Authentication and Authorization of Building Information Users in BACnet

Published

January 1, 2008

Author(s)

Stephen J. Treado, Alan B. Vinh, Steven T. Bushby

Abstract

Building automation systems frequently monitor critical building information that would be extremely useful for emergency responders including the status of alarms, locations of occupants, temperature, and air quality conditions. Emergency response can be improved by providing access to this information during building emergencies. This report describes a proposed authentication and authorization methodology for providing controlled access to building information to approved external entities such as police, fire and public safety officials, while at the same time preventing unauthorized access and use of the information. Enhancements to the BACnet building automation system communication protocol are proposed to provide this functionality.

Citation

Technical Note (NIST TN) - 1615

Report Number

1615

NIST Pub Series

Technical Note (NIST TN)

Pub Type

NIST Pubs

Download Paper

Local Download

Keywords

access control, authentication, buildings, control systems, emergency responders, protocol, security

Citation

Treado, S. , Vinh, A. and Bushby, S. (2008), Authentication and Authorization of Building Information Users in BACnet, Technical Note (NIST TN), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=861031 (Accessed October 10, 2025)