Intrusion Detection System Architecture

An intrusion detection system consists of sensors that detect unauthorized entry or presence, a control panel that processes sensor signals and manages communications, a keypad or credential reader for arming/disarming, and a communication path to a central monitoring station. Unlike access control systems that manage who may enter a facility, IDS systems detect and report unauthorized entry that bypasses access controls or occurs in areas without access control coverage.

System design begins with a threat assessment: what are the protected assets, what are the most likely intrusion scenarios (forced door, glass break, perimeter bypass, insider threat after hours), and what response time is available before the threat scenario succeeds? The threat assessment drives sensor selection, zone layout, and monitoring requirements.

Sensor Technologies

Door and window contacts are the most basic IDS sensors using a magnetic reed switch mounted on the frame that detects when the protected opening separates from its contact. Balanced magnetic switches (BMS) are required for high-security applications because standard contacts can be defeated by placing an external magnet near the sensor. All openings in the protected perimeter including doors, windows, skylights, roof hatches, and loading dock doors should have contacts.

Passive infrared (PIR) motion detectors sense the thermal signature of a moving person within their detection field. Standard PIR detectors cover a 90-degree field at 30-40 feet. Dual-technology detectors combine PIR with microwave Doppler detection, requiring both technologies to trigger simultaneously. This dramatically reduces false alarms from HVAC air currents, small animals, and thermal transients that can fool single-technology PIR detectors. Pet-immune PIR detectors use downward-angled sensitivity to detect humans standing while ignoring animals below a configured height/weight threshold.

Glass break detectors use acoustic sensors tuned to the frequency spectrum of breaking glass with processing algorithms that look for the characteristic two-stage pattern of flex then break frequency. Effective coverage radius is 10-25 feet depending on the model and glazing type. Shock sensors mount directly on the glass or frame and detect the physical vibration of impact. They work through opaque surfaces and in high-ambient-noise environments where acoustic detectors would have excessive false alarms.

Seismic detectors mount on safes, vault walls, and structural elements to detect drilling, cutting, or impact attacks on the protected structure. They are highly sensitive and require careful calibration to avoid false alarms from HVAC vibration, traffic, or nearby construction. Interior photobeam detectors provide volumetric coverage in large spaces where PIR coverage would require many overlapping units.

Zone Design Principles

IDS zones group sensors into logical areas that can be independently armed, disarmed, and monitored. Zone design balances several factors: enough zones to localize alarms, panel capacity limits, and the arming/disarming workflow requirements of the facility. Common zone types include entry/exit zones with configurable delays for arming and disarming, perimeter zones with no delay and immediate alarm on activation, interior motion zones armed only in night/away mode and bypassed when the building is occupied, and 24-hour zones that are always armed regardless of system arming state including panic buttons, duress devices, and environmental monitors.

High-security designs use separate zones for each opening rather than grouping multiple contacts on one zone. This provides more precise alarm localization. For large facilities, zone capacity can be extended with zone expander modules or by using addressable loop architectures where each sensor reports its unique address to the panel rather than being one of many sensors on a shared zone loop.

Control Panels and Grades

IDS control panels are rated under UL 681 (Installation and Classification of Burglar and Holdup Alarm Systems) and graded under European standard EN 50131. Grade 1 panels protect against casual intruders with basic tools. Grade 2 protects against intruders with knowledge of alarm systems. Grade 3 protects against intruders with special tools and partial knowledge of the specific system. Grade 4 protects against professional adversaries with comprehensive knowledge. Commercial applications typically require Grade 2 minimum; high-security government and financial applications may require Grade 3 or 4.

Panel supervision features include tamper detection on all sensor housings, line supervision on wired sensor loops using end-of-line resistors that measure total circuit resistance and flag deviations, auxiliary power supply with battery backup sufficient for 4-24 hours of standby, and communication channel supervision that reports if the communication path to the central station is interrupted for more than a configured time.

Central Station Monitoring: UL 2050

UL 2050 is the standard for central station alarm monitoring services. A UL 2050-listed central station maintains redundant hardware, geographically diverse facilities, operator staffing 24/7/365, defined response time standards requiring receipt of alarm within 90 seconds and contact attempt within 60 seconds of receipt, and regular audits of response performance. Insurance discounts for monitored alarm systems typically require the monitoring center to be UL 2050 listed.

Communication paths to the central station use multiple redundant channels. Traditional POTS landlines are increasingly replaced by IP/cellular dual-path communication. The panel maintains simultaneous communication over both paths, and the central station receives alarm signals within seconds over whichever path delivers the signal first. The ANSI/SIA DC-09 IP alarm communication standard and the older Contact ID format over POTS are the most common signal formats used between panels and central stations.