SIST EN 60839-11-31:2017

Alarm and electronic security systems - Part 11-31: Electronic access control systems - Core interoperability protocol based on Web services

This part of IEC 60839 defines procedures for communication between network clients and
devices. This series of interoperability standards makes it possible to build an alarm and
electronic security system with clients and devices from different manufacturers using
common and well defined interfaces. The functions defined in this document covers discovery,
device management and event framework. Supplementary dedicated services are defined in
separate documents.
The management and control interfaces defined in this document are described as Web
services. This document also contains full XML schema and Web Service Description
Language (WSDL) definitions.
In order to offer full plug-and-play interoperability, this document defines procedures for
device discovery. The device discovery mechanisms in this document are based on the WSDiscovery
specification with extensions.
This document does not in any way limit a manufacturer to add other protocol or extend the
protocol defined here and rules on how to accomplish this are also provided in this document.

Alarmanlagen - Teil 11-31: Elektronische Zutrittskontrollanlagen - Basis Kommunikationsprotokoll basierend auf Web Services

Systèmes d'alarme et de sécurité électroniques - Partie 11-31: Systèmes de contrôle d'accès électronique - Protocole de base d’interopérabilité en fonction des services Web

L'IEC 60839-11-31:2016 définit les procédures de communication entre les clients en réseau et les dispositifs. Cette série de normes relatives à l’interopérabilité permet de concevoir un système d'alarme et de sécurité électronique avec des clients et des dispositifs de différents fabricants utilisant des interfaces communes et bien définies. Les fonctions définies dans le présent document couvrent la découverte, la gestion de dispositif et le cadre des événements. Des services spécialisés supplémentaires sont définis dans des documents séparés. Les interfaces de gestion et de contrôle définies dans le présent document sont décrites sous forme de services Web. Le présent document comprend également les définitions complètes du schéma XML et du langage de description de services Web (WSDL). Afin d'offrir une interopérabilité complète et prête à l'emploi, le présent document définit les procédures de découverte de dispositif. Les mécanismes de découverte de dispositif du présent document reposent sur la spécification WS-Discovery, avec des extensions.

Alarmni in elektronski varnostni sistemi - 11-31. del: Elektronski sistemi nadzora dostopa - Osnovni protokol interoperabilnosti na osnovi spletnih storitev

Ta del standarda IEC 60839 določa postopke za komunikacijo med omrežnimi odjemalci in napravami. Ta skupina standardov interoperabilnosti omogoča izgradnjo alarmnega in elektronskega varnostnega sistema z odjemalci in napravami različnih proizvajalcev, ki uporabljajo skupne in dobro opredeljene vmesnike. Funkcije, opredeljene v tem dokumentu, zajemajo odkritje, upravljanje naprav in okvir dogodkov. Dopolnilne namenske storitve so opredeljene v ločenih dokumentih.
Upravljalni in nadzorni vmesniki, opredeljeni v tem dokumentu, so opisani kot spletne storitve. Ta dokument vsebuje tudi definicije celotne sheme XML in jezika WSDL (Web Service Description Language).
Za namene zagotavljanja polne interoperabilnosti Plug and Play ta dokument opredeljuje postopke za odkrivanje naprav. Mehanizmi odkrivanja naprav v tem dokumentu temeljijo na specifikaciji WSDiscovery z razširitvami.
Ta dokument na noben način ne omejuje proizvajalca, da bi dodal druge protokole ali razširil pomen tukaj opredeljenega protokola, prav tako pa zagotavlja tudi pravila, kako naj to izvede.

General Information

• Status: Published
• Publication Date: 16-May-2017
• ICS: 13.320 - Alarm and warning systems
• Technical Committee: EAL - Alarm systems
• Current Stage: 6060 - National Implementation/Publication (Adopted Project)
• Start Date: 21-Apr-2017
• Due Date: 26-Jun-2017
• Completion Date: 17-May-2017
• Ref Project: EN 60839-11-31:2017 - Alarm and electronic security systems - Part 11-31: Electronic access control systems - Core interoperability protocol based on Web services

Relations

• Revised: SIST EN 62676-2-3:2014 - Video surveillance systems for use in security applications - Part 2-3: Video transmission protocols - IP interoperability implementation based on web services
• Effective Date: 05-Nov-2019

Standards Content (Sample)

SLOVENSKI STANDARD
SIST EN 60839-11-31:2017
01-junij-2017
Alarmni in elektronski varnostni sistemi - 11-31. del: Elektronski sistemi nadzora
dostopa - Osnovni protokol interoperabilnosti na osnovi spletnih storitev
Alarm and electronic security systems - Part 11-31: Electronic access control systems -
Core interoperability protocol based on Web services
Systèmes d'alarme et de sécurité électroniques - Partie 11-31: Systèmes de contrôle
d'accès électronique - Protocole de base d’interopérabilité en fonction des services Web
Ta slovenski standard je istoveten z: EN 60839-11-31:2017
ICS:
13.320 Alarmni in opozorilni sistemi Alarm and warning systems
SIST EN 60839-11-31:2017 en
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------

SIST EN 60839-11-31:2017

---------------------- Page: 2 ----------------------

SIST EN 60839-11-31:2017


EUROPEAN STANDARD EN 60839-11-31

NORME EUROPÉENNE

EUROPÄISCHE NORM
March 2017
ICS 13.320

English Version
Alarm and electronic security systems -
Part 11-31: Electronic access control systems - Core
interoperability protocol based on Web services
(IEC 60839-11-31:2016)
Systèmes d'alarme et de sécurité électroniques -  Alarmanlagen -
Partie 11-31: Systèmes de contrôle d'accès électronique - Teil 11-31: Elektronische Zutrittskontrollanlagen - IP
Protocole de base d'interopérabilité en fonction des Interoperabilität auf Basis von Webservices -
services Web Kernspezifikation
(IEC 60839-11-31:2016) (IEC 60839-11-31:2016)
This European Standard was approved by CENELEC on 2016-12-29. CENELEC members are bound to comply with the CEN/CENELEC
Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration.
Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC
Management Centre or to any CENELEC member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by translation
under the responsibility of a CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the
same status as the official versions.
CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic,
Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia,
Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden,
Switzerland, Turkey and the United Kingdom.


European Committee for Electrotechnical Standardization
Comité Européen de Normalisation Electrotechnique
Europäisches Komitee für Elektrotechnische Normung
CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2017 CENELEC All rights of exploitation in any form and by any means reserved worldwide for CENELEC Members.
 Ref. No. EN 60839-11-31:2017 E

---------------------- Page: 3 ----------------------

SIST EN 60839-11-31:2017
EN 60839-11-31:2017
European foreword
The text of document 79/522/CDV, future edition 1 of IEC 60839-11-31, prepared by
IEC/TC 79 "Alarm and electronic security systems" was submitted to the IEC-CENELEC parallel vote
and approved by CENELEC as EN 60839-11-31:2017.

The following dates are fixed:
(dop) 2017-09-29
• latest date by which the document has to be
implemented at national level by
publication of an identical national
standard or by endorsement
• latest date by which the national (dow) 2019-12-29
standards conflicting with the
document have to be withdrawn

Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CENELEC [and/or CEN] shall not be held responsible for identifying any or all such
patent rights.

Endorsement notice
The text of the International Standard IEC 60839-11-31:2016 was approved by CENELEC as a
European Standard without any modification.
2

---------------------- Page: 4 ----------------------

SIST EN 60839-11-31:2017
EN 60839-11-31:2017
Annex ZA
(normative)

Normative references to international publications
with their corresponding European publications

The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated
references, the latest edition of the referenced document (including any amendments) applies.

NOTE 1 When an International Publication has been modified by common modifications, indicated by (mod), the relevant
EN/HD applies.

NOTE 2 Up-to-date information on the latest versions of the European Standards listed in this annex is available here:
www.cenelec.eu

Publication Year Title EN/HD Year

IEEE 1003.1 - The Open Group Base Specifications
Issue 6, IEEE Std 1003.1, 2004 Edition
IEEE 802.11 2007 IEEE Standard for Information technology - - -
Telecommunications and information
exchange between systems - Local and
metropolitan area networks - Specific
requirements - Part 11: Wireless LAN
Medium Access Control (MAC) and
Physical Layer (PHY) Specifications
IEEE 802.1X 2004 Port Based Network Access Control - -
IETF RFC 952 -  DoD Internet Host Table Specification - -
IETF RFC 1123 1989 Requirements for Internet Hosts - - -
Application and Support
IETF RFC 2131 -  Dynamic Host Configuration Protocol - -
IETF RFC 2136 -  Dynamic Updates in the Domain Name - -
System (DNS UPDATE)
IETF RFC 2246 -  The TLS Protocol Version 1.0 - -
IETF RFC 2617 -  HTTP Authentication: Basic and Digest - -
Access Authentication
IETF RFC 2986 -  PKCS #10: Certification Request Syntax - -
Specification Version 1.7
IETF RFC 3268 -  Advanced Encryption Standard (AES) - -
Cipher suites for Transport Layer Security
(TLS)
IETF RFC 3315 -  Dynamic Host Configuration Protocol for - -
IPv6 (DHCPv6)
IETF RFC 3927 -  Dynamic Configuration of IPv4 Link-Local - -
Addresses
IETF RFC 4122 -  A Universally Unique IDentifier (UUID) - -
URN Namespace
3

---------------------- Page: 5 ----------------------

SIST EN 60839-11-31:2017
EN 60839-11-31:2017
Publication Year Title EN/HD Year

IETF RFC 4514 -  Lightweight Directory Access Protocol - -
(LDAP): String Representation of
Distinguished Names
IETF RFC 4702 -  The Dynamic Host Configuration Protocol - -
(DHCP) Client Fully Qualified Domain
Name (FQDN) Option
IETF RFC 4861 -  Neighbor Discovery for IP version 6 (IPv6) - -
IETF RFC 4862 -  IPv6 Stateless Address Auto configuration - -
ISO/IEC 8824-2 -  Information technology - Abstract Syntax - -
Notation One (ASN.1): Information object
specification
ISO/IEC 8824-3 -  Information technology - Abstract Syntax - -
Notation One (ASN.1): Constraint
specification
ISO/IEC 8824-4 -  Information technology - Abstract Syntax - -
Notation One (ASN.1): Parameterization of
ASN.1 specifications
ISO/IEC 8825-1 -  Information technology - ASN.1 encoding - -
rules: Specification of Basic Encoding
Rules (BER), Canonical Encoding Rules
(CER) and Distinguished Encoding Rules
(DER)
OASIS WS- - Web Services Base Notification 1.3 (WS-
BaseNotification BaseNotification)
OASIS WS-Topics - Web Services Topics 1.3 (WS-Topics)
W3C SOAP-MTOM -  SOAP Message Transmission Optimization - -
Mechanism
W3C SOAP Part 1 -  SOAP Version 1.2 - Part 1: Messaging - -
Framework
W3C -  Web Services Addressing 1.0 - Core - -
WS-Addressing
WS-I BP 2.0 - Basic Profile Version 2.0
XMLSOAP - Web Services Dynamic Discovery (WS-
WS-Discovery Discovery)”, J. Beatty et al.,
April 2005

4

---------------------- Page: 6 ----------------------

SIST EN 60839-11-31:2017




IEC 60839-11-31

®


Edition 1.0 2016-11




INTERNATIONAL



STANDARD




NORME



INTERNATIONALE
colour

inside










Alarm and electronic security systems –

Part 11-31: Electronic access control systems – Core interoperability protocol

based on Web services




Systèmes d'alarme et de sécurité électroniques –

Partie 11-31: Systèmes de contrôle d'accès électronique – Protocole de base


d’interopérabilité en fonction des services Web













INTERNATIONAL

ELECTROTECHNICAL

COMMISSION


COMMISSION

ELECTROTECHNIQUE


INTERNATIONALE




ICS 13.320 ISBN 978-2-8322-3778-6



Warning! Make sure that you obtained this publication from an authorized distributor.

Attention! Veuillez vous assurer que vous avez obtenu cette publication via un distributeur agréé.

® Registered trademark of the International Electrotechnical Commission
Marque déposée de la Commission Electrotechnique Internationale

---------------------- Page: 7 ----------------------

SIST EN 60839-11-31:2017
– 2 – IEC 60839-11-31:2016 © IEC 2016
CONTENTS
FOREWORD . 10
INTRODUCTION . 12
1 Scope . 13
2 Normative references . 13
3 Terms, definitions and abbreviated terms . 15
3.1 Terms and definitions . 15
3.2 Abbreviated terms . 16
4 Overview . 17
4.1 General . 17
4.2 Web services . 17
4.3 IP configuration . 18
4.4 Device discovery . 18
4.5 Device management . 19
4.5.1 General . 19
4.5.2 Capabilities. 19
4.5.3 Network . 19
4.5.4 System . 20
4.5.5 Retrieval of system information . 20
4.5.6 Firmware upgrade . 20
4.5.7 SystemRestore . 20
4.5.8 Security . 20
4.6 DeviceIO . 21
4.7 Event handling . 21
4.8 Security . 21
5 Web services framework . 21
5.1 General . 21
5.2 Services overview . 22
5.2.1 General . 22
5.2.2 Services requirements . 22
5.3 WSDL overview . 22
5.4 Namespaces . 23
5.5 Types. 24
5.6 Messages . 24
5.7 Operations . 25
5.7.1 General . 25
5.7.2 One-way operation type . 26
5.7.3 Request-response operation type . 26
5.8 Port types . 27
5.9 Binding . 27
5.10 Ports . 27
5.11 Services . 28
5.12 Error handling . 28
5.12.1 General . 28
5.12.2 Protocol errors . 28
5.12.3 SOAP errors . 28
5.13 Security . 31

---------------------- Page: 8 ----------------------

SIST EN 60839-11-31:2017
IEC 60839-11-31:2016 © IEC 2016 – 3 –
5.13.1 Authentication. 31
5.13.2 User-based access control . 31
5.14 String representation . 33
5.14.1 Character set . 33
5.14.2 Allowed characters in strings . 33
5.15 Proprietary extensions . 33
6 IP configuration . 33
7 Device discovery . 34
7.1 General . 34
7.2 Modes of operation . 34
7.3 Discovery definitions . 35
7.3.1 Endpoint reference . 35
7.3.2 Hello . 35
7.3.3 Probe and probe match . 36
7.3.4 Resolve and resolve match . 37
7.3.5 Bye . 37
7.3.6 SOAP fault messages . 37
8 Device management . 37
8.1 General . 37
8.2 Capabilities . 38
8.2.1 Get WSDL URL . 38
8.2.2 Capability exchange . 38
8.3 Network . 40
8.3.1 Get hostname . 40
8.3.2 Set hostname . 40
8.3.3 Set hostname from DHCP . 41
8.3.4 Get DNS settings . 41
8.3.5 Set DNS settings . 42
8.3.6 Get NTP settings . 42
8.3.7 Set NTP settings. 43
8.3.8 Get dynamic DNS settings . 43
8.3.9 Set dynamic DNS settings . 44
8.3.10 Get network interface configuration . 44
8.3.11 Set network interface configuration . 45
8.3.12 Get network protocols . 46
8.3.13 Set network protocols . 47
8.3.14 Get default gateway . 47
8.3.15 Set default gateway . 48
8.3.16 Get zero configuration . 48
8.3.17 Set zero configuration . 48
8.3.18 Get IP address filter . 49
8.3.19 Set IP address filter . 49
8.3.20 Add an IP filter address . 50
8.3.21 Remove an IP filter address . 50
8.3.22 IEEE 802.11 configuration . 51
8.4 System . 55
8.4.1 Device information . 55
8.4.2 Get system URIs . 55
8.4.3 Backup . 56

---------------------- Page: 9 ----------------------

SIST EN 60839-11-31:2017
– 4 – IEC 60839-11-31:2016 © IEC 2016
8.4.4 Restore. 56
8.4.5 Start system restore . 57
8.4.6 Get system date and time . 57
8.4.7 Set system date and time . 58
8.4.8 Factory default. 59
8.4.9 Firmware upgrade . 59
8.4.10 Start firmware upgrade . 60
8.4.11 Get system logs . 61
8.4.12 Get support information . 61
8.4.13 Reboot. 62
8.4.14 Get scope parameters . 62
8.4.15 Set scope parameters . 62
8.4.16 Add scope parameters . 63
8.4.17 Remove scope parameters . 63
8.4.18 Get discovery mode . 64
8.4.19 Set discovery mode . 64
8.5 Security . 65
8.5.1 General . 65
8.5.2 Get access policy . 65
8.5.3 Set access policy . 65
8.5.4 Get users . 65
8.5.5 Create users . 66
8.5.6 Delete users . 67
8.5.7 Set users settings . 67
8.5.8 IEEE 802.1X configuration . 68
8.5.9 Create self-signed certificate . 71
8.5.10 Get certificates . 71
8.5.11 Get CA certificates . 71
8.5.12 Get certificate status . 72
8.5.13 Set certificate status . 72
8.5.14 Get certificate request . 72
8.5.15 Get client certificate status . 73
8.5.16 Set client certificate status . 73
8.5.17 Load device certificate . 74
8.5.18 Load device certificates in conjunction with its private key . 74
8.5.19 Get certificate information request . 75
8.5.20 Load CA certificates . 76
8.5.21 Delete certificate . 76
8.5.22 Get remote user . 76
8.5.23 Set remote user . 77
8.5.24 Get endpoint reference . 77
8.6 Auxiliary operation . 78
8.7 Monitoring events . 78
8.7.1 Processor usage . 78
8.7.2 Link status . 79
8.7.3 Upload status . 79
8.7.4 Operating time . 79
8.7.5 Environmental conditions . 81
8.7.6 Battery capacity . 81

---------------------- Page: 10 ----------------------

SIST EN 60839-11-31:2017
IEC 60839-11-31:2016 © IEC 2016 – 5 –
8.7.7 Device management . 82
8.8 Service specific fault codes . 82
9 Device I/O . 86
9.1 General . 86
9.2 Relay outputs . 86
9.2.1 Overview . 86
9.2.2 Get relay outputs . 86
9.2.3 Get relay output options. 86
9.2.4 Set relay output settings . 87
9.2.5 Trigger relay output . 88
9.3 Digital inputs . 88
9.3.1 Overview . 88
9.3.2 GetDigitalInputs . 88
9.4 SerialPorts . 89
9.4.1 Overview . 89
9.4.2 GetSerialPorts . 89
9.4.3 GetSerialPortConfiguration . 89
9.4.4 SetSerialPortConfiguration . 89
9.4.5 GetSerialPortConfigurationOptions . 90
9.4.6 Send and/or Receive serial command . 90
9.5 Capabilities . 92
9.6 Events . 92
9.6.1 DigitalInput state change . 92
9.6.2 Relay output trigger .
...