CLC/TS 50136-10:2022

Alarm systems - Alarm transmission systems and equipment - Part 10: Requirements for remote access

This document specifies minimum requirements for secure connection and session for remote access to one or more alarm systems, for example fire safety systems, intruder and hold-up alarm systems, electronic access control systems, external perimeter security systems, video surveillance systems, and social alarm systems. This document specifies the requirements for the performance, reliability, integrity, and security characteristics of a Remote Access Infrastructure. This document specifies the requirements for a Remote Access Infrastructure between a Remote Access Client and an alarm system at the supervised premises and may be either integrated as part of the ATS or a separate infrastructure. In either case, the requirements of this European technical specification should apply. This document does not cover the provision of functions and features on the alarm system.

Alarmanlagen — Alarmübertragungsanlagen und –einrichtungen — Teil 10: Anforderungen für den Fernzugriff

Alarmni sistemi - Sistemi in oprema za prenos alarma - 10. del: Zahteve za oddaljeni dostop

Ta dokument določa minimalne zahteve za varno povezavo in sejo za oddaljeni dostop do enega ali več alarmnih sistemov, na primer sistemov požarne varnosti, sistemov za javljanje vloma in ropa, elektronskih sistemov nadzora dostopa, sistemov za varovanje zunanjih meja, videonadzornih sistemov in sistemov socialnih alarmov.
Ta dokument določa zahteve za lastnosti delovanja, zanesljivost, celovitost in varnost infrastruktur oddaljenega dostopa.
Ta dokument določa zahteve za infrastrukturo oddaljenega dostopa med odjemalcem oddaljenega dostopa in alarmnim sistemom v nadzorovanih prostorih, ki je lahko vgrajena kot del sistema za prenos alarma ali kot ločena infrastruktura. V obeh primerih bi naj veljale zahteve te evropske tehnične specifikacije.
Ta dokument ne obravnava zagotavljanja funkcij in lastnosti alarmnega sistema.

General Information

• Status: Published
• Publication Date: 28-Apr-2022
• ICS: 13.320 - Alarm and warning systems
• Technical Committee: CLC/TC 79 - Alarm systems
• Drafting Committee: CLC/TC 79/WG 05 - Alarm transmission systems (annunciation equipment)
• Current Stage: 6060 - Document made available - Publishing
• Start Date: 29-Apr-2022
• Due Date: 13-Jun-2022
• Completion Date: 29-Apr-2022
• Ref Project: SIST-TS CLC/TS 50136-10:2022 - Alarm systems - Alarm transmission systems and equipment - Part 10: Requirements for remote access

Overview

CLC/TS 50136-10:2022 is a European technical specification defining minimum requirements for remote access to alarm systems. Its focus is on ensuring secure connections and sessions between remote users and various alarm systems, including fire safety, intruder alarms, electronic access control, perimeter security, video surveillance, and social alarm systems. The standard addresses crucial performance, reliability, integrity, and security characteristics for a Remote Access Infrastructure (RAI) used in alarm transmission systems.

This document is part 10 of the CLC/TS 50136 series and specifically covers the infrastructure enabling remote access, but excludes the direct functionalities or features on the alarm systems themselves. It aims to promote higher service quality through secure, reliable, and authenticated remote interaction with alarm systems, enabling improved maintenance, programming, and operational tasks remotely.

Key Topics

Remote Access Infrastructure (RAI)

The RAI comprises three logical components:

• Remote Access Client (RAC): Functions used by remote users to connect securely to alarm systems.
• Remote Access Server (RAS): Centralized function managing connections, authentication, and authorization between clients and endpoints.
• Remote Access Endpoint (RAE): Interface managing the connection between the RAI and the supervised alarm system.

Security Requirements

• Information Security: All data transferred or stored through the RAI must be protected against unauthorized access and attacks.
• Integrity and Confidentiality: Sessions shall use encryption (e.g., TLS) and hashing/digital signatures to ensure data integrity and confidentiality.
• Authentication:
  • All RAE, RAS, and RAC connections must be authenticated.
  • Remote users must authenticate via strong two-factor authentication combining something they have, know, or are (e.g., certificates, passwords, biometrics).
• Authorization:
  • Authorized access levels must be managed and maintained for remote users and third-party systems.
  • External interfaces like APIs require secure authorization mechanisms such as OAuth2.0.
• Logging: All security-relevant events including authenticated logins, configuration changes, and security breaches must be logged for at least one year with accurate timestamping in UTC.

Performance and Functional Requirements

• The system’s performance levels must be mutually agreed upon and consistently monitored.
• Remote Access Client functions can be integrated into desktop or mobile applications, with the service provider responsible for managing security instructions.
• The Remote Access Server must be hosted securely, either centrally or at the supervised premises (under certain conditions).
• Prevention of direct connections between RAC and RAE - all communication must pass through the RAS to maintain system integrity.

Applications

This standard supports secure remote monitoring and control in a wide range of alarm system applications:

• Fire Safety Systems: Enhance safety through remote diagnostics and maintenance.
• Intruder and Hold-up Alarms: Enable fast remote responses and configuration.
• Electronic Access Control: Secure remote management of access permissions.
• Perimeter Security Systems: Continuous remote supervision of external defenses.
• Video Surveillance Systems: Remote video feed access with high security.
• Social Alarm Systems: Reliable, secure remote assistance to vulnerable users.

By adhering to CLC/TS 50136-10:2022, service providers can offer improved operational efficiency, faster response times, and enhanced system reliability while ensuring security compliance.

Related Standards

The CLC/TS 50136-10:2022 standard is part of the broader CLC/TS 50136 series on alarm transmission systems:

• Part 1: General requirements for alarm transmission systems.
• Part 2: Requirements for Supervised Premises Transceiver (SPT).
• Part 3: Requirements for Receiving Centre Transceiver (RCT).
• Part 4: Annunciation equipment used in alarm receiving centres.
• Part 7: Application guidelines.
• Part 9: Requirements for common internet protocol (IP) alarm transmission protocol.

These standards collectively provide comprehensive guidance on designing, implementing, and managing alarm transmission infrastructures, ensuring interoperability, security, and reliability across alarm systems.

---

Keywords: remote access security, alarm transmission systems, alarm system remote management, CLC/TS 50136-10, alarm system authentication, two-factor authentication, alarm system encryption, alarm system integrity, remote monitoring, fire safety systems, intruder alarms, access control security, perimeter security systems, video surveillance remote access, alarm system standards.

Standards Content (Sample)

SLOVENSKI STANDARD
01-julij-2022
Alarmni sistemi - Sistemi in oprema za prenos alarma - 10. del: Zahteve za
oddaljeni dostop
Alarm systems - Alarm transmission systems and equipment - Part 10: Requirements for
remote access
Ta slovenski standard je istoveten z: CLC/TS 50136-10:2022
ICS:
13.320 Alarmni in opozorilni sistemi Alarm and warning systems
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

TECHNICAL SPECIFICATION CLC/TS 50136-10

SPÉCIFICATION TECHNIQUE
TECHNISCHE SPEZIFIKATION April 2022
ICS 13.320
English Version
Alarm systems - Alarm transmission systems and equipment -
Part 10: Requirements for remote access
To be completed Alarmanlagen - Alarmübertragungsanlagen und -
einrichtungen - Teil 10: Anforderungen für den Fernzugriff
This Technical Specification was approved by CENELEC on 2022-02-04.

CENELEC members are required to announce the existence of this TS in the same way as for an EN and to make the TS available promptly
at national level in an appropriate form. It is permissible to keep conflicting national standards in force.

CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic,
Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the
Netherlands, Norway, Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland,
Turkey and the United Kingdom.

European Committee for Electrotechnical Standardization
Comité Européen de Normalisation Electrotechnique
Europäisches Komitee für Elektrotechnische Normung
CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels
© 2022 CENELEC All rights of exploitation in any form and by any means reserved worldwide for CENELEC Members.
Ref. No. CLC/TS 50136-10:2022 E

Contents Page
European foreword . 5
Introduction . 6
1 Scope . 6
2 Normative references . 6
3 Terms, definitions and abbreviations . 7
3.1 Terms and definitions . 7
3.2 Abbreviations . 8
4 General requirements . 8
4.1 Additional application . 8
4.2 Logical structure . 8
Figure 1 — Remote access infrastructure logical diagram . 8
5 Information security . 9
5.1 General . 9
5.2 Integrity and confidentiality . 9
5.3 Authentication . 9
5.4 Authorization .10
5.5 Logging .10
6 Performance requirements .11
7 Functional requirements .11
7.1 Remote Access Client .11
7.2 Remote Access Server .11
7.3 Remote Access End point .11
7.4 Documentation .12
8 Operational requirements .12
Annex A (normative) Alternative connection method .13
Figure A1 — Alternative remote access infrastructure logical diagram .13

European foreword
This document (CLC/TS 50136-10:2022) has been prepared by CLC/TC 79, “Alarm systems”.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CENELEC shall not be held responsible for identifying any or all such patent rights.
The CLC/TS 50136 series consists of the following parts, under the general title Alarm systems –
Alarm transmission systems:
— Part 1 General requirements for alarm transmission systems;
— Part 2 Requirements for Supervised Premises Transceiver (SPT);
— Part 3 Requirements for Receiving Centre Transceiver (RCT);
— Part 4 Annunciation equipment used in alarm receiving centres;
— Part 7 Application guidelines;
— Part 9 Requirements for common protocol for alarm transmission using the internet protocol (IP).
— Part 10 Requirements for remote access
Any feedback and questions on this document should be directed to the users’ national committee. A
complete listing of these bodies can be found on the CENELEC website.
Introduction
It has been common practice for many years to monitor the alarm and fault status of alarm systems
installed in premises from remote locations.
Technological developments within alarm systems as well as the telecommunication paths now permit
remote access to those alarm systems with a wide variety of available functions up to and including
full operation and programming / parameters setting as if an authorized person was at site.
Remote access complements the at site visits of competent person(s) and also enables remote
access for customers (end-users). In short, the overall service quality offered by the various types of
professional services providers at time of installation, maintenance or operation increases significantly.
End-users experience faster response times leading to higher system reliability and availability.
Service providers can provide new services such as remote system interrogation, which improves also
staff utilization.
This document uses the term alarm system to describe any safety and security system.
1 Scope
This document specifies minimum requirements for secure connection and session for remote access
to one or more alarm systems, for example fire safety systems, intruder and hold-up alarm systems,
electronic access control systems, external perimeter security systems, video surveillance systems,
and social alarm systems.
This document specifies the requirements for the performance, reliability, integrity, and security
characteristics of a Remote Access Infrastructure.
This document specifies the requirements for a Remote Access Infrastructure between a Remote
Access Client and an alarm system at the supervised premises and may be either integrated as part of
the ATS or a separate infrastructure. In either case, the requirements of this European technical
specification should apply.
This document does not cover the provision of functions and features on the alarm system.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments)
applies.
EN 50136-1:2012, Alarm systems – Alarm transmission systems and equipment –
Part 1: General requirements for alarm transmission systems
———————
As impacted by EN 50136-1:2012/A1:2018.
3 Terms, definitions and abbreviations
3.1 Terms and definitions
Error! Bookmark
For the purposes of this document, the terms and definitions given in EN 50136-1:2012
not defined.
and the following apply.
ISO and IEC maintain terminological databases for use in standardization at the following addresses:
— ISO Online browsing platform: available at https://www.iso.org/obp
— IEC Electropedia: available at https://www.electropedia.org/
3.1.1
connection
communication link between parts of the RAI
3.1.2
remote access
provision of access for a remote user or third-party systems to an alarm system installed at the
supervised premises to perform authorized activities remotely, for example remote servicing, remote
support, remote operations or other functions
3.1.3
Remote Access Client
logical function used to gain remote access to functions of one or more alarm systems
Note 1 to entry: In this document the Remote Access Client is considered a function rather than a physical
device.
3.1.4
Remote Access Endpoint
logical function that manages remote access to functions of one or more AS
Note 1 to entry: In this document RAE has to be interpreted as functions and not as equipment.
3.1.5
Remote Access Infrastructure
system incorporating the logical functions of the RAE, RAS and RAC
3.1.6
Remote Access Infrastructure Service Provider
entity responsible for the design, operation
...