Networking Working Group J. Martocci, Ed. Internet-Draft Johnson Controls Inc. Intended status: Informational Pieter De Mil Expires: March 3, 2009 Ghent University - IBCN W. Vermeylen Arts Centre Vooruit September 3, 2008 Commercial Routing Requirements in Low Power and Lossy Networks draft-martocci-roll-building-routing-reqs-00 Status of this Memo By submitting this Internet-Draft, each author represents that any applicable patent or other IPR claims of which he or she is aware have been or will be disclosed, and any of which he or she becomes aware will be disclosed, in accordance with Section 6 of BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html This Internet-Draft will expire on March 3, 2009. Copyright Notice Copyright (C) The IETF Trust (2008). Abstract The ROLL Working Group was recently chartered by the IETF to define routing characteristics for low power embedded devices. ROLL would like to serve the Industrial, Commercial (Building), Home and Urban markets. Pursuant to this effort, this document defines the Martocci Expires March 3, 2009 [Page 1] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 functional requirements for installing integrated facility management systems in commercial facilities. The body of this document defines the routing requirements for commercial building application. Other commercial building requirements such as cost and installation requirements have been included in Appendix A for reference. Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC-2119 Error! Reference source not found.. Table of Contents 1. Terminology....................................................4 2. Introduction...................................................7 2.1. FMS Topology..............................................8 2.1.1. Introduction.........................................8 2.1.2. Sensors/Actuators....................................9 2.1.3. Area Controllers.....................................9 2.1.4. Zone Controllers.....................................9 2.2. Installation Methods.....................................10 2.2.1. Wired Communication Media...........................10 2.2.2. Device Density......................................10 3. Building Automation Applications..............................12 3.1. Locking and Unlocking the Building.......................12 3.2. Building Energy Conservation.............................13 3.3. Inventory and Remote Diagnosis of Safety Equipment.......13 3.4. Life Cycle of Smoke Detectors............................13 3.5. Surveillance.............................................14 3.6. Emergency................................................14 3.7. Public Address...........................................14 3.8. Positioning..............................................14 4. Building Automation Routing Requirements......................15 4.1. Installation.............................................15 4.1.1. Computer-free installation..........................15 4.1.2. Fixed addressing....................................15 4.1.3. Network Setup Time..................................16 4.1.4. Battery Powered devices.............................16 4.1.5. Local Testing.......................................16 4.2. Scalability..............................................16 4.2.1. Network Domain......................................16 4.2.2. Communication Distance..............................16 Martocci,(et al) Expires March 3, 2009 [Page 2] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 4.2.3. Automatic Gain Control..............................17 4.2.4. Peer-to-peer Communication..........................17 4.3. Mobility.................................................17 4.3.1. Mobile Device Association...........................17 4.4. Resource Constrained Devices.............................17 4.4.1. Cost................................................17 4.4.2. Limited Processing Power Sensors/Actuators..........18 4.4.3. Limited Processing Power Controllers................18 4.4.4. Parenting for Constrained Devices...................18 4.4.5. Adjustable System Table Sizes.......................18 4.5. Prioritized Routing......................................18 4.5.1. QoS.................................................18 4.6. Addressing...............................................19 4.6.1. Unicast/Multicast/Anycast...........................19 4.6.2. Unique Addresses....................................19 4.7. Manageability............................................19 4.7.1. Device Replacement..................................19 4.7.2. Firmware Upgrades...................................19 4.7.3. Diagnostics.........................................20 4.7.4. Trace Route.........................................20 4.8. Compatibility............................................20 4.8.1. IPv4 Compatibility..................................20 4.8.2. Maximum Packet Size.................................20 4.9. Route Selection..........................................20 4.9.1. Path Cost...........................................21 4.9.2. Path Adaptation.....................................21 4.9.3. Route Redundancy....................................21 4.9.4. Route Preference....................................21 4.9.5. Path Symmetry.......................................21 4.9.6. Path Persistence....................................21 4.10. Reliability.............................................22 4.10.1. Device Integrity...................................22 5. Traffic Pattern...............................................22 6. Open issues...................................................22 7. Security Considerations.......................................23 8. IANA Considerations...........................................23 9. Acknowledgments...............................................23 10. References...................................................23 10.1. Normative References....................................23 10.2. Informative References..................................24 Disclaimer of Validity...........................................25 11. APPENDIX A - Additional Building Requirements (Informative)..26 11.1. Additional Commercial Product Requirements..............26 11.1.1. Wired and Wireless Imlementations..................26 11.1.2. World-wide Applicability...........................26 11.1.3. Support of Building Protocol - BACnet..............27 11.1.4. Support of Building Protocol - LON.................27 Martocci,(et al) Expires March 3, 2009 [Page 3] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 11.1.5. Energy Harvested Sensors...........................27 11.2. Additional Installation and Commissioning Requirements..27 11.2.1. Device Setup Time..................................27 11.2.2. Unavailability of an IT network....................27 11.3. Additional Network Requirements.........................27 11.3.1. TCP/UDP............................................27 11.3.2. Data Rate Performance..............................27 11.3.3. Interference Mitigation............................28 11.3.4. Real-time Performance Measures.....................28 11.3.5. Packet Reliability.................................28 1. Terminology Access Point: The access point is an infrastructure device that connects the low power and lossy network system to the Internet, possibly via a customer premises local area network (LAN). Actuator: A field device that controls and/or modulates a flow of a gas or liquid; or controls electricity distribution. ASHRAE: American Society of Heating, Refrigerating and Air- Conditioning Engineers BAS: Building Automation System. This term is synonymous with Facility Management System (FMS). BMS: Building Automation System. This term is synonymous with Facility Management System (FMS). Channel: Radio frequency sub-band used to transmit a modulated signal carrying packets. Channel Hopping An algorithm by which field devices synchronously change channels during operation Commissioning Tool: Any physical or logical device temporarily added to the network for the expressed purpose of setting up the network and device operational parameters. Martocci,(et al) Expires March 3, 2009 [Page 4] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 Controller: A field device that can receive sensor input and automatically change the environment in the facility by manipulating digital or analog actuators. Downstream: Data direction traveling from a Local Area Network (LAN) to a Personal Area Network (PAN) device. Field Device: Physical devices placed in the plant's operating environment (both RF and environmental). Field devices include sensors and actuators as well as network routing devices and access points Fire: The term used to describe building equipment used to monitor, control and evacuate an internal space in case of a fire situation. Equipment includes smoke detectors, pull boxes, sprinkler systems and evacuation control. FFD: Full Function Device. An 802.15.4 device that can route messages across the mesh in addition to providing an end application. Most FFD are line powered since they must always be ready to forward messages. FMS: Facility Management System. A global term applied across all the vertical designations within a building including, HVAC, Fire, Security, Lighting and Elevator control. HVAC: Heating, Ventilation and Air Conditioning. A term applied to the comfort level of an internal space. IETF: Internet Engineering Task Force Intrusion Protection: A term used to protect resources from external infiltration. Intrusion protection systems utilize door locks, window tampers and card readers. LAN: Local Area Network. PAN: Personal Area Network. A geographically limited wireless network based on e.g. 802.15.4 or Z-Wave radio. ROLL: Routing Over Low-power and Lossy networks Martocci,(et al) Expires March 3, 2009 [Page 5] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 ROLL device: A ROLL network node with constrained CPU and memory resources; potentially constrained power resources. Sensor: A PAN device that measures data and/or detects an event. Upstream: Data direction traveling from a PAN to a LAN device. LLN: Low power and Lossy networks (LLNs) are typically composed of many embedded devices with limited power, memory, and processing resources interconnected by a variety of links, such as IEEE 802.15.4, Bluetooth, Low Power WiFi Lighting: The term used to describe building equipment used to monitor and control an internal or external lighted space. Equipment includes occupancy sensors, light switches and ballasts. LLN: Low power and Lossy Network. PAN: Personnel Area Network RF: Radio Frequency RFD: Reduced Function Device. An 802.15.4 device that can send messages on the network; receive messages from the network; but cannot route messages across the network. In most cases these devices are edge devices of the network.. RFDs may be line powered, but also can be battery powered since they play no role on the mesh. ROLL: Routing over Low power and Lossy networks. This IETF working group will develop routing characteristics and rules for supporting LLNs utilizing 6LoWPAN. Security: The term used to describe building equipment used to monitor and control occupant and equipment safety inside a building. Equipment includes window tamper switches, door access systems, infrared detection systems, and video cameras. Sensors: A field device that monitors an environmental condition in a building and reports its findings to higher order devices for control and alarming operations. Martocci,(et al) Expires March 3, 2009 [Page 6] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 Superframe: A collection of timeslots repeating at a constant rate. TC: Trust Center. A logical device on the network that is trusted by the network members. The TC administers security policy. Timeslot: A fixed time interval that may be used for the transmission or reception of a packet between two field devices. A timeslot used for communications is associated with a slotted-link Upstream: Data direction travelling from the field device to the host application. 2. Introduction Commercial buildings have been fitted with pneumatic and subsequently electronic communication pathways connecting sensors to their controllers for over one hundred years. Recent economic and technical advances in wireless communication allow facilities to increasingly utilize a wireless solution in lieu of a wired solution; thereby reducing installation costs while maintaining highly reliant communication. Wireless solutions will be adapted from their existing wired counterparts in many of the building applications including, but not limited to HVAC, Lighting, Physical Security, Fire, and Elevator systems. These devices will be developed to reduce installation costs; while increasing installation and retrofit flexibility. Sensing devices may be battery or mains powered. Actuators and area controllers will be mains powered. Facility Management Systems (FMS) are deployed in a large set of vertical markets including universities; hospitals; government facilities; K-12; pharmaceutical manufacturing facilities; and single-tenant or multi-tenant office buildings. These buildings range in size from 100K sqft structures (5 story office buildings), to 1M sqft skyscrapers (100 story skyscrapers) to complex government facilities such as the Pentagon. The described topology is meant to be the model to be used in all these types of environments, but clearly must be tailored to the building class, building tenant and vertical market being served. The following sections describe the sensor, actuator, area controller and zone controller layers of the topology. (NOTE: The Building Controller and Enterprise layers of the FMS are excluded from this Martocci,(et al) Expires March 3, 2009 [Page 7] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 discussion since they typically deal in communication rates requiring WLAN communication technologies. Each section describes the basic functionality of the layer, its networking model, power requirements and a brief description of the communication requirements. 2.1. FMS Topology 2.1.1. Introduction To understand the network systems requirements of a facility management system in a commercial building, this document uses a framework to describe the basic functions and composition of the system. An FMS is a horizontally layered system of sensors, actuators, controllers and user interface devices. Additionally, an FMS may also be divided vertically across alike, but different building subsystems such as HVAC, Fire, Security, Lighting, Shutters and Elevator control systems as denoted in Figure 1. Much of the makeup of an FMS is optional and installed at the behest of the customer. Sensors and actuators have no standalone functionality. All other devices support partial or complete standalone functionality. These devices can optionally be tethered to form a more cohesive system. The customer requirements dictate the level of integration within the facility. This architecture provides excellent fault tolerance since each node is designed to operate in an independent mode if the higher layers are unavailable. +------+ +-----+ +------+ +------+ +------+ +------+ Bldg App'ns | | | | | | | | | | | | | | | | | | | | | | | | Building Cntl | | | | | S | | L | | S | | E | | | | | | E | | I | | H | | L | Area Control | H | | F | | C | | G | | U | | E | | V | | I | | U | | H | | T | | V | Zone Control | A | | R | | R | | T | | T | | A | Martocci,(et al) Expires March 3, 2009 [Page 8] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 | C | | E | | I | | I | | E | | T | Actuators | | | | | T | | N | | R | | O | | | | | | Y | | G | | S | | R | Sensors | | | | | | | | | | | | +------+ +-----+ +------+ +------+ +------+ +------+ Figure 1 - Building Systems and Devices 2.1.2. Sensors/Actuators As Figure 1 indicates an FMS may be composed of many functional stacks or silos that are interoperably woven together via Building Applications. Each silo has an array of sensors that monitor the environment and actuators that effect the environment as determined by the upper layers of the FMS topology. The sensors typically are the leaves of the network tree structure providing environmental data into the system. The actuators are the sensors counterparts modifying the characteristics of the system based on the input sensor data and the applications deployed. 2.1.3. Area Controllers An area describes a small physical locale within a building, typically a room. As noted in Figure 1 the HVAC, Security and Lighting functions within a building address area or room level applications. Area controls are fed by sensor inputs that monitor the environmental conditions within the room. Common sensors found in many rooms that feed the area controllers include temperature, occupancy, lighting load, solar load and relative humidity. Sensors found in specialized rooms (such as chemistry labs) might include air flow, pressure, CO2 and CO particle sensors. Room actuation includes temperature setpoint, lights and blinds/curtains. 2.1.4. Zone Controllers Zone Control supports a similar set of characteristics as the Area Control albeit to an extended space. A zone is normally a logical grouping or functional division of a commercial building. A zone may also coincidentally map to a physical locale such as a floor. Martocci,(et al) Expires March 3, 2009 [Page 9] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 Zone Control may have direct sensor inputs (smoke detectors for fire), controller inputs (room controllers for air-handlers in HVAC) or both (door controllers and tamper sensors for security). Like area/room controllers, zone controllers are standalone devices that operate independently or may be attached to the larger network for more synergistic control. 2.2. Installation Methods 2.2.1. Wired Communication Media Commercial controllers are traditionally deployed in a facility using twisted pair serial media following the EIA 485 electrical standard operating nominally at 38400 to 76800 baud. This allows runs to 5000 ft without a repeater. With the maximum of three repeaters, a single communication trunk can serpentine 15000 ft. Most sensors and virtually all actuators currently used in commercial buildings are "dumb", non-communicating hardwired devices. However, sensor buses are beginning to be deployed by vendors which are used for smart sensors and point multiplexing. The Fire industry deploys addressable fire devices, which usually use some form of proprietary communication wiring driven by fire codes. 2.2.2. Device Density Device density differs depending on the application and code requirements. The following sections detail typical installation densities for different applications. 2.2.2.1. HVAC Device Density HVAC room applications typically have sensors and controllers spaced about 50ft apart. In most cases there is a 3:1 ratio of sensors to controllers. That is, for each room there is an installed temperature sensor, flow sensor and damper controller for the associated room controller. HVAC equipment room applications are quite different. An air handler system may have a single controller with upwards to 25 sensors and actuators within 50 ft of the air handler. A chiller or boiler is also controlled with a single equipment controller instrumented with 25 sensors and actuators. Each of these devices would be individually addressed. Air handlers typically serve one or two floors of the building. Chillers and boilers may be installed per Martocci,(et al) Expires March 3, 2009 [Page 10] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 floor, but many times service a wing, building or the entire complex via a central plant. These numbers are typical. In special cases, such as clean rooms, operating rooms, pharmaceuticals and labs, the ratio of sensors to controllers can increase by a factor of three. Tenant installations such as malls would opt for packaged units where much of the sensing and actuation is integrated into the unit. Here a single device address would serve the entire unit. 2.2.2.2. Fire Device Density Fire systems are much more uniformly installed with smoke detectors installed about every 50 feet. This is dictated by local building codes. Fire pull boxes are installed uniformly about every 150 feet. A fire controller will service a floor or wing. The fireman's fire panel will service the entire building and typically is installed in the atrium. 2.2.2.3. Lighting Device Density Lighting is also very uniformly installed with ballasts installed approximately every 10 feet. A lighting panel typically serves 48 to 64 zones. Wired systems typically tether many lights together into a single zone. Wireless systems configure each fixture independently to increase flexibility and reduce installation costs. 2.2.2.4. Physical Security Device Density Security systems are non-uniformly oriented with heavy density near doors and windows and lighter density in the building interior space. The recent influx of interior and perimeter camera systems is increasing the security footprint. These cameras are atypical endpoints requiring upwards to 1mbps data rates per camera as contrasted by the few kbps needed by most other FMS sensing equipment. To date, camera systems have been deployed on a proprietary wired high speed network or on enterprise VLAN. Camera compression technology now supports full-frame video over wireless media. 2.2.2.5. Installation Procedure Wired FMS installation is a multifaceted procedure depending on the extent of the system and the software interoperability requirement. However, at the sensor/actuator and controller level, the procedure is typically a two or three step process. Martocci,(et al) Expires March 3, 2009 [Page 11] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 Most FMS equipment is 24 VAC equipment that can be installed by a low-voltage electrician. He/she arrives on-site during the construction of the building prior to the sheet wall and ceiling installation. This allows him/her to allocate wall space, easily land the equipment and run the wired controller and sensor networks. The Building Controllers and Enterprise network are not normally installed until months later. The electrician completes his task by running a wire verification procedure that shows proper continuity between the devices and proper local operation of the devices. Later in the installation cycle, the higher order controllers are installed, programmed and commissioned together with the previously installed sensors, actuators and controllers. In most cases the IP network is still not operable. The Building Controllers are completely commissioned using a crossover cable or a temporary IP switch together with static IP addresses. Once the IP network is operational, the FMS may optionally be added to the enterprise network. Wireless installation will necessarily need to keep the same work flow. The electrician will install the products as before and run continuity tests between the wireless devices to assure operation before leaving the job. The electrician does not carry a laptop so the commissioning must be built into the device operation. 3. Building Automation Applications Vooruit is an arts centre in a restored monument which dates from 1913. This complex monument consists of 366 different rooms including a concert hall, theater hall, several bars, etc. About 2000 activities take place at Vooruit on a yearly basis, some activities simultaneously with a total maximum of 3500 visitors. A number of use cases regarding Vooruit are described in the following text. The situations and needs described in these use cases can also be found in all automated large buildings, such as airports and hospitals. 3.1. Locking and Unlocking the Building The member of the cleaning staff arrives first in the morning unlocking the building (or a part of it) from the control room. This means that several doors are unlocked; the alarms are switched off; the heating turns on; some lights switch on, etc. Similarly, the last person leaving the building has to lock the building. This will Martocci,(et al) Expires March 3, 2009 [Page 12] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 lock all the outer doors, turn the alarms on, switch off heating and lights, etc. This use case is also useful in the home automation scenario, although the requirement about preventing the "popcorn effect" [REF HOME AUTOMATION] can be relaxed a little bit in building automation. It would be nice if lights, roll-down shutters and other actuators in the same room or areas with transparent walls execute the command around the same time (a tolerance of 200 ms is allowed). 3.2. Building Energy Conservation A room that is not in use should not be heated, air conditioned or ventilated and the lighting should be turned off. In a building with 366 rooms it can happen quite frequently that someone forgets to switch off the HVAC and lighting. This is a real waste of valuable energy. To prevent this from happening, the janitor can program the building according to the day's schedule. This way lighting and HVAC is turned on prior to the use of a room, and turned off afterwards. Using such a system Vooruit has realized a saving of 35% on the gas and electricity bills. Making the control of the building management system wireless (e.g. over a PDA) would be an advantage as you do not have to cross the complete building to the control room to change the temperature of a single room. 3.3. Inventory and Remote Diagnosis of Safety Equipment Each month Vooruit is obliged to make an inventory of its safety equipment. This task takes two working days. Each fire extinguisher (100), fire blanket (10), fire-resisted door (120) and evacuation plan (80) must be checked for presence and proper operation. Also the battery and lamp of every safety lamp must be checked before each public event (safety laws). Automating this process would heavily cut into working hours. 3.4. Life Cycle of Smoke Detectors A smoke detector must be replaced periodically. A secure mechanism is needed to remove the old device and install the new device. During construction work, the safety can be augmented by temporarily adding extra sensing and/or actuating devices. This life cycle management use case is valid for each type of device we wish to add or to replace. What is the maximum of the time we allow for each task (adding a new device, removal of a device, replacement of a device)? The negative impact on the functionality of the network should be minimal. Martocci,(et al) Expires March 3, 2009 [Page 13] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 3.5. Surveillance To protect the building against burglary a guard must be able to monitor and control all entrances (open/close, latch moved) and lights (activated outside the opening hours). It should also be possible to view video streams from several security cameras either from the control room or on a PDA of an in-the-field security person. The arriving and exiting visitors also must be monitored from the control room to guarantee their security. 3.6. Emergency In case of an emergency it is very important that all the visitors be evacuated as quickly as possible. The fire and smoke detectors have to set off an alarm, and alert the mobile personnel on their internal mobile telephone system and/or PDAs. All emergency exits have to be instantly unlocked and the emergency lighting has to guide the visitors to these exits. The necessary sprinklers have to be activated and the electricity grid has to be monitored and if it becomes necessary to shut down some parts of the building. Emergency services have to be notified instantly. A wireless system could bring in some extra safety features. Locating fire fighters and guiding them through the building could be a life-saving application. This is also the case for wireless camera surveillance which is monitored via PDA. 3.7. Public Address It should be possible to send video, audio and text messages to the visitors in the building. These messages can be very diverse, e.g. commercials on televisions in the bar, ASCII text boards displaying the name of the event in a room, video screens with an outline of the upcoming events at Vooruit, audio announcements such as delays in the program, lost and found children, evacuation orders, etc. 3.8. Positioning Person localization / equipment theft: 2s - room accuracy required - high responsiveness required to cope with movement Interaction positioning: detect vicinity of two nodes (people or equipment): 1s - sub-room accuracy - high responsiveness required to cope with movement Equipment localization: 2-4s Or Asset Management - room accuracy required - medium responsiveness. Martocci,(et al) Expires March 3, 2009 [Page 14] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 4. Building Automation Routing Requirements Following are the building automation routing requirements for a network used to integrate building sensor actuator and control products. These requirements have been limited to 'routing' requirements only. These requirements are written not presuming any preordained network topology, physical media (wired) or radio technology (wireless). See Appendix A for additional requirements that have been deemed outside the scope of this document yet will pertain to the successful deployment of building automation systems. 4.1. Installation Building control systems typically are installed and tested by electricians having little computer knowledge and no network knowledge whatsoever. These systems are often installed during the building construction phase before the drywall and ceilings are in place. There is never an IP network in place during this installation. In retrofit applications, pulling wires from sensors to controllers can be costly and in some applications (e.g. museums) not feasible. Local testing of sensors and room controllers must be completed before the tradesperson can complete his/her work. System level commissioning will later be deployed using a more computer savvy person with access to a laptop computer. The completely installed and commissioned IP network may or may not be in place at this time. Following are the installation routing requirements. 4.1.1. Computer-free installation It MUST be possible to fully commission devices without requiring any additional commissioning device (e.g. laptop). The device MAY be completely configured for network operation by setting a bank of switches. The number of switches MUST not exceed 16 switches. 4.1.2. Fixed addressing The device network address MUST be settable and henceforth fixed for the device without the need for other system devices such as DHCP servers. Martocci,(et al) Expires March 3, 2009 [Page 15] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 4.1.3. Network Setup Time Network setup MUST support device commissioning times of no more than 15 minutes per sensor/controller pair. 4.1.4. Battery Powered devices Sensing devices must be able to utilize battery power yet still be viable devices on a ROLL network. Batteries must be operational for at least 5 years when the sensing device is transmitting its data (64 bytes) once per minute. 4.1.5. Local Testing The local sensors and requisite actuators and controllers must be testable within the locale (e.g. room) to assure communication connectivity and local operation. 4.2. Scalability Building control systems are designed for facilities from 50000 sq. ft. to 1M+ sq. ft. The networks that support these systems must cost-effectively scale accordingly. In larger facilities installation may occur simultaneously on various wings or floors, yet the end system must seamlessly merge. Following are the scalability requirements. 4.2.1. Network Domain A network MUST operationally support at least 1000 routing and 1000 non-routing devices. Subnetworks (e.g. rooms, primary equipment) within the network must support upwards to 255 sensors and/or actuators. Subnetworks MUST seamlessly merge into networks. Networks MUST seamlessly merge into internetworks. 4.2.2. Communication Distance A source device may be upwards to 1000 feet from its destination. Communication MUST be established between these devices without Martocci,(et al) Expires March 3, 2009 [Page 16] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 needing to install other intermediate 'communication only' devices such as repeaters. 4.2.3. Automatic Gain Control For wireless implementations, the routing algorithms SHOULD incorporate automatic transmit power regulation to maximize packet transfer and minimize network interference regardless of network size or density. 4.2.4. Peer-to-peer Communication Network devices MUST be able to communicate in a peer-to-peer manner with all other devices on the network without being subject to intermediate bridge or gating devices. 4.3. Mobility Most devices are affixed to walls or installed on ceilings within buildings. Hence the mobility requirements for commercial buildings are few. However, in wireless environments location tracking of occupants and assets is gaining favor. 4.3.1. Mobile Device Association Mobile devices SHOULD be capable of unjoining from an old network joining onto a new network within 15 seconds. 4.4. Resource Constrained Devices Sensing and actuator device processing power and memory may be 4 orders of magnitude less (i.e. 10,000x) than many more traditional client devices on an IP network. The routing algorithms must therefore be tailored to fit these resource constrained devices. 4.4.1. Cost The total installed infrastructure cost including but not limited to the media, required infrastructure devices (amortized across the Martocci,(et al) Expires March 3, 2009 [Page 17] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 number of devices); labor to install and commission the network MUST not exceed $1.00/foot for wired implementations. Wireless implementations (total installed cost) must cost no more than 80% of wired implementations. 4.4.2. Limited Processing Power Sensors/Actuators The software stack requirements for sensors and actuators MUST be implementable in 8-bit devices with no more than 128kb of flash memory (including at least 32Kb for the application code) and no more than 8Kb of RAM (including at least 1Kb RAM available for application). 4.4.3. Limited Processing Power Controllers The software stack requirements for room controllers SHOULD be implementable in 8-bit devices with no more than 256kb of flash memory (including at least 32Kb for the application code) and no more than 8Kb of RAM (including at least 1Kb RAM available for application) 4.4.4. Parenting for Constrained Devices The routing algorithms must support in-bound packet caches for sensor and actuator devices when these devices are not accessible on the network. The cached packets need to be delivered to its destination when the device is accessible on the network. 4.4.5. Adjustable System Table Sizes ROLL routing MUST support adjustable router table entry sizes on a per node basis to maximize limited RAM in the devices. 4.5. Prioritized Routing Network and application routing prioritization is required to assure that mission critical applications (e.g. Fire Detection) cannot be deferred while less critical application access the network. 4.5.1. QoS Routers MUST support quality of service prioritization to assure timely response for critical FMS packets (e.g. Fire and Security events). Martocci,(et al) Expires March 3, 2009 [Page 18] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 4.6. Addressing Facility Management systems require different communication schema to solicit or post network information. Broadcasts or anycasts need be used to resolve unresolved references within a device when the device first joins the network. Devices operating within a specified locale such as a room will need to multicast to all devices within the room. 4.6.1. Unicast/Multicast/Anycast Routing MUST support anycast, unicast, multicast and broadcast services (or IPv6 equivalent). 4.6.2. Unique Addresses Sensor/Actuator/Controller addressability MUST be unique site-wide. All addressable nodes MUST be accessible to all other nodes in the internetwork. 4.7. Manageability In addition to the initial installation of the system (see Section 4.1), the ongoing maintenance of the system is equally important to be simple and inexpensive. 4.7.1. Device Replacement Replacement devices must be plug-n-play with no additional setup than what is normally required for a new device. No bound information from other nodes MUST need be reconfigured. 4.7.2. Firmware Upgrades To support high speed code downloads, a mechanism MUST be defined to download firmware to devices in parallel yet support guaranteed delivery. Devices receiving a high speed download MAY cease normal operation, but upon completion of the download MUST automatically resume normal operation. Martocci,(et al) Expires March 3, 2009 [Page 19] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 4.7.3. Diagnostics To improve diagnostics, the network layer SHOULD be able to be placed in and out of 'verbose' mode. Verbose mode is a temporary debugging mode that provides additional communication information including at least total number of packets sent, packets received, number of failed communication attempts, neighbor table and routing table entries. 4.7.4. Trace Route Network diagnostics such as PING and Trace Route SHOULD be supported with extensions in Trace Route describing wireless parameter information when applicable. 4.8. Compatibility The building automation industry adheres to application layer protocol standards to achieve vendor interoperability. These standards are BACnet and LON. It is estimated that fully 80% of the customer bid requests received world-wide will require compliance to one or both of these standards. The ROLL routing algorithms will therefore need to dovetail to these application protocols to assure acceptance in the building automation industry. These protocols have been in place for over 10 years. Many sites will require backwards compatibility with the existing legacy devices. 4.8.1. IPv4 Compatibility The routing protocol MUST define a communication scheme to assure compatibility of IPv4 and IPv6 devices. 4.8.2. Maximum Packet Size Routing algorithms must support packet sizes to 1526 octets. 4.9. Route Selection Route selection determines reliability and quality of the communication paths among the devices. Optimizing the routes over time resolve any nuances developed at system startup when nodes are asynchronously adding themselves to the network. Route adaptation Martocci,(et al) Expires March 3, 2009 [Page 20] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 also reduces latency if the new route costs consider hop count as a cost attribute. 4.9.1. Path Cost Path selection MUST be based on path quality, rather than signal strength only. Path quality includes signal strength, available bandwidth, hop count and communication error rates. 4.9.2. Path Adaptation Communication paths MUST adapt toward signal quality optimality in time. 4.9.3. Route Redundancy To reduce real-time latency, the network layer SHOULD be configurable to allow secondary and tertiary paths to be established and used upon failure of the primary path 4.9.4. Route Preference The route discovery mechanism SHOULD allow a source node (sensor) to dictate a configured destination node (controller) as a preferred routing path. 4.9.5. Path Symmetry The network layer SHOULD support both asymmetric and symmetric routes as requested by the application layer. When the application layer selects asymmetry the network layer MAY elect to find either asymmetric or symmetric routes. When the application layer requests symmetric routes, then only symmetric routes MUST be utilized. The default MUST be asymmetric routes. 4.9.6. Path Persistence Devices SHOULD optionally persist communication paths across boots Martocci,(et al) Expires March 3, 2009 [Page 21] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 4.10. Reliability 4.10.1. Device Integrity Commercial Building devices MUST all be periodically scanned to assure that the device is viable and can communicate data and alarm information as needed. 5. Traffic Pattern The independent nature of the automation systems within a building plays heavy onto the network traffic patterns. Much of the real-time sensor data stays within the local environment. Alarming and other event data will percolate to higher layers. Systemic data may be either polled or event based. Polled data systems will generate a uniform packet load on the network. This architecture has proven not scalable. Most vendors have developed event based systems which passes data on event. These systems are highly scalable and generate low data on the network at quiescence. Unfortunately, the systems will generate a heavy load on startup since all the initial data must migrate to the controller level. They also will generate a temporary but heavy load during firmware upgrades. This latter load can normally be mitigated by performing these downloads during off-peak hours. Devices will need to reference peers occasionally for sensor data or to coordinate across systems. Normally, though, data will migrate from the sensor level upwards through the local, area then supervisory level. Bottlenecks will typically form at the funnel point from the area controllers to the supervisory controllers. 6. Open issues Other items to be addressed in further revisions of this document include: Need to complete the Acknowledgement section below and develop Reference and Normative Reference sections. Martocci,(et al) Expires March 3, 2009 [Page 22] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 7. Security Considerations Security policies, especially wireless encryption and overall device authentication need to be considered. These issues are out of scope for the routing requirements, but could have an impact on the processing capabilities of the sensors and controllers. As noted above, the FMS systems are typically highly configurable in the field and hence the security policy is most often dictated by the type of building to which the FMS is being installed. 8. IANA Considerations This document includes no request to IANA. 9. Acknowledgments J. P. Vasseur, Ted Humpal and Zach Shelby are gratefully acknowledged for their contributions to this document. This document was prepared using 2-Word-v2.0.template.dot. 10. References TBD 10.1. Normative References TBD Martocci,(et al) Expires March 3, 2009 [Page 23] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 10.2. Informative References Authors' Addresses Jerry Martocci Johnson Control 507 E. Michigan Street Milwaukee, Wisconsin, 53202 USA Phone: 414.524.4010 Email: jerald.p.martocci@jci.com Nicolas Riou ? ? ? Phone: ? Email: nicolas.riou@fr.schneider-electric.com Pieter De Mil Ghent University - IBCN G. Crommenlaan 8 bus 201 Ghent 9050 Belgium Phone: +32-9331-4981 Fax: +32--9331--4899 Email: pieter.demil@intec.ugent.be Wouter Vermeylen Arts Centre Vooruit ??? Ghent 9000 Belgium Phone: ??? Martocci,(et al) Expires March 3, 2009 [Page 24] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 Fax: ??? Email: wouter@vooruit.be Intellectual Property Statement The IETF takes no position regarding the validity or scope of any Intellectual Property Rights or other rights that might be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any license under such rights might or might not be available; nor does it represent that it has made any independent effort to identify any such rights. Information on the procedures with respect to rights in RFC documents can be found in BCP 78 and BCP 79. Copies of IPR disclosures made to the IETF Secretariat and any assurances of licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementers or users of this specification can be obtained from the IETF on-line IPR repository at http://www.ietf.org/ipr. The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights that may cover technology that may be required to implement this standard. Please address the information to the IETF at ietf-ipr@ietf.org. Disclaimer of Validity This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY, THE IETF TRUST AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Copyright Statement Copyright (C) The IETF Trust (2008). Martocci,(et al) Expires March 3, 2009 [Page 25] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the authors retain all their rights. Acknowledgment Funding for the RFC Editor function is currently provided by the Internet Society. 11. APPENDIX A - Additional Building Requirements (Informative) Appendix A contains additional building requirements that were deemed out of scope for the routing document yet provided ancillary informational substance to the reader. The requirements will need to be addressed by ROLL or other WGs before adoption by the building automation industrial will be considered. 11.1. Additional Commercial Product Requirements 11.1.1. Wired and Wireless Imlementations Solutions MUST support both wired and wireless implementations. 11.1.2. World-wide Applicability Wireless devices MUST be supportable at the 2.4Ghz ISM band Wireless devices SHOULD be supportable at the 900 and 868 ISM bands as well. Martocci,(et al) Expires March 3, 2009 [Page 26] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 11.1.3. Support of Building Protocol - BACnet Devices implementing the ROLL features MUST be able to support the BACnet protocol. 11.1.4. Support of Building Protocol - LON Devices implementing the ROLL features MUST be able to support the LON protocol. 11.1.5. Energy Harvested Sensors RFDs SHOULD target for operation using viable energy harvesting techniques such as ambient light, mechanical action, solar load, air pressure and differential temperature. 11.2. Additional Installation and Commissioning Requirements 11.2.1. Device Setup Time Network setup by the installer MUST take no longer than 20 seconds per device installed. 11.2.2. Unavailability of an IT network Product commissioning MUST be performed by an application engineer prior to the installation of the IT network. 11.3. Additional Network Requirements 11.3.1. TCP/UDP Connection based and connectionless services MUST be supported 11.3.2. Data Rate Performance An effective data rate of 20kbps is the lowest acceptable operational data rate acceptable on the network. Martocci,(et al) Expires March 3, 2009 [Page 27] Internet-Draft draft-martocci-roll-building-routing-reqs September 2008 11.3.3. Interference Mitigation The network MUST automatically detect interference and migrate the network to a better 802.15.4 channel to improve communication. Channel changes and nodes response to the channel change MUST occur within 60 seconds. 11.3.4. Real-time Performance Measures A node transmitting a 'request with expected reply' to another node MUST send the message to the destination and receive the response in not more than 120 msec. This response time SHOULD be achievable with 5 or less hops in each direction.This requirement assumes network quiescence and a negligible turnaround time at the destination node. 11.3.5. Packet Reliability Reliability MUST meet the following minimum criteria : < 1% MAC layer errors on all messages; After no more than three retries < .1% Network layer errors on all messages; After no more than three additional retries; < 0.01% App?n layer errors on all messages. Therefore application layer messages will fail no more than once every 100,000 messages. Martocci,(et al) Expires March 3, 2009 [Page 28]