SIST EN 15684:2021

Building hardware - Mechatronic cylinders - Requirements and test methods

This document specifies requirements for performance and testing of Mechatronic Cylinders and their keys and/or electronic keys.
It applies to cylinders for such locks designed to be normally used in buildings. It also applies to cylinders for use with other hardware products such as exit devices, door operators, etc. or monitoring facilities and alarm systems.
It establishes categories of use based on performance tests and grades of security based on design requirements and on performance tests that simulate attack.
This document includes assessment of additional features when they are included in the cylinder design.
This document does not cover any other element of a security system, other than those directly involved in the control of a cylinder.
The suitability of cylinders for use on fire or smoke-door assemblies is determined by fire performance tests conducted in addition to the performance testing specified by this document (see Annex A).

Schlösser und Baubeschläge - Mechatronische Schließzylinder - Anforderungen und Prüfverfahren

Dieses Dokument legt Anforderungen an die Leistung und Prüfverfahren für mechatronische Schließzylinder und deren Schlüssel und/oder elektronischen Schlüssel fest.
Sie gilt für Schließzylinder von Schlössern, die dafür ausgelegt sind, üblicherweise in Gebäuden verwendet zu werden. Sie gilt ebenfalls für Schließzylinder, die mit anderen Produkten wie beispielsweise Fluchttürverschlüssen, Türautomatikanlagen usw. oder Überwachungseinrichtungen und Alarmanlagen verwendet werden.
Sie legt auf Leistungsprüfungen basierende Gebrauchsklassen sowie Sicherheitsklassen fest, die auf Konstruktionsanforderungen und Leistungsprüfungen, die Angriffe simulieren, beruhen.
Das vorliegende Dokument enthält eine Beurteilung zusätzlicher Eigenschaften, wenn sie Bestandteil der Schließzylinderkonstruktion sind.
Das vorliegende Dokument behandelt keine anderen Elemente eines Systems, als diejenigen, die unmittelbar mit der Bedienung eines Schließzylinders verbunden sind.
Die Eignung von Schließzylindern für die Verwendung an Feuerschutz  oder Rauchschutztüren wird durch Prüfungen der Feuerwiderstandsfähigkeit bestimmt, die zusätzlich zu den in dem vorliegenden Dokument geforderten Prüfungen der Funktionsfähigkeit durchzuführen sind, siehe Anhang A.

Quincaillerie pour le bâtiment - Cylindres mécatroniques - Exigences et méthodes d'essai

Le présent document spécifie les exigences de performance et d'essai des cylindres mécatroniques et de leurs clés et/ou de leurs clés électroniques.
Il s'applique aux cylindres de serrures conçues pour être normalement utilisées dans les bâtiments. Il s'applique également aux cylindres devant être utilisés avec d'autres produits de quincaillerie tels que les dispositifs de sortie de secours, les actionneurs de porte, etc. ou avec des installations de surveillance et des systèmes d'alarme.
Il définit des catégories d'utilisation basées sur des essais de performance et des niveaux de sécurité basés sur des exigences de conception et sur des essais de performance simulant une effraction.
Le présent document contient une évaluation de caractéristiques supplémentaires lorsqu’elles sont intégrées dans la conception du cylindre.
Le présent document ne couvre aucun élément d’un système autre que ceux directement mis en jeu dans la manoeuvre d’un cylindre.
L'aptitude des cylindres à être utilisés sur des blocs-portes coupe-feu ou pare-flammes est déterminée par des essais de performance au feu réalisés en complément des essais de performance requis par le présent document ; voir l’Annexe A.

Stavbno okovje - Mehatronski valji - Zahteve in preskusne metode

General Information

• Status: Published
• Public Enquiry End Date: 04-Jul-2019
• Publication Date: 10-Dec-2020
• ICS: 91.190 - Building accessories
• Technical Committee: ISTP - Doors and windows
• Current Stage: 6060 - National Implementation/Publication (Adopted Project)
• Start Date: 08-Dec-2020
• Due Date: 12-Feb-2021
• Completion Date: 11-Dec-2020
• Ref Project: EN 15684:2020 - Building hardware - Mechatronic cylinders - Requirements and test methods

Relations

• Replaces: SIST EN 15684:2014 - Building hardware - Mechatronic cylinders - Requirements and test methods
• Effective Date: 01-Jan-2021

Overview

EN 15684:2020 - Building hardware: Mechatronic cylinders - Requirements and test methods is a CEN European Standard that defines performance, testing and classification rules for mechatronic cylinders and their mechanical and electronic keys/credentials used in buildings. It covers cylinders used in locks, exit devices, door operators, monitoring and alarm systems, and specifies how to assess durability, environmental and fire/smoke suitability, key-related security and resistance to attack.

Key topics and requirements

• Scope and applicability: Applies to mechatronic cylinders normally used in buildings; excludes certain motor‑driven cam designs. Suitability for fire/smoke doors is covered by additional fire performance tests (Annex A).
• Performance foundations: Mechanical performance is aligned with EN 1303 and other referenced standards (e.g., EN 1670, EN 1634 series, EN 60068 environmental tests).
• Categories and classification: Establishes a multi‑character classification covering:
  • Category of use
  • Durability
  • Fire/smoke resistance
  • Environmental resistance
  • Mechanical key‑related security
  • Credential (electronic key) security
  • System management
  • Attack resistance
    (Classification rules and examples are provided in Clause 6.)
• Testing and assessment methods: Defines operational tests, durability cycles, environmental (cold/heat, damp heat, vibration, shock), electromagnetic and IP testing, key/credential security checks and simulated attack tests (see Clauses 5 and Annexes B–C).
• Key and credential security: Addresses mechanical coding, effective differs, electronic credentials, audit trail capability, and credential security grading (aligned conceptually with EN 16867).
• System management and documentation: Requires information on system management, product marking and manufacturer declarations (Annex D).

Applications and who uses it

• Manufacturers and designers of mechatronic cylinders and access control hardware - for product development and conformity assessment.
• Test laboratories and certification bodies - to perform reproducible performance and attack tests.
• Specifiers, architects and security consultants - to select cylinders meeting required durability, environmental and security grades for buildings.
• Facility managers, locksmiths and system integrators - to evaluate compatibility with fire doors, alarm systems, door operators and to verify credential and audit‑trail capabilities.
• Regulatory compliance: Manufacturers are expected to consider applicable directives (e.g., RED for radio equipment) and national adoption of the EN standard.

Related standards

• EN 1303 (mechanical cylinder performance)
• EN 1634 series (fire and smoke tests)
• EN 1670 (corrosion resistance)
• EN 60068 series (environmental testing)
• EN 16867 (credential/security principles)

EN 15684:2020 provides a structured, testable framework for assessing modern mechatronic cylinders, helping stakeholders choose and certify access hardware that meets defined security, durability and functional requirements. Keywords: EN 15684:2020, mechatronic cylinders, building hardware, requirements, test methods, attack resistance, credential security.

Standards Content (Sample)

SLOVENSKI STANDARD
01-januar-2021
Nadomešča:
SIST EN 15684:2014
Stavbno okovje - Mehatronski valji - Zahteve in preskusne metode
Building hardware - Mechatronic cylinders - Requirements and test methods
Schlösser und Baubeschläge - Mechatronische Schließzylinder - Anforderungen und
Prüfverfahren
Quincaillerie pour le bâtiment - Cylindres mécatroniques - Exigences et méthodes
d'essai
Ta slovenski standard je istoveten z: EN 15684:2020
ICS:
91.190 Stavbna oprema Building accessories
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EN 15684
EUROPEAN STANDARD
NORME EUROPÉENNE
November 2020
EUROPÄISCHE NORM
ICS 91.190 Supersedes EN 15684:2012
English Version
Building hardware - Mechatronic cylinders - Requirements
and test methods
Quincaillerie pour le bâtiment - Cylindres Schlösser und Baubeschläge - Mechatronische
mécatroniques - Exigences et méthodes d'essai Schließzylinder - Anforderungen und Prüfverfahren
This European Standard was approved by CEN on 25 October 2020.

CEN members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this
European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references
concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to any CEN
member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by
translation under the responsibility of a CEN member into its own language and notified to the CEN-CENELEC Management
Centre has the same status as the official versions.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway,
Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and
United Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels
© 2020 CEN All rights of exploitation in any form and by any means reserved Ref. No. EN 15684:2020 E
worldwide for CEN national Members.

Contents Page
European foreword . 4
Introduction . 5
1 Scope . 6
2 Normative references . 6
3 Terms and definitions . 7
4 Requirements . 10
4.1 General. 10
4.2 Category of use . 10
4.3 Durability requirements . 11
4.4 Fire/smoke resistance . 12
4.5 Environmental resistance . 12
4.6 Key related security . 13
4.7 System management . 18
4.8 Attack resistance requirements . 19
4.9 Requirements for product information . 22
5 Testing, assessment and sampling methods . 23
5.1 General. 23
5.2 Operational test . 23
5.3 Performance tests . 25
5.4 Category of use . 25
5.5 Durability tests . 27
5.6 Fire/smoke resistance tests . 28
5.7 Environmental resistance tests . 28
5.8 Key related security . 30
5.9 System Management . 32
5.10 Attack resistance tests . 32
6 Classification system . 41
6.1 Classification. 41
6.2 Category of use (1st character):. 41
6.3 Durability (2nd character): . 41
6.4 Fire/smoke resistance (3rd character): . 41
6.5 Environmental resistance (4th character): . 41
6.6 Mechanical key related security (5th character): . 42
6.7 Credential related security (6th character): . 42
6.8 System Management (7th character): . 42
6.9 Attack resistance (8th character): . 42
6.10 Example of classification . 42
7 Marking . 42
Annex A (normative) Suitability for use on fire/smoke resistant doors . 43
Annex B (normative) Tool sets for attack resistance tests . 44
Annex C (normative) Table of test procedure . 46
Annex D (informative) Manufacturer’s declaration of compliance . 48

Annex E (informative) Examples of calculation of effective code variations for ICC . 50
Bibliography . 52

European foreword
This document (EN 15684:2020) has been prepared by Technical Committee CEN/TC 33 “Doors,
windows, shutters, building hardware and curtain walling”, the secretariat of which is held by AFNOR.
This European Standard shall be given the status of a national standard, either by publication of an
identical text or by endorsement, at the latest by May 2021, and conflicting national standards shall be
withdrawn at the latest by May 2021.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CEN shall not be held responsible for identifying any or all such patent rights.
This document supersedes EN 15684:2012.
In comparison with EN 15684:2012, the following significant changes have been made:
— Classification - minimum number of codes changed to credential security;
— Classification - attack resistance refers to EN 1303;
— Credential security introduced, with the same principle as in EN 16867.
According to the CEN-CENELEC Internal Regulations, the national standards organisations of the
following countries are bound to implement this European Standard: Austria, Belgium, Bulgaria,
Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland,
Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of
North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the
United Kingdom.
Introduction
Mechanical cylinders have been used to provide security and control of locks. Increasing demand for
higher security, flexibility of master key systems, flow control, copy control of keys, etc. have made it
desirable to incorporate additional functions to such mechanical cylinders, and new technologies have
made it possible to develop electronically controlled cylinders.
Mechanical performance of the mechatronic cylinder is based on EN 1303.
Mechatronic Cylinder can technically be described in three main designs:
— a cylinder with electrical actuator and mechanical operated detaining elements;
— a cylinder with electrically operated locking part and a key for mechanically rotating the plug;
— a cylinder with electrically operated locking part and with manual operated opening/closing
function.
NOTE Motor driven cylinders where the cam is rotated by a motor are not covered by this document.
Increasingly, such Mechatronic Cylinders (MCs) form a part of the security system of a building and may
involve the use of electrical locking and controlling elements.
The performance tests incorporated in this document are considered to be reproducible and as such
will provide a consistent and objective assessment of the performance of these devices throughout CEN
Member States.
It is assumed that MC will conform to the legal regulations, e.g. RED – Radio Equipment Directive
2014/53/EU.
On occasions there may be a need for additional functions within the design of the cylinder. Purchasers
should satisfy themselves that the products are suitable for their intended use. This is particularly
important when the operation of such additional functions is safety-related. Accordingly, this document
includes assessment of such features when they are included in the cylinder design.
1 Scope
This document specifies requirements for performance and testing of Mechatronic Cylinders and their
keys and/or electronic keys.
It applies to cylinders for such locks designed to be normally used in buildings. It also applies to
cylinders for use with other hardware products such as exit devices, door operators, etc. or monitoring
facilities and alarm systems.
It establishes categories of use based on performance tests and grades of security based on design
requirements and on performance tests that simulate attack.
This document includes assessment of additional features when they are included in the cylinder
design.
This document does not cover any other element of a system, other than those directly involved in the
control of a cylinder.
The suitability of cylinders for use on fire or smoke-door assemblies is determined by fire performance
tests conducted in addition to the performance testing specified by this document; see Annex A.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments) applies.
EN 636:2012+A1:2015, Plywood — Specifications
EN 1634-1, Fire resistance and smoke control tests for door and shutter assemblies, openable windows and
elements of building hardware — Part 1: Fire resistance test for door and shutter assemblies and openable
windows
EN 1634-2, Fire resistance and smoke control tests for door, shutter and openable window assemblies and
elements of building hardware — Part 2: Fire resistance characterisation test for elements of building
hardware
EN 1634-3, Fire resistance and smoke control tests for door and shutter assemblies, openable windows and
elements of building hardware — Part 3: Smoke control test for door and shutter assemblies
EN 1670:2007, Building hardware — Corrosion resistance — Requirements and test methods
EN 1906, Building hardware — Lever handles and knob furniture — Requirements and test methods
EN 60068-2-1, Environmental testing — Part 2-1: Tests — Test A: Cold (IEC 60068-2-1)
EN 60068-2-2, Environmental testing — Part 2-2: Tests — Test B: Dry heat (IEC 60068-2-2)
EN 60068-2-6, Environmental testing — Part 2-6: Tests — Test Fc: Vibration (sinusoidal) (IEC 60068-2-6)
EN 60068-2-27, Environmental testing — Part 2-27: Tests — Test Ea and guidance: Shock (IEC 60068-2-
27)
EN 60068-2-30:2005, Environmental testing — Part 2-30: Tests — Test Db: Damp heat, cyclic (12 h + 12 h
cycle) (IEC 60068-2-30:2005)
1)
EN 60529:1991 , Degrees of protection provided by enclosures (IP Code) (IEC 60529:1989)
EN 61000-4-2, Electromagnetic compatibility (EMC) — Part 4-2: Testing and measurement techniques —
Electrostatic discharge immunity test (IEC 61000-4-2)
EN ISO 10666, Drilling screws with tapping screw thread — Mechanical and functional properties
(ISO 10666)
EN ISO 15480, Fasteners — Hexagon washer head drilling screws with tapping screw thread (ISO 15480)
EN ISO 15481, Cross recessed pan head drilling screws with tapping screw thread (ISO 15481)
EN ISO 15482, Cross recessed countersunk head drilling screws with tapping screw thread (ISO 15482)
EN ISO 15483, Cross recessed raised countersunk head drilling screws with tapping screw thread
(ISO 15483)
ISO/IEC 18033-3:2010, Information technology — Security techniques — Encryption algorithms — Part
3: Block ciphers
ISO 10899, High-speed steel two-flute twist drills — Technical specifications
3 Terms and definitions
For the purposes of this document, the following terms and definitions apply.
ISO and IEC maintain terminological databases for use in standardization at the following addresses:
• ISO Online browsing platform: available at https://www.iso.org/obp
• IEC Electropedia: available at http://www.electropedia.org/
3.1
access card
Card or Tag, read only or read write, without integrated circuit, does not provide encryption and which
can be used with contact or contactless
EXAMPLES Magnetic stripe, Wigand, barcode.
3.2
actuator
electrically operated means to effect or enable operation of the MC “at rest” position unforced condition
of the lever handle or knob
3.3
AES
Advanced Encryption Standard
3.4
audit trail capability
degree of functionality intended to provide a record of mechatronic cylinder and/or its electronic key
events that will identify the individual credential used to operate the mechatronic cylinder

1) As impacted by EN 60529:1991/A1:2000 and EN 60529:1991/A2:2013.
3.5
attack
unauthorized attempt to open a mechatronic cylinder by various techniques (destructive and or non-
destructive techniques)
3.6
cam
component of the cylinder to provide the movement necessary to effect locking
3.7
credential
identification means containing information necessary to authorize operation of the MC
3.8
cylinder
device, usually distinct from its associated lock or latch, operated by a key
3.9
direct coding
marking on in the key where the mechanical and/or electronic coding can be determined without
reference to another data source
3.10
effective differ
difference between cylinders of similar design, achieved only by the movable detainer, which enables
each cylinder to be operated only by its own key
Note 1 to entry: The number of effective differs is equal to the number of theoretical differs after deduction of the
differs excluded by the manufacturer due to technical constraints and those differs excluded in accordance with
the restraints of 4.6.2.
3.11
electronic dummy key
electronic key which cannot electronically operate the mechatronic cylinder
Note 1 to entry: If applicable the electronic dummy key has the right mechanical code.
3.12
electronic key
device containing credential(s) necessary to authorize operation of the (mechatronic) cylinder
3.13
False Acceptance Rate
FAR
probability that the system incorrectly authorizes a non-authorized person, due to incorrectly matching
the biometric input with a template
Note 1 to entry: The FAR is normally expressed as a percentage, following the FAR definition this is the
percentage of invalid inputs which are incorrectly accepted.
3.14
FAR-1
FAR-1 (1/FAR) is the inverse of FAR
3.15
Integrated Circuit Card
ICC
Card, Tag or device with an integrated circuit which can be used with contact or contactless (RFID),
Active or passive
EXAMPLES Radio-Frequency Identification (RFID), Smartcard.
3.16
key
separate device corresponding to the cylinder, which can mechanically operate the cylinder
3.17
key way
aperture extending along the whole or part of the length of the plug into which the key is inserted
3.18
knob
element of the cylinder for mechanical hand operation of the cylinder
3.19
mechatronic cylinder
MC
device with an integrated or a remote electronic system, which is to be used with a lock for the purpose
of operating the lock and/or detaining elements after verifying the authorization of an electronic key
Note 1 to entry: It can be replaced by a mechanical cylinder conforming to EN 1303 without replacing any door
furniture.
3.20
moveable detainer
part of the mechanism of a cylinder, which should first be moved by the key into a pre-determined
position before the key and/or plug can move
3.21
outside
side of the door that is facing the uncontrolled area
3.22
plug
part of a cylinder that can be moved when the proper key is used
3.23
steps
cuts in the surface of a bit or blade which operates movable detainers
3.24
thumb turn
element of the cylinder for mechanical finger operation of the cylinder
3.25
time zone
degree of functionality intended to provide security by limiting the time that a valid credential will
operate the MC
3.26
manufacturer
entity or organization that is legally responsible for putting the product on the market
3.27
3DES
Triple Data Encryption Standard
4 Requirements
4.1 General
The structure of the following requirements and test procedures reflects the classification in
accordance with Clause 6.
4.2 Category of use
4.2.1 Key strength
When tested in accordance with 5.4.1 the electronic key shall not break under the applied torque of
2,5 Nm.
After the test, the electronic key shall be capable of being removed from the MC and re-used to operate
the same MC with a torque not exceeding 1,5 Nm.
Compliance is checked by the test method given in 5.4.1.
4.2.2 Stability of electronic key
The electronic key shall be able to withstand a freefall from 1,5 m height, without loss of function and
without the need to reassemble it.
Compliance is checked by the test method given in 5.4.2.
4.2.3 Wrong electronic code
When using an electronic dummy key with the right mechanical code the MC shall be capable of
resisting a torque on the key of 3,5 Nm (or the maximum torque that can be transmitted with the
normal manufacturers key if less than 3,5 Nm) without loss of function.
Compliance is checked by the test method given in 5.10.5.3, however with a torque of 3,5 Nm.
If a MC is equipped with a knob or thumb turn on the outside (replacing the key function) and this MC is
not protected by a clutch to prevent damage in case of excessive torque being applied to the knob or
thumb turn, the MC shall be capable of resisting a torque of 5 Nm +0,25 Nm -0 Nm, without loss of
function.
4.2.4 Bump requirements
The MC and its electronic keys shall be able to withstand bumps.
The MC shall conform to the requirements given in Table 1.
The MC and the electronic key may have temporary degradation or loss of function and/or data, but the
MC shall remain in secured position. The loss of function and/or data shall be self-recoverable within
5 s.
Compliance is checked by the test method given in 5.4.3.
4.2.5 Vibration requirements
The MC and its electronic keys shall be able to withstand vibrations.
The MC shall conform to the requirements given in Table 1.
The MC and the electronic keys may have temporary degradation or loss of function and/or data, but
the MC shall remain in secured position. The loss of function and/or data shall be self-recoverable
within 5 s after the vibration test.
Compliance is checked by the test methods given in 5.4.4.
Table 1 — Bump and Vibration requirements
Test method Grade 1
Bump test 40 g
EN 60068-2-27 (100 bumps / 3 directions) duration per bump 6 ms
- Frequency range: 10 Hz to 150 Hz
- Displacement amplitude: 0,35 mm
Vibrations - Acceleration amplitude: 5 g
EN 60068-2-6 - Duration of endurance in sweep cycles for each axis: 5
- Cross-over frequency : 58 Hz to 62 Hz
- Sweep rate: 1 octave per minute
4.2.6 Electrostatic discharge requirement
The MC and its electronic keys shall be able to withstand high voltage and static electricity. It shall
conform to 4.8.10 grade 0.
The MC and the electronic keys may have temporary degradation or loss of function and/or data, but
the electric blocking of the MC shall remain in secured position. The loss of function and/or data shall
be self-recoverable within 5 s.
Compliance is checked by the test method given in 5.4.5.
4.2.7 Minimum knob transmission
If a MC is equipped with a blocked knob on the outside and this MC is protected by a clutch to prevent
damage in case of excessive torque being applied to the knob, the clutch shall be able to transmit a
minimum torque of 1,5 Nm having been released 100 times within 20 min.
Compliance is checked by the test method given in 5.10.11.
4.3 Durability requirements
When tested in accordance with 5.5, it shall be possible to operate the MC with a new original
authorized electronic key with a torque not exceeding 1,5 Nm after the number of completed test cycles
specified in 6.3.
Compliance is checked by the test method given in 5.2.
4.4 Fire/smoke resistance
The MC shall conform to the requirements of Annex A.
4.5 Environmental resistance
4.5.1 Corrosion resistance requirements
After the corrosion test of 5.7.1, The MC shall operate with authorization not exceeding a torque of
1,5 Nm.
Compliance is checked by the test method in 5.2.
Corrosion resistance is applicable for environmental resistance, grades 2, 3 and 4 (see Table 2). This
corrosion test shall apply to functionality only.
No distinction is made between the inside and the outside of cylinder and/or door.
4.5.2 Resistance of MC against water
The MCs shall have protection, against water.
After being tested as in 5.7.2 for grades 2, 3 and 4 in Table 2 the MC shall operate with its authorized
electronic key.
4.5.3 Dry heat
The MC and its electronic key shall be able to function correctly at different temperatures. It shall also
be able to function correctly after being exposed to thermal shocks. See Tables 2 and 3 for
environmental resistance MC and electronic keys.
Compliance is checked by the test methods of 5.7.3.
4.5.4 Cold
The MC and its electronic key shall be able to function correctly at different low temperatures. It shall
also be able to function correctly after being exposed to thermal shocks. See Tables 2 and 3 for
environmental resistance MC and electronic keys.
Compliance is checked by the test methods of 5.7.4.
4.5.5 Damp heat cyclic
The MC and its electronic keys shall be able to function correctly in an environment of high relative
humidity. See Tables 2 and 3 for environmental resistance MC and electronic keys.
Compliance is checked by the test method of 5.7.5.
4.5.6 Resistance of electronic key against water
The electronic keys shall be able to operate its MC after they have been exposed to water in accordance
with the test described in 5.7.6.
Table 2 — Environmental resistance MC
Requirement Grade
Test
clause
0 1 2 3 4
4.5.1 Corrosion
5.7.1 - - Yes Yes Yes
resistance
4.5.2 Protection of
5.7.2 - - Yes Yes Yes
MC against water
4.5.3 Dry heat +55 °C, +55 °C, +55 °C, +65 °C,
5.7.3 -
16 h 16 h 16 h 16 h
4.5.4 Cold +5 °C, +5 °C, -10 °C, -25 °C,
5.7.4 -
16h 16 h 16 h 16 h
4.5.5 Damp Heat -
+55 °C,
(cyclic)
5.7.5 - - -
6 cycles
Table 3 — Environmental resistance MC Key
Requirement Grade
Test clause
0 1 2 3 4
4.5.6 Resistance of
5.7.6 - - Yes Yes Yes
electronic key against
water
4.5.3 Dry heat +55 °C, +55 °C, +55 °C, +65 °C,
5.7.3 -
16 h 16 h 16 h 16 h
4.5.4 Cold +5 °C, +5 °C, -10 °C, -25 °C,
5.7.4 -
16 h 16 h 16 h 16 h
4.5.5 Damp Heat (cyclic) +55 °C,
5.7.5 - - - -
6 cycles
4.6 Key related security
4.6.1 General
th
For classification of mechanical code variation (5 character), the following requirements shall be
fulfilled:
— 4.6.2; Minimum number of effective mechanical code variations
— 4.6.3; Minimum numbers of movable detainers
— 4.6.4; Maximum number of identical steps
— 4.6.5; Direct coding on key
— 4.6.6; Torque resistance of plug/cylinder relevant to key related security
th
For classification of electronic code variation (6 character), the following requirements shall be
fulfilled:
— 4.6.5; Direct coding on key
— 4.6.6; Torque resistance of plug/cylinder relevant to key related security
— 4.6.7; Operation of security mechanism (inter-passing)
In case of a double cylinder, it is assumed that the grades for both categories apply to the attack
side/outside of the cylinder. This side shall have a proper indication/marking, either on the product or
on the documents with the product.
4.6.2 Minimum number of effective mechanical code variations
The minimum number of effective mechanical code variations of the MC shall be as specified in Table 4.
Compliance is checked by the test method of 5.8.2.
NOTE Grade 0 includes MCs without mechanical code variations.
4.6.3 Minimum numbers of movable detainers
The minimum number of movable detainers shall be as specified in Table 4.
Compliance is checked by the test method of 5.8.3.
4.6.4 Maximum number of identical steps
The choice of key steps for movable detainer operation, which have the same operating level, shall be as
specified in Table 4.
Compliance is checked by the test method of 5.8.4.
NOTE The requirements as specified in Table 4 relate to one row only of movable detainers.
4.6.5 Direct coding on key
Direct key coding shall not be used on electronic keys for key related security grades 3 to 6.
Compliance is checked by the test method of 5.8.5.
4.6.6 Torque resistance of plug/cylinder relevant to key related security
Torque resistance of plug/cylinder shall be classified in relation to mechanical code variations. When
tested as in 5.8.6 the MC shall resist the torque in Table 4 without operating the cylinder. If the torque
cannot be applied, the cylinder shall be deemed to have passed the test.
This requirement is not applicable if the requirement of 4.8.6 is applied.
4.6.7 Operation of security mechanism (interpassing)
For the key related security grades 1, 2 and 3, it shall not be possible before the durability test to
operate the cylinder with the next closest key to its own key using a torque of (1,5 0 +0,2) Nm.
For the key related security grades 4, 5 and 6, it shall not be possible before and after the durability test
to operate the cylinders with the next closest key to its own key using a torque of (1,5 0 +0,2) Nm.
Tested in accordance with 5.8.7.
Table 4 — Mechanical codes
Clause Requirement Test Grades Unit
clause
0 1 2 3 4 5 6
Minimum
number of
effective 100
4.6.2 5.8.2 - 100 300 15 000 30 000 30 000 No
mechanical .000
code variations
a
Minimum
number of
4.6.3 5.8.3 - 2 3 5 5 6 6 No
movable
detainers
Maximum
number of - 100 70 60 60 60 50 %
b
identical steps
4.6.4 5.8.4
Maximum
number of
- 2 2 2 2 2 2 No
identical
b
adjacent steps
Not
Direct coding Not Not Not
4.6.5 5.8.5 - - - allowe -
on key allowed allowed allowed
d
Torque
4.6.6 resistance of 5.8.6 - 2,5 5 15 15 15 15 Nm
plug/cylinder
Operation of
security
c c c d d d
4.6.7 5.8.7 - 1,5 1,5 1,5 1,5 1,5 1,5 Nm
mechanism
(interpassing)
NOTE “-“indicates no requirement
a
The Minimum number of effective differs in Grade 0 includes MCs without mechanical code variations.
b
The Maximum number of identical steps relates to one row only. Rounded to the lower integer.
c
Tested before the durability test.
d
Tested before and after the durability test.
4.6.8 Credential related security
4.6.8.1 General
The MC and its credentials for grade A to D shall have security against code manipulations, brute force
attacks, credential copying, code spying and code guessing regardless of the technique used.
The requirements for the credential related security vary with the different credential techniques used
for the MC. Table 5 shows the requirements for RFID (radio frequency identification, active or passive),
PIN code, magnetic stripe and biometric techniques.
If the method of obtaining access to the MC does not fall into any of these categories, the credential
related security grade shall be declared by analogy to the best comparable technique.
In the case where the MC may be authorized by two of the techniques the grade for credential related
security depends on whether both techniques may be used alternatively to gain access or both
techniques are always used together to gain access. In the first case, the grade is the lower one of the
grades of the individual techniques, in the latter case the grade is one grade higher than the highest
grade of the individual technique, but not higher than the highest possible grade D.
Verified according to subclause 5.8.8.
Table 5 — Credential related security
Technique Requirements 0 A B C D
code variations /
max number of - 10 000 1 000 000 1 000 000 10 000 000
auth. codes
communic
ation
communicati
encrypted
on encrypted
with
no no
with AES
encryption -
4.6.8.2
requirement requirement
3DES
session keys,
ICC
session
unique key
keys,
unique key
3x56 bits
encryption key no no
- 128 bits
K1=K3
length requirement requirement
allowed
no no
copy protection - yes yes
requirement requirement
code variations /
Not Not
max number of - 1 000 10 000
permitted permitted
auth. codes
dead time
dead time after failed
4.6.8.3
additional security Not Not
- after failed attempt and
features permitted permitted
PIN code
attempt protected
visibility
Not Not
T - T = 6 h T = 24 h
permitted permitted
code variations /
Not Not
max number of
4.6.8.4 - 10 000 1 000 000
permitted permitted
auth. codes
Access Card
copy protection Not Not
- - -
permitted permitted
Technique Requirements 0 A B C D
T = the maximum
number of codes of
the unit divided by
the read speed (the
number of possible Not Not
- T = 6 h T = 24 h
codes per hour), permitted permitted
divided by the
number of possible
users and divided
by 2.
-1
FAR / max.
Not
number of auth.
4.6.8.5 - 100 1 000 10 000
permitted
templates
Biometrics
additional security alive alive Not

- -
features detection detection permitted
NOTE 1 Requirements in Table 5 verified according to subclause 5.8.8.
NOTE 2 Grade D is not achievable for pure biometric systems. Grade C and D are not achievable for pure PIN code
or access card systems
4.6.8.2 ICC
4.6.8.2.1 Effective code variations
The effective code variations are all code variations possible by design divided by the maximum
possible number of authorized codes on one MC. It shall be at least the number according to Table 5.
NOTE 1 In the case where the unique ID of the RFID is used, this corresponds to the possible variations of the
unique ID divided by the maximum possible number of authorized credentials.
NOTE 2 Examples are given in Annex E.
4.6.8.2.2 Encryption
In grade C, the data on the RFID or the communication between RFID and MC shall be encrypted by any
encryption algorithm. The length of the encryption key shall be at least 48 Bits long.
In grade D, the communication between the RFID and the MC shall be encrypted by the AES encryption
method according to ISO/IEC 18033-3:2010, 5.2. The encryption key shall be at least 128 Bits long. For
each communication attempt (session) a new session key shall be created and used for the
communication. Session keys and encryption keys shall never be broadcasted (challenge response
technique). The encryption key shall be unique for each system installation of MCs or, alternatively,
shall be user configurable.
If the cylinder is able to carry out various techniques, it shall be noted in the product information with
which method which encryption grade can be achieved.
4.6.8.2.3 Copy protection
In grades C and D the credential shall be copy protected. It shall not be possible to copy an authorized
credential using standard third party equipment.
4.6.8.3 PIN Code
4.6.8.3.1 Effective code variations
The effective code variations are the possible code variations divided by the maximum number of
possible authorized codes on one MC. It shall be at least the number according to Table5.
NOTE In the case of a 4 digit PIN code and a maximum number of 10 users, the effective code variations are
1 000.
4.6.8.3.2 Dead time failed attempts
The MC shall have the security feature that makes it impossible to try out all or a large portion of all
possible codes within a reasonable time.
4.6.8.3.3 Protected visibility
For MCs grade B the included angle over which code information may optically be observed shall be not
more than 30° about the centre-line.
4.6.8.3.4 Mean time to gain access by trying
The mean time to gain access by trying T shall be greater than the time stated in Table 5. T is calculated
by the maximum number of codes of the unit divided by the read speed (the number of possible codes
per hour), divided by the number of possible users, divided by 2.
4.6.8.4 Access Card
4.6.8.4.1 Effective code variations
The effective code variations are all code variations possible by design divided by the maximum
possible number of authorized codes on one MC. It shall be at least the number according to Table 5.
4.6.8.4.2 Mean time to gain access by trying
The mean time to gain access by trying T shall be greater than the time stated in Table 5. T is calculated
by the maximum number of codes of the unit divided by the read speed (the number of possible codes
per hour), divided by the number of possible users, divided by 2.
4.6.8.5 Biometrics
-1
4.6.8.5.1 FAR divided by maximum number of authorized templates
The analogy of effective code variations in biometric systems is the inverse of the false acceptance rate
(FAR-1) divided by the maximum possible number of authorized templates on one MC. It shall be at
least the number according to Table 5.
4.6.8.5.2 Alive detection
In grades B and C the MC shall be able to detect whether the presented credential (fingerprint, hand
vein image, iris image) comes from an alive human to prevent that artificially produced images may be
successfully presented to the MC.
4.7 System management
The audit trail record shall be stored in a form of non-volatile memory or data shall otherwise be
preserved during removal of power supply. The MC shall have time zoning capability as specified in
Table 6.
Table 6 — Audit trail and time zone
Grade 0 No requirement
Grade 1 Time zone without audit trail
Grade 2 Audit trail capability without time zone
Grade 3 Audit trail capability and time zone
Time zone and audit trail capability shall be protected against manipulation.
Compliance is checked by the test method of 5.9.
4.8 Attack resistance requirements
4.8.1 General
The MC shall conform to the requirements in 4.8.2 to 4.8.11.
In case a MC is equipped with a knob or thumb turn on the attack side the MC should conform to the
same performance (test requirements) in accordance with 5.10.4, using an appropriate tool for pulling a
knob or thumb turn. When the knob or thumb turn can be removed with common tools and/or hitting
in accordance with the chisel test given in 5.10.2, the test shall be performed without the knob or thumb
turn.
The requirements for each grade are described in Table 7.
4.8.2 Resistance to drilling
After testing in accordance with 5.10.1, the lock driving element of the cylinders shall not rotate without
the correct key, using a maximum torque of 5 Nm. It is not necessary for the correct key to operate the
cylinder after testing.
4.8.3 Resistance to attack by chisel
After testing in accordance with 5.10.2, the lock driving element of the cylinders shall not rotate without
the correct key, using a maximum torque of 5 Nm. It is not necessary for the correct key to operate the
cylinder after testing.
4.8.4 Resistance to attack by twisting
After testing in accordance with 5.10.3, the lock driving element of the cylinders shall not rotate without
the correct key, using a maximum torque of 5 Nm. It is not necessary for the correct key to operate the
cylinder after testing.
4.8.5 Resistance to attack by plug/cylinder extraction
After testing in accordance with 5.10.4, the cam of the cylinders shall not rotate manually with 5 Nm
through 360°, or in the case of cylinders with restricted movement, to the maximum permitted by the
design.
It is not necessary for the correct key to operate the cylinder after testing.
4.8.6 Torque resistance of plug/cylinder relevant to attack resistance
After testing in accordance with 5.10.5, the plug and/or cylinder in attack resistance grades A to D shall
not rotate using the applied torque specified in Table 7.
It is not necessary for the correct key to operate the cylinder after testing.
4.8.7 Attack by hits
When tested in accordance with 5.10.6 the MC and its electronic keys shall be able to withstand opening
by hits within the time specified in Table 7.
4.8.8 Attack by vibrations
When tested in accordance with 5.10.7 the MC and its electronic keys shall be able to withstand opening
by vibrations within the time specified in Table 7.
4.8.9 Increased voltage attack
The MC and its electronic keys shall be able to withstand electrical attacks by using higher voltage than
the normal supply voltage DC specified by the manufacturer. The MC or electronic key may have
degradation or loss of function which is not recoverable, due to damage of equipment or firmware or
loss of data. The electric blocking of the MC shall remain in a locked position.
Compliance is checked by the test method given in 5.10.8.
4.8.10 Electrostatic discharge attack
The MC and its electronic keys should be able to withstand electrical attacks and manipulation using
high voltage and static electricity specified in Table 7.
For grades 0, A to D the MC or electronic key may have degradation or loss of function which is not
recoverable, due to damage of equipment or software, or loss of data. The electric blocking of MC shall
remain in locked position.
Compliance is checked by the test method given in 5.10.9.
4.8.11 Magnetic field attack
The MC and its electronic keys, shall in grade A, B, C or D be able to withstand attacks and manipulation
using a magnetic field. It shall not be possible to move the electronic blocking element from a closed to
an open position by a magnet from any direction of the MC available after installation.
The MC shall withstand 2 min of attack by a maximum 0,6 T magnet.
The MC or electronic key may have degradation or loss of function which is not recoverable, due to
damage of equipment or software, or loss of data. The electric blocking of the MC shall remain in locked
position.
Compliance is checked by the test method given in 5.10.10.
Table 7 — Attack resistance
Sub-
Test
clause Requirement Parameter Grade 0 Grade A Grade B Grade C Grade D
clause
number
Effective
3 min 5 min 3 min 5 min
Resistance to
time
4.8.2 5.10.1 -
drilling
Total time 5 min 10 min 5 min 10 min
Resistance to
Number of
4.8.3 attack by 5.
...