Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Authentication and Authorization of Building Information Users in BACnet



Stephen J. Treado, Alan B. Vinh, Steven T. Bushby


Building automation systems frequently monitor critical building information that would be extremely useful for emergency responders including the status of alarms, locations of occupants, temperature, and air quality conditions. Emergency response can be improved by providing access to this information during building emergencies. This report describes a proposed authentication and authorization methodology for providing controlled access to building information to approved external entities such as police, fire and public safety officials, while at the same time preventing unauthorized access and use of the information. Enhancements to the BACnet building automation system communication protocol are proposed to provide this functionality.
Technical Note (NIST TN) - 1615
Report Number


access control, authentication, buildings, control systems, emergency responders, protocol, security


Treado, S. , Vinh, A. and Bushby, S. (2008), Authentication and Authorization of Building Information Users in BACnet, Technical Note (NIST TN), National Institute of Standards and Technology, Gaithersburg, MD, [online], (Accessed May 18, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created January 1, 2008, Updated February 19, 2017