SIST-TS CEN/TS 17814:2022

Building hardware - Master Key System data protection - Guidance

This document specifies requirements and procedures to achieve and maintain protection of data and sensitive information related to mechanical Master Key Systems and other mechanical key systems where customer or application related data are being processed throughout the process of planning, production, installation, and maintenance.
The requirements and test methods for mechanical cylinder locks is covered by EN 1303.
Reference is made to EN 1303 and Annexes relating to Master Key Systems (MKS).
Requirements relating to the information security of key based and non-key based electronic cylinders are not covered.

Schlösser und Baubeschläge - Datenschutz bei Schließanlagen - Leitfaden

Dieses Dokument legt Anforderungen und Verfahren zum Erreichen und Aufrechterhalten des Schutzes von Daten und sensiblen Informationen in Bezug auf mechanische Schließanlagen und andere mechanische Schlüsselsysteme fest, bei denen während der Planung, Herstellung, Installation und Instandhaltung kunden- oder anwendungsbezogene Daten verarbeitet werden.
Die Anforderungen und Prüfverfahren für mechanische Zylinderschlösser werden in EN 1303 behandelt.
Es wird auf EN 1303 und die sich auf Schließanlagen beziehenden Anhänge verwiesen.
Anforderungen an die Informationssicherheit von schlüsselbasierten und nicht schlüsselbasierten elektronischen Schließzylindern werden nicht behandelt.

Quincaillerie du bâtiment - Spécification technique pour la protection des données du système d'organigramme de clé - Guide

Le présent document spécifie les exigences et les procédures permettant d’assurer et de maintenir la protection des données et des informations sensibles liées aux systèmes d'organigramme de clé mécanique et à d’autres systèmes de clé mécanique où les données liées au client ou à des applications sont traitées tout au long du processus de planification, de production, d’installation, et de maintenance.
Les exigences et les méthodes d’essai pour les serrures à cylindre mécanique sont couvertes par l’EN 1303.
Il est fait référence à l’EN 1303 et à ses Annexes relatives aux systèmes d'organigramme de clé (MKS).
Les exigences relatives à la sécurité des informations des cylindres électroniques manœuvrés avec clé ou sans clé ne sont pas couvertes.

Ključavnice in stavbno okovje - Zaščita podatkov sistema glavnega ključa - Navodila

Ta dokument določa zahteve in postopke za doseganje ter ohranjanje zaščite podatkov in občutljivih informacij, povezanih z mehanskimi sistemi glavnih ključev in drugimi mehanskimi sistemi ključev, pri katerih se v procesu načrtovanja, proizvodnje, namestitve in vzdrževanja obdelujejo podatki, povezani s strankami ali aplikacijami.
Zahteve in preskusne metode za mehanske cilindrične ključavnice so zajete v standardu EN 1303.
V zvezi s sistemi glavnih ključev (MKS) se ta dokument sklicuje na standard EN 1303 in njegove dodatke.
Zahteve v zvezi z informacijsko varnostjo elektronskih cilindrov s ključem in brez niso zajete.

General Information

• Status: Published
• Public Enquiry End Date: 30-Mar-2022
• Publication Date: 16-Aug-2022
• ICS: 91.190 - Building accessories
• Technical Committee: ISTP - Doors and windows
• Current Stage: 6060 - National Implementation/Publication (Adopted Project)
• Start Date: 28-Jul-2022
• Due Date: 02-Oct-2022
• Completion Date: 17-Aug-2022
• Ref Project: CEN/TS 17814:2022 - Building hardware - Master Key System data protection - Guidance

Overview

SIST-TS CEN/TS 17814:2022 is a European Technical Specification developed by CEN/TC 33 that provides comprehensive guidance on data protection specifically related to mechanical Master Key Systems (MKS) used in building hardware. The document focuses on protecting sensitive information throughout the entire lifecycle of an MKS-including planning, production, installation, and maintenance-while explicitly excluding electronic cylinder data protection.

This specification complements EN 1303, which covers mechanical cylinder locks' requirements and test methods, by addressing how to securely handle key system data and protect customer-sensitive information. Its aim is to help manufacturers, suppliers, and installers implement best practices to maintain confidentiality and integrity of Master Key System data.

---

Key Topics

• Scope and Purpose

  • Protection of data related to mechanical Master Key Systems and other mechanical key systems.
  • Exclusion of electronic cylinders and digital key data security.

• Data Handling Requirements

  • Avoid inclusion of personal data in key plans, organizational charts, or other documentation.
  • Use encrypted electronic transmissions (e.g., 128 Bit AES or higher) for sending lock charts and key data.
  • Secure storage protocols for electronic and physical data, including restricted access and regular backups.

• Planning and Ordering

  • Only authorized individuals should place orders for MKS keys and cylinders.
  • Key markings must avoid revealing any reference to the key’s function, door location, or key holder identity.

• Calculation and Manufacturing

  • MKS calculation software must be provided or approved by the cylinder manufacturer.
  • Production areas and assembly paperwork must be access-controlled and confidential.
  • Disposal or secure storage of test keys, incorrectly made keys, and manufacturing paperwork is mandatory.

• Key Preparation and Shipment

  • Access to key cutting machinery and key blanks is strictly controlled.
  • Master keys and security cards must be shipped via tamper-proof, sealed, non-transparent packaging using registered or trackable courier services.

• Installation and Maintenance

  • Only authorized personnel should access keys and cylinders during installation.
  • Key handovers must be documented and signed off by authorized end-users.
  • Records of system changes, re-codings, and compromises must be maintained for the system's lifetime.

• Verification and Compliance

  • Procedures to verify compliance with access restrictions, data encryption, secure storage, and handling protocols.
  • Recommendations encourage third-party certification of compliance processes related to MKS data protection.

---

Applications

The standard is essential for organizations involved in designing, manufacturing, supplying, installing, and maintaining mechanical Master Key Systems in buildings. Typical applications include:

• Security Companies: To ensure protection of master key data during design and production phases.
• Building Management: Secure management of access control keys and logs.
• Manufacturers and Distributors: Guidance on secure shipping, data handling, and compliance with legal and security requirements.
• Facility Maintenance Teams: Procedures for safe installation and servicing of Master Key Systems.
• Third-Party Auditors: Framework for auditing and certifying MKS data protection compliance.

By applying the protocols in CEN/TS 17814, stakeholders can mitigate risks associated with data leaks, unauthorized access, and system compromise, thereby enhancing overall building security.

---

Related Standards

• EN 1303:2015 – Building hardware – Cylinders for locks – Requirements and test methods
  Specifies the requirements and testing for mechanical cylinders used in locks, referenced extensively in CEN/TS 17814 for technical compatibility.

• ISO/IEC Electropedia and Online Browsing Platform
  Useful for standardized definitions and terms related to key systems and security.

• National and International Data Protection Regulations
  While not explicitly referenced, compliance with this technical specification supports adherence to broader data privacy laws concerning personal and sensitive information in building security contexts.

---

By following SIST-TS CEN/TS 17814:2022, organizations involved in master key systems management can ensure rigorous data protection standards that preserve security integrity while meeting clients’ confidentiality expectations across Europe and beyond.

Standards Content (Sample)

SLOVENSKI STANDARD
01-september-2022
Ključavnice in stavbno okovje - Zaščita podatkov sistema glavnega ključa -
Navodila
Building hardware - Master Key System data protection - Guidance
Schlösser und Baubeschläge - Datenschutz bei Schließanlagen - Leitfaden
Quincaillerie du bâtiment - Spécification technique pour la protection des données du
système d'organigramme de clé - Guide
Ta slovenski standard je istoveten z: CEN/TS 17814:2022
ICS:
91.190 Stavbna oprema Building accessories
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

CEN/TS 17814
TECHNICAL SPECIFICATION
SPÉCIFICATION TECHNIQUE
June 2022
TECHNISCHE SPEZIFIKATION
ICS 91.190
English Version
Building hardware - Master Key System data protection -
Guidance
Quincaillerie du bâtiment - Spécification technique Schlösser und Baubeschläge - Datenschutz bei
pour la protection des données du système Schließanlagen - Leitfaden
d'organigramme de clé - Guide
This Technical Specification (CEN/TS) was approved by CEN on 17 May 2022 for provisional application.

The period of validity of this CEN/TS is limited initially to three years. After two years the members of CEN will be requested to
submit their comments, particularly on the question whether the CEN/TS can be converted into a European Standard.

CEN members are required to announce the existence of this CEN/TS in the same way as for an EN and to make the CEN/TS
available promptly at national level in an appropriate form. It is permissible to keep conflicting national standards in force (in
parallel to the CEN/TS) until the final decision about the possible conversion of the CEN/TS into an EN is reached.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway,
Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and
United Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels
© 2022 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TS 17814:2022 E
worldwide for CEN national Members.

Contents Page
European foreword . 3
Introduction . 4
1 Scope . 5
2 Normative references . 5
3 Terms and definitions . 5
4 Requirements . 5
4.1 Planning and ordering of Master Key Systems . 5
4.2 Transmission of Master Key Systems lock charts . 6
4.3 General data handling requirements . 6
4.4 Calculation of Master Key Systems . 6
4.5 Manufacturing of Master Key Systems . 6
4.6 Preparation of keys belonging to Master Key Systems . 6
4.7 Shipment of Master Key System cylinders and keys . 7
4.8 Installation of Master Key Systems. 7
4.9 Management of Master Key System related data during system’s lifetime . 7
5 Verification . 7
5.1 Planning and ordering of Master Key Systems . 7
5.2 Transmission of Master Key System lock charts . 7
5.3 General data handling requirements . 8
5.4 Calculation of Master Key Systems . 8
5.5 Manufacturing of Master Key Systems . 8
5.6 Preparation of keys belonging to Master Key Systems . 8
5.7 Shipment of Master Key System cylinders and keys . 8
5.8 Installation of Master Key Systems. 9
5.9 Management of Master Key System related data during system’s lifetime . 9
Bibliography . 10

European foreword
This document (CEN/TS 17814:2022) has been prepared by Technical Committee CEN/TC 33 “Doors,
windows, shutters, building hardware and curtain walling”, the secretariat of which is held by AFNOR.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CEN shall not be held responsible for identifying any or all such patent rights.
Any feedback and questions on this document should be directed to the users’ national standards body.
A complete listing of these bodies can be found on the CEN website.
According to the CEN-CENELEC Internal Regulations, the national standards organisations of the
following countries are bound to implement this European Standard: Austria, Belgium, Bulgaria, Croatia,
Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland,
Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of North
Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United
Kingdom.
Introduction
to provide guidance for the handling of data that is used in the design, manufacture, supply, installation,
and maintenance of master key systems, constructed from mechanical cylinder locks. This document
provides guidance to working methods and aims to promote this as best practice.
This document has two main sections: Clause 4 Requirements containing the process of handling data
from design through to system maintenance and Clause 5 Verification providing methods of best practice
to ensure compliance with this specification.
It is recommended that any company claiming compliance with this technical specification, carries out
rd
3 party certification of the processes used for Master Key Systems that are provided in accordance with
this document. The process of supplying a Master Key System may be provided by multiple parties within
the supply chain, therefore it is important that manufacturers and suppliers clearly indicate to which
areas of this document they claim compliance.
1 Scope
This document specifies requirements and procedures to achieve and maintain protection of data and
sensitive information related to mechanical Master Key Systems and other mechanical key systems
where customer or application related data are being processed throughout the process of planning,
production, installation, and maintenance.
The requirements and test methods for mechanical cylinder locks is covered by EN 1303.
Reference is made to EN 1303 and Annexes relating to Master Key Systems (MKS).
Requirements relating to the information security of key based and non-key based electronic cylinders
are not covered.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments) applies.
EN 1303:2015, Building hardware - Cylinders for locks - Requirements and test methods
3 Terms and definitions
For the purposes of this document, the terms and definitions given in EN 1303:2015 and the following
apply.
ISO and IEC maintain terminological databases for use in standardization at the following addresses:
— IEC Electropedia: available at https://www.electropedia.org/
— ISO Online browsing platform: available at https://www.iso.org/obp
3.1
Master Key System
MKS
combination of lock cylinders and related keys with different codings and/or profiles which are in
functional relation
3.2
MKS/cylinder manufacturer
company who is owning the design of the cylinders and supplies either the assembled cylinders or
components for assembly of cylinders
Note 1 to entry: See 3.1.
4 Requirements
4.1 Planning and ordering of Master Key Systems
Data to calculate and produce a Master Key System always must be provided without personal
data/information related to the individual key holders. Therefore, key plans, org charts or any other
documents/information provided to plan a system shall always be created without showing any personal
data (e.g. name, function, e
...