Table 7 (2 of 2)

System self-protection requirements

Grade assignment

1

2

3

4

14

Use of minimum 4-digit memorized information for logical access when combined with token or biometrics (to be system generated or by system administrator)

OP

OP

M

M

15

Logical access credential can only be assigned by the system administrator

OP

OP

M

M

16

Manufacturer's pre-set values for logical access shall be capable of being overwritten

OP

OP

M

M

17

After operational power loss minimum data retention time for logged events stored on the access control unit (due to loss of communication with monitoring console) shall be as indicated

OP

24 h

120 h

120 h

18

Encryption required for communication signals between components of the EACS when using publicly shared networks (e g. the Internet)

OP

OP

M

M

19

The information stored on the token shall be protected against unauthorized modification or reproduction

OP

OP

M

M

20

Either failure or restoration of the communication channel shall not result in the release of an access point

M

M

M

M

21

Failure of communication with monitoring console shall not interrupt the access decision process

M

M

M

M

22

Processing rules stored in an access point reader shall not be visible to system users

M

M

M

M

23

Light or sound keystroke keypad activation indicators shall not be a direct representation of actual codes, but shall be identical in pitch and duration

M

M

M

M

24

Communication between readers and access control units shall support encryption with authentication

OP

OP

OP*

M

25

The instruction manual shall contain details of the installation requirements for the mechanical protection limiting access to the communication lines between readers and access control unit

OP

OP

OP*

OP

В - Detection and reporting

26

The change in state (open, closed, tamper (open tamper or closed tamper)) of a digital input detection circuit shall be designed by the manufacturer to ensure that the tolerance for each circuit input state shall not overlap an adjacent state

OP

OP

M

M

27

Data entry system validation. System shall provide annunciation when invalid data has been entered during configuration mode at the monitoring console

M

M

M

M

28

Access to the configuration mode shall time out after a pre-set period of inactivity

M

M

M

M

NOTE Abbreviations used in the table are the following:

NP = not permitted

OP = optional

M = mandatory

OP* = one of the options in the identified grouping (gray area) shall be implemented

N/A = not applicable



  1. Power supply requirements

The access control unit and the components of the electronic access control system may be powered either by an integrated or a separate power supply that meets the following requirements and the appropriate requirements in Table 8 for each grade:

  1. The power supply shall be capable of supporting the electronic access control system in all conditions including recharging of the standby power source within the period specified in Table 8.

  2. The power supply may be placed in one or more components of the electronic access control system or in a separate housing.

Table 8 - Power supply requirements

Power supply requirements

Grade assignment

1

2

3

4

1

The access control unit shall be provided with standby power source capable of operating the unit and its accessories under specified full load condition for the period of time indicated. (The loading conditions do not include the monitoring console or access point actuators)

OP

OP

2 h

4 h

2

Following an extended primary power source failure (system shutdown occurred) and restoration of power, rechargeable batteries shall be recharged to 80 % of rated capacity within 24 hours and 100 % of rated capacity within 72 hours

M

M

M

M

3

Either loss of primary power source or restoration shall not adversely affect the normal operation of the system

OP

OP

M

M

4

If standby power source is provided provisions shall be made to monitor for the following conditions: low voltage level and no battery present (single common annunciation for both conditions is acceptable)

OP

OP

M

M

NOTE Abbreviations used in the table are the following:

OP = optional

M = mandatory



7 Environmental and EMC (immunity) requirements

Each component of an electronic access control system is expected to operate correctly in its service environment and to continue to do so for a reasonable time. Access control system equipment is however installed in many very different environments and it would be impractical to test every aspect of the most extreme conceivable environmental conditions and immunity to electromagnetic effects.

The tests and severities identified by this standard are therefore intended to provide a practical series of tests to determine the ability of the equipment to withstand the failure mechanisms most likely to be produced by the environment, in which that type of equipment can be expected to be installed, i.e. the normal service environment.

The applicable environmental conditioning specified in Table 9 shall be conducted in accordance with the methods described in IEC 62599-1.

The applicable electromagnetic compatibility conditioning specified in Table 9 shall be conducted in accordance with the methods described in IEC 62599-2.



Table 9 - Environmental and EMC (immunity) requirements (7 of 2)

Reduced functional test (8.2)

Test

Type

Environmental class 1

Environmental class II

Environmental class III

Environmental class IV

1

B,D,A

Dry heat

Operational

M

M

M

M

2

B.A

Dry heat

Endurance

N/A

N/A

N/A

M

3

B.D.A

Cold

Operational

M

M

M

M

4

B.D.A

Damp heat, steady state

Operational

M

N/A

N/A

N/A

5

B.A

Damp heat, steady state

Endurance

M

M

M

M

6

B.D.A

Temperature change (p)

Operational

M

M

M

M

7

B.D.A

Damp heat, cyclic

Operational

N/A

M

M

M

8

B.A

Damp heat, cyclic

Endurance

N/A

N/A

M

M

9

B.C.A

Water ingress

Operational

M(p)

M(p)

M

M

10

B.A

Sulphur dioxide (S02)

Endurance

N/A

N/A

M

M

11

B.A

Salt mist, cyclic

Endurance

N/A

N/A

N/A

M

12

B.C.A

Impact (f) (m)

Operational

M

M

M

M

13

B,A

Dust

Endurance

N/A

N/A

M

M

14

B.C.A

Free fall (m) (P)

Operational

M

M

M

M

15

B,C,A

Shock(f)

Operational

M

M

M

M

16

B.C.A

Vibration, sinusoidal

Operational

M

M

M

M

17

B.C.A

Mains supply voltage variations

Operational

M

M

M

M

18

B.C.A

Mains supply voltage dips and short interruptions

Operational

M

M

M

M

19

B.C.A

Electrostatic discharge

Operational

M

M

M

M

20

B.C.A

Radiated electromagne tic fields

Operational

M

M

M

M

21

B.C.A

Conducted disturbances induced by electromagne tic fields

Operational

M

M

M

M

22

B.C.A

Fast transient bursts

Operational

M

M

M

M

23

B.C.A

Slow high energy voltage surge

Operational

M

M

M

M

Table 9 (2 of 2)

Note Abbreviations used in the table are the following:

A

after conditioning and recovery period

В

before conditioning

C

monitor during conditioning

D

during conditioning, monitor and conduct reduced functional test as specified in IEC 62599-1

M

mandatory

N/A

not applicable

(0

applicable to fixed equipment

(m)

applicable to moveable equipment

(P)

applicable to portable equipment



  1. Test methods

    1. General conditions

      1. Atmospheric conditions for tests

Unless otherwise stated in a test procedure, the testing shall be carried out after the test specimen has been allowed to stabilize in the standard atmospheric conditions for testing as described in IEC 60068-1 as follows:

  • temperature: (15 to 35) °С;

  • relative humidity: (25 to 75) %;

  • air pressure: (86 to 106) kPa.

If variations in these parameters have a significant effect on a measurement, then such variations should be kept to a minimum during a series of measurements carried out as part of one test on one specimen.

  1. Operating conditions for tests

If a test method requires a specimen to be operational, then the specimen shall be connected to power supply equipment set within the manufacturer’s specified voltage range(s) and shall remain substantially constant throughout the tests. If a test procedure requires a specimen to be monitored to detect any alert signals, then connections shall be made to any necessary ancillary devices to allow the signal to be recognized.

All input signals/messages shall be correctly terminated according to the manufacturer’s instructions.

Outputs shall be connected to loads representative of maximum conditions within the manufacturer's specification.

All transmission paths shall be connected to compatible equipment. All output circuits shall be connected to maximum loads, all within the manufacturer’s specification.

  1. Specimen configuration

The specimen configuration shall include at least one of each type of compatible/supported access point user interfaces, access point actuators or equivalent indicators (with equivalent loads), monitoring console application or equivalent (if provided), configured by the manufacturer to provide the grade dependent operation as defined in Table 2 through Table 8.Any additional equipment necessary to carry out the tests (for example: means to monitor the status of outputs and means to activate inputs) shall be supplied by the manufacturer by agreement with the test house.

The specimens submitted shall be representative of the manufacturer’s normal production with regard to their construction and configuration settings and shall include the claimed options.

  1. Mounting arrangements

The specimen shall be mounted by its normal means of attachment in accordance with the manufacturer’s instructions. If these instructions describe more than one method of mounting then the method considered to be the least favourable shall be chosen for each test.

  1. Tolerances

Unless otherwise stated, the tolerances for the environmental test parameters shall be as given in the basic reference standards for the test (e.g. the relevant part of IEC 60068). If a specific tolerance or deviation limit is not specified in a requirement or test procedure, then a deviation limit of ± 5 % shall be applied.

  1. Provisions for tests

At least one access control system shall be provided for testing compliance with this part of IEC 60839. The specimens submitted shall be representative of the manufacturer’s normal production with regard to their construction and settings and shall include the claimed options.

The requirements listed in 6.2 to 6.9 shall be tested using the access control system/ components connected in accordance with the example system defined in Figure 3 (or part of it as deemed applicable) and having the functions configured by the manufacturer to provide the grade dependent operation as defined in Table 2 to Table 8.

Where individual components are assessed to this standard, e.g. a reader, the tests shall be performed with that component connected to an access control system configured at a minimum to support the operation of that component. Alternatively, it is permitted to test individual components by simulating the functions of an access control system provided there is agreement between the applicant and the test authority that the method of simulation is appropriate to verify applicable functionality for the respective component.

Components of EACS carrying several functionalities described in Clause 6 shall be assessed by selecting the relevant tests described in Clause 8 for the appropriate grade. It is the responsibility of the test house to make this selection in accordance with the functionalities and grade rating claimed by the manufacturer.

  1. Optional functions

This part of IEC 60839 specifies mandatory and optional functionalities. An access control unit or component of an access control system complying with this part of IEC 60839will need to fulfil the requirements of all of the mandatory functions.

If a function is provided that is optional for a particular grade and a claim of compliance is made, it shall meet the applicable requirements for the grade for which compliance is claimed and it shall be tested.

Functionalities additional to the mandatory ones specified in this standard may be included in the electronic access control system providing they do not prevent the correct operation of the mandatory functionalities.



  1. Figure 3 - Example of system test configurationReduced functional test

For specified tests, (for example: environmental tests, EMC tests), it may not be possible or desirable to carry out a full functional test. In these cases a reduced functional test shall be carried out in accordance with the procedure below

  1. Present valid credentials to an access point to create an access granted condition and simulate the portal being opened and closed.

  2. Record the response of the annunciation outputs at the access point and confirm the functionality is as per Table 3, line 1.

  3. Confirm by inspection that an indication of access point locked status is displayed until an access is granted and functionality is as per Table 3, line 3.

  4. Present invalid credentials to an access point to create an access denied condition and record the response of the annunciation outputs and check that the cause of access denial is placed in the event log.

  5. Confirm the functionality is as per Table 3, lines 2, 17 and 18.

  6. Present valid credentials to an access point to create an access granted condition and simulate the portal being opened. Keep the portal open until after the allowed open expiry time and confirm an alert is generated.

  7. Confirm the functionality is as per Table 3, lines 4 and 32.

  8. Close the portal and confirm the functionality is as per Table 3, lines 4 and 26.

  1. Functional tests for access point interface

    1. Object of the test

To demonstrate the ability of the access control unit to comply with the requirements in 6.2 and Table 2.

  1. Principle