AS/NZS IEC 60839.11.5:2023
Alarm and electronic security systems Part 11.5: Electronic access control systems – Open supervised device protocol (OSDP)
Standard identically adopts and modifies IEC 60839‐11‐5:2020, which. describes the communication protocol for interfacing one or more Peripheral Devices (PD) to an Access Control Unit (ACU).
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$195.30 NZD
|
|
| HardCopy |
$217.00 NZD
|
|
| Networkable PDF |
Price varies
|
|
| Online Library ( Annual subscription) |
Info
Price varies
Online Library subscription information Online library subscriptions provide a cost-effective solution for organisations of any size to access the latest standards, offering 24/7 access to a personalised catalogue. The service ensures subscribers have have the most up-to-date version of selected standards, incluing automatic updates for any amendments or versions. Pricing is dependent on the chosen standards and the number of concurrent users, with discounts applied from the standards PDF price. For customised subscriptions or further inquiries, contact the Online Library team. |
AS/NZS IEC 60839.11.5:2023 Alarm and electronic security systems Electronic access control systems - Open supervised device protocol (OSDP)
CONTENTS
FOREWORD
INTRODUCTION
1 Scope
2 Normative references
3 Terms, definitions and abbreviated terms
3.1 Terms and definitions
3.2 Abbreviated terms
4 Overview
5 Communication settings
5.1 Physical interface
5.2 Signaling
5.3 Character encoding
5.4 Channel access
5.5 Multi-byte data encoding
5.6 Packet size limits
5.7 Timing
5.8 Message synchronization
5.9 Packet format
5.10 Multi-part messages
5.10.1 General
5.10.2 Multi-part message usage rules
5.11 Smartcard handling
6 Commands
6.1 General
6.2 Poll request (osdp_POLL)
6.3 ID report request (osdp_ID)
6.4 Peripheral device capabilities request (osdp_CAP)
6.5 Local status report request (osdp_LSTAT)
6.6 Input status report request (osdp_ISTAT)
6.7 Output status report request (osdp_OSTAT)
6.8 Reader status report request (osdp_RSTAT)
6.9 Output control command (osdp_OUT)
6.10 Reader LED control command (osdp_LED)
6.11 Reader buzzer control command (osdp_BUZ)
6.12 Reader text output command (osdp_TEXT)
6.13 Communication configuration command (osdp_COMSET)
6.14 Scan and send biometric data (osdp_BIOREAD)
6.15 Scan and match biometric template (osdp_BIOMATCH)
6.16 Encryption key set (osdp_KEYSET)
6.17 Challenge and secure session initialization request (osdp_CHLNG)
6.18 Server's random number and server cryptogram (osdp_SCRYPT)
6.19 Manufacturer specific command (osdp_MFG)
6.20 ACU receive size (osdp_ACURXSIZE)
6.21 Keep reader active (osdp_KEEPACTIVE)
6.22 Abort current operation (osdp_ABORT)
6.23 Get PIV data (osdp_PIVDATA)
6.24 General authenticate (osdp_GENAUTH)
6.25 Authentication challenge (osdp_CRAUTH)
6.26 File transfer command (osdp_FILETRANSFER)
6.27 Extended write data (osdp_XWR)
6.27.1 General
6.27.2 Mode set command
6.27.3 Mode-00 read setting
6.27.4 Mode specific command codes for XRW_MODE=1
6.27.5 Mode-01 transparent content send request
6.27.6 Mode-01 connection done
6.27.7 Mode-01 request secure PIN entry command
6.27.8 Mode-01 smartcard scan
7 Replies
7.1 General
7.2 General acknowledge – Nothing to report (osdp_ACK)
7.3 Negative acknowledge – Error response (osdp_NAK)
7.4 Device identification report (osdp_PDID)
7.5 Device capabilities report (osdp_PDCAP)
7.6 Local status report (osdp_LSTATR)
7.7 Input status report (osdp_ISTATR)
7.8 Output status report (osdp_OSTATR)
7.9 Reader tamper status report (osdp_RSTATR)
7.10 Card data report, raw bit array (osdp_RAW)
7.11 Card data report, character array (osdp_FMT)
7.12 Keypad data report (osdp_KEYPAD)
7.13 Communication configuration report (osdp_COM)
7.14 Scan and send biometric data (osdp_BIOREADR)
7.15 Scan and match biometric template (osdp_BIOMATCHR)
7.16 Client's ID and client's random number (osdp_CCRYPT)
7.17 Client cryptogram packet and the initial R-MAC (osdp_RMAC_I)
7.18 Manufacturer specific reply (osdp_MFGREP)
7.19 PD busy reply (osdp_BUSY)
7.20 PIV data reply (osdp_PIVDATAR)
7.21 osdp_GENAUTHR
7.22 Response to challenge (osdp_CRAUTHR)
7.23 Manufacturer specific status reply (osdp_MFGSTATR)
7.24 Manufacturer specific error reply (osdp_MFGERRR)
7.25 File transfer status (osdp_FTSTAT)
7.26 Extended read reply (osdp_XRD)
7.26.1 General
7.26.2 Mode specific reply codes for XRW_MODE=0
7.26.3 Mode-00 error reply (osdp_PR00ERROR)
7.26.4 Mode setting report (osdp_PR00REQR)
7.26.5 Card information report (osdp_PR00CIRR)
7.26.6 Mode specific reply codes for XRW_MODE=1
7.26.7 Mode-01 NAK or error reply (osdp_PR01ERROR)
7.26.8 Card present notification reply (osdp_PR01PRES)
7.26.9 Transparent card data reply (osdp_PR01SCREP)
7.26.10 Secure PIN entry complete reply (osdp_PR01SPER)
Annex€A (normative)Command and reply code numbers commands
A.1 Commands
A.2 Replies
Annex€B (normative)Function code definitions list
B.1 General
B.2 Function code 1 – Contact status monitoring
B.3 Function code 2 – Output control
B.4 Function code 3 – Card data format
B.5 Function code 4 – Reader LED control
B.6 Function code 5 – Reader audible output
B.7 Function code 6 – Reader text output
B.8 Function code 7 – Time keeping
B.9 Function code 8 – Check character support
B.10 Function code 9 – Communication security
B.11 Function code 10 – Receive bufferSize
B.12 Function code 11 – Largest combined message size
B.13 Function code 12 – Smart card support
B.14 Function code 13 – Readers
B.15 Function code 14 – Biometrics
B.16 Function code 15 – Secure PIN entry support
B.17 Function code 16 – OSDP version
Annex€C (normative)CRC definition
Annex€D (normative)Encryption
D.1 Encryption method: OSDP-SC
D.1.1 General
D.1.2 Overview
D.1.3 The process
D.1.4 Secure channel session connection sequence (SCS-CS)
D.1.5 Communication during a secure channel session
D.1.6 SCS_16 PD->ACU
D.1.7 SCS_17 ACU->PD
D.1.8 SCS_18 PD->ACU
D.2 Commands
D.2.1 Encryption key set (osdp_KEYSET)
D.2.2 Challenge and secure session initialization request (osdp_CHLNG)
D.2.3 Server's random number and server cryptogram (osdp_SCRYPT)
D.3 Replies
D.3.1 Client's ID and client's random number (osdp_CCRYPT)
D.3.2 Client cryptogram packet and the initial R-MAC (osdp_RMAC_I)
D.4 Algorithms and support functions
D.4.1 Session key derivation
D.4.2 Key diversification
D.4.3 Client cryptogram
D.4.4 Server cryptogram
D.4.5 Padding
D.5 Message authentication code (MAC) generation
D.5.1 General
D.5.2 The wrap operation for security block types SCS_15, SCS-16, SCS_17, and SCS_18
D.5.3 The unwrap operation
D.6 Error recovery
D.7 Field deployment and configuration
Annex€E (normative)Test vectors
Annex€F (informative)Mapping of mandatory functions in IEC€60839-11-1
Bibliography
Figures
Figure 1 – Schematic overview of an OSDP connection
Figure D.1 – MAC algorithm
Tables
Table 1 – Packet format
Table 2 – Message control information
Table 3 – The security block (SB)
Table 4 – Multi-part message structure
Table 5 – Behaviour modes
Table 6 – Poll request
Table 7 – ID report request
Table 8 – Peripheral device capabilities request
Table 9 – Local status report request
Table 10 – Input status report request
Table 11 – Output status report request
Table 12 – Reader status report request
Table 13 – Output control command
Table 14 – Control code values
Table 15 – Reader LED control command
Table 16 – Temporary control code values
Table 17 – Permanent control code values
Table 18 – Color values
Table 19 – Reader buzzer control command (osdp_BUZ)
Table 20 – Reader text output command (osdp_TEXT)
Table 21 – Text command values
Table 22 – Communication configuration command (osdp_COMSET)
Table 23 – Scan and send biometric data (osdp_BIOREAD)
Table 24 – Biometric types
Table 25 – Fingerprint formats
Table 26 – Command structure: 6-byte header followed by a variable length template
Table 27 – Manufacturer specific commands (osdp_MFG)
Table 28 – ACU receive size (osdp_ACURXSIZE)
Table 29 – Keep reader active (osdp_KEEPACTIVE)
Table 30 – Abort current operation (osdp_ABORT)
Table 31 – Get PIV data (osdp_PIVDATA)
Table 32 – General authenticate (osdp_GENAUTH) fragment
Table 33 – Authentication challenge (osdp_CRAUTH) fragment
Table 34 – File transfer command
Table 35 – Extended write command structure
Table 36 – Mode set command
Table 37 – Mode 0 configuration
Table 38 – Mode 1 configuration
Table 39 – Read setting request
Table 40 – Mode specific command codes
Table 41 – Transparent content send request
Table 42 – Smartcard connection done
Table€43 – Request secure PIN entry command
Table 44 – Smartcard scan
Table 45 – General acknowledge (osdp_ACK)
Table 46 – Negative acknowledge (osdp_NAK)
Table 47 – Error codes
Table 48 – Device identification report (osdp_PDID)
Table 49 – Device capabilities report (osdp_PDCAP)
Table 50 – Local status report (osdp_LSTATR)
Table 51 – Input status report (osdp_ISTATR)
Table 52 – Output status report (osdp_OSTATR)
Table 53 – Reader tamper status report (osdp_RSTATR)
Table 54 – Card data report, raw bit array (osdp_RAW)
Table 55 – Card data report, character array (osdp_FMT)
Table 56 – Keypad data report (osdp_KEYPAD)
Table 57 – Communication configuration report (osdp_COM)
Table 58 – Scan and send biometric data (osdp_BIOREADR)
Table 59 – Scan and match biometric template (osdp_BIOMATCHR)
Table 60 – Manufacturer specific reply (osdp_MFGREP)
Table 61 – PD busy reply (osdp_BUSY)
Table 62 – PIV data reply (osdp_PIVDATAR)
Table 63 – General authenticate response (osdp_GENAUTHR)
Table 64 – Response to challenge (osdp_CRAUTHR)
Table 65 – Manufacturer specific status reply (osdp_MFGSTATR)
Table 66 – Manufacturer specific error reply (osdp_MFGERRR)
Table 67 – File transfer status (osdp_FTSTAT)
Table 68 – Extended read reply
Table 69 – Mode specific reply codes
Table 70 – Error reply
Table 71 – Mode setting report
Table 72 – Card information report
Table 73 – Mode specific reply codes
Table 74 – Error reply
Table 75 – Card present notification reply
Table 76 – Transparent card data reply
Table 77 – Transparent card data reply
Table A.1 – Commands code numbers
Table A.2 – Replies code numbers
Table B.1 – Function codes
Table D.1 – SEC_BLK_TYPE assignment
Table D.2 – Command structure: 2-byte header followed by variable length data
Table D.3 – Command structure: 8-byte random number as the “challenge”
Table D.4 – Command structure: 16-byte server cryptogram
Table D.5 – Command structure: 32-byte structure
Table D.6 – Command structure: 16-byte structure
Table F.1 – Access point interface requirements
Table F.2 – Indication and annunciation requirements
Table F.3 – Recognition requirements
Table F.4 – Duress signalling requirements
Table F.5 – Overriding requirements
Table€F.6 – System self-protection requirements (1 of 3)
Keep me up-to-date
Register to receive notifications when updates are made to this standard.
Related Information
Similar Standards
-
AS/NZS 4869.1:2006
Maritime Survivor Locating Systems (MSLS) - Operating on 121.5 MHz
-
AS/NZS 4869.2:2010
Maritime Survivor Locating Systems (MSLS) - Operating on frequencies other than 121.5 MHz
-
AS/NZS 4869.2:2010 A1
Maritime Survivor Locating Systems (MSLS) - Operating on frequencies other than 121.5 MHz: Amendment 1:2013 -
AS/NZS 4869.3:2015
Maritime survivor locating systems (MSLS) - Part 3: Maritime survivor locating devices (MSLD) - Operating on 156.575 MHz and/or 161.975 MHz/162.025 MHz
AS/NZS IEC 60839.11.5:2023 Alarm and electronic security systems Electronic access control systems - Open supervised device protocol (OSDP)
CONTENTS
FOREWORD
INTRODUCTION
1 Scope
2 Normative references
3 Terms, definitions and abbreviated terms
3.1 Terms and definitions
3.2 Abbreviated terms
4 Overview
5 Communication settings
5.1 Physical interface
5.2 Signaling
5.3 Character encoding
5.4 Channel access
5.5 Multi-byte data encoding
5.6 Packet size limits
5.7 Timing
5.8 Message synchronization
5.9 Packet format
5.10 Multi-part messages
5.10.1 General
5.10.2 Multi-part message usage rules
5.11 Smartcard handling
6 Commands
6.1 General
6.2 Poll request (osdp_POLL)
6.3 ID report request (osdp_ID)
6.4 Peripheral device capabilities request (osdp_CAP)
6.5 Local status report request (osdp_LSTAT)
6.6 Input status report request (osdp_ISTAT)
6.7 Output status report request (osdp_OSTAT)
6.8 Reader status report request (osdp_RSTAT)
6.9 Output control command (osdp_OUT)
6.10 Reader LED control command (osdp_LED)
6.11 Reader buzzer control command (osdp_BUZ)
6.12 Reader text output command (osdp_TEXT)
6.13 Communication configuration command (osdp_COMSET)
6.14 Scan and send biometric data (osdp_BIOREAD)
6.15 Scan and match biometric template (osdp_BIOMATCH)
6.16 Encryption key set (osdp_KEYSET)
6.17 Challenge and secure session initialization request (osdp_CHLNG)
6.18 Server's random number and server cryptogram (osdp_SCRYPT)
6.19 Manufacturer specific command (osdp_MFG)
6.20 ACU receive size (osdp_ACURXSIZE)
6.21 Keep reader active (osdp_KEEPACTIVE)
6.22 Abort current operation (osdp_ABORT)
6.23 Get PIV data (osdp_PIVDATA)
6.24 General authenticate (osdp_GENAUTH)
6.25 Authentication challenge (osdp_CRAUTH)
6.26 File transfer command (osdp_FILETRANSFER)
6.27 Extended write data (osdp_XWR)
6.27.1 General
6.27.2 Mode set command
6.27.3 Mode-00 read setting
6.27.4 Mode specific command codes for XRW_MODE=1
6.27.5 Mode-01 transparent content send request
6.27.6 Mode-01 connection done
6.27.7 Mode-01 request secure PIN entry command
6.27.8 Mode-01 smartcard scan
7 Replies
7.1 General
7.2 General acknowledge – Nothing to report (osdp_ACK)
7.3 Negative acknowledge – Error response (osdp_NAK)
7.4 Device identification report (osdp_PDID)
7.5 Device capabilities report (osdp_PDCAP)
7.6 Local status report (osdp_LSTATR)
7.7 Input status report (osdp_ISTATR)
7.8 Output status report (osdp_OSTATR)
7.9 Reader tamper status report (osdp_RSTATR)
7.10 Card data report, raw bit array (osdp_RAW)
7.11 Card data report, character array (osdp_FMT)
7.12 Keypad data report (osdp_KEYPAD)
7.13 Communication configuration report (osdp_COM)
7.14 Scan and send biometric data (osdp_BIOREADR)
7.15 Scan and match biometric template (osdp_BIOMATCHR)
7.16 Client's ID and client's random number (osdp_CCRYPT)
7.17 Client cryptogram packet and the initial R-MAC (osdp_RMAC_I)
7.18 Manufacturer specific reply (osdp_MFGREP)
7.19 PD busy reply (osdp_BUSY)
7.20 PIV data reply (osdp_PIVDATAR)
7.21 osdp_GENAUTHR
7.22 Response to challenge (osdp_CRAUTHR)
7.23 Manufacturer specific status reply (osdp_MFGSTATR)
7.24 Manufacturer specific error reply (osdp_MFGERRR)
7.25 File transfer status (osdp_FTSTAT)
7.26 Extended read reply (osdp_XRD)
7.26.1 General
7.26.2 Mode specific reply codes for XRW_MODE=0
7.26.3 Mode-00 error reply (osdp_PR00ERROR)
7.26.4 Mode setting report (osdp_PR00REQR)
7.26.5 Card information report (osdp_PR00CIRR)
7.26.6 Mode specific reply codes for XRW_MODE=1
7.26.7 Mode-01 NAK or error reply (osdp_PR01ERROR)
7.26.8 Card present notification reply (osdp_PR01PRES)
7.26.9 Transparent card data reply (osdp_PR01SCREP)
7.26.10 Secure PIN entry complete reply (osdp_PR01SPER)
Annex€A (normative)Command and reply code numbers commands
A.1 Commands
A.2 Replies
Annex€B (normative)Function code definitions list
B.1 General
B.2 Function code 1 – Contact status monitoring
B.3 Function code 2 – Output control
B.4 Function code 3 – Card data format
B.5 Function code 4 – Reader LED control
B.6 Function code 5 – Reader audible output
B.7 Function code 6 – Reader text output
B.8 Function code 7 – Time keeping
B.9 Function code 8 – Check character support
B.10 Function code 9 – Communication security
B.11 Function code 10 – Receive bufferSize
B.12 Function code 11 – Largest combined message size
B.13 Function code 12 – Smart card support
B.14 Function code 13 – Readers
B.15 Function code 14 – Biometrics
B.16 Function code 15 – Secure PIN entry support
B.17 Function code 16 – OSDP version
Annex€C (normative)CRC definition
Annex€D (normative)Encryption
D.1 Encryption method: OSDP-SC
D.1.1 General
D.1.2 Overview
D.1.3 The process
D.1.4 Secure channel session connection sequence (SCS-CS)
D.1.5 Communication during a secure channel session
D.1.6 SCS_16 PD->ACU
D.1.7 SCS_17 ACU->PD
D.1.8 SCS_18 PD->ACU
D.2 Commands
D.2.1 Encryption key set (osdp_KEYSET)
D.2.2 Challenge and secure session initialization request (osdp_CHLNG)
D.2.3 Server's random number and server cryptogram (osdp_SCRYPT)
D.3 Replies
D.3.1 Client's ID and client's random number (osdp_CCRYPT)
D.3.2 Client cryptogram packet and the initial R-MAC (osdp_RMAC_I)
D.4 Algorithms and support functions
D.4.1 Session key derivation
D.4.2 Key diversification
D.4.3 Client cryptogram
D.4.4 Server cryptogram
D.4.5 Padding
D.5 Message authentication code (MAC) generation
D.5.1 General
D.5.2 The wrap operation for security block types SCS_15, SCS-16, SCS_17, and SCS_18
D.5.3 The unwrap operation
D.6 Error recovery
D.7 Field deployment and configuration
Annex€E (normative)Test vectors
Annex€F (informative)Mapping of mandatory functions in IEC€60839-11-1
Bibliography
Figures
Figure 1 – Schematic overview of an OSDP connection
Figure D.1 – MAC algorithm
Tables
Table 1 – Packet format
Table 2 – Message control information
Table 3 – The security block (SB)
Table 4 – Multi-part message structure
Table 5 – Behaviour modes
Table 6 – Poll request
Table 7 – ID report request
Table 8 – Peripheral device capabilities request
Table 9 – Local status report request
Table 10 – Input status report request
Table 11 – Output status report request
Table 12 – Reader status report request
Table 13 – Output control command
Table 14 – Control code values
Table 15 – Reader LED control command
Table 16 – Temporary control code values
Table 17 – Permanent control code values
Table 18 – Color values
Table 19 – Reader buzzer control command (osdp_BUZ)
Table 20 – Reader text output command (osdp_TEXT)
Table 21 – Text command values
Table 22 – Communication configuration command (osdp_COMSET)
Table 23 – Scan and send biometric data (osdp_BIOREAD)
Table 24 – Biometric types
Table 25 – Fingerprint formats
Table 26 – Command structure: 6-byte header followed by a variable length template
Table 27 – Manufacturer specific commands (osdp_MFG)
Table 28 – ACU receive size (osdp_ACURXSIZE)
Table 29 – Keep reader active (osdp_KEEPACTIVE)
Table 30 – Abort current operation (osdp_ABORT)
Table 31 – Get PIV data (osdp_PIVDATA)
Table 32 – General authenticate (osdp_GENAUTH) fragment
Table 33 – Authentication challenge (osdp_CRAUTH) fragment
Table 34 – File transfer command
Table 35 – Extended write command structure
Table 36 – Mode set command
Table 37 – Mode 0 configuration
Table 38 – Mode 1 configuration
Table 39 – Read setting request
Table 40 – Mode specific command codes
Table 41 – Transparent content send request
Table 42 – Smartcard connection done
Table€43 – Request secure PIN entry command
Table 44 – Smartcard scan
Table 45 – General acknowledge (osdp_ACK)
Table 46 – Negative acknowledge (osdp_NAK)
Table 47 – Error codes
Table 48 – Device identification report (osdp_PDID)
Table 49 – Device capabilities report (osdp_PDCAP)
Table 50 – Local status report (osdp_LSTATR)
Table 51 – Input status report (osdp_ISTATR)
Table 52 – Output status report (osdp_OSTATR)
Table 53 – Reader tamper status report (osdp_RSTATR)
Table 54 – Card data report, raw bit array (osdp_RAW)
Table 55 – Card data report, character array (osdp_FMT)
Table 56 – Keypad data report (osdp_KEYPAD)
Table 57 – Communication configuration report (osdp_COM)
Table 58 – Scan and send biometric data (osdp_BIOREADR)
Table 59 – Scan and match biometric template (osdp_BIOMATCHR)
Table 60 – Manufacturer specific reply (osdp_MFGREP)
Table 61 – PD busy reply (osdp_BUSY)
Table 62 – PIV data reply (osdp_PIVDATAR)
Table 63 – General authenticate response (osdp_GENAUTHR)
Table 64 – Response to challenge (osdp_CRAUTHR)
Table 65 – Manufacturer specific status reply (osdp_MFGSTATR)
Table 66 – Manufacturer specific error reply (osdp_MFGERRR)
Table 67 – File transfer status (osdp_FTSTAT)
Table 68 – Extended read reply
Table 69 – Mode specific reply codes
Table 70 – Error reply
Table 71 – Mode setting report
Table 72 – Card information report
Table 73 – Mode specific reply codes
Table 74 – Error reply
Table 75 – Card present notification reply
Table 76 – Transparent card data reply
Table 77 – Transparent card data reply
Table A.1 – Commands code numbers
Table A.2 – Replies code numbers
Table B.1 – Function codes
Table D.1 – SEC_BLK_TYPE assignment
Table D.2 – Command structure: 2-byte header followed by variable length data
Table D.3 – Command structure: 8-byte random number as the “challenge”
Table D.4 – Command structure: 16-byte server cryptogram
Table D.5 – Command structure: 32-byte structure
Table D.6 – Command structure: 16-byte structure
Table F.1 – Access point interface requirements
Table F.2 – Indication and annunciation requirements
Table F.3 – Recognition requirements
Table F.4 – Duress signalling requirements
Table F.5 – Overriding requirements
Table€F.6 – System self-protection requirements (1 of 3)
AS/NZS IEC 60839.11.5:2023
Online Library subscription information
Online library subscriptions provide a cost-effective solution for organisations of any size to access the latest standards, offering 24/7 access to a personalised catalogue. The service ensures subscribers have have the most up-to-date version of selected standards, incluing automatic updates for any amendments or versions. Pricing is dependent on the chosen standards and the number of concurrent users, with discounts applied from the standards PDF price. For customised subscriptions or further inquiries, contact the Online Library team.