08.11.2014 Views

Physical Access Control Systems and FIPS 201 Physical Access ...

Physical Access Control Systems and FIPS 201 Physical Access ...

Physical Access Control Systems and FIPS 201 Physical Access ...

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

PACS Infrastructure: Issues /<br />

Recommendations<br />

C CR CRI<br />

CARD<br />

1 2 3 4 4<br />

CARD<br />

READER<br />

Interface Point 3<br />

Could be combined<br />

CARD<br />

READER<br />

INTERFACE<br />

ACP<br />

Local<br />

Database<br />

ACCESS<br />

CONTROL<br />

PANEL<br />

LAN/WAN<br />

ADMIN or CLIENT<br />

WORKSTATION<br />

Relevant Issue: Lack of security between reader <strong>and</strong> panel provides a<br />

weak link for PACS. RS232, RS485 & current loop are<br />

established asynchronous bi-directional forms of<br />

communications st<strong>and</strong>ards <strong>and</strong> can be made secure<br />

but are not addressed in any current guideline documents<br />

Recommendation: Consider encryption for medium <strong>and</strong>/or high<br />

assurance applications<br />

Relevant Issue: Card reader interface to ACP is typically proprietary<br />

Recommendation: Emphasis should be on CRI to card reader for open<br />

st<strong>and</strong>ards <strong>and</strong> minimum data requirements set for<br />

legacy systems <strong>and</strong> with migration guidelines for<br />

future proofing such as requirements for the GUID<br />

5<br />

LAN/WAN<br />

IDMS<br />

PACS Server/<br />

Database<br />

30

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!