Cencon ATM Cash Vault Security System
←
→
Page content transcription
If your browser does not render page correctly, please read the page content below
Cencon ATM Cash Vault
Security System
Chapter Cencon/Cencon 02 ATM Cash Vault Security System 1
It’s Time to Play Follow the Leader. Again.
Poised to reset all benchmarks
in ATM cash security and service.
(See page 6 for details.)
Cencon
The Challenge The Solution
The unique challenge of securing ATM cash vaults The Cencon ATM Cash Vault Security System from Kaba
characteristically requires shared access among Mas was designed to combat insider theft from ATMs
several companies. This typically consists of the parties through the combined use of lock hardware, systems
responsible for replenishing cash and pulling deposits, software, and Smart Keys™. Cencon offers total access
as well as those providing 1st or 2nd line maintenance. control and accountability with its One Time Combination™
Additionally, for ATMs located at the bank as opposed to (OTC) feature. The OTC is dispatched from the software
off-premises, branch employees may also require entry and can only be used by that particular key for that
to the vault during certain hours. Some companies still lock’s next opening, thus eliminating temptation. Unique
have their service personnel access the ATM vault by software allows you to control and monitor tens, hundreds,
sharing the same lock combination. Bank employees, even thousands of locks and users located anywhere
cash replenishers, technical service reps, repair personnel in the world — from one central location. Cencon is a
all know the one combination that opens an ATM safe revolutionary and cost-effective solution for today’s most
typically holding tens of thousands of dollars in cash! serious security challenges.
This type of archaic locking method with no accountability
or access control equals serious temptation even for the
most honest of employees.
Features and Benefits Dead Bolt
Swing Bolt
Dual Token Access Control the combination when the user needs PowerStar™ Technology
A user needs both a combination and a to open the lock at gunpoint. The lock Use of an internal generator creates
Smart Key to access the lock. also offers the optional shunt alarm (3) all the necessary power for the lock.
to deactivate the alarm when a correct No batteries or external wiring are
One Time Combination combination and associated Smart Key required to operate the lock.
A One Time Combination (OTC) is are presented.
dispatched each time access is required Cencon 02
to open a Cencon lock in either of the Audit Trail Communicate remotely to the
OTC modes (FLM or Route mode). The Cencon lock records all lock Cencon lock by adding hardware and
activity, a maximum of more than 1,000 software components, which when
Smart Key events in some situations, and permits connected to the ATM PC, allow for
Encrypted electronic keys are used easy downloading of the information streamlined operations.
as personal identifiers to open a lock via a Smart Key for generating detailed
(blue F, yellow R, green B), log in to the audit reports. User Friendly Software
software (black D, S, SS), or as a device Cencon software allows access control
to activate or audit a lock (red SA). Additional Security Options to all containers with no special wiring.
Each group of lock or software access The Windowsç 7 or higher operating
Close Seal users can be configured with individual system, Oracle® or Microsoft® SQL
The close seal acts as an electronic time window restrictions, including the Server interface, makes it simple to
signature, stamping the date and time dual-mode requirement to provide two- install and use on a stand-alone PC, a
in the lock and key’s memory and person integrity, or a software grouping local area network (LAN) or wide area
allowing the software to remotely know method to prevent certain users from network (WAN).
the lock status in the two OTC modes. accessing certain locks.
Technical Support
3 Alarm Compatible Easy Retrofit The Kaba Mas Technical Support Staff
Each Cencon comes standard with the Cencon locks have the same is available 24 hours a day, seven
capability to connect to an existing footprint as conventional mechanical days a week, to assist you in resolving
alarm system to (1) monitor the combination locks, making the retrofit hardware or software related issues.
position of the lock bolt and (2) send process simple and inexpensive.
a silent duress signal by adding 10 to
4 Cencon ATM Cash Vault Security System Features & Benefits
Cencon Innovations: Shared Access
Cencon locks can operate individually or in any combination of these three modes — one for
the First Line Maintenance personnel (FLM Mode), one for cash replenisher or armored service
(Route Mode), and one for bank branch employees (Bank Mode). Each mode addresses the
individual access needs for each category of user.
FLM MODE ROUTE MODE BANK MODE
Key + OTC Key + OTC Key + RAC
(One Time Combination) (One Time Combination) (Repeatable Access Code)
Use Cencon 5 Use Cencon 5 Use Cencon 5 Software
Software Software
(CenTran optional) (CenTran optional)
Designed for First Line Maintenance While permitting the same access Bank Mode is designed for bank
personnel, the FLM mode of the control as FLM Mode, Route Mode personnel who may need access to
Cencon lock permits the dispatch additionally allows pre-defined the Cencon lock but do not wish to
center to give an OTC to a technician routes for armored cash operate through a dispatch center.
“on the fly.” FLM personnel are replenishers. Route personnel are Green Smart Keys and combinations
issued a blue Smart Key, then call each issued a yellow Smart Key. A are issued to bank personnel who
their dispatch center to request an route of locks may be assigned, may unlock the Cencon lock at any
OTC. Once used, this combination will permitting route personnel to access time within that user’s access
not function again, thus insuring a series of locks without contacting schedule. An internal audit trail
absolute access control. Once the their dispatch center between each tracks all activity of bank personnel
Cencon unit is locked, a close seal opening. Route personnel can either just as it does for FLM and Route
code is displayed on the lock’s LCD call their dispatch center at the end personnel. Kaba Mas Cencon 5
and, when entered into the dispatch of the shift to report the close seals, software permits bank administrators
center’s computer, assures that the or the close seals can be read from to manage Bank Mode on site. Bank
Cencon is locked and secure. the key by the Cencon software. users may be added or deleted and
audit trails may be downloaded from
the lock.
PowerStar Technology
Use of an internal generator creates all the necessary power. No batteries or external wiring
required to operate the lock. Optional line power available if using Cencon 02.
Shared Access Cencon ATM Cash Vault Security System 5
— Remote Management
for Streamlined Operations
Kaba’s commitment to ATM cash security is over one million Cencon locks strong. As the market leader in combating
insider theft from ATM’s, Kaba is dedicated to streamlining the security process, increasing efficiency while maintaining
complete user accountability.
We are acutely aware that a large part of the ATM cash security investment comes from hardware costs and associated
operational expenses. Financial organizations already own the locks and keys. Cencon O2 was designed with this in mind.
The system provides an optional upgrade to your new or existing locks and keys. From the field, your system can be
upgraded with a simple firmware update and the addition of the new Interconnect Box and software components.
The Interconnect Box — A Breath of Fresh Air for Cencon
Dead Bolt
The Interconnect Box enables remote management of your Cencon dead bolt locks by connecting directly to the ATM PC
via USB port. This allows your locks to be on your ATM network and opens the door to enhanced functionality. You can also
upgrade your current field dead bolt locks by contacting Kaba Mas for a firmware update, available January 2014 (applies to
Gen2 locks only). If connectivity is not desired, no additional components or interfaces are required.
Swing Bolt
Utilizing one of two versions of the swing bolt Interconnect Box enables remote management of the Cencon swing bolt locks
by connecting directly to the ATM PC via USB port. Shunted and non-shunted versions are available. If connectivity is not
desired, then versions with no USB connection are also offered.
Four Options
(Must be Ordered with Swing Bolt Lock)
• Non-Shunt Interconnect Box, No USB Connection, Duress, • Shunt Interconnect Box, No USB Connection, Duress,
Bolt Switch, Door Contact, 12" Cables Alarm Shunt, Bolt Switch, Door Contact, 12" Cables
• Non-Shunt Interconnect Box, USB Connection, Duress, • Shunt Interconnect Box, USB Connection, Duress,
Bolt Switch, Door Contact, 12" Cables Alarm Shunt, Bolt Switch, Door Contact, 12" Cables
• USB is for Connection to ATM PC
Connecting Securely From Anywhere
Traditionally, Kaba’s CenTran software has given you the ability to automate certain Cencon features, such as code
generation and distribution through third-party dispatching software. CenTran 5, with its Windows Service feature,
supports remote operations. With the use of a third-party IVR system or CenTran Appliance, CenTran’s Web Service allows
field personnel to receive their One Time Combination via text or email, eliminating contact with dispatch personnel. The
new Interconnect Box for USB connection to the ATM PC, used in conjunction with CenTran Web Service and ATM-side
CenTran Agent software, allows you to remotely activate, audit, shelve, and manage Cencon Locks. By installing Kaba’s
new Key Box Agent software, you can manage keys and users remotely too!
Streamline Operations and Reduce Costs
Today, when an ATM security breach occurs, retrieving the audit is a multi-step process that involves multiple people
and additional expense. The option of Cencon O2 allows a Security Director to remotely log into the lock and retrieve the
audit in a matter of seconds.
Emergencies happen. When they do, Cencon O2 allows technicians to create keys and codes from the field without
heading to the office first.
6 Cencon ATM Cash Vault Security System Remote Management
System Deployment
Customer
ATM Management Server
Cencon Database
CenTran Server/Web Service
Cencon Client PC
with Cencon Software
and Keybox
Laptop with Keybox
Agent Software
and Keybox
Cencon Dead Bolt Interconnect Box connected to ATM PC via
USB - alarm shunt, bolt switch and door
contact on dead bolt card
ATM PC Connected to
ATM Network with
CenTran Agent Software
OR
Interconnect Box connected to ATM PC via
Cencon Swing Bolt
USB - alarm shunt door contact. Bolt
switch contained in box
Cencon 02 System Deployment Cencon ATM Cash Vault Security System 7
Cencon Dead Bolt Specifications
PRODUCT SPECIFICATIONS ELECTRICAL SPECIFICATIONS
Access Control • Power................................................ Self-generated with
• User Authentication...................... Combination + Smart Key internal generator
• Operating Modes............................ Three Modes (FLM, Route (Optional line power via
and Bank) USB port to ATM PC
• Single or Dual User Access.......... For any of the three modes available January 2014)
• Factory (Shelved) Mode................ 50-25-50 or changeable • Alarm Interface ............................. Optional 9-pin din,
by user Three NO/NC outputs
• One Time Combination................. For FLM & Route Mode • Door Contact................................... 4-pin connector to hook up
• User-Defined Combinations......... For Bank Mode users door contact switch,
• Wrong Combo Penalty.................. After five remote disable
incorrect attempts • Serial Communications Port........ 10-pin serial port allows for
• Central Control .............................. With Cencon 5 software remote operations directly
• Audit Trail connected to a Cencon PC
• Lock.............................................. Can achieve more than (audit, activate, shelve, etc.)
1,000 events Option to connect to ATM
• Key................................................ Up to 32 events PC via Interconnect Box
• Software....................................... Unlimited events available January 2014
• Time Windows by User.................. Optional • Smart Key........................................ 1K-bit to 64K-bit read-write
• Time Delay....................................... 1-99 minutes, Bank memory, some with time-
mode only clock, multi-stage
• Number of Users............................ Unlimited for FLM & Route encrypted, internal 10-year
mode — 100 per lock for lithium battery, mounted in
Bank mode a stainless steel case
Alarm Interface MECHANICAL SPECIFICATIONS
• Silent Duress Alarm . .................... Standard - combination +10 Input Unit
• Bolt Status....................................... Standard • Keypad ............................................. 12-button sealed with
• Alarm Shunt ................................... Optional tactile feedback
• Key Reader....................................... Accepts Cencon
Agency Approvals / Certificates Smart Keys
• U.L. - Type 1 (USA) • Display ............................................. 3-character LCD (with
• U.L.C. - Type 1 (Canada) audible beep)
• VdS - Class 2 (Germany)
• ECB•S/EN1300 - Level B (Europe) Lock Case
• A2P / CNPP - Class B/E (France) • Dead bolt die cast
• DNV - High Security (Sweden) • Bolt with three thread options (see price book)
• Bolt travel: 8.7 mm
Environmental
• Operating Temperature................ -23 °C to 65 °C @ 90% RH
Cencon KD (Keypad Down)
• Humidity........................................... Up to 95% RH
Dial & Keypad
• ESD.................................................... 5KV to 25KV
4.78" H x 3.95" W x 1.38" D
• Endurance........................................ 25,000 operations
Lock Case
• Vibration........................................... 3-axis, 10-150 MHz,
2.40" H x 3.35" W x 1.22" D
1G acceleration,
3 oct/min (per IEC 68-2-2)
• Shock................................................. 50 G (per IEC 68-2-27) Cencon KU (Keypad Up)
• Mechanical Attack.......................... 30 minutes (per ULC) Dial & Keypad
3.79" H x 3.83" W x 1.38" D
Lock Case
2.40" H x 3.35" W x 1.22" D
8 Cencon ATM Cash Vault Security System Dead Bolt Specifications
Cencon Swing Bolt Lock Specifications
PRODUCT SPECIFICATIONS
Access Control ELECTRICAL SPECIFICATIONS
• User Authentication ..................... Combination + Smart Key • Power ............................................... Self-generated with
• Operating Modes Three Modes (FLM, Route internal generator
and Bank) (Optional line power via
• Single or Dual User Access ......... For any of the three modes Interconnect Box/USB port
• Factory (Shelved) Mode . ............. 50-25-50 or changeable to ATM PC)
by user • Alarm Interface ............................. Optional 9-pin din, three
• One Time Combination ................ For FLM & Route Mode NO/NC outputs (Requires
• User-Defined Combinations ....... For Bank Mode users Interconnect Box)
• Wrong Combo Penalty ................. After five incorrect • Door Contact .................................. 4-pin connector to hook up
attempts door contact switch,
• Central Control .............................. With Cencon 5 software remote disable
(Requires Interconnect
Audit Trail Box)
• Lock .................................................. Can achieve more than • USB Communications Port ......... Located in Interconnect
1,000 events Box, USB port allows for
• Key . .................................................. Up to 32 events remote operations directly
• Software .......................................... Unlimited events connected to an ATM PC
• Time Windows by User ................ Optional (Requires Interconnect Box)
• Time Delay ...................................... 1-99 minutes, Bank • Smart Key ....................................... 1K-bit to 64K-bit read-write
mode only memory, some with time-
• Number of Users ........................... Unlimited for FLM & Route clock, multi-stage
mode — 100 per lock for encrypted, internal 10-year
Bank mode lithium battery, mounted in
a stainless steel case
Alarm Interface (Requires Interconnect Box)
• Silent Duress Alarm . .................... Combination +10
• Bolt Status
• Alarm Shunt
MECHANICAL SPECIFICATIONS
Agency Approvals / Certificates Input Unit
• U.L. - Type 1 (USA) • Keypad ............................................. 12-button sealed with
• U.L.C. - Type 1 (Canada) .......................................................... tactile feedback
• VdS - Class 2 (Germany) • Key Reader ......................................Accepts Cencon
• ECB•S/EN1300 - Level B (Europe) Smart Keys
• A2P / CNPP - Class B/E (France) • Display ............................................. 3-character LCD (with
• DNV - High Security (Sweden) audible beep)
Lock Case
Environmental • Swing bolt die cast
• Operating Temperature ............... -23 °C to 65 °C @ 90 %RH • Bolt travel: Into lock case.
• Humidity . ........................................ Up to 95% RH Entry
• ESD ................................................... 5KV to 25KV Keypad Dimensions
• 5.14" H X 3.83" W x 1.43" D
• Endurance . ..................................... 25,000 operations
• Vibration ......................................... 3-axis, 10-150 MHz,
Lock Dimensions
1G acceleration,
• 2.40" H X 3.33" W x 0.91" D
3 oct/min (per IEC 68-2-2)
• Shock ............................................... 50 G (per IEC 68-2-27)
Interconnect Box Dimensions
• Mechanical Attack ........................ 30 minutes (per ULC)
• 4.40" H X 2.40" W x 0.67" D
Swing Bolt
Swing Bolt Specifications Cencon ATM Cash Vault Security System 9
Cencon 5 Software
Do More than Ever Before by Updating to the user has opened and closed the lock, then the
Cencon 5 Software operation closes out the dispatch and returns that the
Kaba Mas is constantly improving the Cencon software so we user already opened the lock. If the user has not opened
can meet the changing needs of your financial organization. the lock, then the combination for that lock mode is
By enhancing the functions available at the dispatch center, advanced to the next combination at the lock, and the
your company’s processes will be streamlined, further dispatch is force closed in the Cencon database.
increasing your return on investment for the Cencon System. • Improved threading of Cencon reports to allow
As your business grows with more ATMs, you can continue simultaneous report operations.
to trust your partnership with Kaba to keep up with new • Improved database query speed tuning for sets
security and technology requirements the industry dictates. of strings, increasing performance of retrieving large lists
of strings from the database.
When a One Time Combination in FLM or Route mode is • Improved performance of
dispatched, Cencon software manages locks and user keys. database checks at Cencon
A unique security code is encrypted to the USB Key Box startup by making them
that accompanies the software. All actions are stored in operate in parallel
the activity log’s record of events and are tracked by the (multi-threaded). This
particular user who was logged into the software. hides network latencies
for the individual
Cencon Software supports the following database engines: database queries by
• Microsoft SQL 2008 Express or higher, for stand-alone or checking each table.
LAN applications. Each database table
• Microsoft SQL 2008 Server, Standard or Enterprise check operates in its
Editions or higher, Oracle 10g and higher for network own thread.
applications. (Customer must obtain software/
license separately.)
CENCON 5 SOFTWARE SPECIFICATIONS
New Features/Improvements
• Qty. Locks Controlled....... Unlimited w/ enough PC space
• Updated database SQL operations to use a forward-only
• Qty. Users Managed.......... Unlimited w/ enough PC space
cursor to improve wide area network operations. This
• Qty. of Audit Events.......... Unlimited when
improves system performance and allows for
properly archived
compatibility with Windows 8. As a result, large reports in
• Multi-Level Access............ Yes
Cencon now load more quickly.
• Audit Reports..................... Yes
• Added support for checking lock audit event dates to
• Lock Status Reports......... Yes
determine the correct user name to display. User keys are
• User Reports...................... Yes
often renamed or deleted and reused. Thus, different user
• Operating System............. Microsoft Windows 7 (32/64
names are assigned to a user key at different points in
bit) or higher.
time. The key serial number from the audit is
• Min. PC Requirements...... 2 GB RAM; 50 MB available
compared against the active user table as well as the user
hard disk space initially (hard
history table to determine the correct user name
disk space requirement will
to display.
grow as database files grow)
• Improved CenBank import in the DBSetupUtility, allowing
Available USB port for USB
for easier transition from legacy CenBank software to
Key Box
Cencon 5.
• An installed Database Management System (DBMS) —
• Added a lock serial communications operation to cancel
Microsoft SQL Server 2008 or higher (including the
a dispatch and advance a mode of network connected lock
SQL Server Express Editions), or Oracode 10g or higher.
to the next combination. This operation is used to cancel
The PC requirements listed above do not include the
the dispatch mode of a Cencon Gen 2 or higher lock
requirements of a DBMS. If the DBMS is run on the same
that is connected to a network IP address. It is executed by
computer as Cencon, then the total requirements will be
checking the status of the lock to determine if the
the requirements of Cencon plus those of the DBMS.
dispatched user has reached the lock and opened it. If
10 Cencon ATM Cash Vault Security System Cencon 5 SoftwareSoftware Options for Cencon Locks
CENTRAN 5 SOFTWARE as a light weight web browser replacement for Cencon. The
Kaba Mas is excited to introduce the newest version of intent is to facilitate your integration of CenTran into your
CenTran. With the release of CenTran 5, the program is even business systems through a web browser interface.
more powerful and integrated with Cencon. It performs
all the functions as the previous versions of CenTran, THE CENTRAN AGENT
plus so much more. In CenTran 5, Cencon locks can be CenTran Agent .Net 4.0
partnered with the new CenTran Agent Software, Cencon The CenTran Agent service software is used at ATM console
USB Interconnect Box, and Cencon Keybox Agent Software computers running on Windows 7 to monitor the status of
to enable real-time functionality, resulting in reduced the connected Cencon lock, as well as to handle requests to
operational costs and improved management of your Cencon CenTran to update the status of the connected Cencon lock.
ATM Cash Vault Security System!
CenTran Agent .Net 3.5
With the introduction of CenTran 5, several landmark This CenTran Agent service software is compatible with ATMs
changes have occurred, the most important of which is that that are running on XP SP2. It has the same feature set as
CenTran now runs in the background as a Windows service! the .Net 4 version.
This allows for improved server stability and database
integrity. If a server is reset, then CenTran will automatically Cencon Keybox Agent
restart without manual intervention. The networked CenTran The Cencon Keybox Agent service software is used at client
Agent Software and CenTran Web Service enable real-time computers with an attached Cencon Keybox, allowing web-
monitoring of access to the lock. It also takes care of close based interfaces to use CenTran when initializing user keys
seal reporting for closing out locks automatically. remotely from a web browser.
With CenTran 5, the web service implementation for CenTran Available Remote Operations
has been added, matching the XML file transactions. This • Query Lock Status • Set Lock Open
web service implementation supports HTTPS operations • Query Lock Audits Delay Window
for REST and SOAP protocol web service calls. It also • Evaluate Lock Event • Resynchronize
supports local named pipe communications. The web service • Activate Lock Lock Dispatching
authenticates users based off of either user name/ password • Add Users To Bank • Resynchronize Bank
or Windows authentication. Mode Lock Mode Lock Users
• Delete Users From Bank • Cancel Dispatch and
The setup of the CenTran web service is done primarily by Mode Lock Advance To Next Lock
editing the CenTran configuration file. The configuration file • Shelve Lock Mode Combination
defines the web service endpoints and settings to be used • Set Lock Time • Reboot Lock
by CenTran. Setup of self-signed security certificates for • Set Lock Single
CenTran is supported by the CenTran Configuration Manager; Dual Access
however, use of a certificate authority server
is recommended.
NEW OPTIONAL SOFTWARE
CenTran Configuration Manager
The CenTran Configuration Manager is installed with the
CenTran service to facilitate installing, starting, stopping, and
uninstalling the CenTran service. It is used to assist you in
managing the CenTran service, where CenTran no longer has
a direct user interface.
CenTran Web Client Template
The CenTran Web Client Template adds HTML-based client
interface for CenTran web service operations. This is used
CenTran 5 Configuration Manager
Software Options Cencon ATM Cash Vault Security System 11Kaba Mas 749 W Short Street Lexington KY 40508 phone 859-253-4744 toll-free 877-KabaMas (522-2627) fax 859-255-2655 www.kaba-mas.com CENCON.R1113.1500
You can also read
