BASIC DESIGN DOC. NO.: GEN-TEL-SPC-0010 REV.: B PAGE 1 OF 13 SPECIFICATION FOR ACCESS CONTROL SYSTEM Whef)oa Pf | die aherte | Whe olaema 8 ISSUED FOR APPROVAL | 2019.4.10 | Wang L. Yan ¥.¥- uuzt, | Wencm. A ISSUED FOR APPROVAL | 2016815 | LivZT. Yan ¥.¥- wae | Wane. REV. DESCRIPTION DATE PREP'D ‘CHK'D REV'D ‘APP’DBASIC DESIGN DOC. NO.: GEN-TEL-SPC-0010 REV. B PAGE 2 OF 13 Revision History Chapter Revised to 40 ‘Software used shall be authorized licensed and on end user name. 4.0 | Vendor is also responsible to upgrade the existing system software to meet project requirement during executing the tie-in work to the existing system. 5.0 | Site changes design RED MARK UP duly signed by COMPANY representative. As Built drawings and documentsBASIC DESIGN DOC. NO.: GEN-TEL-SPC-0010 REV. B PAGE 3 OF 13 CONTENT 1.0 GENERAL .. 1.1 Purpose. 1.2. Definitions and Abbreviations 4.3. VENDOR’s Responsibility 1.4 COMPANY Access .. 4.5 Language and Unit 2.0 SITE CONDITIONS. 3.0 APPLICABLE REGULATIONS, CODES, STANDARDS AND SPECIFICATIONS..... 3.1. General, 3.2 __ International Standards and Codes... 3.2 Conflicting Requirements, Deviation and Substitution 3.3 Order of Precedence for Documents 4.0 TECHNICAL REQUIREMENT 41 General 42 System Requirements. 4.3 Basic Access Control Functions... 44 — Graphics 4.5 Technical Data of Access Control System . 4.8 Access Controller 4.7 Proximity Card Reader. 4.8 Compatibility and Consistenc; 49 Power Supply.. 5.0 DOCUMENTATION.; «< = I BASIC DESIGN DOC. NO.: GEN-TEL-SPC-0010 REV.:B PAGE 4 OF 13 1.0 GENERAL 11 Purpose This specification applies to Hafaya oilfield Access Control System 1.2 Definitions and Abbreviations 1.2.1 Definitions WORD MEANING COMPANY PetroChina Intemational Iraq FZE Iraq Branch ‘The organization selected and entrusted by COMPANY to perform the CONTRACTOR Engineering, Procurement, Construction, Start-up, pre-Commissioning and Commissioning of the Project. ‘The party who is in charge of awarding agreement on behalf of PURCHASER COMPANY / CONTRACTOR for the supply of goods and services in ‘connection with the work, ‘The party to the contract and/or purchase order which has undertaken VENDOR’ SUPPLIERY i e he obligation Lo supply Une goods and/or services which are ordered SUBCONTRACTOR | and specified herein. Shall Indicates a mandatory requirement ‘Should Indicates a strong recommendation to comply with the requirements of this document 1.2.2 Abbreviations ‘ACRONYM MEANING cE Council of Europe EN European Norm RoHS: Restriction of the use of certain Hazardous Substances UL Underwriters’ Laboratories 1.3 VENDOR's Responsibility VENDOR shall take full responsibility for mechanical design, provision of materials, fabrication, inspection, testing, and quality of workmanship unless agreed otherwise with COMPANY. VENDOR shall also handle and expedite the drawings, and supervise and coordinate all tests as specified. It is VENDOR's responsibility to bring promptly to the PURCHASER's attention any errors or discrepancies which are found to exist between this specification and the other specifications and/or data sheet. In this connection VENDOR shall take into consideration the prevailing industry practices for design and fabrication of similar service and construction.BASIC DESIGN DOC. NO.: GEN-TEL-SPC-0010 REV. B PAGE 5 OF 13 14 15 20 VENDOR should supply all designing, testing and operating, maintenance related documents to COMPANY. Review by COMPANY of VENDOR drawings or other documents, or release of equipment for shipment by PURCHASER's authorized representative shall not relieve VENDOR of any of these responsibilies for compliance with this specification nor alter the conditions of the guarantee COMPANY Access COMPANY andior authorised representatives shall have free access and the right to inspect and/or witness any of VENDOR'S activities, operations, reports and certificates in connection with the equipment purchased to this specification. COMPANY and/or his authorised representative may, at no extra cost to COMPANY, reject any work failing to meet the purchase order requirements. Language and Units The governing language shall be English language. All notices, correspondence, information, literature, data, manuals and other documents required under the Contract shall be in the English language. Technical units, quantities, etc. shall be expressed, used and abbreviated according to the SI system. Preferred units of measure are as for: Flow Rate :m’/hr, MMSCFD (gas), BPD (condensate), BWPD (Water) Power, Duty kW Area 2m Length : meter (m), km, mm Pressure : Bar (g), Bar (a), kPa (g) ‘Temperature 2° Volume im Weight : Kg ‘SITE CONDITIONS The following are the climatic conditions for all equipment and facilities.BASIC DESIGN DOC. NO.: GEN-TEL-SPC-0010 REV. B PAGE 6 OF 13 Altitude mas. | 056 Atmospheric Pressure kPa | 102 Max. Temp. c 35 Wet Bulb Temp c 22.2 (GPSA 11-3b) Dry Bulb Temp. c 42.2 (GPSA 11-26) Max. Metal temp. by sun shine | 80 Min. Temp. c 2 Max. Speed Wind ms (40 Prevailing Direction Wind | (winter) _ | NW-SE Prevailing Direction Wind | (summer) | NW-SE Max. Relative Humidity 80% Min, Relative Humidity 25% Rainfall mma | 174 4-hour Rainfall mm | 4t Under Ground Temp. c Sa Seismic Zone 28 Evaporation Rate mma | 3054.4 3.0 APPLICABLE REGULATIONS, CODES, STANDARDS AND SPECIFICATIONS 34 General Access Control System shall meet or exceed requirements specified in the latest editions or the equivalent ones of the following standards and specifications. if any requirements are specified in more then one standard or specification at the same time, the most stringent shall be followed. In addition, Access Control System shall also comply with laws and regulations approved by local government. Before design and manufacture of Access Control System, if any contradiction between this Technical Specification and relevant technical specifications or correspondences, the PURCHASER shall be consulted and written confirmation from the PURCHASER shall be obtained before any further work starts.BASIC DESIGN DOC. NO.: GEN-TEL-SPC-0010 REV. B PAGE 7 OF 13 3.2 3.2 International Standards and Codes The following codes and standards, to the extent specified herein, form a part of this specification. When an edition date is not indicated for a code or standard, the latest edition in force at the time of VENDOR's proposal submitted shall apply. ‘The Access Control System shall meet, but not be limited to, the latest edition or revision of the following codes and standards. © CE and C-Tick, including EN 60950-1 (Product Safety) EN 50124 (IT Equipment) EN 50022 class A (Product Emission) EN 61000-3-2 and EN 61000-3-3 EN 50130-4 (Security Equipment) © RoHS. © [SO 9001 - the product shall be manufactured by a company whose quality system is in compliance with the ISO 2001 Quality System. © UL. the purpose of these regulations is to maximise the operational useabllty of the product and to ensure minimum standards within the Access Control System development have been maintained. These standards wil also ensure electromagnetic interference between electronic products are minimized as these may diminish the performance of electrical products or disrupt essential communications Standards and Codes that are quoted in the above standards and codes shall also be complied with. The vendors are obligated to provide other standards and codes relevant to these ‘equipments that are not included within, Conflicting Requirements, Deviation and Substitution In the event of a conflict between this specification and other specifications or correspondence, VENDOR shall consult with the COMPANY's designated representative and a ruling, in writing, shall be obtained before any work is started. Where Provincial or National Codes conflict with this specification, the more rigid requirement shall govern Any deviation from this specification must be approved, in writing, by the COMPANY’s designated representative Alternatives may be offered for materials and fabrication, if technically or economically justified and provided that they meet the requirements of the applicable codes, standards and specifications.BASIC DESIGN DOC. NO.: GEN-TEL-SPC-0010 REV. B PAGE 8 OF 13 3.3 40 44 Order of Precedence for Documents All conflicts between the requirements of this specification, related contract documents, national / international documents, codes, engineering practices and the requisition shall be referred to COMPANY/PURCHASER for clarification. Should any conflict occur in the application of these specifications, the order of precedence shall be as follows: 1) PURCHASER order (including attachments) and variations thereon; 2) Data sheets and drawings; 3) This Technical Specification; 4) Project Specification in conjunction with native standard; 5) International codes and standards. TECHNICAL REQUIREMENT The access control should at least include the following parts: Card readers Door magnistor Press to exit buttons Access controller Access control management software Door devices: electricity lock, escaping handspike, turnstile and vehicle baluster machine. The system shall provide a variety of integral functions including the ability to regulate access and egress; provide identification credentials; monitor, track and interface alarms, and view. Software used shall be authorized licensed and on end user name. ‘The access control system is divided into three layers: the management layer is typical Client End/Server (C/S) structure with rich software management functions; the middle layer is the distributed intelligent access controller. Vendor is also responsible to upgrade the existing system software to meet project requirement during executing the tie-in work to the existing system. General The Access Control System in this project shall be used to access control the main gateway of the station. © The Access Control System will provide controlled, monitored and recorded physical access to site facilities using coded badges. © The Access Control System will create and maintain cardholder records, including badge creation.BASIC DESIGN DOC. NO.: GEN-TEL-SPC-0010 REV. B PAGE 9 OF 13 @ The Access Control System will be the primary accountability tool in case of emergency. © The Access Control System shall be modular and must have a highly scalable architecture that can suit a single site and scale up to manage many thousands of sites across multiple continents if need be. © The Access Control System shall support single / multiple / clustered servers to meet the requirements of the implementation 4.2 System Requirements © The systems/ disciplines managed by the ACCESS CONTROL SYSTEM shall include Access contro! © Communication across layers shall be encrypted. AES with 128 BIT key for symmetric and RSA with 1024 BIT key shall be acceptable. Native encryption shall not be acceptable. © Communication across layer shall preferable be over HTTP with suitable authentication. Vendor to specify communication technology, port uscd and authentication mechanism. © Remote process call shall be based on NET remoting technologyiWeb services. The option shall be selectable. @ The ACCESS CONTROL SYSTEM application shall not store any form of passwords in clear text. All such passwords either in configuration files or in the database shall be encrypted. AES with 128 BIT key for symmetric and RSA with 1024 BIT key shall be acceptable. Native encryption shall not be acceptable, © The access to database shall not be based on the default user. The ACCESS. CONTROL SYSTEM application shall use a specified or pre-defined login. © It shall be possible to designate a desktop as a specific workstation that exposes only a defined functionality like a specific Workstation or an Intrusion Workstation irrespective of the logged in operalor excluding the Master User or Administrator. @ The ACCESS CONTROL SYSTEM application shall provide for the ability to copy existing configuration across hierarchies. © The ACCESS CONTROL SYSTEM application shall also provide the ability to clone (create multiple instances) of a configured entity. A minimum of 50 clones should be possible in one user action. © The ACCESS CONTROL SYSTEM application’ s UI shall have a password lock option which shall lock the operator after 3 wrong password attempts. 4.3 Basic Access Control Functions © Open the door with no-contact card. © When the no-contact card is read by the card-reader, the card-reading module will check whether this very card is authorized at the very moment. If yes, the door willBASIC DESIGN DOC. NO.: GEN-TEL-SPC-0010 REV. B PAGE 10 OF 13 be released by the control parts. If not, the door won’ t be released and if necessary, the alarm can be issued. © Central Control via Network: @ The system directly monitors the status of various doors via the network and any door can be released from the system management center. Authorization Management The authorization details (including the certain doors and periods) will be issued by the system management center. Cards with different authorization can open different doors in certain period Time Period Control. ‘The passageway can be passed via different methods at different time. Real-time Display, record all the event data, The real-time card-reading data will be displayed to the management system and displayed on the computer screen there; all kinds of information will be displayed authentically without the possibility of change. The Information are card-holder (name, picture, etc.), the event time, door location, event type (normal enter, normal exit, card-reading in abnormal time, invalid card-reading, door-open overtime, abnormal door-open, etc.). Alarms will be issued on abnormal events which can be searched by name of the card-holder; the card number and the time for enter and exit 44° Graphics © The application shall provide a fully functional graphics module. © It shall be possible to import multiple images into the graphics module to create a graphical representation of the facility. © The images can be linked by using a link button. Link button shall help the user to navigate between pages © The Graphics shall have short cuts with images and the short cuts shall be used to open any application © It shall be possible to define generic device properties for each type of physical hardware © It shall be possible to create more than one generic device for each hardware type with unique properties like icons, actions and states. It shall be possible to position these devices into the images to indicate actual location within the installation. © It shall be possible to associate a group of images and create an animation. © Generic devices shall accept animation files for various states.BASIC DESIGN DOC. NO.: GEN-TEL-SPC-0010 REV. B PAGE 11 OF 13 45 @ Generic devices shall be associated with a specific instance of hardware to create association. For example Main Entry Door shall be associated with one generic door device. © It shall be possible to define a specific instance of hardware in to more than one generic device. © It shall be possible to display analog values as a horizontal bar, vertical bar or as plain text. Measurement unit like Celsius shall be definable and visible in the graphics. © It shall be possible to define which image must be popped up in case the device goes into alarm. © Itshall be possible to perform actions from the device icon on the graphics. © It shall be possible to view up to 10 to 15 live alarms from each device on the graphics. © Alarm acknowledgement and processing of alarms shall be done from the graphics. It shall also be possible to view live status of the objects from graphics © It shall be possible to view the deve configuration from the graphics. Technical Data of Access Control System Server operating system: Windows 2008 Server Client operating system : Windows 7 Optional Redundant server/host Optional Web browser interface ‘Maximium client workstations: License based Maximum readers ‘License based Anti-pass-back: Logical, timed, soft and global Optional Fire alarm system interface Optional Burglar alarm system integration Relational database: SQL Server 2008, SQL Express Database partitioning ‘Automatic download to controllers on changes User definable fields ‘Automatic card activation/deactivation ‘Support of multiple badges per person Tracking and mustering reports Optional Time and Attendance reports Report template creationBASIC DESIGN DOC. NO.: GEN-TEL-SPC-0010 REV. B PAGE 12 OF 13 46 Optional Forward reports over email ‘Alarm instructions to the operator Dynamic alarm monitoring Alarm level definition Operator profiling Optional OPC interface Access Controller The door controller is a high performance access control and security field panel. The door controller is installed as the main hardware component of an integrated access control and security solution, it meets the future requirement. 47 48 Inbuilt web server that allows the configuration to be viewed and changed Embedded Ethemet interface: 10M/100M, 22 bit Microcontroller 64MB of RAM 24MB of flash Memory ‘Support for 150,000 card database ‘Support for 100,000 event log ‘Support up to 16 doors with expansion modules Wide ranges of Wiegand formats es well as clock & data 255 access profiles Day Schedule 6 user card types (Normal/Super/Vendor/visitor/Maintenance/Duress 9 Card attributes Proximity Card Reader © Data transmission security encipherment © ISO standard: 14443, Type A or 14443, Type B or 15693, © Effective READER distance: 50mm-100mm Compatibility and Consistency ‘The access control system and equipment shall be fully compatible and consistent with existing access control system in relevant previous projects.BASIC DESIGN DOC. NO.: GEN-TEL-SPC-0010 REV. B PAGE 13 OF 13 49 Power Supply ‘The Access Control System (AC) shall be powered by an 230VAC, 50Hz. 5.0 DOCUMENTATION The documentation shall include, but not be limited to, the following: ‘System drawing Detailed installation and hook-up drawing Functional design specification, if any Additional features offered Power supply requirements Detailed wiring drawings Testing procedures Installation, operation, and maintenance manual. Site changes design RED MARK UP duly signed by COMPANY representative. As Built drawings and documents