DESIGN PRACTICE NOTE

RAIL ASSETS SECURITY AND ACCESS CONTROL

L1-NAM-INS-012 Version: 1 Effective from: 30th July 2013

Approval

Amendment Record

Approval Date Version Description

30/07/2013 1 Initial issue under MTM

Approving Manager: Head of Network Asset Management Approval Date: 30/07/2013 Next Review Date: 30/07/2015
PRINTOUT MAY NOT BE UP-TO-DATE; REFER TO METRO INTRANET FOR THE LATEST VERSION Page 1 of 7
 DESIGN PRACTICE NOTE
RAIL ASSETS SECURITY AND ACCESS CONTROL
L1-NAM-INS-012 Version: 1 Effective from: 30th July 2013

Table of Contents

1 Purpose ................................................................................................................................. 3

2 Background ........................................................................................................................... 3

3 The Issue ............................................................................................................................... 3

4 The Requirements................................................................................................................. 3

5 Required actions ................................................................................................................... 4

5.1 Risk assessment for each asset class.............................................................................................4
5.2 Advise RRL and Projects Group of the requirements......................................................................4
5.3 Security levels for keys/locks...........................................................................................................5
5.4 Common operational keying across Metro and V/Line....................................................................5
5.5 Central management .......................................................................................................................5

6 References............................................................................................................................. 5

7 Appendices............................................................................................................................ 5
Appendix 1- Assa Abloy letter Lockwood V7 series keying systems ........................................................5
Appendix 2- Lock schedule – February 2013............................................................................................5
Appendix 3- All ARO’s PM5 system key profiles (document not attached) ..............................................5

Approving Manager: Head of Network Asset Management Approval Date: 30/07/2013 Next Review Date: 30/07/2015
PRINTOUT MAY NOT BE UP-TO-DATE; REFER TO METRO INTRANET FOR THE LATEST VERSION Page 2 of 7
 DESIGN PRACTICE NOTE
RAIL ASSETS SECURITY AND ACCESS CONTROL
L1-NAM-INS-012 Version: 1 Effective from: 30th July 2013

1 Purpose
To provide a description and requirements for the selection and application of agreed
products for rail assets security and access control across the MTM network.

2 Background
The V Series keys and locks are a restrictive hierarchical security locking system used by
the Victorian rail industry from about 1984. The patent for the key and lock system is held
by Assa Abloy, formally known as Lockwood.
The patent has expired and will not be renewed. Assa Abloy has withdrawn the product
from the market leaving the rail industry in Victoria as the last user. Assa Abloy is no longer
accepting large orders of V series padlocks and from mid 2013 will only process limited
orders of key blanks. (See Appendix 7.1).
The railway industry therefore has had to review its keying and lock system requirements.
Public Transport Victoria (PTV) facilitated the review which addressed the following
matters:
 Review of current security arrangements,
 Development of a strategy to manage and improve security and access to rail assets,
with consideration to security requirements and new technologies,
 Development of a long term strategy for managing security and access for the entire
Victorian Rail Network,
 Investigate the viability of a “like for like” replacement for the V series key system.

3 The Issue
The demise of the V Series keys and locks has necessitated the identification of suitable
replacement products to meet the future security requirements of the rail industry in
Victoria.

The main aspects to be considered for the “Rail Assets Security and Access Control
System” are:
 Be compatible between ARO’s,
 Be integrated between different areas/departments within each rail operator/maintainer,
 Meet the access and security needs of employees and contractors,
 Be maintainable and durable.

4 The Requirements
The unavailability of the V Series keys and locks impacts all areas of the MTM business
including Operations, Infrastructure and Rolling Stock. Consideration has been given to the
range of assets from high value and/or high employee traffic areas to low value assets.
Three levels of asset risk have been identified and three products also recommended that
would meet the three tier risk requirements:

Approving Manager: Head of Network Asset Management Approval Date: 30/07/2013 Next Review Date: 30/07/2015
PRINTOUT MAY NOT BE UP-TO-DATE; REFER TO METRO INTRANET FOR THE LATEST VERSION Page 3 of 7
 DESIGN PRACTICE NOTE
RAIL ASSETS SECURITY AND ACCESS CONTROL
L1-NAM-INS-012 Version: 1 Effective from: 30th July 2013

 High risk assets – Challenger access card is a component of the security system
implemented by VicTrack (in consultation with other rail organisations) for new
installations, e.g. Newport sidings, new stations,
 Medium risk assets – Assa Abloy Protec Cliq is a programmable electronic element
together with a metal standard key (similar to a car key),
 Low risk assets – Assa Abloy Protec is an all metal standard key with no
programmable electronic element.
Challenger is an integrated security management product chosen by VicTrack and the
ARO’s as the current preferred intruder detection and security management system. As an
integrated system a feature of Challenger is the capability of supporting access control
cards.
Assa Abloy Protec Cliq is a key and lock system based on the same mechanical key body
as the standard Protec with the addition of a programmable electronic element (similar to a
car key) that works in conjunction with an electronic element embedded with the
appropriate padlock or door cylinder. The programming allows for hours of access, days of
week, restricted access etc. This feature may be useful where it is prohibitive to install
Challenger access card or at locations with an interface to another ARO e.g. V/Line.
Assa Abloy Protec is a recent high security keying system that has patented legal
protection until 2031. Protec is a standard mechanical key system that will operate regular
padlocks and door cylinders. The Protec Cliq mechanical key can be used with a Protec
standard cylinder or padlock. The Assa Abloy Protec products are used by other rail
networks in Australia.
The solutions described above has also been formally accepted by V/Line to ensure inter-
operability, particularly for operational needs.

5 Required actions

5.1 Risk assessment for each asset class

Finalise the definitive list of locations requiring locks/security and finalise the definitive
quantity and type by location. This is a significant task as no consolidated database exists,
listing all sites and key/lock types.
Against the three tier risk model of low, medium and high, each asset class will need to be
risk assessed. The result of these risk assessments will determine how many actual lock
items need to be specifically treated with the locking solutions.

5.2 Advise RRL and Projects Group of the requirements

Once the risk/product solution model is agreed, RRL and Projects need to be advised of
this position. RRL has a clear requirement for the new products as part of their project
delivery and wish to be in a position to begin ordering materials. With respect to the
Challenger access card system for securing SER’s etc, they also need to be able to
commence design activities.

Approving Manager: Head of Network Asset Management Approval Date: 30/07/2013 Next Review Date: 30/07/2015
PRINTOUT MAY NOT BE UP-TO-DATE; REFER TO METRO INTRANET FOR THE LATEST VERSION Page 4 of 7
 DESIGN PRACTICE NOTE
RAIL ASSETS SECURITY AND ACCESS CONTROL
L1-NAM-INS-012 Version: 1 Effective from: 30th July 2013

5.3 Security levels for keys/locks

An early activity to support the roll out of the new locking system has been the
establishment of hierarchical security levels for key/locks. A goal of the new system is to
reduce the number of different keys currently required to operate within the network. The
Assa Abloy Protec system has substantial capacity to create a structured key system where
one key can access different areas of the network depending on the individual’s level of
authority. (See Appendix 7.2).
The hierarchical security level structure has been developed with V/Line and is particularly
important to ensure that the rail industry can continue with some common operational lock
access for shared resources across the networks.

5.4 Common operational keying across Metro and V/Line

To allow V/Line Train Drivers and other train operators, including Signal Delivery staff at the
interfaces, to operate signalling safeworking equipment on the Metro Network, there will
need to be agreement that common operational keying of selected padlocks continues.

5.5 Central management

To ensure the integrity of the rail assets security and access control systems require central
management of data recording the issue of keys and access cards. This process would
also include approving the supply of padlocks and cylinders as well as keys and/or access
cards.
Relevant departments would raise their locking requirements with appropriate department
authorisation and forward the request to the central office for approval. The central office
would then forward the request to Assa Abloy for completion. This process will ensure the
integrity of the systems and result in only one office dealing with the suppliers.
The office of the Manager Business Resilience is the most appropriate area to centrally
manage the process across the MTM businesses.

6 References
N/A

7 Appendices
Appendix 1- Assa Abloy letter Lockwood V7 series keying systems
Appendix 2- Lock schedule – February 2013
Appendix 3- All ARO’s PM5 system key profiles (document not attached)

Approving Manager: Head of Network Asset Management Approval Date: 30/07/2013 Next Review Date: 30/07/2015
PRINTOUT MAY NOT BE UP-TO-DATE; REFER TO METRO INTRANET FOR THE LATEST VERSION Page 5 of 7
 DESIGN PRACTICE NOTE
RAIL ASSETS SECURITY AND ACCESS CONTROL
L1-NAM-INS-012 Version: 1 Effective from: 30th July 2013

Appendix 1- Assa Abloy letter Lockwood V7 series keying systems

Approving Manager: Head of Network Asset Management Approval Date: 30/07/2013 Next Review Date: 30/07/2015
PRINTOUT MAY NOT BE UP-TO-DATE; REFER TO METRO INTRANET FOR THE LATEST VERSION Page 6 of 7
 DESIGN PRACTICE NOTE
RAIL ASSETS SECURITY AND ACCESS CONTROL
L1-NAM-INS-012 Version: 1 Effective from: 30th July 2013

Appendix 2- Lock schedule – February 2013

Metro Trains Melbourne Pty Ltd

Protec 2 and Protec 2 Cliq lock schedule - February 2013

Lock Usage description Dept Access authority (min)

1P General purpose (non safeworking) Statewide Nil
5P Operational safeworking equipment Statewide Safeworking qualified
7P Vital signal equipment Statewide Signal Maintenance
Technician
10P Signal structures/gantries Statewide Signalling approved
11P Points releasing (safeworking) Operations & sig maint tech
21P Signals/Comms equipment rooms Statewide OCS & sig maint tech
22P Signal boxes/control rooms Statewide Operations & sig maint tech
37P HV signal assets Statewide Signals
29P Suburban train access/control (EMU) Operations Train driver
29PG Stabling siding gates Statewide Nil
30P EMU Fleet Maint (VICERS etc) Fleet Maint Approved fleet maintainer
8P HV switchyard & OH switches Elect Networks EN lineworker
9P Low voltage switchboards Elect Networks Approved electrician
19P HV industrial substation doors Elect Networks Approved person
41P Electrolysis control boxes Elect Networks EN approved
107P HV substation doors Elect Networks Approved person

Note 1: Assa Abloy Protec 2 and Protec 2 Cliq lock cylinders will fit both Protec padlocks
and Lockwood door furniture.
Note 2: Padlocks selected are Abloy Protec padlock PL321, shackle dia 5mm, horizontal
shackle clearance 18mm and vertical shackle clearance 20mm or 50mm (eg
signals 8P). Abloy Protec padlock PL330, shackle dia 8mm, horizontal shackle
clearance 25mm and vertical shackle clearance 25mm or 50mm (eg general 1P).
Note 3: Abloy Protect 2 keys are able to be used with cam locks and cabinet locks (eg
signals 12P).

Approving Manager: Head of Network Asset Management Approval Date: 30/07/2013 Next Review Date: 30/07/2015
PRINTOUT MAY NOT BE UP-TO-DATE; REFER TO METRO INTRANET FOR THE LATEST VERSION Page 7 of 7