Overview - What ISO/IEC 24643:2020 covers
ISO/IEC 24643:2020 defines the architecture for a distributed real‑time access system. It specifies a functional, modular reference architecture for access control systems that make timely decisions to permit or deny access (for example building entrances, hotel check‑ins, ATMs, e‑voting). The standard focuses on the function group concept, detailing the responsibilities of each function group and the interfaces between them. It does not prescribe communication protocols between functions nor the internal implementation of processing functions.
Key topics and technical requirements
- Functional architecture: A clear division into function groups (Physical, Network/Telecommunication, Service, Platform, Application) with defined roles for each group.
- Core components: Definitions and identifiers for access object, access point, edge/edge node, access ID, access object ID, and transaction.
- Transaction flow: Real‑time transaction lifecycle from access object → access point → processing functions → final judgement → result returned to access point.
- Platform services: Policy function, authentication and access object data management, system data and inter‑application interfaces to manage rules and message flows.
- Interfaces: Specified interactions between function groups (Physical ↔ Network, Network ↔ Service, Service ↔ Application, inter‑application).
- Data and examples: Informative annexes provide example data formats for transaction data, authentication and access object data, and illustrative complex authentication scenarios.
- Constraints / out of scope: Protocols between functions, detailed processing activities of individual process functions, and multi‑layer concerns (security, privacy, governance) are explicitly out of scope.
Practical applications and target users
ISO/IEC 24643 is intended for organizations designing, integrating or operating distributed access control systems that require real‑time decisioning:
- System architects and solution designers creating modular, scalable access control infrastructures.
- Access control vendors and integrators implementing interoperable components (readers, edge nodes, cloud services).
- Security engineers and IT operators managing authentication, policy and transaction flows.
- Facility managers and service operators (hotels, campuses, transportation hubs, banking, e‑voting platforms) seeking guidance for distributed access deployments.
- Cloud and networking teams enabling edge‑aware deployments for low latency, high‑throughput access scenarios.
Related standards
- ECMA‑412 / ISO/IEC 20933 - Framework for distributed real‑time access systems (reference model and common control functions).
- ISO/IEC TR 23188 - referenced for the concept of “edge.”
ISO/IEC 24643:2020 is a practical architecture standard for developers and decision‑makers building scalable, real‑time distributed access systems, emphasizing modular function groups, clear interfaces, and transaction-driven processing. Keywords: ISO/IEC 24643:2020, distributed real-time access system, access control architecture, function group, authentication, edge node, access point, transaction data.