printer friendly version

Understanding IP

Explaining, exploring and embracing the benefits of IP.

In the first of these three articles we looked at why IP is the natural successor to public switched telephone network (PSTN) and long range radio (LRR) for alarm alerting and monitoring. The first article covered why changes in communication technologies are making IP systems for alarm alerting a necessity that cannot be ignored. This is due to many of our corporate networks running IP and VoIP, and we, as a security industry, cannot ignore our clients' adoption of IP which they have done for sound commercial reasons. We, as an industry will look a bit silly if we say, `no your commercial processes which your business runs on is okay for IP but not for the old alarm panel which must use the old PSTN'. We must embrace this new technology as our customers are.

In fact, as telecoms carriers are moving to VoIP networks, PSTN availability is disappearing across the world. This is already occurring in many countries in Europe, where PSTN is going and only VoIP is available. This is forcing a move to IP.

Rather than looking at this as a negative, IP offers flexibility, cost savings and a wide range of new services not experienced on existing security systems, the main benefits being:

* Cost savings.

* Constant line monitoring.

* Greater security.

* Remote management and diagnostics.

Selecting a system

In this second article we look at what can be available within an IP alarm system and what to look out for in a good system. This is important to look behind the marketing claims, as with many new technologies there is a range of options appearing - some good, some not so good.

First, let us look at interconnections. Most manufacturers only offer IP interfaces on their new alarm panels, if at all. But it is most unlikely that the market will change their equipment quickly. Therefore if panels are to be converted to IP, then any system must be able to interface with the widest range of installations. A good system will have PSTN, pins and serial interfaces such that all panels can be converted to IP. An obvious solution, but in practice many market offerings currently available can only support pin inputs to IP.

Support for GPRS is a necessity both for alternate routing but as an option to other radio carriers such as LRR. GPRS can bring many benefits, over LRR. The first is that any alert to a monitoring centre is confirmed back to the panel, such that any secondary action can be taken. The other more important benefit is that provided a PSTN to IP capability is installed then new protocols such as Sia can be supported, rather than being limited to just pin inputs. Across Europe today GPRS is being adopted for another extremely important reason. GPRS can offer two-way communications and therefore remote maintenance.

Whether it be across DSL, VPN or GPRS, IP can offer the installer or management centre the option to connect remotely to a panel and operate remote diagnostics. This has been proven to be an invaluable tool to assist users in configuring systems and correcting faults. One successful remote maintenance session can save an installer's visit and cost to justify the system. Compare this to a LRR system that sends out a report that may or may not arrive, and could result in a wasted visit to the site by an installer.

Cost is also an important issue with GPRS, this element is reducing all the time and with the GPRS benefits can offer a very cost effective package. In Europe, the main reason for users adopting IP is the remote monitoring and maintenance, which can drastically improve service levels and reduce call out costs.

Improved security

All IP systems now come with increased security. PSTN systems today are easy to spoof and intercept by any determined intruder. IP systems offer increased security in a number of ways. Firstly, there is line monitoring, (usually referred to as polling) where the line is regularly polled to ensure an end-end connection. This, today, is only cost effective on high-end systems but with IP can be made available economically on lower end systems. When comparing IP alerting systems it is best to look for one that can meet both high and low security systems. For the highest level of security the line should be polled as frequently as every 10 seconds, but for a lower risk level then every 60 seconds to 10 minutes may be adequate.

Unfortunately many systems have a fixed polling frequency of 60-90 seconds. This is insufficient for high security sites, and can generate unnecessary data for low security sites.

There are other ways that IP can offer improved security within the systems. Anti tamper, anti substitution are all options, but most IP systems will also offer encryption. This is obviously important for polling and remote maintenance, but when we consider that our current systems have no encryption, then this is a significant step forward. Encryption can however be confusing to the outsider. For those of us within the encryption arena it can be even worse. So let us look at some of the parameters, which define a good from a bad system. First, proponents will argue that one encryption system is better than another, for our industry this is mostly a lot of rubbish. If used well, then all are good. Rather than look at the encryption algorithms, which can be confusing, let us look at the operation of a secure system. This is the most important area.

We all know that the length of the encryption key is a good start to prevent encryptions being broken, but there is a more important point largely overlooked in making a good encryption system. In military and the most high encryption systems, the security key, however long it may be, is changed regularly. This stops the most persistent hacker recording a number of communications and looking for patterns to break the code. In the best systems, the key is changed for every call. Compare this with some of the manufacturer's encryption on new IP alarm systems. Some have short key lengths, which are never changed. Some have the same key for all panels, which are never changed.

Such systems are nonsense, as anyone knowing the key to the system would have access to every panel on the network panels and could deactivate each of them at will. Sounds crazy, but some of our major panel manufacturers are offering such systems as 'the next generation'. When choosing an IP system look at the length of the encryption keys, are they unique to each panel, and how often are they changed? Do not be fooled by a big name manufacturer that claims a well known encryption system and assume it is safe.

There are many more technical aspects of IP alarm reporting, but the above is a brief overview of the important technical criteria. As with all new technologies, real importance is in the commercial benefits, and in the next article we will look at case studies of users who are now getting real benefit from moving to IP and the reasons why.

Ian Tredinnick is the managing director of Chiron Technology.

Share this article:

Further reading: