OSDP: The Only Secure Access Control Option

 Access control technology has come a long way from the very first method of  “Knock, knock!”  “Who’s there?” to  becoming an integrated network application within an intelligent building.  In the early 1970’s access control moved to being electronically controlled, but still somewhat siloed with the primary function to create barriers from unauthorized persons.  With the introduction a smartphone in 2007, security moved to being controlled and monitored on a remote device, connected to the Internet. Access control systems included both mechanical and electronic hardware devices from basic physical keys and door locks spanning to advanced access control systems encompassing IP features such as biometrics.  As we return to our places of work, a new purpose of access control is emerging to include promoting wellness of inhabitants in addition to safety. Today almost every commercial and residential building employ some sort of electronic access control system and is a collaboration between IT and physical security.

According to ANSI/BICSI-007-2020 standard, “Information Communication Technology Design and Implementation Practices for Intelligent Buildings and Premises,” the components of an access control system are classified into the following levels:

• Level 1 – Central equipment processing, recording, software, and database
• Level 2 – Controllers for intelligent field processing (e.g., data gathering panel)
• Level 3 – Peripheral devices (e.g., card reader, lock, door position switch)
• Level 4 – Credentials (e.g., cards, fobs, biometrics, personal identification numbers [PINs], passwords) 

All of these can be integrated into the data network to provide a complete integrated access control system. Connectivity to edge devices, such as peripheral devices allow sensors to monitor and control passage through entryways. These devices are classified into these categories:

• Door contacts—used for monitoring an open or closed door.
• Readers
• Electrified door hardware
• Request-to-exit devices (REX)

COVID-19 also seems to be accelerating the shift in access control to become mobile and cloud-based solutions.  However, the merging of physical and logical access control systems still face many challenges that impede the journey to a truly digital infrastructure. Designing and implementing a network-based access control system includes assuring that the installed infrastructure utilizes the most secure cabling with advanced security and IP communication capabilities, in addition to being able to update and integrate with other devices.  

OSDP as the New Gold Standard for Access Control

The Security Industry Association (SIA) industry introduced the Open Supervised Device Protocol (OSDP) as the essential standard for access control communications to enable digital access control features with advanced data encryption.

It’s easy to see understand why OSDP has become the security industry’s gold standard replacing old Wiegand-based systems and wiring protocols. Prior to OSDP there was a disconnect between the multiple device components including the readers, hardware, door contacts and controllers. OSDP has advanced functionality and provides a roadmap to future access control devices. 

Wiegand dominated the access control industry for decades but hasn’t kept up to today’s requirements for many critical functions such as secure encryption, which is vital to protect against intercepting transmissions between proximity cards and readers.  Wiegand offers only one-way communication, which becomes vulnerable to “sniffers” and hackers, whereas OSDP has bi-directional communications and supports AES-128 encryption, as used in federal government applications.  This prevents hackers from intercepting data transfers. With bi-direction communication, access control systems are continuously monitored to protect against failed, missing, malfunctioning or tampered readers. OSDP utilizes the RS-485 protocol for the cabling and facilitates longer distances and is more robust to mask interference.

There are even more reasons to make a move to OSDP. Wiegand readers require homerun pulls from the control panel to each peripheral device. OSDP has a concept called “multi-drop” that allows devices to daisy chain directly from the controller to the reader and then to a secondary reader and so on.  This reduces the number of ports on the controller, as well as the number of individual cable runs, saving on cabling and installation time.   OSDP requires as few as two pairs compared to 6-12 (or more) conductors used in Wiegand.  In addition, OSDP works with biometric devices and allows for remote configurations and upgrades, while Wiegand employs time-consuming workarounds. 

Composite OSDP Access Control Cable by Paige

 

Connecting with Paige OSDP Cable

Recently Paige introduced a family of OSDP composite cables for today’s most advanced access control systems utilizing the OSDP protocol. The low-capacitance card reader component allows for distances to extend out to 4,000’ versus being limited to 500’ with Wiegand. In addition, to having fewer wires OSDP leverages the bi-directional communication to allow for simplified remote upgrades and configurations not possible with Wiegand systems. Because these are based on OSDP standards, they can easily integrate with other building systems like video or gunshot detection.   

The Paige OSDP reader cable consists of 2 pairs of 24 AWG stranded bare copper cable with an overall tinned copper shield and a low-smoke PVC plenum-rated jacket. Meeting RS-485 communication protocols this cable is available in 1000’ lengths. 

The composite cable consists of four components that are cabled together with an overall yellow jacket. The cable is rated to a 75°C operating temperature and meets UL-444 plenum rating and is available in lengths of 500’ and 1000’. Cables can be spliced together to extend the distance. The individual cable components are color-coded to allow easy application identification. The components include:

• Component 1: Reader - Orange inner jacket, shielded with 24 AWG/2 conductors; 
• Component 2: Contacts - White inner jacket, unshielded with 22 AWG/4 conductors;
• Component 3: REX/Power - Blue inner jacket, shielded 18 AWG/4 conductors;
• Component 4 - Lock Power or AUX: Gray inner jacket, unshielded 18 AWG/4 conductors.

If you want to make sure your access control system is integrated into your intelligent building to deliver the highest security capacities, contact Paige: https://www.paigedatacom.com/osdp

This case study explains how Advanced Network Management (ANM) simplified the IT infrastructure for an International Airport while reducing costs and eliminating potential points of failure.

The Situation

ANM, an IT consultancy based in Albuquerque, NM was asked to participate in a large security system upgrade project at a major airport in the Western US.

ANM’s role was to upgrade the security camera infrastructure of approximately 700 cameras at the airport. Since higher resolution, PTZ cameras were being installed, it would also be necessary to upgrade most of the cabling that supports these new cameras. All the existing IP cameras had been on Cat5 and Cat5E and many of the original cameras at the airport were analog and using coax cabling and copper power conductors.

Like most airports, there was an immense, sprawling layout that would require numerous long-distance cable runs. In many cases, the location where the camera was needed would easily exceed the typical Category 6 cable distance of 100 meters to the nearest IDF or network closet. 

The Solution

John Pace, ANM’s Project Manager and his team considered various options for the airport project. The initial plan that was considered would utilize fiber, along with copper conductors to power remote media converters. However, the client’s IT staff preferred not having new devices placed across the facility and Pace said they “did not want to have a scenario where devices could fail out in the field and would have to be located and dealt with by their staff at a later date.”

John Pace then discovered an alternative solution - GameChanger Cable from Paige. And for this installation, it did in fact, prove to be a game changer. 

With GameChanger Cable, ANM found an easy, fast, and cost-effective way to take networking infrastructure beyond the 100-meter limit. With increased gauge size, carefully designed twisting and specialty materials, GameChanger is optimized for long distance Ethernet applications. It is UL verified to deliver 1 Gb/s performance and PoE+ over 200 meters. UL has also verified it to deliver 10 Mb/s over 850 feet.

As John Pace described, “GameChanger turned out to be a very viable cost-effective alternative to running fiber and media converters, in the instances where the cabling requirements exceeded 328 feet for a network drop.” He added, “The GameChanger was a really good option from a cost-effectiveness standpoint and the ability to eliminate any kind of media converters or signal boosters or anything in-line on these cable runs.”

Click to download the full case study

 John Pace shelved the original plan to use fiber as “obviously that was cost prohibitive compared to the GameChanger.” He added, “In addition to the cost factor with the fiber and the media converters, we avoided adding additional points of failure into the system by being able to use GameChanger. So that was a win-win for us and the airport.”

After successfully using GameChanger Cable in the airport, John Pace feels it can be “a perfect fit” for all kinds of other projects, especially those where “their infrastructure is already established, and their budgets are limited.” He sees it as potentially an ideal solution for the numerous projects they do on school campuses, and he says that GameChanger “will be in our arsenal of solutions to these kinds of long-distance problems.” 

About ANM

ANM is ranked by CRN as one of the fastest growing technology solutions providers in the U.S. It specializes in the fastest-growing areas of IT, including enterprise networking, cloud, remote workforce solutions, collaboration, security, cabling, and audio visual. ANM was founded in 1994 and maintains its headquarters in Albuquerque, NM and has additional locations throughout the western United States.  

Looking to have your work featured in a case study? Leave us a note here.

4 Use Cases for Testing Long Haul Twisted Pair Cabling

Many cable install professionals are under the false impression that a cable tester only needs to verify twisted pair copper up to -- but not exceeding -- 100 meters (328 feet) in length. While it is true that most two- and four-pair 802.3 Ethernet standards do indeed have a maximum distance limitation at the 100-meter mark, there are plenty of other uses and standards that require a tester to verify proper cable operation well beyond 100 meters. This includes cabling projects for the Internet of Things (IoT), Industrial IoT (IIoT) and many surveillance camera deployments over twisted pair copper. In this article, we're going to point out four different real-world use cases where a cable test unit must be capable of validating copper runs up to 1000 meters.

1. Intelligent building control systems

A major part of the IoT movement is to make the buildings we work in smarter. Newly built constructions are receiving intelligent control systems right out of the gate. Older buildings are being retrofitted with similar systems that meter, monitor and automate many building functions. These technologies can be used to better control energy costs of electrical and mechanical systems while also automating previously manual processes. Ultimately, intelligent building controls provide the precise HVAC and lighting/power needs when and where occupants need them while conserving these resources everywhere else. 

The problem is, many intelligent building control system components are dispersed throughout large building campuses. At the same time, they also require constant and fully connected communications. Many leverage the use of serial interfaces over twisted pair copper as a way to allow long haul connections to connect building control components located hundreds or thousands of feet away. Thus, once your business clients begin implementing these types of intelligent systems, expect the need to run and verify twisted-pair cabling well beyond 100 meters.

2. IoT sensors using single pair Ethernet (SPE)

Example 10Base-T1L 1000m (802.3cg) Test

 Example 10Base-T1L 1000m (802.3cg) TestThere are any number of new IoT sensors that are hitting the enterprise market in 2019 and beyond. Examples include sensors that measure temperature, humidity, smoke, pressure, acceleration and chemical levels. Sensors can be used to monitor areas that demand consistent temperature/humidity levels such as in a data center. Other uses are to identify objects/people in proximity to a sensor and send alerts when the object or person moves. Sensors can also be used to rapidly alert building occupants of a dangerous event such as a fire, gas/carbon monoxide/chemical leak or other dangerous environmental situation.

One interesting aspect of these types of sensors is that they typically don’t require even close to 1 Gbps or higher throughput rates that common 802.3 Ethernet data protocols provide. That said, IoT sensor deployments do often require cable runs that extend far beyond common 10/100/1000BASE-T distance limitations of 100 meters. That’s why many are looking at Single pair Ethernet (SPE) for future IoT deployments. SPE is a relatively new standard (IEEE 802.3cg) that allows for cable runs up to 1000 meters using only a single pair of Category 5e cabling or better. Runs can extend this far while also providing data speeds of 10Mbps. 

3. Manufacturing and warehouse automation

Manufacturing plants and warehouses are regularly being revamped with the latest in smart assembly lines and robotics. These technologies help to decrease process times, reduce outages, eliminate waste, and increase safety protections. This is often accomplished using intelligent monitoring, augmented reality and advanced analytics. The problem is, all these platforms, sensors and robots must be centrally connected. This often means that twisted pair cabling used to connect these types of systems will far exceed 100 meters. While this has been the case for manufacturing/warehouse environments for years, the need for long cable runs is only going to increase.

4. CCTV deployments

The demand for closed circuit television (CCTV) and other security control and surveillance systems is growing at a rapid rate. The reason for this is the fact that one can now deploy high-quality and high-definition surveillance cameras at a fraction of the cost compared to even a decade ago. Thus, to ensure the safety of employees, partners and guests within a building or campus – as well as to provide insurance policy protections against robberies, thefts and frauds – CCTV is a wise investment. That said, many CCTV cameras must be installed at considerable distances away from the central network. Cameras are often positioned at remote gates and entrances, building outposts and on rooftops. Thus, many manufacturers offer the ability to stream CCTV feeds over twisted pair cabling up to 1000 meters in length.

Is your test equipment capable of verifying operational status of cabling up to 1000 meters?

Cable test equipment manufactures only guarantee their test results up to a certain distance limitation. In many cases, this distance is far below what you might need given today’s demand for long haul twisted pair runs. In order to prepare for the increase in long haul runs, be sure to have test tool like the AEM CV100 which can verify twisted pair runs up to 1 KM in length. The CV100’s standard autotest supports testing twisted-pair cabling up to 600 meters. If you require testing beyond this length, there is a special test mode for cables that range between 500 and 1000 meters.

Long Cable Setting for 500m to 1km Testing

 Showing GamerChanger Cable Type inSetup

Many field test units on the market today aren’t capable of testing this far. Considering the growing need for building control systems IoT sensors, IIoT and CCTV long cable runs, long haul verification tests are definitely a function of the CV100 test tool that you’ll put to good use.