36C25622R0094 281300 Physical Access Control System .doc

REPLACE AHU #104 AND DUCTWORK BLDG. 7

DEPARTMENT OF VETERANS AFFAIRS HEALTH CARE SYSTEM-ALEXANDRIA, LA

PROJECT NO.: 502-19-107

section 28 13 00 Physical access control SYStem PART 1 – General

1.1 Description

A.

This section specifies the finishing, installation, connection, testing, and certification of additional components to an existing Physical Access Control System, hereinafter referred to as the PACS.

B.

The scope of work for this contract is limited to the installation of a card reader, a gate/card Reader controller, a single POE switch, fiber patch panel, and all cabling required for a complete and functional system. All programing shall be provided by the VA user group.

The PACS shall have the following features:

1.

Physical Access Control:

a.

Regulating access through gates b.

Credential cards readers 2.

Physical Access Control System (PACS) shall consist of the following components:

a.

Field installed controllers, b Gate/Card reader, c.

Gate operator

d. POE Switch

e. Multimode Fiber Patch Panel C.

Information system supporting network switches and controllers shall comply with FIPS 200 requirements (Minimum Security Requirements for Federal Information and Information Systems) and NIST Special Publication 800-53 (Recommended Security Controls for Federal Information Systems).

D.

Existing System Software: Based on Lenel operating system central-station, workstation operating system, server operating system, and application software.

1.2 RELATED work

A.

Section 01 00 00 - GENERAL REQUIREMENTS. For General Requirements.

B.

Section 07 84 00 - FIRESTOPPING. Requirements for firestopping application and use.

C.

Section 26 05 11 - REQUIREMENTS FOR ELECTRICAL INSTALLATIONS. Requirements for connection of high voltage.

D.

Section 26 05 19 - LOW VOLTAGE ELECTRICAL POWER CONDUCTORS AND CABLES. Requirements for power cables.

E.

Section 26 05 33 – RACEWAYS AND BOXES FOR ELECTRICAL SYSTEMS. Requirements for infrastructure.

F.

Section 26 05 41 - UNDERGROUND ELECTRICAL CONSTRUCTION. Requirements for underground installation of wiring.

G.

Section 28 05 00 - COMMON WORK RESULTS FOR ELECTRONIC SAFETY AND SECURITY. For general requirements that are common to more than one section in Division 28.

H.

Section 27 10 00 - Control, Communication and Signal Wiring. Requirements for conductors and cables.

I.

Section 26 05 26 - GROUNDING AND BONDING FOR ELECTRICAL SYSTEMS. Requirements for grounding of equipment.

J. Section 28 08 00 - COMMISIONING OF ELECTRONIC SAFETY AND SECURITY. For requirements for commissioning, systems readiness checklists, and training.

K.

Section 28 23 00 - VIDEO SURVEILLANCE. Requirements for security camera systems.

1.3 Quality assurance

A.

The Contractor shall be responsible for providing, installing, and the operation of the gate access control to the existing PACS as shown. The Contractor shall also provide certification as required.

B.

The security system will be installed and tested to ensure all components are fully compatible as a system and can be integrated with all associated security subsystems, whether the security system is stand-alone or a part of a complete Information Technology (IT) computer network.

C.

Manufacturers Qualifications: The manufacturer shall regularly and presently produce, as one of the manufacturer's principal products, the equipment and material specified for this project, and shall have manufactured the item for at least three years.

D.

Product Qualifications:

1.

Manufacturer's product shall have been in satisfactory operation, on three installations of similar size and type as this project, for approximately three years.

2.

The Government reserves the right to require the Contractor to submit a list of installations where the products have been in operation before approval.

E.

Contractor Qualifications:

1.

The Contractor or security sub-contractor shall be a licensed security Contractor with a minimum of five (5) years’ experience installing and servicing systems of similar scope and complexity. The Contractor shall be an authorized regional representative of the Security Management System’s (PACS) manufacturer. The Contractor shall provide four (4) current references from clients with systems of similar scope and complexity which became operational in the past three (3) years. At least three (3) of the references shall be utilizing the same system components, in a similar configuration as the proposed system. The references must include a current point of contact, company or agency name, address, telephone number, complete system description, date of completion, and approximate cost of the project. The owner reserves the option to visit the reference sites, with the site owner’s permission and representative, to verify the quality of installation and the references’ level of satisfaction with the system. The Contractor shall provide copies of system manufacturer certification for all technicians. The Contractor shall only utilize factory-trained technicians to install, program, and service the PACS. The Contractor shall only utilize factory-trained technicians to install, terminate and service controller/field panels and reader modules. The technicians shall have a minimum of five (5) continuous years of technical experience in electronic security systems. The Contractor shall have a local service facility. The facility shall be located within 60 miles of the project site. The local facility shall include sufficient spare parts inventory to support the service requirements associated with this contract. The facility shall also include appropriate diagnostic equipment to perform diagnostic procedures. The COR reserves the option of surveying the company’s facility to verify the service inventory and presence of a local service organization.

a.

The Contractor shall provide proof project superintendent with BICSI Certified Commercial Installer Level 1, Level 2, or Technician to provide oversight of the project.

b.

Cable installer must have on staff a Registered Communication Distribution Designer (RCDD) certified by Building Industry Consulting Service International. The staff member shall provide consistent oversight of the project cabling throughout design, layout, installation, termination, and testing.

1.4 SubmittalsS

A.

Submit below items in conjunction with Master Specification Sections 01 33 23, SHOP DRAWINGS, PRODUCT DATA, AND SAMPLES, Section 02 41 00, DEMOLITION, and Section 28 05 00 COMMON WORK RESULTS FOR ELECTRONIC SAFETY AND SECURITY.

B.

Provide certificates of compliance with Section 1.3, Quality Assurance.

C.

Provide a complete and thorough pre-installation and as-built design package in both electronic format and on paper, minimum size 48 x 48 inches (1220 x 1220 millimeters); drawing submittals shall be per the established project schedule.

D.

Shop drawing and as-built packages shall include, but not be limited to:

1.

Index Sheet that shall:

a.

Define each page of the design package to include facility name, building name, floor, and sheet number.

b.

Provide a complete list of all security abbreviations and symbols.

c.

Reference all general notes that are utilized within the design package.

d.

Specification and scope of work pages for all individual security systems that are applicable to the design package that will:

1) Outline all general and job specific work required within the design package.

2) Provide a detailed device identification table outlining device Identification (ID) and use for all security systems equipment utilized in the design package.

2.

Drawing sheets that will be plotted on the individual floor plans or site plans shall:

a.

Include a title block as defined above.

b.

Clearly define the drawings scale in both standard and metric measurements.

c.

Provide device identification and location.

d.

Address all signal and power conduit runs and sizes that are associated with the design of the electronic security system and other security elements (e.g., barriers, etc.).

e.

Identify all pull box and conduit locations, sizes, and fill capacities.

f.

Address all general and drawing specific notes for a particular drawing sheet.

3.

A detailed riser drawing for each applicable security subsystem shall:

a.

Indicate the sequence of operation.

b.

Relationship of integrated components on one diagram.

c.

Include the number, size, identification, and maximum lengths of interconnecting wires.

d.

Wire/cable types shall be defined by a wire and cable schedule. The schedule shall utilize a lettering system that will correspond to the wire/cable it represents (example: A = 18 AWG/1 Pair Twisted, Unshielded). This schedule shall also provide the manufacturer’s name and part number for the wire/cable being installed.

4.

A detailed system drawing for each applicable security system shall:

a.

Clearly identify how all equipment within the system, from main panel to device, shall be laid out and connected.

b.

Provide full detail of all system components wiring from point-to-point.

c.

Identify wire types utilized for connection, interconnection with associate security subsystems.

d.

Show device locations that correspond to the floor plans.

e.

All general and drawing specific notes shall be included with the system drawings.

5.

A detailed schedule for all of the applicable security subsystems shall be included. All schedules shall provide the following information:

a.

Device ID.

b.

Device Location (e.g. site, building, floor, room number, location, and description).

c.

Mounting type (e.g. flush, wall, surface, etc.).

d.

Power supply or circuit breaker and power panel number.

e.

In addition, for the PACS, provide the gate ID, gate type (e.g. wood or metal), and control device (e.g. card reader or biometrics).

6.

Detail and elevation drawings for all devices that define how they were installed and mounted.

E.

Provide manufacturer security system product cut-sheets. Submit for approval at least 30 days prior to commencement of formal testing, a Security System Operational Test Plan. Include procedures for operational testing of each component and security subsystem, to include performance of an integrated system test.

F.

Submit manufacture’s certification of Underwriters Laboratories, Inc. (UL) listing as specified. Provide all maintenance and operating manuals per Section 01 00 00, GENERAL REQUIREMENTS, and Section 28 05 00 COMMON WORK RESULTS FOR ELECTRONIC SAFETY AND SECURITY.

G.

Completed System Readiness Checklists provided by the Commissioning Agent and completed by the contractor, signed by a qualified technician and dated on the date of completion, in accordance with the requirements of Section 28 08 00 COMMISSIONING OF ELECTRONIC SAFETY AND SECURITY SYSTEMS.

H.

General: Submittals shall be in full compliance of the Contract Documents. All submittals shall be provided in accordance with this section. Submittals lacking the breath or depth these requirements will be considered incomplete and rejected. Submissions are considered multidisciplinary and shall require coordination with applicable divisions to provide a complete and comprehensive submission package. Additional general provisions are as follows:

1.

The Contractor shall schedule submittals in order to maintain the project schedule. For coordination drawings refer to Specification Section 01 33 10 - DESIGN SUBMITTAL PROCEDURES, which outline basic submittal requirements and coordination. Section 01 33 10 shall be used in conjunction with this section.

2.

The Contractor shall identify variations from requirements of Contract Documents and state product and system limitations, which may be detrimental to successful performance of the completed work or system.

3.

Each package shall be submitted at one (1) time for each review and include components from applicable disciplines (e.g., electrical work, architectural finishes, door hardware, etc.) which are required to produce an accurate and detailed depiction of the project.

4.

Manufacturer’s information used for submittal shall have pages with items for approval tagged, items on pages shall be identified, and capacities and performance parameters for review shall be clearly marked through use of an arrow or highlighting. Provide space for COR and Contractor review stamps.

5.

Technical Data Drawings shall be in the latest version of AutoCAD®, drawn accurately, and in accordance with VA CAD Standards. FREEHAND SKETCHES OR COPIED VERSIONS OF THE CONSTRUCTION DOCUMENTS WILL NOT BE ACCEPTED. The Contractor shall not reproduce Contract Documents or copy standard information as the basis of the Technical Data Drawings. If departures from the technical data drawings are subsequently deemed necessary by the Contractor, details of such departures and the reasons thereof shall be submitted in writing to the COR for approval before the initiation of work.

6.

Packaging: The Contractor shall organize the submissions according to the following packaging requirements.

a.

Binders: For each manual, provide heavy duty, commercial quality, durable three (3) ring vinyl covered loose leaf binders, sized to receive 8.5 x 11 in paper, and appropriate capacity to accommodate the contents. Provide a clear plastic sleeve on the spine to hold labels describing the contents. Provide pockets in the covers to receive folded sheets.

1) Where two (2) or more binders are necessary to accommodate data, correlate data in each binder into related groupings according to the Project Manual table of contents. Cross-referencing other binders where necessary to provide essential information for communication of proper operation and or maintenance of the component or system.

2) Identify each binder on the front and spine with printed binder title, Project title or name, and subject matter covered. Indicate the volume number if applicable.

b.

Dividers: Provide heavy paper dividers with celluloid tabs for each Section. Mark each tab to indicate contents.

c.

Protective Plastic Jackets: Provide protective transparent plastic jackets designed to enclose diagnostic software for computerized electronic equipment.

d.

Text Material: Where written material is required as part of the manual use the manufacturer's standard printed material, or if not available, specially prepared data, neatly typewritten on 8.5 inches by 11 inches 20-pound white bond paper.

e.

Drawings: Where drawings and/or diagrams are required as part of the manual, provide reinforced punched binder tabs on the drawings, and bind them with the text.

1) Where oversized drawings are necessary, fold the drawings to the same size as the text pages and use as a foldout.

2) If drawings are too large to be used practically as a foldout, place the drawing, neatly folded, in the front or rear pocket of the binder. Insert a type written page indicating the drawing title, description of contents and drawing location at the appropriate location of the manual.

3) Drawings shall be sized to ensure details and text is of legible size. Text shall be no less than 1/16” tall.

f.

Manual Content: In each manual include information specified in the individual Specification section, and the following information for each major component of building equipment and controls:

1) General system or equipment description.

2) Design factors and assumptions.

3) Copies of applicable Shop Drawings and Product Data.

4) System or equipment identification including: manufacturer, model and serial numbers of each component, operating instructions, emergency instructions, wiring diagrams, inspection and test procedures, maintenance procedures and schedules, precautions against improper use and maintenance, repair instructions, sources of required maintenance materials and related services, and a manual index.

g.

Binder Organization: Organize each manual into separate sections for each piece of related equipment. At a minimum, each manual shall contain a title page, table of contents, copies of Product Data supplemented by drawings and written text, and copies of each warranty, bond, certifications, and service Contract issued. Refer to Group I through V Technical Data Package Submittal requirements for required section content.

h.

Title Page: Provide a title page as the first sheet of each manual to include the following information: project name and address, subject matter covered by the manual, name and address of the Project, date of the submittal, name, address, and telephone number of the Contractor, and cross references to related systems in other operating and/or maintenance manuals.

i.

Table of Contents: After the title page, include a type written table of contents for each volume, arranged systematically according to the Project Manual format. Provide a list of each product included, identified by product name or other appropriate identifying symbols, and indexed to the content of the volume. Where more than one (1) volume is required to hold data for a particular system, provide a comprehensive table of contents for all volumes in each volume of the set.

j.

General Information Section: Provide a general information section immediately following the table of contents, listing each product included in the manual, identified by product name. Under each product, list the name, address, and telephone number of the installer and maintenance Contractor. In addition, list a local source for replacement parts and equipment.

k.

Drawings: Provide specially prepared drawings where necessary to supplement the manufacturers printed data to illustrate the relationship between components of equipment or systems, or provide control or flow diagrams. Coordinate these drawings with information contained in Project Record Drawings to assure correct illustration of the completed installation.

l.

Manufacturer’s Data: Where manufacturer's standard printed data is included in the manuals, include only those sheets that are pertinent to the part or product installed. Mark each sheet to identify each part or product included in the installation. Where more than one (1) item in tabular format is included, identify each item, using appropriate references from the Contract Documents. Identify data that is applicable to the installation and delete references to information which is not applicable.

m.

Where manufacturer's standard printed data is not available and the information is necessary for proper operation and maintenance of equipment or systems, or it is necessary to provide additional information to supplement the data included in the manual, prepare written text to provide the necessary information. Organize the text in a consistent format under a separate heading for different procedures. Where necessary, provide a logical sequence of instruction for each operating or maintenance procedure. Where similar or more than one product is listed on the submittal the Contractor shall differentiate by highlighting the specific product to be utilized.

n.

Calculations: Provide a section for circuit and panel calculations.

o.

Loading Sheets: Provide a section for DGP Loading Sheets.

p.

Certifications: Provide section for Contractor’s manufacturer certifications.

7.

Contractor Review: Review submittals prior to transmittal. Determine and verify field measurements and field construction criteria. Verify manufacturer’s catalog numbers and conformance of submittal with requirements of contract documents. Return non-conforming or incomplete submittals with requirements of the work and contract documents. Apply Contractor’s stamp with signature certifying the review and verification of products occurred, and the field dimensions, adjacent construction, and coordination of information is in accordance with the requirements of the contract documents.

8.

Resubmission: Revise and resubmit submittals as required within 15 calendar days of return of submittal. Make resubmissions under procedures specified for initial submittals. Identify all changes made since previous submittal.

9.

Product Data: Within 15 calendar days after execution of the contract, the Contractor shall submit for approval a complete list of all of major products proposed for use. The data shall include name of manufacturer, trade name, model number, the associated contract document section number, paragraph number, and the referenced standards for each listed product.

I.

Group 1 Technical Data Package: Group I Technical Data Package shall be one submittal consisting of the following content and organization. Refer to VA Special Conditions Document for drawing format and content requirements. The data package shall include the following:

1.

Section I - Drawings:

a.

General – Drawings shall conform to VA Special Conditions and CAD Standards Documents. All text associated with security details shall be 1/8” tall and meet VA text standard for AutoCAD™ drawings.

b.

Cover Sheet – Cover sheet shall consist of Project Title and Address, Project Number, Area and Vicinity Maps.

c.

General Information Sheets – General Information Sheets shall consist of General Notes, Abbreviations, Symbols, Wire and Cable Schedule, Project Phasing, and Sheet Index.

d.

Floor Plans – Floor plans shall be produced from the Architectural backgrounds issued in the Construction Documents. The contractor shall receive floor plans from the prime A/E to develop these drawing sets. Security devices shall be placed on drawings in scale. All text associated with security details shall be 1/8” tall and meet VA text standard for AutoCAD™ drawings. Floor plans shall identify the following:

1) security devices by symbol,

2) the associated device point number (derived from the loading sheets),

3) wire & cable types and counts

4) conduit sizing and routing

5) conduit riser systems

6) device and area detail call outs e.

Architectural details – Architectural details shall be produced for each device mounting type (door details for doors with physical access control, reader pedestals and mounts, security panel and power supply details).

f.

Riser Diagrams – Contractor shall provide a riser diagram indicating riser architecture and distribution of the physical access control system throughout the facility (or area in scope).

g.

Block Diagrams – Contractor shall provide a block diagram for the entire system architecture and interconnections with SMS subsystems. Block diagram shall identify SMS subsystem (e.g., physical access control, intrusion detection, closed circuit television, intercom, and other associated subsystems) integration, and data transmission and media conversion methodologies.

h.

Interconnection Diagrams – Contractor shall provide interconnection diagram for each sensor, and device component. Interconnection diagram shall identify termination locations, standard wire detail to include termination schedule. Diagram shall also identify interfaces to other systems such as elevator control, fire alarm systems, and security management systems.

i.

Security Details:

1) Panel Assembly Detail – For each panel assembly, a panel assembly details shall be provided identifying individual panel component size and content.

2) Panel Details – Provide security panel details identify general arrangement of the security system components, backboard size, wire through size and location, and power circuit requirements.

3) Device Mounting Details – Provide mounting detailed drawing for each security device (physical access control system, intrusion detection, video surveillance and assessment, and intercom systems) for each type of wall and ceiling configuration in project. Device details shall include device, mounting detail, wiring and conduit routing.

4) Details of connections to power supplies and grounding

5) Details of surge protection device installation

6) Sensor detection patterns – Each system sensor shall have associated detection patterns.

7) Equipment Rack Detail – For each equipment rack, provide a scaled detail of the equipment rack location and rack space utilization. Use of BISCI wire management standards shall be employed to identify wire management methodology. Transitions between equipment racks shall be shown to include use vertical and horizontal latter rack system.

8) Security Control Room – The contractor shall provide a layout plan for the Security Control Room. The layout plan shall identify all equipment and details associated with the installation.

9) Operator Console – The contractor shall provide a layout plan for the Operator Console. The layout plan shall identify all equipment and details associated with the installation. Equipment room - the contractor shall provide a layout plan for the equipment room. The layout plan shall identify all equipment and details associated with the installation.

10) Equipment Room – Equipment room details shall provide architectural, electrical, mechanical, plumbing, IT/Data and associated equipment and device placements both vertical and horizontally.

j.

Electrical Panel Schedule – Electrical Panel Details shall be provided for all SMS systems electrical power circuits. Panel details shall be provided identifying panel type (Standard, Emergency Power, Emergency/Uninterrupted Power Source, and Uninterrupted Power Source Only), panel location, circuit number, and circuit amperage rating.

4.

Section III - Construction Mock-up: In areas with exposed EMT/Conduit Raceways, contractor shall conceal raceway as much as practical and unobtrusively. In addition, historic significance must be considered to determine installation means and methods for approval by the owner.

J.

FIPS 201 Compliance Certificates

1.

Provide Certificates for all software components and device types utilizing credential verification. Provide certificates for:

a.

Card Readers

Gate card reader controller K.

Approvals will be based on complete submission of manuals together with shop drawings.

L.

Completed System Readiness Checklists provided by the Commissioning Agent and completed by the contractor, signed by a qualified technician and dated on the date of completion, in accordance with the requirements of Section 28 08 00 COMMISSIONING OF ELECTRONIC SAFETY AND SECURITY SYSTEMS.

1.5 applicable publications

A.

The publications listed below (including amendments, addenda, revisions, supplement, and errata) form a part of this specification to the extent referenced. The publications are referenced in the text by the basic designation only.

B.

American National Standards Institute (ANSI)/ Security Industry Association (SIA):

AC-03

Access Control: Access Control Guideline Dye Sublimation Printing Practices for PVC Access Control Cards

TVAC-01

CCTV to Access Control Standard - Message Set for System Integration

C.

American National Standards Institute (ANSI)/ International Code Council (ICC):

A117.1 Standard on Accessible and Usable Buildings and Facilities

D.

Department of Justice American Disability Act (ADA)

28 CFR Part 36 ADA Standards for Accessible Design 2010 E.

Department of Veterans Affairs (VA):

PACS-R:

Physical Access Control System (PACS) Requirements

VA Handbook 0730 Security and Law Enforcement

F.

Government Accountability Office (GAO):

GAO-03-8-02

Security Responsibilities for Federally Owned and Leased Facilities

G.

National Electrical Contractors Association

303-2005 Installing Closed Circuit Television (CCTV) Systems

H.

National Electrical Manufactures Association (NEMA):

250-08 Enclosures for Electrical Equipment (1000 Volts Maximum)

I.

National Fire Protection Association (NFPA):

70-11 National Electrical Code

J.

Underwriters Laboratories, Inc. (UL):

294-99 The Standard of Safety for Access Control System Units

305-08 Standard for Panic Hardware

639-97 Standard for Intrusion-Detection Units

752-05 Standard for Bullet-Resisting Equipment

827-08 Central Station Alarm Services

1076-95 Standards for Proprietary Burglar Alarm Units and Systems

1981-03 Central Station Automation System

2058-05 High Security Electronic Locks

K.

Homeland Security Presidential Directive (HSPD):

HSPD-12

Policy for a Common Identification Standard for Federal Employees and Contractors

L.

Federal Communications Commission (FCC):

(47 CFR 15) Part 15 Limitations on the Use of Wireless Equipment/Systems M.

Federal Information Processing Standards (FIPS):

FIPS-201-1

Personal Identity Verification (PIV) of Federal Employees and Contractors

N.

National Institute of Standards and Technology (NIST):

IR 6887 V2.1

Government Smart Card Interoperability Specification (GSC-IS)

Special Pub 800-63 Electronic Authentication Guideline

Special Pub 800-96 PIV Card Reader Interoperability Guidelines

Special Pub 800-73-3 Interfaces for Personal Identity Verification (4 Parts)

Pt. 1- End Point PIV Card Application Namespace, Data Model & Representation

Pt. 2- PIV Card Application Card Command Interface

Pt. 3- PIV Client Application Programming Interface

Pt. 4- The PIV Transitional Interfaces & Data Model Specification

Special Pub 800-76-1 Biometric Data Specification for Personal Identity Verification

Special Pub 800-78-2 Cryptographic Algorithms and Key Sizes for Personal Identity Verification

Special Pub 800-79-1 Guidelines for the Accreditation of Personal Identity Verification Card Issuers

Special Pub 800-85B-1 DRAFTPIV Data Model Test Guidelines

Special Pub 800-85A-2 PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-3 compliance)

Special Pub 800-96 PIV Card Reader Interoperability Guidelines

Special Pub 800-37 Guide for Applying the Risk Management Framework to Federal Information Systems

Special Pub 800-96 PIV Card Reader Interoperability Guidelines

Special Pub 800-96 PIV Card Reader Interoperability Guidelines

Special Pub 800-104A Scheme for PIV Visual Card Topography

Special Pub 800-116 Recommendation for the Use of PIV Credentials in Physical Access Control Systems (PACS)

O.

Institute of Electrical and Electronics Engineers (IEEE):

C62.41 IEEE Recommended Practice on Surge Voltages in Low-Voltage AC Power Circuits

P.

International Organization for Standardization (ISO):

Identification cards – Physical characteristics

Physical Characteristics for Magnetic Stripe Cards

7816-1 Identification cards - Integrated circuit(s) cards with contacts - Part 1: Physical characteristics

7816-2 Identification cards - Integrated circuit cards - Part 2: Cards with contacts -Dimensions and location of the contacts

7816-3 Identification cards - Integrated circuit cards - Part 3: Cards with contacts - Electrical interface and transmission protocols

7816-4 Identification cards - Integrated circuit cards - Part 11: Personal verification through biometric methods

7816-10 Identification cards - Integrated circuit cards - Part 4: Organization, security and commands for interchange

14443 Identification cards - Contactless integrated circuit cards; Contactless Proximity Cards Operating at 13.56 MHz in up to 5 inches distance

15693 Identification cards -- Contactless integrated circuit cards - Vicinity cards; Contactless Vicinity Cards Operating at 13.56 MHz in up to 50 inches distance

19794 Information technology - Biometric data interchange formats

Q.

Uniform Federal Accessibility Standards (UFAS) 1984

R.

ADA Standards for Accessible Design 2010 S.

Section 508 of the Rehabilitation Act of 1973

1.6 DEFINITIONS

A.

ABA Track: Magnetic stripe that is encoded on track 2, at 75-bpi density in binary-coded decimal format; for example, 5-bit, 16-character set.

B.

Access Control List: A list of (identifier, permissions) pairs associated with a resource or an asset. As an expression of security policy, a person may perform an operation on a resource or asset if and only if the person’s identifier is present in the access control list (explicitly or implicitly), and the permissions in the (identifier, permissions) pair include the permission to perform the requested operation.

C.

Access Control: A function or a system that restricts access to authorized persons only.

D.

API Application Programming Interface

E.

Assurance Level (or E-Authentication Assurance Level): A measure of trust or confidence in an authentication mechanism defined in OMB Memorandum M-04-04 and NIST Special Publication (SP) 800-63, in terms of four levels: [M-04-04]

1.

Level 1: LITTLE OR NO confidence

2.

Level 2: SOME confidence

3.

Level 3: HIGH confidence

4.

Level 4: VERY HIGH confidence

F.

Authentication: A process that establishes the origin of information or determines an entity’s identity. In this publication, authentication often means the performance of a PIV authentication mechanism.

G.

Authenticator: A memory, possession, or quality of a person that can serve as proof of identity, when presented to a verifier of the appropriate kind. For example, passwords, cryptographic keys, and fingerprints are authenticators.

H.

Authorization: A process that associates permission to access a resource or asset with a person and the person’s identifier(s).

I.

BIO or BIO-A: A FIPS 201 authentication mechanism that is implemented by using a Fingerprint data object sent from the PIV Card to the PACS. Note that the short-hand “BIO (-A)” is used throughout the document to represent both BIO and BIO-A authentication mechanisms.

J.

Biometric: An authenticator produced from measurable qualities of a living person.

K.

CAC EP – CAC End Point with end point PIV applet

L.

CAC NG – CAC Next Generation with transitional PIV applet

M.

Card Authentication Key (CAK): A PIV authentication mechanism (or the PIV Card key of the same name) that is implemented by an asymmetric or symmetric key challenge/response protocol. The CAK is an optional mechanism defined in NIST SP 800-73. [SP800-73] NIST strongly recommends that every PIV Card contain an asymmetric CAK and corresponding certificate, and that agencies use the asymmetric CAK protocol, rather than a symmetric CAK protocol, whenever the CAK authentication mechanism is used with PACS.

O.

Central Station: A PC with software designated as the main controlling PC of the PACS. Where this term is presented with initial capital letters, this definition applies.

P.

Controller: An intelligent peripheral control unit that uses a computer for controlling its operation. Where this term is presented with an initial capital letter, this definition applies.

Q.

CPU: Central processing unit.

R.

Credential: Data assigned to an entity and used to identify that entity.

S.

File Server: A PC in a network that stores the programs and data files shared by users.

T.

FIPS Federal Information Processing Standards

U.

FRAC – First Responder Authentication Credential

V.

HSPD Homeland Security Presidential Directive

W.

I/O: Input/Output.

X.

Identifier: A credential card, keypad personal identification number or code, biometric characteristic, or other unique identification entered as data into the entry-control database for the purpose of identifying an individual. Where this term is presented with an initial capital letter, this definition applies.

Y.

IEC International Electrotechnical Commission

Z.

ISO International Organization for Standardization

AA.

KB Kilobyte

BB.

kbit/s Kilobits / second

CC.

LAN: Local area network.

DD.

LED: Light-emitting diode.

EE.

Legacy CAC – Contact only Common Access Card with v1 and v2 applets

FF.

Location: A Location on the network having a PC-to-Controller communications link, with additional Controllers at the Location connected to the PC-to-Controller link with RS-485 communications loop. Where this term is presented with an initial capital letter, this definition applies.

GG.

NIST: National Institute of Standards and Technology

HH.

PACS: Physical Access Control System

II.

PC/SC: Personal Computer / Smart Card

JJ.

PC: Personal computer. This acronym applies to the Central Station, workstations, and file servers.

KK.

PCI Bus: Peripheral component interconnect; a peripheral bus providing a high-speed data path between the CPU and peripheral devices (such as monitor, disk drive, or network).

LL.

PDF: (Portable Document Format.) The file format used by the Acrobat document exchange system software from Adobe.

MM.

PIV: Personal Identification Verification

NN.

PIV-I – PIV Interoperable credential

OO.

PPS: Protocol and Parameters Selection

PP.

RF: Radio frequency.

QQ.

ROM: Read-only memory. ROM data are maintained through losses of power.

RR.

RS-232: A TIA/EIA standard for asynchronous serial data communications between terminal devices. This standard defines a 25-pin connector and certain signal characteristics for interfacing computer equipment.

SS.

RS-485: A TIA/EIA standard for multipoint communications.

TT.

TCP/IP: Transport control protocol/Internet protocol incorporated into Microsoft Windows.

UU.

TPDU: Transport Protocol Data Unit

VV.

TWIC – Transportation Worker Identification Credential

WW.

UPS: Uninterruptible power supply.

XX.

Vcc: Voltage at the Common Collector

YY.

WAN: Wide area network.

ZZ.

WAV: The digital audio format used in Microsoft Windows.

AAA.

Wiegand: Patented magnetic principle that uses specially treated wires embedded in the credential card.

BBB.

Windows: Operating system by Microsoft Corporation.

CCC.

Workstation: A PC with software that is configured for specific limited security system functions.

1.7 COORDINATION

A.

Coordinate arrangement, mounting, and support of electronic safety and security equipment:

1.

To allow maximum possible headroom unless specific mounting heights that reduce headroom are indicated.

2.

To provide for ease of disconnecting the equipment with minimum interference to other installations.

3.

To allow right of way for piping and conduit installed at required slope.

4.

So connecting raceways, cables, wireways, cable trays, and busways will be clear of obstructions and of the working and access space of other equipment.

B.

Coordinate installation of required supporting devices and set sleeves in cast-in-place concrete, masonry walls, and other structural components as they are constructed.

C.

Coordinate location of access panels and doors for electronic safety and security items that are behind finished surfaces or otherwise concealed.

1.8 maintenance & service

A.

General Requirements

1.

The Contractor shall provide all services required and equipment necessary to maintain the entire integrated electronic security system in an operational state as specified for a period of one (1) year after formal written acceptance of the system. The Contractor shall provide all necessary material required for performing scheduled adjustments or other non-scheduled work. Impacts on facility operations shall be minimized when performing scheduled adjustments or other non-scheduled work. See also General Project Requirements.

B.

Description of Work

1.

The scope of work is limited to the installation of a card reader, a gate/card Reader controller, a single POE switch, fiber patch panel, and all cabling required for a complete and functional system. All programing shall be provided by the VA user group.

C.

Personnel

1.

Service personnel shall be certified in the maintenance and repair of the selected type of equipment and qualified to accomplish all work promptly and satisfactorily. The COR shall be advised in writing of the name of the designated service representative, and of any change in personnel. The COR shall be provided copies of system manufacturer certification for the designated service representative.

1.10 EQUIPMENT AND MATERIALS

A.

Materials and equipment furnished shall match existing manufacturer and shall be compatible with the current PACS.

D.

Factory wiring shall be identified on the equipment being furnished and on all wiring diagrams.

1.11 warranty of construction.

A.

Warrant PACS work subject to the Article “Warranty of Construction” of FAR clause 52.246-21.

B.

Demonstration and training shall be performed prior to system acceptance.

1.12 general requirements

A.

For general requirements that are common to more than one section in Division 28 refer to Section 28 05 00, REQUIREMENTS FOR ELECTRONIC SAFETY AND SECURITY INSTALLATIONS.

B.

General requirements applicable to this section include:

1.

General Arrangement of Contract Documents, 2.

Delivery, Handling and Storage, 3.

Project Conditions, 4.

Electrical Power, 5.

Lightning, Power Surge Suppression, and Grounding, 6.

Electronic Components, 7.

Substitute Materials and Equipment, and

8.

Like Items.

part 2 – products

2.1 gENERAL A.

All equipment and materials for the system will be compatible to ensure correct operation as outlined in FIPS 201, March 2006 and HSPD-12.

B.

The security system characteristics listed in this section will serve as a guide in selection of equipment and materials for the PACS gate control access components. If updated or more suitable versions are available, then the Contracting Officer will approve the acceptance of prior to an installation.

C.

PACS gate access control equipment shall meet or exceed all requirements listed below.

D.

A PACS gate access control shall be comprised of, but not limited to, the following components:

1.

Controller 2.

Card Readers (HID Multiclass SE) 3.

Gate Hardware interface

4.

Cables

2.2 CARD READERS

A.

Card Reader shall be HID Multiclass SE. The specified product shall be compatible with the existing PACS.

2.3 Wires and CABLES

A.

Comply with Division 28 Section "CONDUCTORS AND CABLES FOR ELECTRONIC SAFETY AND SECURITY."

B.

PVC-Jacketed, RS-232 Cable: Paired, 2 pairs, No. 22 AWG, stranded (7x30) tinned copper conductors, polypropylene insulation, and individual aluminum foil-polyester tape shielded pairs with 100 percent shield coverage; PVC jacket. Pairs are cabled on common axis with No. 24 AWG, stranded (7x32) tinned copper drain wire.

1.

NFPA 70, Type CM.

2.

Flame Resistance: UL 1581 Vertical Tray.

C.

Plenum-Type, RS-232 Cable: Paired, 2 pairs, No. 22 AWG, stranded (7x30) tinned copper conductors, plastic insulation, and individual aluminum foil-polyester tape shielded pairs with 100 percent shield coverage; plastic jacket. Pairs are cabled on common axis with No. 24 AWG, stranded (7x32) tinned copper drain wire.

1.

NFPA 70, Type CMP.

2.

Flame Resistance: NFPA 262 Flame Test.

D.

RS-485 communications require 2 twisted pairs, with a distance limitation of 4000 feet (1220 m).

E.

PVC-Jacketed, RS-485 Cable: Paired, 2 pairs, twisted, No. 22 AWG, stranded (7x30) tinned copper conductors, PVC insulation, unshielded, PVC jacket, and NFPA 70, Type CMG.

F.

Plenum-Type, RS-485 Cable: Paired, 2 pairs, No. 22 AWG, stranded (7x30) tinned copper conductors, fluorinated-ethylene-propylene insulation, unshielded, and fluorinated-ethylene-propylene jacket.

1.

NFPA 70, Type CMP.

2.

Flame Resistance: NFPA 262 Flame Test.

G.

Multiconductor, Readers and Wiegand Keypads Cables: No. 22 AWG, paired and twisted multiple conductors, stranded (7x30) tinned copper conductors, semirigid PVC insulation, overall aluminum foil-polyester tape shield with 100 percent shield coverage, plus tinned copper braid shield with 65 percent shield coverage, and PVC jacket.

1.

NFPA 70, Type CMG.

2.

Flame Resistance: UL 1581 Vertical Tray.

3.

For TIA/EIA-RS-232 applications.

H.

Paired Input Cable: 1 pair, twisted, No. 22 AWG, stranded (7x30) tinned copper conductors, polypropylene insulation, overall aluminum foil-polyester tape shield with No. 22 AWG, stranded (7x30) tinned copper drain wire, 100 percent shield coverage, and PVC jacket.

1.

NFPA 70, Type CMR.

2.

Flame Resistance: UL 1666 Riser Flame Test.

I.

Plenum-Type, Paired AC Transformer Cable: 1 pair, twisted, No. 18 AWG, stranded (19x30) tinned copper conductors, fluorinated-ethylene-propylene insulation, unshielded, and plastic jacket.

1.

NFPA 70, Type CMP.

2.

Flame Resistance: NFPA 262 Flame Test.

Part 3 - execution

3.1 general

A.

The Contractor shall install all system components and appurtenances in accordance with the manufacturers’ instructions, ANSI C2, and shall furnish all necessary interconnections, services, and adjustments required for a complete and operable system as specified. Control signals, communications, and data transmission lines grounding shall be installed as necessary to preclude ground loops, noise, and surges from affecting system operation. Equipment, materials, installation, workmanship, inspection, and testing shall be in accordance with manufacturers’ recommendations and as modified herein.

B.

Consult the manufacturers’ installation manuals for all wiring diagrams, schematics, physical equipment sizes, etc., before beginning system installation. Refer to the Riser/Connection diagram for all schematic system installation/termination/wiring data.

C.

All equipment shall be attached to walls and ceiling/floor assemblies and shall be held firmly in place (e.g., sensors shall not be supported solely by suspended ceilings). Fasteners and supports shall be adequate to support the required load.

3.2 current site conditions

A.

The Contractor shall visit the site and verify that site conditions are in agreement with the design package. The Contractor shall report all changes to the site or conditions which will affect performance of the system to the Owner in a report as defined in paragraph Group II Technical Data Package. The Contractor shall not take any corrective action without written permission from the Owner.

3.3 examination

A.

Examine pathway elements intended for cables. Check raceways, cable trays, and other elements for compliance with space allocations, installation tolerances, hazards to cable installation, and other conditions affecting installation.

B.

Examine roughing-in for LAN and control cable conduit systems to PCs, Controllers, card readers, and other cable-connected devices to verify actual locations of conduit and back boxes before device installation.

C.

Proceed with installation only after unsatisfactory conditions have been corrected.

3.4 CABLING

A.

Comply with NECA 1, "Good Workmanship in Electrical Contracting."

B.

Install cables and wiring according to requirements in Division 28 Section "Conductors and Cables for Electronic Safety and Security."

C.

Wiring Method: Install wiring in raceway and cable tray except within consoles, cabinets, desks, and counters and except in accessible ceiling spaces and in gypsum board partitions where unenclosed wiring method may be used. Use NRTL-listed plenum cable in environmental air spaces, including plenum ceilings. Conceal raceway and cables except in unfinished spaces.

D.

Install LAN cables using techniques, practices, and methods that are consistent with Category 5E rating of components and that ensure Category 5E performance of completed and linked signal paths, end to end.

E.

Install cables without damaging conductors, shield, or jacket.

F.

Boxes and enclosures containing security system components or cabling, and which are easily accessible to employees or to the public, shall be provided with a lock. Boxes above ceiling level in occupied areas of the building shall not be considered to be accessible. Junction boxes and small device enclosures below ceiling level and easily accessible to employees or the public shall be covered with a suitable cover plate and secured with tamperproof screws.

G.

Install end-of-line resistors at the field device location and not at the Controller or panel location.

3.5

CABLE APPLICATION

A.

Comply with EIA/TIA-569, "Commercial Building Standard for Telecommunications Pathways and Spaces."

B.

Cable application requirements are minimum requirements and shall be exceeded if recommended or required by manufacturer of system hardware.

C.

RS-232 Cabling: Install at a maximum distance of 50 feet (15 m).

D.

RS-485 Cabling: Install at a maximum distance of 4000 feet (1220 m).

E.

Card Readers and Keypads:

1.

Install number of conductor pairs recommended by manufacturer for the functions specified.

2.

Unless manufacturer recommends larger conductors, install No. 22 AWG wire if maximum distance from Controller to the reader is 250 feet (75 m), and install No. 20 AWG wire if maximum distance is 500 feet (150 m).

3.

For greater distances, install "extender" or "repeater" modules recommended by manufacturer of the Controller.

4.

Install minimum No. 18 AWG shielded cable to readers and keypads that draw 50 mA or more.

F.

Install minimum No. 16 AWG cable from Controller to electrically powered locks. Do not exceed [250 feet (75 m)] [500 feet (150 m)] <Insert distance>.

G.

Install minimum No. 18 AWG ac power wire from transformer to Controller, with a maximum distance of [25 feet (8 m)] <Insert distance>.

3.6

GROUNDING

A.

Comply with Division 26 Section "Grounding and Bonding for Electrical Systems."

B.

Comply with IEEE 1100, "Power and Grounding Sensitive Electronic Equipment."

C.

Ground cable shields, drain conductors, and equipment to eliminate shock hazard and to minimize ground loops, common-mode returns, noise pickup, cross talk, and other impairments.

D.

Signal Ground:

1.

Terminal: Locate in each equipment room and wiring closet; isolate from power system and equipment grounding.

2.

Bus: Mount on wall of main equipment room with standoff insulators.

3.

Backbone Cable: Extend from signal ground bus to signal ground terminal in each equipment room and wiring closet.

3.7 Installation

A.

The PACS GATE ACESS CONTROL will be designed, engineered, installed, and tested to ensure all components are fully compatible as a system and can be integrated with all associated security subsystems. The contractor shall install all components in accordance with the manufacturer’s instructions.

B.

Integration with these security subsystems shall be achieved by computer programming or the direct hardwiring of the systems. All programming shall be accomplished by the VA user group.

C.

For programming purposes refer to the manufacturers requirements for correct system operations. Ensure computers being utilized for system integration meet or exceed the minimum system requirements outlined on the systems software packages.

D.

Existing Equipment:

1.

The Contractor shall perform a field survey of existing network system to incorporate the new gate access control into the PACS.

E.

Enclosure Penetrations: All enclosure penetrations shall be from the bottom of the enclosure unless the system design requires penetrations from other directions. Penetrations of interior enclosures involving transitions of conduit from interior to exterior, and all penetrations on exterior enclosures shall be sealed with rubber silicone sealant to preclude the entry of water and will comply with VA Master Specification 07 84 00, Firestopping. The conduit riser shall terminate in a hot-dipped galvanized metal cable terminator.