Engineered Solutions | BIS - Access Engine (ACE) 4.6

BIS - Access Engine (ACE) 4.6

www.boschsecurity.com

u Distributed access control system with graphicalalarm management

u Seamless integration and interaction with video,fire, intrusion and PA/VA systems via the commonBIS platform

u High resilience thanks to a 4-tier systemarchitecture and redundancy of critical components

u Integration of third-party products via openprotocols and SDK

u Efficient enrollment process that makes onboardingfaster and more secure

Access control has become one of today's mostimportant technologies for increasing the security ofpeople, property, and assets. The BIS Access Engineand sophisticated controller products provide a widerange of access control features.Combine the basic Access Engine package withoptional features to build a customized access controlsystem that meets your needs. Then use the BuildingIntegration System software to integrate the AccessEngine with your intrusion and video securityequipment.

System overview

The Access Engine (ACE) software, in conjunction withBosch access hardware, is a complete access controlsystem within the Building Integration System (BIS). Itencompasses all the essential features of anystandalone access control system, plus a wide rangeof optional enhancements.Like the other BIS engines, the ACE takes fulladvantage of all the extra BIS features, such asinteractive location maps and action plans forpowerful, fully integrated alarm management. Alarm

messages and access control events can be displayedwith graphical location information and workflowinstructions.ACE uses the standard BIS user interfaces and theirflexibility of customization. Additionally ACE offersspecific access configuration interfaces forcardholders, access hardware and access rules.The main benefit of the Building Integration Systemfamily is the integration of a wide variety of securityand safety systems on the same premises. Bycombining ACE with other BIS engines (e.g.Automation and Video) you can design smart securitysolutions tailored exactly to the requirements of yourtender.The Access Engine runs on a single-workstation, in aclient-server system, or within a distributedenvironment with a central server and local or regionalservers.In the distributed multi-server environment all devices,cardholders and authorizations can be managed fromthe top-level server.

Pos. Description (single-server system)

1 Central BIS server with Access Engine and Video Engine SW

2 Multiple workstations for alarm management or enrollment

3 Enrollment devices such as card printer, signature scanner,enrollment reader, camera for ID photos

4 Access controllers

5 Access readers

6 Door strikes

7 IP camera

8 Digital Video Recorder e.g. DIVAR for alarm recording

Functions

The Access Engine basic package, in combination withAMC access controllers, offers the following features:

• A wide range of intuitive, template door modelsallowing fast and easy hardware configuration (e.g.standard door, turnstile, elevator with time &attendance readers etc.).

• Door model configuration dialog generates a wiringplan for the hardware installer.

• On-the-fly activation of reader and cardholderconfigurations in the access controllers.

• Time models for time-based access control, includingthe definition of special days, recurring publicholidays, etc.

• Time models for automatic activation/deactivation ofcardholder accounts, such as access rules, PIN codesetc.

• Time models for automatic activation/deactivation ofsystem settings, such as setting an office door to stayunlocked from 9 a.m. to 5 p.m.

• Additional PIN code for arming /disarming intruderalarms.

• Temporary blocking / unblocking of cardholders,either manually or time-controlled.

• Blacklisting of cards.

• New: User-definable dialog manager to collect onlyrelevant personal information.

• Anti-passback.• Access area balancing including access sequence

checking provides a means of limiting the number ofpeople in a given area, automatic arming/disarming ifarea is empty/not empty and muster list generation.

• N-Persons authorization will grant access at a dooronly when a defined number (N) of authorizedcardholders present their badges to acorrespondingly configured reader. The setting canbe made reader by reader, and from 2 to N (no limit)persons.

• Mantrap feature for managing two cooperating doorswith two pairs of readers; recommended for highsecurity levels, e.g. entrances to server rooms orresearch departments.

• Improved guard tour: a state-of-the-art patrol trackingsystem using existing access control readers, access-sequence and access-time checking. Any violation ofpatrol sequence or timing causes an alarm, which isthen tracked by BIS’s sophisticated alarmmanagement features. Guard tour reports can begenerated from the BIS event log.

• Random screening feature: Cardholders accessing orleaving the site can be stopped at random intervalsand directed to security personnel for closerinspection. Cards belonging to designated “VIPs“ canbe excluded from random screening.

• Visitor management: Visitors’ cards can be trackedand handled separately as regards their validityperiods and the possible need for an escort.

• Interface for arming/disarming an IDS (IntrusionDetection System) including authorization handlingand card assignment.

• New: all personal information (including. photos andsignatures) are stored in a secure SQL data base forbetter data security.

2 | BIS - Access Engine (ACE) 4.6

• Elevator interface for controlling up to 64 floors via anelevator-internal card reader, and for the assignmentof floor authorizations to cardholders.

• Interface for importing personnel data from an HRsystem or exporting such information from ACE tosuch a system.

• Improved card personalization for importingcardholder images and creating customized corporatebadge designs printable on standard card printers.

• A routing feature to ensure that personnel followprescribed routes within the premises.

• Remote door unlock feature e.g. by mouse click on anicon in a BIS interactive location map.

• Creation of logical areas, e.g. single rooms, groups ofrooms, whole floors or parking lots, to which specialaccess control points can be assigned.

• The ability to limit the number of people or carsaccessing a logical area.

• Full archive and restore capability for system data.• Flexible alarm management for a huge range of alarm

conditions (e.g. denied access, tamper-detection,badge blacklisted, duress alarm, etc.) optionallycombinable with BIS features such as interactivelocation maps and action plans.

• Utilization of the Bosch controller family's digital,monitored I/Os for additional control and monitoringfunctions, including intrusion- and tamper-detection.

• Easy integration with Bosch or 3rd party videosystems such as matrix switches, DVRs, IP-camerasetc.

• Detailed logging of access events and alarms for legalcompliance and forensic investigation.

– Audit trail for changes to master records andauthorizations, including creation, modificationand deletion of records.

– Integrated reporting with filtering capability.– Export to standard CSV-format for further

processing.• Support for up to eight different card formats

simultaneously.• Mass data change for authorizations and other data.• Comprehensive online help.

Video verificationVideo verification extends the security level of youraccess control system through video technology. Whena reader is in video verification mode the cardholder isnot admitted directly. Instead the reader performs arequest for entrance which appears as a message onthe operator's screen.An Action Plan (see BIS optional accessories) showsthe operator the cardholder’s image as stored in theACE database in conjunction with a live image from a

camera near the entrance/reader that sent therequest. The operator compares both images anddecides whether or not to open the door.

Parking lot management

This feature allows the definition and use of the doormodel “parking lot” which contains the control of twobarriers for entrance and exit and their traffic lights,which prevent access when the lot has reachedmaximum capacity.Each parking lot can be divided into logical areas, witha maximum number of cars defined for each.Authorization to pass the barrier and park in a logicalarea can be assigned to cardholders in the standarddialogs. Load-balancing of the parking lots is alsopossible, with current capacity information displayedon the operator’s screen. Load balancing of cars(parking lots) and persons (access areas) is handledseparately, so that it is possible to track the locationof both cardholder and car simultaneously.

Accessories for BIS Access Engine

Extended parking managementProvides management of guest parking, including thegeneration of parking vouchers and notification aboutvisitors who overstay their scheduled appointments.

Application Programming InterfaceA software development kit (SDK) to integrate AccessEngine with third-party applications such as IdentityManagement, Time & Attendance and advanced VisitorManagement systems.

Integration of key cabinetsIntegration of Deister and Kemas key cabinets forsecuring physical keys and monitoring their usage.

Integration of wireless online locksIntegration of SimonsVoss SmartIntego wirelessonline locks (lock cylinders, door handles andpadlocks) for doors which require medium-levelsecurity, such as offices and classrooms.

Increasing access control capacityACE scales easily to the growing needs of your sites.Additional MAC (Master Access Controller) licensesenable you to increase geographical coverage orperformance. A growing number of staff or visitors canbe accommodated by additional cardholder licenses.

3 | BIS - Access Engine (ACE) 4.6

Licenses to increase the number of entrances areavailable in steps of 32, 128 or 512. An entrance in thissense is equivalent to an ACE door model, making iteasy to calculate requirements.Example: Your site has 2 main entrances with an entryand an exit reader each, 26 office doors with entrancereader and 1 mantrap for the server room. The totalnumber of door models/entrances is 29, irrespectiveof the number of readers involved. A total of 32entrances is already covered by the ACE basic packagelicense.

Installation/configuration notes

Access Engine in figures

Max. number of active cards per controller 200,000

Max. number of readers per server 10,000

Max. number of MACs (Master AccessControllers) per server

40

Max. number of access authorizations perMAC

1000

The Engine can be ordered in one of two ways:• as an integral part of an initial BIS configuration, in

which case it is ordered along with a BIS basiclicense

• as an enhancement to an existing BIS configuration

Technical specifications

See the specifications for the respective version of theBIS Basic Package.

Ordering information

BIS-FACE-BPA46 Basic licenseLicense for the BIS Access Engine (ACE) within BISOrder number BIS-FACE-BPA46

BIS-XACE-100C46 License for 100 ID cardsLicense for 100 additional BIS ACE cardsOrder number BIS-XACE-100C46

BIS-XACE-1KC46 License for 1,000 ID cardsLicense for 1000 additional BIS ACE cardsOrder number BIS-XACE-1KC46

BIS-XACE-10KC46 License for 10,000 ID cardsLicense for 10,000 additional BIS ACE cardsOrder number BIS-XACE-10KC46

BIS-XACE-50KC46 License for 50,000 ID cardsLicense for 50,000 additional BIS ACE cardsOrder number BIS-XACE-50KC46

BIS-XACE-32DR46 License for 32 doorsLicense for 32 additional BIS ACE doorsOrder number BIS-XACE-32DR46

BIS-XACE-128D46 License for 128 doorsLicense for 128 additional BIS ACE doorsOrder number BIS-XACE-128D46

BIS-XACE-512D46 License for 512 doorsLicense for 512 additional BIS ACE doorsOrder number BIS-XACE-512D46

BIS-FACE-OFFL46 License for offline basic packageLicense for the BIS ACE Offline Doors basic packageOrder number BIS-FACE-OFFL46

BIS-XACE-25OF46 License for 25 offline doorsLicense for 25 additional BIS ACE Offline doorsOrder number BIS-XACE-25OF46

BIS-XACE-25ON46 License for 25 remote online doorsLicense for 25 remote online doorsOrder number BIS-XACE-25ON46

BIS-XACE-1MAC46 License for 1 MACLicense for 1 additional Main Access Controller (MAC)in BIS ACEOrder number BIS-XACE-1MAC46

BIS-XACE-10MC46 License for 10 MACLicense for 10 additional Main Access Controllers(MAC) in BIS ACEOrder number BIS-XACE-10MC46

BIS-FACE-API46 License for APILicense for the Application Programming Interface(API) in BIS ACEOrder number BIS-FACE-API46

BIS-FACE-PRK46 License for carpark managementLicense for Extended Carpark Management in BIS ACEOrder number BIS-FACE-PRK46

BIS-XACE-1KEY46 License for 1 key cabinetLicense for the connection of 1 key cabinet to BIS ACEOrder number BIS-XACE-1KEY46

4 | BIS - Access Engine (ACE) 4.6

Represented by:

Europe, Middle East, Africa: Germany: North America: Asia-Pacific:Bosch Security Systems B.V.P.O. Box 800025600 JB Eindhoven, The NetherlandsPhone: + 31 40 2577 284emea.securitysystems@bosch.comemea.boschsecurity.com

Bosch Sicherheitssysteme GmbHRobert-Bosch-Ring 585630 GrasbrunnGermanywww.boschsecurity.com

Bosch Security Systems, Inc.130 Perinton ParkwayFairport, New York, 14450, USAPhone: +1 800 289 0096Fax: +1 585 223 9180onlinehelp@us.bosch.comwww.boschsecurity.us

Robert Bosch (SEA) Pte Ltd, Security Systems11 Bishan Street 21Singapore 573943Phone: +65 6571 2808Fax: +65 6571 2699apr.securitysystems@bosch.comwww.boschsecurity.asia

© Bosch Security Systems 2018 | Data subject to change without notice43560667403 | en, V1, 11. Jul 2018