ISO/IEC 14543-5-104:2024

Information technology - Home electronic system (HES) architecture - Part 5-104: Intelligent grouping and resource sharing for HES Class 2 and Class 3 - RA server-based smart lock application

ISO/IEC 14543-5-194:2024(E) specifies the remote access (RA) server-based application framework, device interaction model, flow process and interfaces, and message formats to achieve intelligent grouping, resource sharing and service collaboration among IGRS smart lock devices.
This document is applicable to smart lock devices with direct network connections or connections through an intermediary network to a server for security authentication. This server utilizes a method to minimize the possibility of unauthorized access to these smart locks, while maintaining seamless interoperability among users, smart lock devices and RA servers at home, office or other remote environments.

General Information

• Status: Published
• Publication Date: 16-Jan-2024
• ICS: 35.240.67 - IT applications in building and construction industry
• Technical Committee: ISO/IEC JTC 1/SC 25 - Interconnection of information technology equipment
• Drafting Committee: WG 1 - ISO/IEC JTC 1/SC 25/WG 1
• Current Stage: PPUB - Publication issued
• Start Date: 17-Jan-2024
• Completion Date: 19-Jan-2024

Overview

ISO/IEC 14543-5-104:2024 specifies a remote access (RA) server-based smart lock application framework within the Home Electronic System (HES) Intelligent Grouping and Resource Sharing (IGRS) family. The standard defines the device interaction model, flow processes, interfaces and message formats needed to enable intelligent grouping, resource sharing and service collaboration among IGRS smart lock devices. It applies to smart locks that connect directly to a network or indirectly via an intermediary network to a server for security authentication, and it focuses on minimizing unauthorized access while preserving seamless interoperability across users, smart locks and RA servers in homes, offices and remote environments.

Key Topics

• Server management framework: Roles and components for Remote Access Server (RAS), Remote Access Client (RAC), Bluetooth Gateway (BGW), Bluetooth Smart Lock Device (BSLD) and Third Party Service Platform (TPSP).
• Device interaction model: Registration, discovery, control and removal flows for BSLDs interacting with RAS/BGW/RAC.
• Security and authentication: User registration and authentication mechanisms between RAC and RAS to reduce unauthorized access (detailed message formats and response status codes are defined).
• Standardized message and data formats: Generic message formats between RAC and RAS and data formats used among RAC, BGW and BSLD for operations such as writing user account IDs, authenticating users and lock/unlock operations.
• Operational flows and examples: Diagrams and annexed examples illustrate message exchange, registration processes and BGW message flows to support implementation and testing.

Applications

Who uses this standard and why:

• Smart lock and IoT device manufacturers - for designing RA-capable Bluetooth smart locks and gateways that interoperate with cloud servers and clients.
• Platform and service providers - to build RA servers and client applications that support multi-user access, resource sharing and third-party integrations.
• System integrators and installers - to implement interoperable smart access systems in homes, apartments, offices and multi-tenant buildings.
• Security engineers and compliance teams - to validate authentication flows, message handling and minimize unauthorized access risks.
• Test labs and QA teams - to verify device conformance to defined message formats, response codes and registration/authentication procedures.

Practical uses include secure remote unlocking, delegated access management (temporary or role-based access), shared access across multiple users or properties, cloud-based provisioning and integration with third-party service platforms.

Related Standards

• ISO/IEC 14543-5-8: Remote access core protocol (message and security fundamentals)
• ISO/IEC 14543-5-9: Remote access service platform (IRSP architectures and server interfaces)
• ISO/IEC 14543-5-101 / 5-102: Other RA application profiles (media, universal management)
• ISO/IEC 14543-2-1: HES class definitions (Class 2 and Class 3)

Keywords: ISO/IEC 14543-5-104, RA server-based smart lock, IGRS, HES architecture, intelligent grouping, resource sharing, Bluetooth smart lock, remote access server, smart home interoperability.

Standards Content (Sample)

ISO/IEC 14543-5-104
Edition 1.0 2024-01
INTERNATIONAL
STANDARD
colour
inside
Information technology – Home electronic system (HES) architecture –
Part 5-104: Intelligent grouping and resource sharing for HES Class 2 and
Class 3 – RA server-based smart lock application

All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or
by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from either
IEC or IEC's member National Committee in the country of the requester. If you have any questions about ISO/IEC
copyright or have an enquiry about obtaining additional rights to this publication, please contact the address below or
your local IEC member National Committee for further information.

IEC Secretariat Tel.: [phone]
3, rue de Varembé [e-mail]
CH-1211 Geneva 20 www.iec.ch
Switzerland
About the IEC
The International Electrotechnical Commission (IEC) is the leading global organization that prepares and publishes
International Standards for all electrical, electronic and related technologies.

About IEC publications
The technical content of IEC publications is kept under constant review by the IEC. Please make sure that you have the
latest edition, a corrigendum or an amendment might have been published.

IEC publications search - webstore.iec.ch/advsearchform IEC Products & Services Portal - products.iec.ch
The advanced search enables to find IEC publications by a Discover our powerful search engine and read freely all the
variety of criteria (reference number, text, technical publications previews. With a subscription you will always have
committee, …). It also gives information on projects, replaced access to up to date content tailored to your needs.
and withdrawn publications.
Electropedia - www.electropedia.org
IEC Just Published - webstore.iec.ch/justpublished
The world's leading online dictionary on electrotechnology,
Stay up to date on all new IEC publications. Just Published
containing more than 22 500 terminological entries in English
details all new publications released. Available online and once
and French, with equivalent terms in 25 additional languages.
a month by email.
Also known as the International Electrotechnical Vocabulary

(IEV) online.
IEC Customer Service Centre - webstore.iec.ch/csc

If you wish to give us your feedback on this publication or need
further assistance, please contact the Customer Service
Centre: [e-mail].
ISO/IEC 14543-5-104
Edition 1.0 2024-01
INTERNATIONAL
STANDARD
colour
inside
Information technology – Home electronic system (HES) architecture –

Part 5-104: Intelligent grouping and resource sharing for HES Class 2 and

Class 3 – RA server-based smart lock application

INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
ICS 35.240.67 ISBN 978-2-8322-8091-1

– 2 – ISO/IEC 14543-5-104:2024
 ISO/IEC 2024
CONTENTS
FOREWORD . 4
INTRODUCTION . 6
1 Scope . 9
2 Normative references . 9
3 Terms, definitions and abbreviated terms . 9
3.1 Terms and definitions . 9
3.2 Abbreviated terms . 10
4 Conformance . 11
5 Overview . 11
6 Smart lock server management framework . 11
6.1 Overview. 11
6.2 Bluetooth smart lock server management framework: remote access server
(RAS). 13
6.3 Bluetooth smart lock server management framework: remote access client
(RAC) . 14
6.4 Bluetooth smart lock server management framework: Bluetooth gateway
(BGW) . 15
6.5 Bluetooth smart lock server management framework: Bluetooth smart lock
device (BSLD) . 17
6.6 Bluetooth smart lock server management framework: third party service
platform (TPSP) . 20
7 Standard interfaces between remote access client and server management
framework . 20
7.1 User registration management . 20
7.2 User authentication management . 20
7.3 Bluetooth smart lock device (BSLD) discovery . 21
7.4 Bluetooth smart lock device (BSLD) registration management . 21
7.5 Bluetooth smart lock device (BSLD) removal management . 22
7.6 Response status code . 22
7.7 Generic message format used between remote access client (RAC) and
remote access server (RAS) . 23
8 Standard data format used among remote access client (RAC), Bluetooth gateway
(BGW) and Bluetooth smart lock device (BSLD) . 23
Annex A (informative) Specific example of interfaces between remote access client
(RAC) and remote access server (RAS) . 27
Bibliography . 28

Figure 1 – Interaction models of Bluetooth smart lock device in the server management
framework . 12
Figure 2 – BSLSMF RAS components . 13
Figure 3 – BSLSMF RAC components . 14
Figure 4 – BSLSMF BGW components . 16
Figure 5 – BGW message flow process . 17
Figure 6 – BSLD registration process to RAS . 18
Figure 7 – BSLD control flow process . 19
Figure 8 – User registration request message . 20
Figure 9 – User authentication request message. 21

 ISO/IEC 2024
Figure 10 – BSLD authentication request message . 21
Figure 11 – BSLD registration request message . 21
Figure 12 – BSLD removal request message . 22
Figure A.1 – User registration request message . 27
Figure A.2 – User registration response message . 27

Table 1 – Response status codes and their message contents . 22
Table 2 – Message push data format between RAS and RAC . 23
Table 3 – Write user account ID request . 24
Table 4 – Write user account ID response . 24
Table 5 – Authenticate user account ID request . 25
Table 6 – Authenticate user account ID response . 25
Table 7 – BSLD lock and unlock operation request . 26
Table 8 – BSLD lock and unlock operation response . 26

– 4 – ISO/IEC 14543-5-104:2024
 ISO/IEC 2024
INFORMATION TECHNOLOGY –
HOME ELECTRONIC SYSTEM (HES) ARCHITECTURE –

Part 5-104: Intelligent grouping and resource sharing for HES Class 2
and Class 3 – RA server-based smart lock application

FOREWORD
1) ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission)
form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC
participate in the development of International Standards through technical committees established by the
respective organization to deal with particular fields of technical activity. ISO and IEC technical committees
collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental,
in liaison with ISO and IEC, also take part in the work.
2) The formal decisions or agreements of IEC and ISO on technical matters express, as nearly as possible, an
international consensus of opinion on the relevant subjects since each technical committee has representation
from all interested IEC and ISO National bodies.
3) IEC and ISO documents have the form of recommendations for international use and are accepted by IEC and
ISO National bodies in that sense. While all reasonable efforts are made to ensure that the technical content of
IEC and ISO documents is accurate, IEC and ISO cannot be held responsible for the way in which they are used
or for any misinterpretation by any end user.
4) In order to promote international uniformity, IEC and ISO National bodies undertake to apply IEC and ISO
documents transparently to the maximum extent possible in their national and regional publications. Any
divergence between any IEC and ISO document and the corresponding national or regional publication shall be
clearly indicated in the latter.
5) IEC and ISO do not provide any attestation of conformity. Independent certification bodies provide conformity
assessment services and, in some areas, access to IEC and ISO marks of conformity. IEC and ISO are not
responsible for any services carried out by independent certification bodies.
6) All users should ensure that they have the latest edition of this document.
7) No liability shall attach to IEC and ISO or their directors, employees, servants or agents including individual
experts and members of its technical committees and IEC and ISO National bodies for any personal injury,
property damage or other damage of any nature whatsoever, whether direct or indirect, or for costs (including
legal fees) and expenses arising out of the publication, use of, or reliance upon, this ISO/IEC document or any
other IEC and ISO documents.
8) Attention is drawn to the Normative references cited in this document. Use of the referenced publications is
indispensable for the correct application of this document.
9) IEC and ISO draw attention to the possibility that the implementation of this document may involve the use of (a)
patent(s). IEC and ISO take no position concerning the evidence, validity or applicability of any claimed patent
rights in respect thereof. As of the date of publication of this document, IEC and ISO had not received notice of
(a) patent(s), which may be required to implement this document. However, implementers are cautioned that this
may not represent the latest information, which may be obtained from the patent database available at
https://patents.iec.ch and www.iso.org/patents. IEC and ISO shall not be held responsible for identifying any or
all such patent rights.
ISO/IEC 14543-5-104 has been prepared by subcommittee 25: Interconnection of information
technology equipment, of ISO/IEC joint technical committee 1: Information technology. It is an
International Standard.
The text of this International Standard is based on the following documents:
Draft Report on voting
JTC1-SC25/3122/CDV JTC1-SC25/3171/RVC

Full information on the voting for its approval can be found in the report on voting indicated in
the above table.
The language used for the development of this International Standard is English.

 ISO/IEC 2024
This document was drafted in accordance with ISO/IEC Directives, Part 2, and developed in
accordance with ISO/IEC Directives, Part 1, available at www.iec.ch/members_experts/refdocs
and www.iso.org/directives.
The list of all currently available parts of the ISO/IEC 14543 series, under the general title
Information technology – Home Electronic System (HES) architecture, can be found on the IEC
web site and ISO web site.
IMPORTANT – The "colour inside" logo on the cover page of this document indicates
that it contains colours which are considered to be useful for the correct understanding
of its contents. Users should therefore print this document using a colour printer.

– 6 – ISO/IEC 14543-5-104:2024
 ISO/IEC 2024
INTRODUCTION
ISO/IEC 14543-5 (all parts) specifies the services and protocol of the application layer for
Intelligent Grouping and Resource Sharing (IGRS) devices and services in the Home Electronic
System (HES). Some parts reference Classes 1, 2 and 3, which are HES designations specified
in the HES architecture standard, ISO/IEC 14543-2-1.
ISO/IEC 14543-5 includes the following parts:
– ISO/IEC 14543-5-1: Core protocol
• Specifies the TCP/IP protocol stack as the basis and the HTTP protocol as the message-
exchange framework among devices.
• Specifies a series of device and service interaction/invocation standards, such as device
and service discovery protocol, device and service description, service invocation and
security mechanisms.
• Specifies core protocols for a type of home network that supports streaming media and
other high-speed data transports within a home.
– ISO/IEC 14543-5-2#: Application profile
• Based on the IGRS core protocol.
• Specifies a device and service interaction mechanism, as well as application interfaces
used in IGRS basic applications.
• Multiple application profiles are specified, including:
a) ISO/IEC 14543-5-21: AV profile
b) ISO/IEC 14543-5-22: File profile
– ISO/IEC 14543-5-3: Basic application
• Includes an IGRS basic application list.
• Specifies a basic application framework.
• Specifies operation details (device grouping, service description template, etc.), function
definitions and service invocation interfaces.
– ISO/IEC 14543-5-4: Device validation
• Specifies a standard method to validate an IGRS-compliant device.
– ISO/IEC 14543-5-5: Device type
• Specifies IGRS device types used in IGRS applications.
– ISO/IEC 14543-5-6: Service type
• Specifies basic service types used in IGRS applications.
– ISO/IEC 14543-5-7: Remote access system architecture
• Specifies the architecture and framework for remotely accessing IGRS devices and
services in the Home Electronic System. The remote access (RA) communications
protocol and application profiles are specified in the following parts of ISO/IEC 14543-5:
• ISO/IEC 14543-5-8: Remote access core protocol
• ISO/IEC 14543-5-9: Remote access service platform
• ISO/IEC 14543-5-101: Remote media access profile
• ISO/IEC 14543-5-102: Remote universal management profile
• ISO/IEC 14543-5-103: RA Smart audio interconnection profile
• ISO/IEC 14543-5-104: RA server-based smart lock application
• ISO/IEC 14543-5-105: RA server-based smart lock application test and verification
(under development)
 ISO/IEC 2024
• ISO/IEC 14543-5-11: Remote user interface
• ISO/IEC 14543-5-12: Remote access test and verification
• ISO/IEC 14543-5-13: RA Smart home device control using voice recognition (under
development)
• ISO/IEC 14543-5-141: Blockchain application protocols for HES based on IGRS RA
specifications: core framework (under development)
• The relationships among these parts are specified in Part 5-7.
– ISO/IEC 14543-5-8: Remote access core protocol
• Provides detailed system components, system function modules, basic concepts of
IGRS remote access elements and their relationships, message exchange mechanisms
and security related specifications.
• Specifies interfaces between IGRS remote access (RA) client and service platforms.
Defines co-operative procedures among IGRS RA clients.
– ISO/IEC 14543-5-9: Remote access service platform
• Specifies the IGRS RA service platform (IRSP) architectures and interfaces among
servers in the service platforms.
• Based on ISO/IEC 14543-5-8: Remote access core protocol.
– ISO/IEC 14543-5-10#: Remote access application profiles
• Specifies a device and service interaction mechanism for various applications.
• Based on ISO/IEC 14543-5-8: Remote access core protocol.
• ISO/IEC 14543-5-101: Remote media access profile. This part specifies the common
requirements for IGRS RA media users and devices in IGRS networks.
• ISO/IEC 14543-5-102: Remote universal management profile. This part specifies a
mechanism for integrating devices with both relatively high and low processing
capabilities into IGRS networks. It also specifies universal remote device discovery and
a management framework.
Some of the profiles are under development, including:
• ISO/IEC 14543-5-103: RA smart audio interconnection profile. This part specifies the
interoperability requirements for smart audio devices (audio devices with built-in
computing and communication capabilities) and creates various application
functionalities to enhance these audio devices. It introduces some new device types and
specifies the mandatory device/service discovery, device control, content delivery and
audio transcoding methods and interfaces, etc. to enable smart audio device interactions
and content services.
• ISO/IEC 14543-5-104: RA server-based smart lock application. This part specifies a
server-based smart lock application that utilizes the ISO/IEC 14543-5 series of
standards for device interoperability. It specifies the required device interaction models,
message formats and APIs and the authentication and security methods.
• ISO/IEC 14543-5-105: RA server-based smart lock application test and verification
(under development). This part is the verification test specification for
ISO/IEC 14543-5-104. It describes the required test cases and relevant pass/fail criteria
to validate that a server-based smart lock device/application conforms to the
ISO/IEC 14543-5 series of standard protocols (IGRS).
• Additional application profiles will be specified in the future.
– ISO/IEC 14543-5-11: Remote user interface
• Specifies adaptive user interface generation and remote device control mechanisms
suitable for different remote access applications and devices.
– ISO/IEC 14543-5-12: Remote access test and verification
• Specifies a standard method to test and verify IGRS-RA compliant device and service
interfaces.
– 8 – ISO/IEC 14543-5-104:2024
 ISO/IEC 2024
– ISO/IEC 14543-5-13: RA smart home device control using voice recognition (under
development)
• Specifies the requirements to allow remote access and control of various smart home
devices that use the same IGRS RA device interoperability protocols with a variety of
voice recognition platforms. This part extends current IGRS RA device types to support
the addition of voice recognition message format specifications. It introduces an IGRS
RA voice-enabled gateway profile in compliance with the HES gateway (ISO/IEC 15045
series and ISO/IEC 18012 series) and the IGRS RA platform. It extends the HES
environment to an external voice recognition service platform (“cross-platform” voice
recognition interface platform) that includes specifications for universal voice recognition
skill sets and translation interface service, platform security, IGRS RA (IGRS Remote
Access Service Platform) message server API, and IGRS RA device control protocol
parsing and status update service, etc.
– ISO/IEC 14543-5-14#: Blockchain application protocols for HES based on IGRS RA
specifications (under development)
• Specifies a blockchain application framework and profiles for various smart home HES
applications.
• Based on the ISO/IEC 14543-5-8: Remote access core protocol.
• Some of the profiles are under development, including ISO/IEC 14543-5-141: Blockchain
application protocols for HES based on the IGRS RA specifications: core framework.
This is the first in a series of standards that specifies a blockchain application framework
to enhance the HES architecture using IGRS RA protocols. Blockchain technology
provides additional data storage protection and a trusted authentication mechanism that
includes a secure data exchange process. This standard specifies the core framework
requirements that establish a reference system architecture, interaction model,
blockchain identity authentication, blockchain encryption-method requirements, generic
data format template, RA server interface and configuration specification.

 ISO/IEC 2024
INFORMATION TECHNOLOGY –
HOME ELECTRONIC SYSTEM (HES) ARCHITECTURE –

Part 5-104: Intelligent grouping and resource sharing for HES Class 2
and Class 3 – RA server-based smart lock application

1 Scope
This part of ISO/IEC 14543-5 specifies the remote access (RA) server-based application
framework, device interaction model, flow process and interfaces, and message formats to
achieve intelligent grouping, resource sharing and service collaboration among IGRS smart lock
devices.
This document is applicable to smart lock devices with direct network connections or
connections through an intermediary network to a server for security authentication. This server
utilizes a method to minimize the possibility of unauthorized access to these smart locks, while
maintaining seamless interoperability among users, smart lock devices and RA servers at home,
office or other remote environments.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies.
For undated references, the latest edition of the referenced document (including any
amendments) applies.
ISO/IEC 14543-5-8, Information technology – Home Electronic System (HES) architecture –
Part 5-8: Intelligent grouping and resource sharing for Class 2 and Class 3 – Remote access
core protocol
ISO/IEC 14543-5-9, Information technology – Home Electronic System (HES) architecture –
Part 5-9: Intelligent grouping and resource sharing for Class 2 and Class 3 – Remote access
service platform
3 Terms, definitions and abbreviated terms
3.1 Terms and definitions
For the purposes of this document, the terms and definitions given in ISO/IEC 14543-5-8,
ISO/IEC 14543-5-9 and the following apply.
ISO and IEC maintain terminology databases for use in standardization at the following
addresses:
• IEC Electropedia: available at https://www.electropedia.org/
• ISO Online browsing platform: available at https://www.iso.org/obp

– 10 – ISO/IEC 14543-5-104:2024
 ISO/IEC 2024
3.1.1
Bluetooth gateway
device that forwards the communication data between a Bluetooth smart lock device (BSLD)
and the remote access server (RAS) in the Bluetooth smart lock server management framework
(BSLSMF)
Note 1 to entry: A Bluetooth gateway is an implementation of the HES gateway, as specified in 6.4.
3.1.2
Bluetooth smart lock device
lock device that supports Bluetooth 4.0 or above protocol and conforms to the communications
protocol and message format specified in this document
3.1.3
Bluetooth smart lock server management framework
server-based remote access framework to manage, authenticate and control Bluetooth smart
lock devices
3.1.4
IGRS RA agent service
functional entity that provides the IGRS RA service to IGRS LAN devices
Note 1 to entry: The main functionalities of the IGRS RA agent service are sending instructions to and receiving
instructions from the IGRS RA service platform, and translating the instructions of local IGRS networks to and from
those of the IGRS RA networks. The IGRS RA agent service provides audio services compatibility between the local
IGRS devices and the IGRS RA devices.
3.1.5
remote access client
logical device that a user controls to interact with Bluetooth smart lock devices in a BSLSMF
Note 1 to entry: Typical remote access client (RAC) devices may include: mobile phones, tablets and similar mobile
devices etc. In a BSLD control application, an RAC is the terminal device that controls the BSLD in real time and
interconnects with the RAS to access relevant data over basic network services such as Wi-Fi, 3G, 4G, and 5G. It is
capable of responding to user actions, collecting and updating Bluetooth smart lock device status and other
information to users and the RAS.
3.1.6
remote access server
logical device that manages Bluetooth smart lock devices in a BSLSMF
Note 1 to entry: Typical remote access server (RAS) devices include PCs and network storage servers. In a BSLD
control application, the RAS is the content management source for an RAC to access via pre-defined interfaces. It
is capable of obtaining, processing and storing BSLD information from an RAC, and will respond to RAC requests
when certain conditions are met.
3.2 Abbreviated terms
BGW Bluetooth gateway
BSLD Bluetooth smart lock device
BSLDM Bluetooth smart lock device manager
BSLSMF Bluetooth smart lock server management framework
DDMS device data management service
HTTP hypertext transfer protocol
HTTPS hypertext transfer protocol over secure socket layer
ID  identification
IRSP IGRS RA service platform
RAC remote access client
RAS remote access server
 ISO/IEC 2024
SASL simple authentication and security layer
SCS security certification service
TCP/IP transmission control protocol/Internet protocol
TLS transport layer security
TPSP third party service platform
UDMS user data management service
XMPP extensible messaging and presence protocol
4 Conformance
A system that conforms to this document shall be implemented in accordance with Clauses 6
through 8, where the IGRS smart lock server management framework – which includes system
architecture, interaction models and processes, device functions and services – shall conform
to Clause 6, and the standard interfaces and message formats shall conform to Clause 7 and
Clause 8, respectively.
5 Overview
This IGRS RA server-based smart lock application standard provides a complete framework to
ensure that BSLDs manufactured by different vendors interoperate seamlessly with an RAS and
RAC for enhanced device control and secure data management support.
This document includes all of the required device interaction models, message flow methods,
control message formats, APIs and the authentication and security methods. The BSLSMF uses
a server-based authentication mechanism to minimize the possibility of unauthorized access to
the lock and to increase home safety. It is also possible for a third party service platform (TPSP)
to access the BSLSMF with a set of management control interfaces to the BSLD, thus enabling
many different data or security service functions not specified in this document.
6 Smart lock server management framework
6.1 Overview
The BSLSMF shall provide management, operation and maintenance of BSLDs made by
different manufacturers. The end users can use various RACs developed by these BSLD
manufacturers to add their own BSLDs to BSLSMF for control management.
In a BSLSMF, each BSLD shall create and upload required device data information to an RAS,
which is then shown to the user via the RAC. The RAS is used to record and manage the
permission rights, security information, and operational status of each BLSD. The BSLSMF also
supports the RAS to provide interface specifications for third party service platforms to access,
so the user may connect to other secure data and functional service platforms available on the
market in order to expand and complement the standard control methods and data access
channels currently allowed by BSLD.
There are two alternatives for the interaction model of the Bluetooth® smart lock device in the
server management framework. The first alternative, as shown in Figure 1 a), is for operation
with conventional Internet access means without a gateway. The second alternative, as shown
in Figure 1 b), provides compliance with the HES gateway to enhance privacy, security, safety,
and interoperability capabilities.
___________
Bluetooth® is the registered trademark of Bluetooth SIG, Inc. This information is given for the convenience of
users of this document and does not constitute an endorsement by ISO and IEC.

– 12 – ISO/IEC 14543-5-104:2024
 ISO/IEC 2024
a) Conventional Internet access b) HES gateway access

Figure 1 – Interaction models of Bluetooth smart lock device
in the server management framework
The RAS, RAC, BGW and BSLD are key components in the BSLSMF, which comprise the device
and data management and control process. In this model, the request and response and push
message (see 7.7 for specific data formats) communication between the RAS and RAC is based
on HTTPS, as specified in IETF RFC 2818, and XMPP protocol requirements specified in
ISO/IEC 14543-5-8 for user registration, authentication and basic message flow. A Bluetooth
connection is used for authentication and control command message transfer between an RAC
and the BSLD.
NOTE Other relevant security mechanisms that can be considered for data transport include SASL (IETF RFC 4422)
and TLS (IETF RFC 5246). See the Bibliography for the Bluetooth specification.
The BGW is mainly responsible for establishing the real-time management and remote access
of the BSLD. In this scenario, the BSLD is connected through the BGW (via Bluetooth) to the
RAS using TCP/IP and XMPP connection (see ISO/IEC 14543-5-8 for device registration,
connection and message flow).
BSLSMF has specified a complete system for the secure management and control of BSLD.
This framework also supports an optional TPSP that may connect to the RAS through a standard
management control interface usin
...