SIPORT convenience like never before. Managing global access control and time and attendance processes simply, flexibly and reliably

Transcription

1 SIPORT convenience like never before Managing global access control and time and attendance processes simply, flexibly and reliably

2 Added security and convenience the new SIPORT system Securing today s business landscape involves a strategic methodology and proactive approach to stay ahead of possible risk. Security practitioners require robust, future-proof solutions that are able to be flexibly deployed as security requirements evolve. Siemens addresses these challenges with the new SIPORT system. SIPORT is a comprehensive and modular system with the highest level of reliability for access control and time management. This user-friendly solution allows employees and visitors to move through a building or building complex with ease while reliably keeping unauthorized persons out in real time. We have also added a new intuitive user interface to SIPORT, which can be configured individually to suit your needs. This means you can use all SIPORT functions with greater ease and keep an eye on your business at all times. 2

3 Security and flexibility with real-time communication At a technical level, real-time communication means a door control unit can record 100 events per second while a real-time server can process up to 100,000 events per second. An access control system with a real-time dimension also allows people to be located or tracked on the premises or throughout an entire building. Such tracking data can either be retrieved permanently or on an event-controlled basis in real time. From a security perspective, real-time communication primarily means reliable up-to-date data with the option of rapid intervention when needed. Networkable across the globe SIPORT can be used to solve a variety of access control issues for businesses either locally for a single location or, leveraging the existing network infrastructure, for numerous networked locations across continents and time zones. Open and extendable Thanks to its highly modular design, SIPORT efficiently supports any organization s business security processes. With its open system architecture, this access control system can be integrated seamlessly into existing computing environments and can be extended to fulfill ever increasing requirements. Extensive integration options Using advanced management systems, important alarm messages from SIPORT can be consolidated into a unified user interface. This results in improved operability and greater transparency for users. Reliable and secure All access-related data is saved redundantly and at different locations on the door control unit or on the server. In case of a network failure, the local door control units or readers ensure smooth access control. SIPORT supports the use of a single corporate access card for global use, which also can be used for PC login. All communication channels from the reader to the server are encrypted, delivering an end-to-end solution. Modular and scalable With its modular design, SIPORT can be extended in size and functionality as your requirements grow. The number of ID cards (up to one million) and door control units or ID readers (up to 8,192 per server) can be extended as needed without extra effort. Highlights Verified online access control system thanks to RTC (real-time communication) Interfaces to IT, video surveillance, intrusion detection and alarm systems Can be adapted to individual needs, organizational structures and work processes Flexible time tracking system with interfaces to wage and salary programs 3

4 Convenient operation thanks to SIPORT s new user interface. The home page shows everything at a glance. The new SIPORT is browser-independent and therefore suitable for tablets. Core features: secure, convenient and efficient All SIPORT 3.0 software modules have a uniform, intuitive and easy-to-operate user interface. Unique, new level of user convenience The new dashboard view allows for fast and intuitive access to the system functions. The new SIPORT is browser-independent, so it doesn t matter whether you are using a desktop or the touch function on your tablet SIPORT offers unprecedented flexibility and convenience. Moreover, multiple users can log on to the same workstation using their preferred language to work effectively. Multilingual login is available for English, German and French, while other languages can be added on request. Message texts can also be created in a bilingual format, for example in English and Arabic, supporting the needs of global organizations with multilingual employees. Secure user management Access to system functions and databases is password-protected. Individual authorizations can be assigned for operating and accessing functions and information. With several user login options SIPORT offers truly flexible and secure user management functionality. Login options include SIPORT s own login, Windows login in accordance with Windows login policies, PKI login or login with LDAP support*. Efficient master data management Access rights can be changed within seconds using the intuitive interface. Staff data, badge numbers, access profiles and validity data can be assigned with ease. Changes take effect immediately across the whole system. Changing a number of selected master records can be done with a single command, saving time and effort. Identity management As the basis for an identity management system, an active directory enables management of user and member profiles, digital certificates for public key infrastructures, authorization information, and access privileges, in order to provide protected access to data, network resources or distributed services. * Import from directories that can be accessed via an LDAP connection 4

5 Multi-tenant functionality: different companies in the same building can use the same SIPORT system. Straightforward management of access rights Managing large numbers of access profiles is a complex task. SIPORT profile management helps users create and allocate access authorizations quickly and easily. Existing profiles can be searched, listed and changed according to various criteria. These filters offer real-time transparency on building occupants and assigned access privileges. This can be tracked using the readers in a given area. In addition, the integrated electronic door locks and cylinders from different manufacturers can be managed like card readers. Traceability of events and alarms SIPORT logs all events and alarms such as authorized and denied accesses, attendance times, sabotage alarms. This data can be easily retrieved for immediate use or exported in various reporting formats for further processing. Multi-tenant functionality Multi-tenant or high-rise buildings require variable security capabilities at the tenant level. Company-specific needs must be managed on an individual basis while common areas must be accessible by multiple tenants. SIPORT allows all tenants to manage their own data so they only receive the messages (e.g. alarms) which are allocated to them. Other tenants have no access to this information and cannot view data other than their own. SIPORT offers a virtually unlimited range of configuration options for property owners or managers. A system that may be designed for a single floor today can be expanded tomorrow to cover an entire building or even multiple locations worldwide. Highlights Secure and efficient management: changes are effective immediately Intuitive allocation of profiles and permissions Flexible thanks to tenant functionality with expansion options Capable of individual customization with freely programmable routines Exceptional user convenience thanks to multilingual support Search options that can be configured as needed Definition of exception days as well as regional or local holidays 5

6 Cardholder Management Software extensions: versatile and customer-oriented The core SIPORT software can be extended with a wide range of additional modules. ID personalization (SIPORT SCEM) SIPORT features can be extended by using SIPORT s MIFARE smart card encoding module for personalizing card chips. MIFARE chips* in ID cards can be personalized via the read/write module integrated in card printers or via an external MIFARE read/write module MIFARE key management for multiple keys and definable key sets MIFARE storage management Assignment of a random ID changes the uniform ID number (UID) permanently Key diversification: permanent modification of the encryption key derived from the master key ID card creation (SIPORT VAS) SIPORT has an integrated ID card creation system which supports the production, design, management and personalization of ISO ID cards. Special card printers personalize ID cards in a single step. Presence screen (SIPORT Display) The presence screen provides an overview of who is present or absent as well as the current location of individuals. SIPORT Display offers an ideal, intuitive working environment for reception desks, switchboards or security services. Site visualization (SIPORT Graphic) SIPORT Graphic allows graphical representation of alarm situations, door and contact states or malfunctions in real time. In case of an event, the site plan opens automatically, and the current situation is pinpointed using a different color. Certain functions such as opening, locking or blocking of doors can be manually triggered from the graphic. In addition, it is possible to control video surveillance cameras and to display the video images they capture. 6 * MIFARE Classic, MIFARE DESFireEv1

7 Locations Pre-registration via Web Access control database Human resources Identity management Access control ID card creation Web modules Visitor management Emergency exits Electronic locking systems Turnstile Elevator Access route control Biometrics Video surveillance SIPORT allows assignment of different authorizations, such as access to defined areas, parking lot access, workstation assignment, etc. The authorizations can also be defined for a time-limited period. Web visitor administration (SIPORT Web Visit) The SIPORT Web Visit program allows pre-registration of visitors from any PC connected to the Internet or Intranet. Visitor management (SIPORT Visit) SIPORT Visit is used for recording visitor data and issuing visitor IDs. This software extension supports additional functions such as visitor label printing or picture taking. Cardholder data administration over the Internet (SIPORT Web Cardholder) SIPORT Web Cardholder is a web-based program for administration of personal data. Door management (SIPORT WebDoor) SIPORT WebDoor facilitates web-based control and monitoring of doors and displays status information, various control functions and time planners. Host connection The SIPORT host interface connects the SIPORT system to a parent system such as SAP to enable the import of master data from any database via an ODBC interface. This is used to maintain and exchange personal and attendance data with other systems. Suitability for pharmaceutical solutions SIPORT meets the requirements of 21 CFR Part 11 and various other international Good Manufacturing Practice (GMP) guide lines. This allows for consistent traceability of changes as well as the definition and inspection of procedures upon access to relevant building locations. Interlocking The interlocking function can lock certain rooms for a specific time period. Access rights for the various zones, locking time and locking reason are all stored in the employee s access profile. This is used in the pharmaceutical industry to prevent cross-contamination. SIPORT Web Audit Trail This alarm and logbook administration application allows the user to access SIPORT master data via the Web from an operator workstation. Image comparison SIPORT allows a saved image to be compared with a live image. Moreover, a number of security checks can be performed at the same time from one workstation. 7

8 Visitor Management New visit New visitor Room reservation: direct, fast and convenient SIPORT capable of even more To maximize the efficiency of workflows and infrastructures, SIPORT integrates seamlessly with other platforms and sources of information. Integration with other systems SIPORT can be integrated both in security and building management systems. SIPORT supports the exchange of status information and messages as well as triggering of actions in both directions. Integrating SIPORT into Desigo Insight enables interaction between the access control system and the building management system. This makes it possible to save energy because SIPORT can restrict or turn off lighting, heating and air conditioning in unoccupied areas. DVR video management SIPORT and video management go hand in hand. Functions such as alarm output and recording, assignment of images/videos to an alarm with playback of recordings are standard on the SIPORT system. The intuitive SIPORT Graphic module makes it easy to assign cameras to monitors and to control camera functions. IP cameras SIPORT offers complete integration of IP cameras to record image sequences when alarms or notifications occur. Recordings can be readily retrieved and viewed at any time via the respective logfile entry. Room reservation Even complex reservations can be managed efficiently in the system. Users are able to log in via the self-service lobby to reserve individual rooms, make serial bookings, select seating, order catering, organize the opening and closing of demountable walls and even assign specific access privileges. With real-time management allowing for ad hoc reservations, users are able to access available rooms directly, quickly and conveniently. Available areas are assigned and used efficiently, reducing costs and optimizing operational processes. 8

9 SIPORT offers automatic license plate recognition. The 3D sensor solution detects individuals and prevents access by unauthorized persons. Automatic license plate recognition License plates can serve as access IDs for entering parking facilities or secured areas. Domestic and international license plates are able to be recognized in SIPORT, with recorded events securely logged and readily retrievable. This functionality supports efficient parking management and visitor vehicle registration processes. 3D sensors for recording individuals In specific environments, the deployment of video systems to protect people and infrastructure is inadequate or restricted because of privacy concerns. SIPORT supports the use of 3D sensor solutions to count or isolate individuals with anonymous recording. ODBC interface A master data interface can be readily parameterized for databases supporting ODBC, for both manual and scheduled execution. Standard assignment of any data fields is possible. Highlights Energy and cost savings thanks to SIPORT integration in the building management system Convenient vehicle access control thanks to automatic license plate recognition Integration of other systems via ODBC and additional interfaces 9

10 Near Field Communication (NFC) with smartphone as additional identifying attribute (IDM) Biometric authentication, for example palm vein recognition Readers offer a range of options SIPORT readers offer unmatched versatility, high performance and impressive design. With a wide selection of reader types on offer, the SIPORT family supports flexible implementation in large and small businesses. Proximity readers Contactless readers are operated using proximity ID cards, key tags or other kinds of transponders. Encrypted access data is transferred wirelessly from the ID card to the reader. Reader with keypad To ensure increased security, users are required to enter a personal code in addition to carrying their proximity card. Near Field Communication (NFC) Integration of NFC technologies offers considerable potential for the future, for example in visitor administration. Businesses can use the SIPORT NFC security software to transfer autho rizations for any number of doors to an NFC mobile phone. This mobile phone can then be used to open doors or gates, with the NFC acting as the key. Access readers for switch product ranges and intercom systems Card readers can also be integrated into intercom systems or switch product ranges (such as DELTA from Siemens), allowing both regular employees and occasional visitors to use a single interface. Recognition of biometric characteristics for a higher security level SIPORT supports the use of biometric characteristics for access control. Options include fingerprint recording as well as facial or palm vein recognition. Electronic door locks and cylinders SIPORT offers seamless configuration and operation with shared authorization management (for both online readers and offline electronic locks and cylinders). Uploading of historical information for offline locks and cylinders into the SIPORT logbooks provides end-to-end traceability of activities and changes. The door position can also be transmitted via a wireless hub. 10

11 Access privileges End-to-end encryption ensures high standard of security. Authorization: simple and yet secure Convenient RFID cards allow for contactless operation of readers. Combo ID cards offer even greater convenience; they use two integrated technologies (e.g. UHF and MHz) for various functions such as ve hicle access and access control. Greater security Writable IDs offer the option of dividing the various applications among several segments or sectors so the responsibility and access protection for the individual applications remain separated. Chip cards can also be used for secure data storage. All transmissions from card to reader to server are encrypted, ensuring a high level of security. Verification with additional PIN entry or recognition of biometric characteristics (finger, face, iris, veins) increases security even further. Multifunctional The multifunctionality of smart cards ranges from building access and computer access to logging into software applications as well as cashless payment in company cafeterias, vending machine payment, time and attendance recording and more. With fast and secure data storage, writable memory chip cards can be used as data media (access authorizations, biometric templates, etc.). This means that users are able to carry their information and authorizations right on their card. Highlights Greater security with writable IDs, PIN entry and photographs printed on cards Smart cards can be used for multiple functions such as physical access, computer access or payment in company cafeteria, etc. The writable memory chip allows information and au thorizations to be carried with the card 11

12 Managing different working time models efficiently, e.g. in production, IT or logistics Easy and efficient time recording and management SIPORT time management controls and manages flexible working time models, including automatic time recording, convenient time account administration and individual evaluation options for various types of flextime. All time and attendance data can be collected and used for payroll and time recording and attendance issues. Time recording and management The user-friendly system solution allows clock-in times to be recorded locally and evaluated centrally including monthly work schedule, flextime, shift work, vacation or sick days. Time schedules can be used for targeted processing, planning, evaluation and exporting to a parent system for payroll processing. Special contactless readers, state-of-theart card technologies and Web terminals for mobile applications make recording fast and easy. SIPORT time management can manage up to 50,000 persons securely and conveniently. Integration between SAP R/3 and SIPORT for bidirectional data exchange The SIPORT host interface is an SAP-certified interface for data exchange between SAP R/3 and SIPORT time management. Personnel data can be maintained in the SAP system and transferred to SIPORT. Conversely, time data is transferred via the interface from SIPORT to SAP R/3 and made available for balance calculation and payroll processing. Easy implementation of customerspecific requirements Programmable tools (time routines) allow for simple and flexible implementation and calculation of customer-specific requirements, such as special break times, vacation policies or exception days. 12

13 Whether Johannesburg, Paris or Singapore SIPORT provides access worldwide. Automated efficient processes via workflow module The workflow module is an efficient portal solution with self-service capabilities for employees within the time management system. Vacation requests, absences or corrections are automatically forwarded via the Web, according to predefined authorization profiles. Worldwide access from any location using the Web terminal Employees can use the SIPORT Web client to enter and change their work times and query their time account from a standard Web browser anytime and anywhere without any additional software. Hosting SIPORT also offers hosted services to ensure maximum availability of your time management system as well as cost transparency. All of the required IT resources are managed by a professional team. The software with all your custom ap plications is deployed, maintained and serviced in our data center. Our state-of-the-art security and operating resources guarantee the highest level of reliability. Only authenticated users are given access to this information. Our Siemens Security Network (SiSeNet) is a broadband security network which is available throughout Germany and meets the highest security requirements. The associated cost transparency and unburdening of your IT ensure sustainable return on investment (ROI). Highlights Certified interface between SIPORT and SAP R3 Implementation of customerspecific requirements (like vacation policies or break times) Workflow module for efficient processes Hosting for cost transparency and cost savings 13

14 The ideal solution for any sector Since each industry has its own unique requirements, the flexibility, robustness and scalability of SIPORT ensure implementation in nearly every environment. The advanced functionality of SIPORT helps organizations overcome a large range of day-to-day challenges. Pharmaceutical industry Specific environmental conditions are a prerequisite to achieve sustainable success in the pharmaceutical industry. SIPORT complies with the 21 CFR Part 11 regulation, ideally suited for pharmaceutical solutions. An integrated security system incorporating SIPORT prevents unauthorized entry and reduces the possible risk of contamination or product tampering, protecting valuable assets and investments while controlling core business processes. Airports Since SIPORT is designed for large-scale facilities, it is the perfect choice for airports. It is a complete access control solution which can be combined with video surveillance systems. The simple-to-use interface ensures that airport security staff can easily and effectively monitor all systems at all times. With many different stakeholders (ground personnel, flight crew, cleaning and security staff, etc.) working under one roof, it is essential that each person is assigned the correct credentials. With SIPORT authorization management, staff can be assigned individual rights so that they can access several areas using a single card. Use of biometrics, for example vein readers combined with PIN entry, allows critical areas of the airport to be protected. Office complexes SIPORT includes multi-tenant functionality. This means a number of businesses can rely on the same access control system but use it completely independently of one another within their own premises. This is particularly useful in environments where access has to be secured not just for single businesses but also for common areas. Typical examples are office and industrial complexes, business parks, retail outlets but also residential units. Third-party systems are easy to integrate, and the use of different card technologies offers a great deal of flexibility. SIPORT can restrict access to certain areas, leaving other areas, such as the car park, open to everyone. 14

15 Hospitals Striking the right balance between security and accessibility is critical in hospital environments. Large traffic flows typically associated with a hospital along with the combination of low- and highsecurity areas make a flexible and userfriendly system like SIPORT the obvious choice. Each hospital has highly sensitive areas that require stringent security restric tions. SIPORT offers a wide range of options, from the use of biometric characteristics for access control to RFIDbased people tracking. This allows each area to be customized as needed. Manufacturing operations SIPORT helps production facilities meet their security requirements, prevent anti-passback and monitor head counts. SIPORT Graphic provides a complete graphical overview of alarm situations, door and contact status as well as malfunctions. In addition, security personnel can trigger specific functions such as opening, locking or blocking doors and gates. Universities SIPORT is ideal for access control in universities as it can easily manage access to multiple buildings with different security requirements on small or large campuses. The system has the ability to store and process large amounts of cardholder data so nothing is lost. During particu larly busy times, such as enrollment periods, the system can assign access credentials, issue cards and print large numbers of cards while simultaneously synchronizing the data with the university s student database. 15

16 Intelligent charging infrastructure solution: SIPLUS ECC combined with SIPORT Perhaps the use of electric cars is important for your business as you are moving into the future. How can the necessary charging infrastructure be developed cost-efficiently? If SIPORT is already deployed, you can easily achieve this using SIPLUS ECC. It establishes communication between your access control system and charging infrastructure, controls and monitors the charging points and links them with the existing SIPORT infrastructure. You can use your ID card to authenticate yourself for the charging process and then start charging if you have the appropriate authorization in SIPORT. Authorizations are managed through access permissions. Wind farms Wind farms are typically located in areas with harsh environmental conditions. There are enormous fluctuations in temperature and humidity, and equipment is subject to strong vibrations and dust on an ongoing basis. The main focus in any wind farm is on smooth operation without disruptions. A robust and reliable access control system like SIPORT can handle the environmental conditions in offshore wind farms with the help of special equipment, such as saltwater-proof readers. SIPORT keeps out unauthorized persons by allowing access to wind turbines or even the offshore platform itself only to users with the appropriate authorization. 16

17 SIPORT: the details are impressive More than just access control SIPORT is much more than simply an access control system. Along with the relevant hardware extensions, SIPORT allows you to manage a range of tasks efficiently and securely. Versatile solution The huge variety of functions SIPORT offers can be used in many areas of your business from vehicle access to the company s premises, the underground parking garage, the reception area or the conference center, even the charging station for electric cars. SIPORT can support single stand-alone buildings and expand to campuses and multi-site facilities both nationally and internationally. SIPORT meets the ever-changing needs of businesses no matter where they are located. Finger on the pulse All information in the system is completely up to date and available anywhere and anytime thanks to real-time communication. SIPORT provides you with all the information you need at a glance. 1 Management of building access 2 ID card production 3 Visitor management 4 Vehicle access control to premises 5 Elevator control 6 Access control for individual areas 7 Electronic locking systems 8 Meeting room reservation 9 Access control server 10 Parking authorization 11 Electric car charging 17

18 SIPORT ticks all the boxes Check for yourself: SIPORT is an extremely secure and flexible system for access control, authorizations and associated procedures, such as time management, for a variety of sectors including those with multiple locations across the globe. No matter what industry you are in, SIPORT will meet your needs. Sectors, markets, companies SIPORT can be used in any sector, but is especially suitable for International companies Corporate customers Classic buildings Office complexes Hospitals Financial services Universities Chemical industry Pharmaceutical industry Critical infrastructures Energy, oil and gas industry Airports and seaports Data centers Global access control solutions for sites worldwide Most international corporations manage access control for their individual sites from a central location to avoid weak spots from the outset. SIPORT supports with a robust yet flexible networked solution: Multi-site and multi-server architecture: one central server interacts with branch servers in each location. Master data management can be either centralized (main server receives master data from SAP and distributes it to the branch servers) or decentralized. Centralized or decentralized ID card creation and profile management. Unlimited number of profiles, hierarchies and time-based rights (e.g. for cleaning staff). Up to 1 million users configurable. Multi-tenant functionality: branches, affiliated companies or subtenants can use the same access control system at the same time but completely independently of one another. Multi-language system: users can select their preferred language. One card for all purposes Access control cards can be used for additional services and functions. The functionalities offered by SIPORT include: Official ID card with picture and name to identify yourself at the reception desk of each individual branch. The card can be used to access sensitive software applications, data or encrypted s, initiate processes as well as authenticate the owner and digitally sign electronic documents. Cashless payment of cafeteria or vending machines purchases, either through online booking or using a prepaid balance. Access to (and payment for) parking spaces; control of elevator usage (access to authorized floors only). Special hazards Due to specific hazards, many industries maintain stringent security and safety policies. While access control can ensure that only people with the necessary skills and knowledge access these areas, SIPORT can improve safety and security even further: Connection to explosion-proof ID readers in highly inflammable environments Creation of evacuation lists Control of interlocked doors and air locks 18

19 Process continuity Protecting business continuity is a crucial issue, and security has become an integral part of any company s processes. SIPORT ensures continuity in a number of ways: Comprehensive access control and time and attendance management features maintain the seamless exchange of data between different systems, ensuring consistency between employment status and access rights as well as the accurate recording of overtime, absences, etc. Web-based time recording via virtual readers using personal computers at the workplace. Online connections to other technologies (video, IT, intrusion and fire detection, emergency exits, building comfort, etc.) allow interdependencies and cross-platform routines (presence-based lighting and climate controls, automatic activation and deactivation of detectors, alarm transfer to pagers, etc.). Import/export functions allow for integration of physical security facilities with other systems, such as facility management, staff planning, etc. Enforcement of workflow policies. High security requirements SIPORT meets the strictest security requirements in many respects. The system functions both as a real-time online solution and, in the case of server failure, as an offline system Web-based time recording via virtual readers using personal computers at the workplace. Encrypted data transfer from the card to the SIPORT host server over the entire transmission path. High availability of the SIPORT system using a cluster server solution (fail-safe server architecture). Control of third-party access solutions, e.g. turnstiles, for securing critical areas such as server rooms, cash handling areas, research facilities or security control rooms. Biometric verification using fingerprint, facial or vein recognition as well as iris comparison. Video recordings linked directly to the access control system show exactly who entered the room, at what time and what they did once in the room. All data is safely archived for immediate review at any time. 19

20 Siemens Switzerland Ltd Building Technologies Division International Headquarters Gubelstrasse Zug Switzerland Tel The information in this document contains general descriptions of technical options available, which do not always have to be present in individual cases. The required features should therefore be specified in each individual case at the time of closing the contract. The document contains a general product overview. Availability can vary by country. For detailed product information, please contact the company office or authorized partners. Siemens Switzerland Ltd, 2014 Our world is undergoing changes that force us to think in new ways: demographic change, urbanization, global warming and resource shortages. Maximum efficiency has top priority and not only where energy is concerned. In addition, we need to increase comfort for the well-being of users. Also, our need for safety and security is constantly growing. For our customers, success is defined by how well they manage these challenges. Siemens has the answers. We are the trusted technology partner for energy-efficient, safe and secure buildings and infrastructure.