EN 60839-11-31-2017 en Alarm and electronic security systems - Part 11-31 Electronic access control systems - Core interoperability protocol based on Web services.pdf

1、Alarm and electronic security systemsPart 11-31: Electronic access control systems Core interoperability protocol based on Web servicesBS EN 60839-11-31:2017BSI Standards PublicationWB11885_BSI_StandardCovs_2013_AW.indd 1 15/05/2013 15:06National forewordThis British Standard is the UK implementatio

2、n of EN 60839-11-31:2017. Itis identical to IEC 60839-11-31:2016.The UK participation in its preparation was entrusted by TechnicalCommittee GW/1, Electronic security systems, to Subcommittee GW/1/8,Access control.A list of organizations represented on this committee can be obtained onrequest to its

3、 secretary.This publication does not purport to include all the necessary provisions ofa contract. Users are responsible for its correct application. The British Standards Institution 2017.Published by BSI Standards Limited 2017ISBN 978 0 580 87352 2ICS 13.320Compliance with a British Standard canno

4、t confer immunity fromlegal obligations.This British Standard was published under the authority of theStandards Policy and Strategy Committee on 31 March 2017.Amendments/corrigenda issued since publicationDate Text affectedBRITISH STANDARDBS EN 60839-11-31:2017EUROPEAN STANDARD NORME EUROPENNE EUROP

5、ISCHE NORM EN 60839-11-31 March 2017 ICS 13.320 English Version Alarm and electronic security systems - Part 11-31: Electronic access control systems - Core interoperability protocol based on Web services (IEC 60839-11-31:2016) Systmes dalarme et de scurit lectroniques - Partie 11-31: Systmes de con

6、trle daccs lectronique - Protocole de base dinteroprabilit en fonction des services Web (IEC 60839-11-31:2016) Alarmanlagen - Teil 11-31: Elektronische Zutrittskontrollanlagen - IP Interoperabilitt auf Basis von Webservices - Kernspezifikation (IEC 60839-11-31:2016) This European Standard was approv

7、ed by CENELEC on 2016-12-29. CENELEC members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such nation

8、al standards may be obtained on application to the CEN-CENELEC Management Centre or to any CENELEC member. This European Standard exists in three official versions (English, French, German). A version in any other language made by translation under the responsibility of a CENELEC member into its own

9、 language and notified to the CEN-CENELEC Management Centre has the same status as the official versions. CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia,

10、 France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom. European Committee for Electrotechnical Standardization Comit E

11、uropen de Normalisation Electrotechnique Europisches Komitee fr Elektrotechnische Normung CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels 2017 CENELEC All rights of exploitation in any form and by any means reserved worldwide for CENELEC Members. Ref. No. EN 60839-11-31:2017 E BS EN

12、 60839-11-31:2017EN 60839-11-31:2017 2 European foreword The text of document 79/522/CDV, future edition 1 of IEC 60839-11-31, prepared by IEC/TC 79 “Alarm and electronic security systems“ was submitted to the IEC-CENELEC parallel vote and approved by CENELEC as EN 60839-11-31:2017. The following da

13、tes are fixed: latest date by which the document has to be implemented at national level by publication of an identical national standard or by endorsement (dop) 2017-09-29 latest date by which the national standards conflicting with the document have to be withdrawn (dow) 2019-12-29 Attention is dr

14、awn to the possibility that some of the elements of this document may be the subject of patent rights. CENELEC and/or CEN shall not be held responsible for identifying any or all such patent rights. Endorsement notice The text of the International Standard IEC 60839-11-31:2016 was approved by CENELE

15、C as a European Standard without any modification. BS EN 60839-11-31:2017EN 60839-11-31:2017 3 Annex ZA (normative) Normative references to international publications with their corresponding European publications The following documents, in whole or in part, are normatively referenced in this docum

16、ent and are indispensable for its application. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. NOTE 1 When an International Publication has been modified by common modifications, indicated

17、 by (mod), the relevant EN/HD applies. NOTE 2 Up-to-date information on the latest versions of the European Standards listed in this annex is available here: www.cenelec.eu Publication Year Title EN/HD Year IEEE 1003.1 - The Open Group Base Specifications Issue 6, IEEE Std 1003.1, 2004 Edition IEEE

18、802.11 2007 IEEE Standard for Information technology - Telecommunications and information exchange between systems - Local and metropolitan area networks - Specific requirements - Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications - - IEEE 802.1X 2004 Port Base

19、d Network Access Control - - IETF RFC 952 - DoD Internet Host Table Specification - - IETF RFC 1123 1989 Requirements for Internet Hosts - Application and Support - - IETF RFC 2131 - Dynamic Host Configuration Protocol - - IETF RFC 2136 - Dynamic Updates in the Domain Name System (DNS UPDATE) - - IE

20、TF RFC 2246 - The TLS Protocol Version 1.0 - - IETF RFC 2617 - HTTP Authentication: Basic and Digest Access Authentication - - IETF RFC 2986 - PKCS #10: Certification Request Syntax Specification Version 1.7 - - IETF RFC 3268 - Advanced Encryption Standard (AES) Cipher suites for Transport Layer Sec

21、urity (TLS) - - IETF RFC 3315 - Dynamic Host Configuration Protocol for IPv6 (DHCPv6) - - IETF RFC 3927 - Dynamic Configuration of IPv4 Link-Local Addresses - - IETF RFC 4122 - A Universally Unique IDentifier (UUID) URN Namespace - - BS EN 60839-11-31:2017EN 60839-11-31:2017 4 Publication Year Title

22、 EN/HD Year IETF RFC 4514 - Lightweight Directory Access Protocol (LDAP): String Representation of Distinguished Names - - IETF RFC 4702 - The Dynamic Host Configuration Protocol (DHCP) Client Fully Qualified Domain Name (FQDN) Option - - IETF RFC 4861 - Neighbor Discovery for IP version 6 (IPv6) -

23、- IETF RFC 4862 - IPv6 Stateless Address Auto configuration - - ISO/IEC 8824-2 - Information technology - Abstract Syntax Notation One (ASN.1): Information object specification - - ISO/IEC 8824-3 - Information technology - Abstract Syntax Notation One (ASN.1): Constraint specification - - ISO/IEC 88

24、24-4 - Information technology - Abstract Syntax Notation One (ASN.1): Parameterization of ASN.1 specifications - - ISO/IEC 8825-1 - Information technology - ASN.1 encoding rules: Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER) - - OA

25、SIS WS-BaseNotification - Web Services Base Notification 1.3 (WS-BaseNotification) OASIS WS-Topics - Web Services Topics 1.3 (WS-Topics) W3C SOAP-MTOM - SOAP Message Transmission Optimization Mechanism - - W3C SOAP Part 1 - SOAP Version 1.2 - Part 1: Messaging Framework - - W3C WS-Addressing - Web S

26、ervices Addressing 1.0 - Core - - WS-I BP 2.0 - Basic Profile Version 2.0 XMLSOAP WS-Discovery - Web Services Dynamic Discovery (WS-Discovery)”, J. Beatty et al., April 2005 BS EN 60839-11-31:2017 2 IEC 60839-11-31:2016 IEC 2016 CONTENTS FOREWORD . 10 INTRODUCTION . 12 1 Scope 13 2 Normative referen

27、ces 13 3 Terms, definitions and abbreviated terms 15 3.1 Terms and definitions 15 3.2 Abbreviated terms . 16 4 Overview . 17 4.1 General . 17 4.2 Web services 17 4.3 IP configuration . 18 4.4 Device discovery . 18 4.5 Device management . 19 4.5.1 General . 19 4.5.2 Capabilities 19 4.5.3 Network . 19

28、 4.5.4 System 20 4.5.5 Retrieval of system information 20 4.5.6 Firmware upgrade 20 4.5.7 SystemRestore 20 4.5.8 Security . 20 4.6 DeviceIO . 21 4.7 Event handling 21 4.8 Security 21 5 Web services framework 21 5.1 General . 21 5.2 Services overview . 22 5.2.1 General . 22 5.2.2 Services requirement

29、s . 22 5.3 WSDL overview 22 5.4 Namespaces . 23 5.5 Types 24 5.6 Messages . 24 5.7 Operations 25 5.7.1 General . 25 5.7.2 One-way operation type . 26 5.7.3 Request-response operation type 26 5.8 Port types . 27 5.9 Binding . 27 5.10 Ports . 27 5.11 Services 28 5.12 Error handling . 28 5.12.1 General

30、 . 28 5.12.2 Protocol errors . 28 5.12.3 SOAP errors 28 5.13 Security 31 BS EN 60839-11-31:2017IEC 60839-11-31:2016 IEC 2016 3 5.13.1 Authentication 31 5.13.2 User-based access control 31 5.14 String representation 33 5.14.1 Character set . 33 5.14.2 Allowed characters in strings . 33 5.15 Proprieta

31、ry extensions 33 6 IP configuration . 33 7 Device discovery . 34 7.1 General . 34 7.2 Modes of operation . 34 7.3 Discovery definitions . 35 7.3.1 Endpoint reference 35 7.3.2 Hello 35 7.3.3 Probe and probe match . 36 7.3.4 Resolve and resolve match 37 7.3.5 Bye 37 7.3.6 SOAP fault messages 37 8 Devi

32、ce management 37 8.1 General . 37 8.2 Capabilities . 38 8.2.1 Get WSDL URL . 38 8.2.2 Capability exchange 38 8.3 Network 40 8.3.1 Get hostname 40 8.3.2 Set hostname 40 8.3.3 Set hostname from DHCP 41 8.3.4 Get DNS settings . 41 8.3.5 Set DNS settings . 42 8.3.6 Get NTP settings . 42 8.3.7 Set NTP se

33、ttings 43 8.3.8 Get dynamic DNS settings . 43 8.3.9 Set dynamic DNS settings . 44 8.3.10 Get network interface configuration . 44 8.3.11 Set network interface configuration 45 8.3.12 Get network protocols 46 8.3.13 Set network protocols 47 8.3.14 Get default gateway . 47 8.3.15 Set default gateway .

34、 48 8.3.16 Get zero configuration . 48 8.3.17 Set zero configuration 48 8.3.18 Get IP address filter . 49 8.3.19 Set IP address filter . 49 8.3.20 Add an IP filter address . 50 8.3.21 Remove an IP filter address . 50 8.3.22 IEEE 802.11 configuration . 51 8.4 System . 55 8.4.1 Device information . 55

35、 8.4.2 Get system URIs . 55 8.4.3 Backup 56 BS EN 60839-11-31:2017 4 IEC 60839-11-31:2016 IEC 2016 8.4.4 Restore 56 8.4.5 Start system restore 57 8.4.6 Get system date and time 57 8.4.7 Set system date and time 58 8.4.8 Factory default. 59 8.4.9 Firmware upgrade 59 8.4.10 Start firmware upgrade 60 8

36、.4.11 Get system logs . 61 8.4.12 Get support information . 61 8.4.13 Reboot. 62 8.4.14 Get scope parameters . 62 8.4.15 Set scope parameters 62 8.4.16 Add scope parameters . 63 8.4.17 Remove scope parameters 63 8.4.18 Get discovery mode . 64 8.4.19 Set discovery mode . 64 8.5 Security 65 8.5.1 Gene

37、ral . 65 8.5.2 Get access policy 65 8.5.3 Set access policy . 65 8.5.4 Get users . 65 8.5.5 Create users 66 8.5.6 Delete users 67 8.5.7 Set users settings 67 8.5.8 IEEE 802.1X configuration . 68 8.5.9 Create self-signed certificate . 71 8.5.10 Get certificates 71 8.5.11 Get CA certificates 71 8.5.12

38、 Get certificate status 72 8.5.13 Set certificate status 72 8.5.14 Get certificate request . 72 8.5.15 Get client certificate status 73 8.5.16 Set client certificate status . 73 8.5.17 Load device certificate . 74 8.5.18 Load device certificates in conjunction with its private key . 74 8.5.19 Get ce

39、rtificate information request . 75 8.5.20 Load CA certificates 76 8.5.21 Delete certificate . 76 8.5.22 Get remote user . 76 8.5.23 Set remote user . 77 8.5.24 Get endpoint reference 77 8.6 Auxiliary operation 78 8.7 Monitoring events . 78 8.7.1 Processor usage 78 8.7.2 Link status . 79 8.7.3 Upload

40、 status 79 8.7.4 Operating time . 79 8.7.5 Environmental conditions . 81 8.7.6 Battery capacity . 81 BS EN 60839-11-31:2017IEC 60839-11-31:2016 IEC 2016 5 8.7.7 Device management 82 8.8 Service specific fault codes . 82 9 Device I/O . 86 9.1 General . 86 9.2 Relay outputs 86 9.2.1 Overview . 86 9.2.

41、2 Get relay outputs . 86 9.2.3 Get relay output options. 86 9.2.4 Set relay output settings 87 9.2.5 Trigger relay output . 88 9.3 Digital inputs . 88 9.3.1 Overview . 88 9.3.2 GetDigitalInputs . 88 9.4 SerialPorts 89 9.4.1 Overview . 89 9.4.2 GetSerialPorts . 89 9.4.3 GetSerialPortConfiguration 89

42、9.4.4 SetSerialPortConfiguration 89 9.4.5 GetSerialPortConfigurationOptions 90 9.4.6 Send and/or Receive serial command 90 9.5 Capabilities . 92 9.6 Events 92 9.6.1 DigitalInput state change . 92 9.6.2 Relay output trigger . 92 9.7 Service specific fault codes . 93 10 Event handling . 93 10.1 Genera

43、l . 93 10.2 Real-time Pull-Point notification interface 93 10.2.1 General . 93 10.2.2 Create pull point subscription 95 10.2.3 Pull messages . 95 10.2.4 Renew . 96 10.2.5 Unsubscribe 96 10.2.6 Seek 97 10.2.7 Pull point lifecycle 98 10.2.8 Persistent notification storage 98 10.3 Basic notification in

44、terface 98 10.3.1 General . 98 10.3.2 Summary . 98 10.3.3 Requirements 99 10.4 Properties . 100 10.5 Notification structure . 100 10.5.1 General . 100 10.5.2 Notification information 101 10.5.3 Message format . 102 10.5.4 Message description language . 103 10.5.5 Message content filter . 104 10.6 Sy

45、nchronization point 105 10.7 Topic structure 105 BS EN 60839-11-31:2017 6 IEC 60839-11-31:2016 IEC 2016 10.7.1 General . 105 10.7.2 ONVIF topic namespace 106 10.7.3 Topic type information . 106 10.7.4 Topic filter . 107 10.8 Get event properties . 108 10.9 Capabilities . 108 10.10 SOAP fault message

46、s . 109 10.11 Notification example . 110 10.11.1 General . 110 10.11.2 GetEventPropertiesRequest. 110 10.11.3 GetEventPropertiesResponse 110 10.11.4 CreatePullPointSubscription 111 10.11.5 CreatePullPointSubscriptionResponse . 111 10.11.6 PullMessagesRequest . 112 10.11.7 PullMessagesResponse . 112

47、10.11.8 UnsubscribeRequest 113 10.11.9 UnsubscribeResponse . 113 10.12 Persistent storage event:BeginingOfBuffer 114 10.13 Service specific fault codes . 114 11 Security . 114 11.1 General . 114 11.2 Transport level security . 114 11.2.1 General . 114 11.2.2 Supported cipher suites . 115 11.2.3 Serv

48、er authentication . 115 11.2.4 Client authentication 115 11.3 IEEE 802.1X . 116 Annex A (informative) Example for GetServices response with capabilities 117 Annex B (normative) Device IP network Iiterface XML schemata 119 B.1 Device management service WSDL 119 B.2 Device IO service WSDL . 161 B.3 Ev

49、ent service WSDL . 168 B.4 Common schema 179 Bibliography 197 Figure 1 Web services based development principles 18 Figure 2 Sequence diagram for the Real-time Pull-Point notification interface 94 Figure 3 Sequence diagram for the base notification interface . 99 Table 1 Defined namespaces in this document 23 Table 2 Referenced namespaces (with prefix) 24 Table 3 Referenced namespaces (without prefix) . 24 Table 4 Operation description outline used in this documen