module is to let you create and print a logo, photo and text on one face of a smartcard, horizontally or vertically.

Defining smartcard format is possible on any workstation equipped with the option. Printing the smartcard is only possible on a workstation equipped with a printer.

We include a webcam in our offer (USB 640 x 480 with photo mode). A scanner or a digital camera can also be offered via a Twain serial or USB port.

A webcam, scanner or a digital camera can be connected to our system for taking photos. Connection of this equipment is via a serial or USB port (TWAIN protocol).

For taking photos it is also possible to use a dedicated video surveillance system camera.

Resident Card

IT Service Valid from 01/03/211 to 31/08/2015


47

4.5.5 Visitor management Integrated, full web visitor management

It offers two types of connection via a thin client (web browser):

A "Welcome station" type connection for managing visitor entries/exits:

Creating/Modifying/Deleting a visitor

Creating/Modifying/Deleting a visit (or appointment)

"Entry" and "Exit" of a visitor

Printing out a visit sheet

Managing a list of visitors (expected, present, exited, non-compliant)

A "Resident station" type connection for managing "appointments" associated with a resident:

Creating/Modifying/Deleting a visitor

Creating/Modifying/Deleting a visit (or appointment)

A visit begins when a visitor arrives and ends when they leave definitively. Useful information about a visit is as follows:

A visitor,

A resident,

An ‘expected’ date for a visit:

An effective date and time of arrival,

An effective date and time of departure.

A visit can have the following statuses:

Expected: the visitor is expected

In progress: the visitor has arrived

Non-compliant: The visit is still in progress even though the end of the day time has passed.

Finished: the visitor has left


48

To make it easier for the visitor to move around the site, the reception hostess can give them an "active" card so that they can access various physical obstacles that are managed by the SMI Server system.

In order to avoid data entry errors and improve the welcome given to the visitor, information about them (surname, first name, photo, etc.) can be gleaned automatically by the system by scanning their ID.

A visitor automatically enters the site via a welcome station. However, they can exit in 2 different ways:

• Via a welcome station,

• Via any reader managed by the access control system (if the visitor has an "active" card)

4.5.6 Attendance time calculation The “Time & attendance” module is a module used for managing attendance that lets you generate four types of report:

Arrivals - Departures to look up arrival time, departure time and how long the user was present.

Entries - Exits to look up the number of entries and exits made by a user within a selected period.

Delays and absences to look up arrival time in case of delay, departure time in case of early departure or to find out if the user was absent.

Totals and cumulative attendance to look up the total number of hours for a user within and outside schedules.


49

4.6 Communication with connected applications

4.6.1 Management of external JBUS Master alarms The purpose of this functionality is to enable the SMI Server to receive and process alarms from other equipment connected to it in the JBUS format and connected via a single serial (RS232) or multipoint (RS485) connection.

In this mode of operation, the SMI Server behaves as a JBUS master. This JBUS permits the supervision of 1 or more slaves.

The connection is unidirectional: External alarm system => SMI Server.

For SMI Server in general, circuits originating with "External alarms" are processed in the same way as if they came from a device of the SM400 and/or SM200+ type, in "immediate" mode only (action and printing codes, map displays, etc.).

4.6.2 Synchronization with user databases: SI2 interface Gunnebo provides a software interface that enables external applications to access SMI Server databases in read and write mode. SMI Server is aware of the write request and a report is returned to the application in real time.

The number of external applications that can be connected depends on the number of SQL licences (clients permitted).

The interface is supplied with the full documentation needed to develop the interface. Assistance in implementing the interface can be offered. Our offer does not include any specific development relating to this interface.

Ethernet IP network

Direct and standard exchanges of users and smartcards databases

External application

External application database


50

4.6.3 Events channel “Event Channel SDK”: Software connection tool used to create interfaces for sending events to another piece of equipment: Supervisor, video system, etc.

Exchanges between the external application and an SMI Server workstation are bidirectional:

The external system can receive events from an SMI Server workstation,

The external system can send commands to an SMI Server workstation.

The tool is supplied with the full documentation needed to develop the interface. Assistance in implementing the solution can be offered. Our offer does not include any specific development relating to this interface.

4.6.4 Software connector “Software Connector SDK”: Software connection tool used to create interfaces for supervising other pieces of equipment: Fire detection and intrusion units, etc.

Exchanges between the external application and an SMI workstation are bidirectional:

The external system can receive events from an SMI Server workstation,

The external system can send commands to an SMI Server workstation.

The tool is supplied with the full documentation needed to develop the interface. Assistance in implementing the solution can be offered. Our offer does not include any specific development relating to this interface.

Events sent to the external system

Ethernet IP network

Commands sent by the external system

Ethernet IP network

Alarms, status, etc. sent by the external system

External system

Commands, acknowledgment, etc. sent to the external

system

External system

SMI SERVER - DETAILED DESCRIPTION 5. VIDEO MANAGEMENT IN SMI SERVER

51

5 VIDEO MANAGEMENT IN SMI SERVER

2 ways of managing video:

Interfacing:

Transmitting events to the video system (via le Events Channel),

Using feeds on the video system

Integration:

Transmitting events to the video system (via the SDK integration),

Using feeds on the video system and on SMI Server

5.1 Video interfacing

SMI Server permits interfacing with the following video systems:

Hymaton,

VisioWave,

Milestone,

Bosch VMS,

Etc.

In this case, SMI Server does not manage video feeds. It focuses on sending information about alarms, faults, card swipes, etc. to the video system. The video system launches its scenarios based on information received.

TCP/IP Ethernet

Interfacing Integration


52

5.2 Video integration

SMI Server allows the following video systems to be integrated:

VisioS@ve CCTV system

Genetec CCTV system

The possibility of interfacing these different video systems enables you to cover a wide range of needs in terms of video capacity and functionality, such as:

Alarm confirmation.

Automatic triggering of video recording on receipt of an alarm.

Fixed camera object switching.

Visual pass confirmation.

Permanent display: Multi-vision, double screen.

Capture for graphic personalization.

The video functions managed by SMI Server:

Permanent multi-vision display (a maximum of 16 cameras).

Pre and post recording on alarm.

Taking of photos.

Easy construction of multi-visions with dynamic display.

Dynamic multivision creation directly from the graphic maps.

Video stream request from maps.

Video stream request and map display following an event.

Dome control directly on the image.

Dome pre-position request.

Configuration of dome pre-positioning directly from the video vignette.

Restitution of recorded video sequences associated with SMI Server histories.

The possibility of a multi-vision display on a second screen.

5.2.1 Functions

5.2.1.1 Alarm confirmation This function lets you carry out visual confirmation when an alarm is received.

A video vignette can be incrusted on the “Alarms to acknowledge” and “Current alarms” screens, and on the “dynamic maps”, in order to provide a real time image of the event.

If dynamic confirmation is required, in real time, the “dynamic map” option should be enabled, and the event generating the alarm should be associated with a printout code with acknowledgement.

5.2.1.2 Automatic triggering of video recording on receipt of an alarm When an alarm is received, this function lets you trigger video recording with pre-alarm and post-alarm automatically on the camera associated with the circuit in which the alarm has occurred. This function is executed with action codes.

SMI SERVER - DETAILED DESCRIPTION 5. VIDEO MANAGEMENT IN SMI SERVER

53

5.2.1.3 Camera object switching If the graphical option is enabled, you can position the “camera” object on a map. Right-clicking on this object lets you incrust a video vignette of the corresponding camera.

5.2.1.4 Switch to multivision when an event occurs Previously, a system component could only be linked to one camera. With this new version, several system cameras can be connected to one circuit using the multivision feature.

When an alarm appears on that circuit, the system displays the multivision and can send recording commands to all of the cameras shown in the window.

5.2.1.5 Pre-positioning of mobile cameras when an event occurs Pre-positioning of mobile cameras when an event occurs. Mobile cameras can be programmed for pre-positioning when an alarm occurs.

5.2.1.6 Visual pass confirmation If this option is enabled, during a pass confirmation request, the following information is displayed on the screen:

The map position of the access.

The user’s photo and details (name, first name, etc.).

A video vignette of the camera associated with this access.

The operator can therefore check the consistency of the information in real time and make a decision to allow or refuse access.

5.2.1.7 Pass visualization without confirmation This function displays the video image and the user information on a single screen.

The security guard can monitor each passage without disturbing the flow.

Allow

Refuse

SMITH Sandra

Reader 1 Building A User update request 12/02/2015 09:57


54

5.2.1.8 Permanent display: Multi-vision A particular functionality lets you display a group of 16 cameras simultaneously in real time.

Warning: Using this function creates a large flow of data across the Ethernet network.

5.2.1.9 Capture for graphic personalization It is possible to use a camera to manage photo taking for the management of users’ photos and graphic personalization.

5.2.1.10 Archiving and display of recordings Recording of video sequences is done according to a variety of criteria (configurable):

Activation of an alarm input, by contact or by the SMI Server system.

Time programming.

Video Sensor detection.

SMI Server lets you display all the video sequences recorded locally. There is an automatic functional relationship between an video sequence from the video recorder and the SMI Server history.

Possible synchronization and multivision display of video flows from the recordings.

SMI SERVER - DETAILED DESCRIPTION 6. ACCESS CONNECTION DIAGRAMS

55

6 ACCESS CONNECTION DIAGRAMS

6.1 Connection diagram with SM100+, SM101+ – One-way door

Hos

t

com

pute

r lin

k

Lock

co

ntac

t

Exit

butt

on

Doo

r co

nta

ct

Elec

tric

al

lock

Pre-

alar

m b

uzze

r

1 pa

ir

1 pair

Car

d re

ader

1 pair

1 pair

Cable depending on reader type

1 sh

ield

ed t

wis

ted

pair

(RS48

5 lin

k)

+

1 p

air

for

pow

er s

uppl

y

(max

L:

100m

) SM

100+

, SM

101+


56

6.2 Connection diagram with SM100+, SM102+ – Double-way door

Entr

y ca

rd

read

er

Lock

co

ntac

t

Exit

butt

on

Doo

r co

nta

ct

Elec

tric

al

lock

Pre-

alar

m b

uzze

r

1 pa

ir

1 pair

Exit

card

re

ader

1 pair

1 pair

Cable depending on reader type

Hos

t

com

pute

r lin

k

1 sh

ield

ed t

wis

ted

pair

(RS48

5 lin

k)

+

1 p

air

for

pow

er s

uppl

y

(max

L:

100m

) SM

100+

, SM

102+


57

6.3 Connection diagram with SM100+, SM102+ – 2 one-way doors

1 sh

ield

ed t

wis

ted

pair

(RS48

5 lin

k)

+

1 p

air

for

pow

er s

uppl

y

(max

L:

100m

)

Hos

t

com

pute

r lin

k

Doo

r co

nta

ct

Elec

tric

al

lock

1 pa

ir

1 pair

1 pair

1 pair

1 pair

1 pair

1 pair

1 pa

ir

Lock

co

ntac

t

Exit

butt

on

Car

d re

ader

Doo

r co

nta

ct

Elec

tric

al

lock

Lo

ck

cont

act

Exit

butt

on

Car

d re

ader

SM

100+

, SM

102+


58

6.4 Connection diagram with SM400 and SM101+ – SM102+


59

6.5 Connection diagram with SM400 and related heads

Documents

SMI Server V3.1 - Detailed descriptiongulfsecuritysafety.com/public/pdoducts_img/890ee97734c44ca902f7abadbab... · Data communicated by the SM100+ and/or WavePad and/or WaveIO units