UFC 4-021-02NF
27 September 2006
change 1, 23 October 2006
3-4.2.8 If there is no existing badging location and equipment, the design must
include the badging infrastructure described above as well as space allocation for
equipment and storage requirements.
3-4.2.9 Badging may require an interface to an existing personnel database where
the necessary information is stored and maintained. If so, requirements for this
database interface and security must be established
3-4.3
ACS Central Processing Unit (CPU). The CPU is the physical intelligent
controller(s) where the ACS application software and database reside and where all
ACS system activity is monitored, recorded into history, commanded and controlled by
programmable logic controllers (PLCs), or even personal computers (PCs).
Conceptually, the CPU can be thought of as the "brain" of the ACS system. Formerly,
the CPU was a discrete component located at the "head-end" of the system, typically
the Dispatch Center. Current state-of-the-art ACS use distributed intelligence that allows
each local security panel to hold (in microprocessor memory) the system logic for its
associated devices. The CPU retains the system specific programming for
"action/reaction" logic steps necessary for an ACS to allow entry (access) for authorized
personnel and deny access to unauthorized personnel. A sample sequence is shown in
Figure 3-5.
3-4.3.1 Communications failure between the CPU and the local access control
processor equipment could result in new users not being permitted entry. Additionally,
during any communication failure, users who are no longer authorized will still be able to
enter the area. It is important to provide sufficient backup power capability for the CPU,
local processors, and other critical infrastructure to prevent the loss of control of
authorized access. Redundant, fault-tolerant communication systems are required in
high-security areas where loss of communications (including partial links) cannot be
tolerated.
3-4.3.2 A specialized case of a CPU is a Premises Control Unit (PCU). A PCU is a
DCID 6/9 term used to describe a specific controller located within the confines of a
Sensitive Compartmented Information Facility (SCIF). Per the Physical Security for
SCIFs: "A PCU is a device that receives changes of alarm status from IDS sensors,
and transmits an alarm condition to the monitoring station." The PCU resides in an
internal location, safe from external tampering and controls and monitors ESS
equipment for the protected area as shown in Figure 3-6.
32