Beijing Ruiguang Jiyuan Smart Education System Solution

1 Smart Education Demand Analysis

Build a regional education resource and management platform: enhance the sharing of courseware, test papers and other resources between schools and regions, and improve the informatization level of regional education management;

Advance the application level of smart classrooms and digital campuses, enabling interaction between teachers and students, lecture recording, and convenient courseware access; improve teachers' informatization application capabilities;

Combine theory with practice to establish a scientific and standardized infrastructure standard system, applied to the construction of informatization hardware environments such as education network coverage, equipment, and classrooms in regions and schools.

Through the introduction of cloud computing technology, achieve elastic allocation of hardware resources, maximize resource utilization, and reduce hardware construction and maintenance costs.

2 Smart Education System Design

2.1 Smart Education Overall Architecture

The smart education system includes network construction, data center, operation platform, education system, courseware content, learning terminals, consulting services, etc. Raytrans provides vertical industry solutions based on the needs of customers in different industries, offering customized solutions for customers in basic education, higher education, enterprise education, and vocational education.

2.2 Smart Education Subsystem Design

2.2.1 Campus and Education Bureau Unified Network Access Subsystem

Currently, most school informatization construction focuses on digital campuses, connecting to social networks based on the campus. This not only brings a lot of daily management work and high costs to schools, but also imposes limitations on inter-school cooperation, unified management by the education bureau, and the functionality of the education private network. Therefore, a region-based education optical fiber private network construction will deliver greater advantages. Through the integration of excellent online education resources, the shortage of educational resources in marginal schools can be fully compensated.

The education optical fiber private network we recommend connects all schools via 2.5G optical fiber, providing multiple physically isolated Ethernet channels. The 2.5G transmission bandwidth is selected because this rate can typically achieve transmission distances of up to 80KM without optical amplifiers, whereas 5G or higher bandwidth fiber can only transmit a few kilometers, and lower rates are insufficient to carry multiple physically isolated Gigabit networks. Therefore, 2.5G optical fiber is the best choice for long-distance transmission.

Central equipment is deployed at the Education Bureau or Information Center, providing unified interfaces from each school to carriers and to higher-level education management institutions. The advantages are as follows: 1. As a major customer with unified access to broadband carriers, full competition is introduced, giving teachers and students multiple choices and greater benefits; 2. Avoids disorderly competition from repeated construction by multiple campus property owners; 3. Schools have a unified Internet interface, facilitating big data processing, public opinion monitoring, and Internet behavior management in the education industry; 4. School telephone numbers are uniformly connected with a unified image, and internal control over extension expansion is possible; 5. Sufficient external bandwidth allows access to more private network services.

The Education Bureau or Information Center adopts Raytrans IDM MSAP-CP equipment as the core switching and aggregation device, while IDM NT421 or IDM GTD442 terminal devices can be installed on office floors, in student dormitories, and in teaching buildings.

The 2.5G optical fiber can carry 2 wire-speed Gigabit Ethernet channels, 4 wire-speed Fast Ethernet channels, and 24 E1 channels. One Gigabit network is mainly used for carrier Internet access, for teacher and student Internet surfing, IPTV, and publishing surveillance video from key locations to the public. Another Gigabit network can be used for video conferencing, video recording and broadcasting, and video surveillance uploads. The other 4 Fast Ethernet networks can be used for other inter-school intranet transmissions, such as financial networks, examination-dedicated networks, education-dedicated networks, and management-dedicated networks. The E1 interfaces can be used for telephone access, high-fidelity audio transmission, digital bell broadcasting, and more.

There are multiple methods for accessing multiple carriers. One is to use a multi-interface router with interface policies configured based on factors such as bandwidth and price; another is to provide access only to the carrier desired by teachers and students, directly routing that channel to the computer.

The Internet egress for each school can be uniformly equipped with a high-end firewall purchased centrally, which is more cost-effective than each school purchasing its own, which requires significant funding and dedicated maintenance personnel.

2.2.1.1 Information Center Aggregation and Access

The main functions implemented are as follows:

1. Provide local internal telephone switching, enabling free short-number dialing within the campus and between schools;

2. Provide trunk access to the public switched telephone networks of carriers such as China Unicom/China Mobile/China Telecom, enabling external call functionality for the campus;

3. Provide Ethernet service access from carriers such as China Unicom/China Mobile/China Telecom, with an Ethernet firewall achieving isolation between internal and external networks to ensure information security;

4. Provide telephone trunk interfaces that can connect to the telephone networks of the Education Bureau or other partner institutions, enabling telephone interconnection among all units;

5. Provide radio and television IPTV data interfaces, allowing access to IPTV television signals from the radio and television network, delivering television services to teaching buildings and office buildings;

6. Provide remote meter reading data processing functionality, enabling centralized management of water, electricity, and gas meter reading data in office buildings;

7. Provide video surveillance and conferencing functions, with centralized retrieval and monitoring of remote network video signals at the central end, as well as video conferencing capability;

8. Dispatch servers and public address broadcasting servers can be installed, enabling additional functions on top of the basic integrated service fiber access to meet customer needs, supporting campus multimedia dispatch and public address broadcasting;

9. The central end reserves secondary development interfaces for the smart campus, enabling centralized access to multimedia information such as campus electronic fences, parking lot surveillance, campus all-in-one cards, and campus advertising through optical fiber.

2.2.1.2 Teaching Building and Office Terminal Fiber Access

Teaching buildings and offices are nodes where terminal access equipment is installed, directly providing user broadband, telephone, IPTV television, and remote meter reading data interfaces, using our company's IDM NTD421 terminal equipment. Based on end-user requirements, one NTD421 terminal can be installed per office, and several NTD421 devices can be installed per floor, to meet the business needs of each office and floor.

The terminal provides the following functions:

1. Provide telephone interfaces for direct connection of office telephones;

2. Provide network interfaces for direct connection of user Internet devices, such as computers and routers;

3. Provide network interfaces for connecting IPTV set-top boxes, enabling network television functionality;

4. Provide network interfaces for connecting network cameras, enabling video surveillance signal upload from floors and key offices to the surveillance center, as well as connection of office video conferencing cameras for video conferencing functionality;

5. Provide remote meter reading interfaces (RS485/RS422, etc.) for connecting water, electricity, and gas meters in office buildings, enabling meter reading data upload to the surveillance center.

2.2.1.3 Key Features of the Fiber Access Solution

1. All-optical fiber transmission and access

All business communications from the Information Center communication room to schools and within the campus use optical fiber transmission technology. This solution adopts PDH+PCM technology to achieve full coverage of high-speed fiber-to-the-home.

2. Campus telephone internal switching with independent operation

The Information Center communication room uses our company's IDM MSAP-G3CP equipment to directly implement internal switching for campus telephones, allowing campus virtual operators to independently operate telephone services and provide free internal telephones to the campus.

At the same time, the equipment provides E1 digital trunk interfaces or FXO analog trunk interfaces, which can connect to carrier telephone switching networks as well as the telephone systems of the Education Bureau and other partner institutions, achieving telephone interconnection.

3. Isolation between internal and external networks

The core equipment IDM MSAP-G3CP in the central equipment room adopts TDM technology, and all Ethernet network channels provide physically isolated channels, achieving isolation between internal and external networks to ensure information security.

2.2.2 Campus Security Surveillance Subsystem

2.2.2.1 Overall Functions

The entire system is required to adopt an intelligent network management platform to achieve unified management of all network devices and user permissions. Functions include automatic batch device configuration, automatic fault alarm and location management, real-time image switching and display, historical image playback, front-end camera control, system alarms, and data storage backup.

2.2.2.1.1 Real-time Image Display and Switching Functions

Supports three video display modes: client, IE browser, and video wall display, with single-screen, multi-screen, and full-screen display modes. Each screen can select any video source for real-time image viewing;

The system has an automatic image patrol function, which can cyclically display surveillance images using a self-defined trigger sequence and time interval, with the images participating in patrol and their order arbitrarily selectable within designated windows;

In addition to displaying on-site video information, the system can overlay corresponding video location, time, and alarm markers on the video image. The identification characters of a specific video channel can be edited, time information can be automatically overlaid, and the display position of characters on the image can be flexibly configured;

Camera location information can be associated with electronic maps, supporting a dual-screen function that simultaneously displays video information and electronic map information;

The system should have an image capture function, allowing video playing in a surveillance window to be captured and saved as image files. The image file format must be standard formats such as JPEG, BMP, or GIF, for convenient browsing using image viewing tools under the Windows system;

When browsing real-time video images or playing back historical images through the video client, convenient image zooming is supported, with full-screen display of a single image.

2.2.2.1.2 Front-end Camera Control Functions

Surveillance centers at all levels can control all PTZ units and cameras through professional keyboards and the soft keyboard provided by the video client. This includes controlling the rotation angle of the PTZ, camera aperture size, focus level, heater switch, wiper switch, zoom level, and lighting switch;

The system supports user locking and unlocking of cameras. If a user needs exclusive control of the PTZ for a certain period, the camera can be locked. Once locked, other users cannot seize PTZ control, and only the user who performed the lock or an administrator with unlock permission can release the lock;

When multiple surveillance centers attempt to control the same camera simultaneously, the higher-level surveillance center has priority control;

When camera control is unavailable, the system should display information about the current controller;

Cameras have a preset trajectory rotation function to comprehensively capture on-site video information. The camera patrol start time, preset positions, and patrol trajectories can be configured. Cameras can patrol along different preset trajectories during different time periods.

2.2.2.1.3 System Storage and Security Functions

Adopts professional IP SAN and CVR storage system technologies, supporting the iSCSI protocol, providing Gigabit IP interfaces, with optional SATA disks of different capacities such as 1TB and 4TB, enabling centralized management of digital images within the system and dynamic allocation of storage resources;

Supports built-in battery cache protection during power failure, hot-swappable disks and online replacement of faulty disks, sequential disk power-on at startup, and disk power short-circuit protection;

In the SAN environment, the maximum number of host connections is ≥250, with all connection licenses configured, supporting RAID levels 0, 1, 5, and 10. The total capacity includes a redundant backup space of 10% of the required capacity for long-term storage of important surveillance images.

Supports graphical management software, allowing management of multiple storage devices in a single management interface, as well as automatic email alarm functionality;

The system supports configuring the retention time for historical images for each video source. When the retention time is exceeded, expired historical images can be automatically deleted without administrator intervention;

The system can monitor the current storage resource status of all storage devices in real time;

The system supports setting storage plans for each video source, with recording performed in time segments. The time segment granularity is no greater than 30 minutes, and multiple recording segments can be set per day. When a video source fails to record according to plan, the system should promptly report an alarm to notify the administrator for corresponding fault location analysis.

The system shall support local recording functionality. When viewing live images or playing back historical images, authorized users can initiate local recording to temporarily store images on the client's local storage media. The client interface shall provide convenient controls for starting and stopping the local recording function. The video client shall support playback of locally recorded files.

The system shall have data backup functionality to back up and redundantly store important data. The system supports manual backup, where users with appropriate permissions can initiate data backup through the video client to back up data from specified video sources over specific time periods. The system also supports automatic backup policies, which can periodically back up data from specified video sources over specific time periods. When backing up data, descriptive information can be added to the backup data. Users can perform fuzzy searches on backup data based on descriptive information and request on-demand playback.

The storage application management unit obtains information on all video sources in the system through the network and stores it in high-capacity storage devices. The system supports a distributed cluster storage architecture composed of n computers. The communication layer of these computers is built on our high-performance communication platform technology. Under normal operation, each storage computer is responsible for storing certain recording information from the entire system. First, we need to define storage groups, with each storage group consisting of n channels of images. We bind a storage group to a storage server. In this way, images from the entire system are stored through different storage servers. The model we adopt is a combined approach of front-end distributed recording and back-end centralized recording. The specific functions are as follows:

1. Support direct recording and backup management of large numbers of remote image channels that are not being viewed in real time by the central client, while also supporting management of various centralized storage devices, not just local hard drives.

2. Support rapid retrieval of data stored in centralized storage devices and provide services.

3. Support retrieval of specific surveillance recordings and associated data through the Web interface, both locally and on clients, by camera, by time, by associated event, by log, by alarm, and by other criteria.

4. Allow viewing of the detailed storage location of recordings, display of relevant status information, and timely playback of the recordings.

5. Support browsing of corresponding surveillance files on hard drives and SAN storage devices.

6. Support recording schedules and supplementary recording. Each recording group can have its own recording schedule, and the underlying execution of recordings is handled by our schedule and task scheduling engine. During each recording process, the system records the execution time of the recording. The system maintenance server calculates the time periods requiring supplementary recording based on the difference between the predetermined schedule and actual execution. The supplementary recording system will automatically download missing recording information from the appropriate DVR. When a recording schedule changes, the earlier schedule is recorded, and the system can automatically determine whether supplementary recording should reference the schedule before or after the change.

7. Disk cleanup policy and recording retention priority. When the system detects that storage capacity exceeds the maximum warning threshold specified by the system, it will initiate the disk cleanup task. This work is managed by the maintenance server, which periodically checks disk conditions and performs disk cleanup, automatic export, and other functions.

2.2.2.1.4 Video File Retrieval and Historical Image Playback Function

The system can assist video decoders in establishing connections with storage resources, and can assist monitoring clients in establishing connections with storage resources to enable video data playback.

The system supports retrieval of historical image information using a combination of video source identifier and start/end time, with retrieval results displayed in list form. When performing local retrieval of historical images, the time from initiating the retrieval to obtaining results shall be less than 1 second, with no noticeable waiting time.

The system supports simultaneous playback of multiple channels of historical images. During playback of historical images, pause and resume functions are supported, as well as normal speed, fast speed, and slow speed playback. Fast playback supports 1x, 2x, 4x, and 8x speeds. Slow playback supports 1/2x, 1/4x, and 1/8x speeds.

2.2.2.1.5 Network Operation and Maintenance Function

Provide full-process monitoring of front-end cameras, encoder status, transmission lines, storage devices, back-end decoding, and management platform operation, with the ability to diagnose video image quality.

The management platform can automatically detect the working status of devices in the system (encoders, decoders, video clients, storage devices), and quickly report alarms when devices go offline. When a faulty device recovers and comes back online, the device can automatically rejoin the system and operate normally, with original configurations unchanged and no manual intervention required during the recovery process.

Administrators can configure parameters of encoders and decoders in the system through a centralized management interface, and can perform software upgrades.

The system has complete security audit and logging functions, capable of recording device operation status, various alarm information, user login logs, etc.

The management server can provide unified management of IPSAN storage resources, formulate storage plans for cameras, and assist video management clients in establishing iSCSI connections with IPSAN.

Video data retrieval and playback: After confirming the retrieval data from the video management client, the retrieval results (whether corresponding data exists within the specified time period) are returned to the video management client. The client can select data from a specific time period for playback.

The video management platform shall support hierarchical, group-based, and device-based management of user permissions, effectively controlling and blocking connections from illegal users to ensure data security.

2.2.2.1.6 Permission Management Function

The platform shall provide a multi-level user management architecture, with each level of users having different management permissions. Based on the assigned permissions, users can perform corresponding system access and monitoring operations to prevent illegal login and unauthorized operations.

User levels shall be divided into at least three levels: super administrator (with system-level configuration permissions, capable of user management and device management), general administrator, and regular user. User management and operation permissions shall be divided into at least the following categories: user management permission, device management permission, real-time viewing permission, patrol configuration permission, PTZ control permission, historical image retrieval and playback permission, image backup and download permission, etc.

When users log into the system, user authentication and permission checking must be performed. User login account information transmitted over the network shall not be transmitted in plaintext.

Multiple users can simultaneously view real-time images from any monitoring point, and users of higher levels have priority control rights (such as PTZ control, etc.).

2.2.2.1.7 System Alarm Function

1) Alarm Methods

System alarm methods are divided into three types: motion detection alarm, external input alarm, and video source loss alarm:

1. Motion detection alarm: When changes occur in the monitored scene, the system generates alarm information and automatically executes alarm linkage functions such as screen switching and video storage. Each video channel is divided into more than 8 motion detection zones, and the sensitivity and effective time of each zone can be set individually.

2. External input alarm: The multimedia access units at the monitoring site have alarm input functions. Through alarm detectors installed at the site, information such as smoke alarms, water leakage, gas alarms, glass breakage, and door opening can be collected. The effective time of alarms can be set, and remote alarm reset functionality is available.

3. Video source loss alarm: When video cables are disconnected or no video signal is obtained, the system generates a no-video-source alarm.

2) Alarm Linkage Function

Alarm and video linkage: When an alarm occurs, the system automatically switches to display the alarm video information, automatically stores the alarm video, automatically captures still images of the alarm scene, and displays the alarm list prominently on the client.

Alarm and control linkage: When an alarm occurs, the system automatically turns on on-site lighting, automatically activates on-site sirens, and starts other on-site equipment.

Alarm linkage output function: When an alarm occurs, the monitoring center has multiple alarm output methods including audible/visual alarms, alarm printing, alarm short messages, voice alarms, and electronic map alarms. At the same time, alarm information can also be output to other alarm processing systems (such as alarm dispatch systems, etc.).

3) Alarm Query Function

Historical alarm information can be queried by camera name, date and time, alarm type, and other conditions. With video and alarm association configured, when querying alarms, the system automatically searches for corresponding video files stored during the alarm time period.

2.2.2.2 Platform Control Function

2.2.2.2.1 Remote Real-time Image Viewing

Video images can be viewed directly through IE, and the layout of cameras and detectors across the entire jurisdiction can be intuitively viewed through the district maps in the electronic map. Monitoring images of an area can be viewed by clicking on the camera icon responsible for that area on the electronic map. The system supports vector maps, allowing convenient map zooming, and can be seamlessly integrated with GIS, facilitating future positioning and monitoring of vehicles or other GPS terminal devices within the jurisdiction. Future upgrades can also incorporate wireless video access from vehicle 3G networks and vehicle positioning through the map.

2.2.2.2.2 Remote Camera Control

PTZ control of cameras (up/down/left/right, auto), camera control (aperture, zoom, focus), auxiliary switch control (PTZ, wiper), image effect adjustment (brightness, contrast, chroma, saturation, volume), and speed dome control (preset position setting and calling, auto cruise).

2.2.2.2.3 Real-time Detection and Scheduled Inspection

The system can monitor device operation status in real time. When device abnormalities occur, alarms can be issued, and the alarm location and content can be displayed on the electronic map with audible and visual prompts. Administrators can view the operation status of all devices, current activities of all logged-in users on the network, alarm and handling situations, and operation logs at any time, and can generate statistical charts.

The system has the function of scheduled inspection and clock synchronization for devices. Inspection content includes storage status, network connection status, system operation status, number of connected clients, and operation status parameters provided by device manufacturers. The obtained data is stored in logs and can be displayed as current or historical status in curves, charts, and other formats.

2.2.2.2.4 Remote/Local Image Retrieval and Playback

Recording materials such as normal recordings, motion detection recordings, alarm recordings, and captured images can be retrieved, downloaded, and played back based on retrieval conditions including time, channel, local, and remote. They can also be saved to the storage server at the monitoring center. During playback, operations such as play, pause, stop, fast forward, fast rewind, image capture, and recording file editing are supported. Multiple channels can also be played back simultaneously for convenient viewing of recording materials.

2.2.2.2.5 Multi-screen Preview Groups

Preview group patrol switching. Preview groups can be customized, with 1, 3, 9, 16, 24, and 32 multi-screen preview groups available. Automatic channel opening and patrol can be configured to start immediately upon system startup.

2.2.2.2.6 Remote Device Upgrade and Maintenance

For maintenance of various remote alarm and audio/video terminal devices on the network, administrators do not need to go to the device site. Device operation status can be monitored and device parameters can be modified remotely, which improves device maintenance efficiency, saves manpower and time, facilitates overall system management, and provides strong assurance of the reliability of the entire monitoring system.

2.2.2.2.7 Remote Alarm Arming/Disarming

The working status of all front-end alarm hosts can be viewed in real time through the network, and alarm host arming, disarming, zone bypass, and alarm system reset can be controlled.

2.2.2.2.8 Alarm Linkage

Emergency alarm information from any location can be monitored through the network, such as robbery alarms, burglary alarms, and incident disputes. When an alarm occurs at a location, the alarm information is automatically uploaded to the monitoring center, and on-site images linked to the alarm signal are simultaneously transmitted to the monitoring center for pop-up display and automatic recording backup at the monitoring center. The location of the site on the electronic map will flash. At the same time, the monitoring center generates audible or visual alarms.

2.2.2.2.9 Voice Intercom and Monitoring

The monitoring center can conduct two-way voice intercom with incident sites equipped with intercom devices. Through the monitoring system center software, calls can be made to the areas where front-end cameras are located for voice intercom, enabling mutual communication and guidance for daily work content.

2.2.2.2.10 Automatic Time Synchronization Function

The monitoring center provides an automatic time synchronization service. When a network site's DVR connects to the main control server, its local time will be changed to match the main control server's time. This ensures the accuracy of time parameters in surveillance recording materials and improves the credibility of the materials.

2.2.2.2.11 Various Permission Controls

Users at all levels may only view authorized video and audio signals and perform corresponding remote PTZ control operations with authorization from the monitoring center server; control terminal devices are registered in the management server via MAC address encryption, which restricts the functions of the control terminals.

2.2.2.2.12 Leadership Inquiry Function

Leaders at all levels can use desktop PC office systems to query statistical data (operator attendance, summary of violations, summary of alarm information, etc.) and video recordings (non-real-time recordings, violation recordings, alarm recordings, etc.) through IE browsers, and can also directly connect to real-time images for on-site supervision.

2.2.2.3 Platform Management Functions

2.2.2.3.1 Device Management

As the scale of digital surveillance systems expands, the number of devices connected to the system will increasingly burden management tasks, and system operation may also be affected by business adjustments, while various system operating parameters will be continuously optimized. Therefore, the management platform should have full-network device management capabilities. Depending on the level of openness of the connected hardware devices, it should provide at least the configuration capabilities required for routine maintenance by users, and as far as possible achieve device maintenance and management capabilities for all matters other than hard faults.

These management capabilities will be specifically reflected in the following aspects:

Ø Monitoring of device operating status

Ø Multi-level cascade networking management of analog matrices

Ø Online modification of operating parameters of DVRs or video encoders

Ø Modification of operating parameters of centralized storage devices

Ø Auxiliary fault diagnosis and reporting

Ø Remote software upgrade

Modifiable operating parameters of DVRs or video encoders include: video format (CIF/D1), transmission bitrate adjustment, character overlay modification, camera index name modification, recording strategy, external alarm source configuration, PTZ or speed dome camera communication protocol settings, etc.

Complex distributed network video systems require interconnection of multiple subsystems. Initial installation and commissioning may require configuration of thousands or even tens of thousands of parameters, and during actual operation, new devices frequently need to be added or parameters adjusted. These tasks can no longer be accomplished through simple command-line statements. Relying on developers to perform system configuration and maintenance would lead to a dramatic increase in system implementation costs and make it impossible to complete the handover to the owner.

The Raytrans video surveillance management platform supports the integration of various devices equipped with communication interfaces and communication protocols. All image resources are subject to unified numbering, unified configuration, unified scheduling, and unified management. Administrators can remotely read and configure any device in the system in batch, and can adjust various parameters of devices individually or in groups; the system configuration process runs in the background and does not affect users' current surveillance operations.

2.2.2.3.2 User Management

Includes login and logout; adding, deleting, and modifying users, etc. User information includes login username, password, permissions, user description, and other information. Permissions are divided into three types: system administrator, operator, and ordinary user. The system administrator has the highest authority and can use all management functions; operators cannot perform functions such as modifying logs, adding users, or attendance and performance statistics; ordinary users can only play authorized recorded files. Operators or system administrators log into the system to obtain corresponding permissions. (Detailed time records implement the check-in function)

2.2.2.3.3 Log Management

The system automatically records operator log information (operator login, logout, routine operations, alarm information, device fault information, operation type, operation time, operator, whether the operation was successful, etc.), and can automatically upload it to the monitoring center management server database as a basis for staff performance assessment and determination of whether violations have occurred, for future inspection by leaders. In addition, operator operations on surveillance subsystems can also be optionally recorded in logs, such as viewing images or controlling remote surveillance hosts. Users can view logs by category.

2.2.2.3.4 Video Recording Management

The video recordings stored in the monitoring center storage devices consist of video clips of the corresponding time periods at the scene captured when violations are discovered or alarms occur, along with the corresponding generated records. Management of this data information should include: record information generation, such as file name, generation time, operator identifier, time period, event type, recording storage path, etc. Records are automatically generated by background programs; video recording maintenance, such as periodic backup archiving and cleanup; reception of remote video recordings, where during non-business hours, recording information from remote surveillance sites is retrieved according to custom extraction policies, such as time periods; support for multi-user retrieval of video recordings, where authorized operators or leaders can view corresponding video clips afterwards, for example by opening a web browser, entering username and password information, obtaining a statistics page, and based on the statistics, calling up relevant recordings, clicking to view recording information, obtaining a list of authorized recording events, and clicking on one recording event to automatically launch the media player for playback.

2.2.2.3.5 Maintenance Management

Register and catalog all digital surveillance hosts within the jurisdiction to form complete equipment records. Registration contents include: device name, manufacturer, applied branch/outlet name, service contact phone number, etc. Operations such as modification, deletion, addition, browsing, and querying can also be performed. When a device fails, the operator registers it and marks the device as unavailable; after the fault is resolved, the operator removes the fault marker. Operations such as modification, deletion, addition, browsing, and querying can be performed.

2.2.2.3.6 Operation Management

1) Multiple Image Operation Control Mechanisms

Network clients can monitor multiple real-time image channels simultaneously and achieve multi-screen display on a single machine; multiple network clients can simultaneously monitor any front-end image. Images from any front-end surveillance point can be displayed in real time on the video wall, with round-robin switching display. With network support, multiple users at different locations can simultaneously view real-time video from any site in the system online. Personal surveillance terminals can display 4 to 16 split-screen multi-image views, where each screen can switch to any image in the system, and monitoring modes such as multi-image combinations, round-robin switching methods, and camera preset positions can be saved as files for repeated use.

Camera grouping: Supports grouping and switching selection according to surveillance areas, management permissions, and actual usage conditions (such as patrol routes), with simple configuration.

Round-robin: The system has automatic video patrol functionality, performing image inspection of surveillance points across the entire network at configurable intervals. Objects participating in round-robin can be arbitrarily set, and round-robin interval times are configurable. Surveillance images can be displayed in rotation using preset trigger sequences and time intervals; specific devices can be designated to perform specific actions within a certain time period.

Camera information settings: The position, IP, alias, area, location, and other information of all cameras in the system can be configured.

Character overlay and image masking: Chinese names, current date, time, site, camera number, and other character information can be overlaid at any position on the image; images and black screen frames can be overlaid at any position on the image to mask image areas that need to be hidden. Each camera can have more than 8 different location names preset. When the camera rotates to the corresponding angle, the system automatically displays the corresponding location name. The system can use subtitles from different devices as needed, with parameters such as subtitle content and display position kept consistent and uniform.

PTZ and speed dome control: Supports direction control, auto scan, preset position management, aperture and focal length management, and lens zoom; PTZ speed is adjustable; supports light, wiper, and power switch control; supports custom auxiliary switch control; supports camera lock and unlock; facilitates parameter configuration of PTZ/speed dome controllers. Features a full-function PTZ lens control interface and custom communication protocol definition, compatible with multiple decoders; supports setting and controlling full-range stepless speed variation, preset position control, and cruise control of high-speed domes.

Keyboard and monitor operation management: Supports matrix keyboards from multiple manufacturers, full-network roaming of keyboards, and multiple monitors forming a large screen. Operators can complete the vast majority of real-time surveillance operations through the keyboard. Supports monitor permission settings and locking. Supports complex corresponding relationships between monitors and keyboards with on-screen display. Monitors can automatically switch according to preset camera browsing sequences; a total session time can be set for each keyboard user; physical parameters such as keyboard model and serial port can be configured. Users can input camera numbers or switch by multi-level camera lists, or click camera icons on the electronic map to switch; operations can be performed by clicking a soft keyboard with the mouse, or by connecting a hard keyboard and using the joystick; the keyboard joystick can perform not only PTZ directional operations but also lens zoom operations.

2) Operation Timeout Auto-Protection

Monitoring center users can operate using either analog matrix keyboards or computer surveillance terminals; the system provides an automatic logout time for each operation keyboard. If no operation is performed on the keyboard after the automatic logout time elapses, the keyboard will automatically relinquish control of the device; the automatic logout time is adjustable from 1 to 255 seconds. If an operator with high operation permissions leaves without locking the control keyboard, the system will automatically lock the keyboard after a certain period to prevent unauthorized personnel from performing illegal operations; the automatic lock time is adjustable from 1 to 99 minutes.

3) Recording Operation Management

The system can record all images in 4CIF format for 24 hours, with a retention period of 15 days; scheduled recording, alarm-triggered recording, and motion detection recording can also be performed as needed, with time periods definable separately; each camera can have multiple recording time periods set per day. Important recordings should have upload and backup functions; users can input camera numbers and times for query, or click surveillance points on the electronic map and query through the time list; selected image segments can be additionally saved in standard formats such as AVI or DivX, and selected images can be saved in JPEG and BMP file formats or printed as photos; during playback, video files can be freely spliced, and video streams can be edited and played during playback.

4) Camera Auto Cruise

Cameras have an auto cruise function that can patrol preset surveillance positions according to preset times and speeds. When a user operates the camera, the cruise state should be temporarily cancelled or terminated; when the user abandons operation or the operation keyboard is automatically logged out, the camera should return to the preset cruise state.

5) GIS Linkage Operation

The video surveillance management platform can integrate an electronic map (GIS) system for surveillance operations through expansion. Authorized users should be able to re-edit each camera point on the electronic map, and users can set their own map login interfaces. When a surveillance user logs in, the system will pop up the default map interface of the area under their jurisdiction.

2.2.2.3.7 Alarm Management Functions

1) Alarm Information Management

The central control terminal can receive device abnormality alarm information uploaded from front-end acquisition terminals (video/audio signal loss, hard disk errors, software abnormalities, etc.), probe alarm information (alarm probe alarms, video loss alarms, etc.), and can automatically call up the video images of the relevant channels at the alarm point according to preset settings. Alarm information is simultaneously stored by category on the server, and text descriptions are promptly added to relevant recordings to facilitate file storage and query.

Alarm access: Through I/O alarm inputs or RS232 serial ports, the system can integrate various standard alarm signals; supports connection of multiple types of alarm boxes and alarm hosts.

Remote alarm and linkage control: Detects multiple alarm signals. When an alarm occurs, it automatically activates various corresponding linkage devices, switches video to the corresponding camera, triggers automatic recording, and reports the alarm to the monitoring center over the network, with an alarm notification pop-up on the client.

Alarm linkage worksheet: On the client, an alarm linkage worksheet is designated for each alarm input. The worksheet can specify which alarm outputs are linked for different time periods from Monday to Sunday and on holidays.

System alarm events can be further subdivided into device fault alarms, incoming alarms, and network linkage alarms.

2) Device Fault Alarms

The management software platform communicates with front-end installed devices at a certain refresh rate and processes request commands from various devices. Within this refresh cycle, if a device does not respond to commands from the management software platform, it can be considered a device fault or network fault, and based on this, fault alarm display and analysis for all managed devices across the entire network can be implemented. The most common types include:

Unplanned disconnection alarms of DVRs and encoders

Single-channel video loss or abnormality alarms

Network congestion alarms

Storage device operation abnormality alarms

3) External Physical Device Alarms

This alarm type refers to various switch-type alarms that have been integrated into the system and configured, including other alarms identified by the software.

Various manual button-type alarms

Probe sensor-type alarms

Motion detection alarms

4) Network-linked alarms

The system software platform can accept open database form-type alarms, such as alarms from the 110 alarm dispatch center and license plate blacklist alarms. The system software platform has corresponding database query and trigger policies, and can issue processing instructions based on the interface type.

5) Alarm event handling procedures

When an alarm event occurs, the system notifies the duty personnel in the form of a pop-up event window, supplemented by audible and visual alerts. Alarm event display is treated as the highest priority level, and according to predefined definitions, various alarms can be classified into three levels: general, urgent, and critical. Critical-level alarms require priority handling, and any unprocessed alarm event will remain displayed at the topmost layer for an extended period to alert the responsible personnel.

The system software platform can send alarm events to designated duty stations for processing, either by specifying the IP address of the duty station workstation or by specifying the user account for handling. Alarm events can be sent to a single duty station or to multiple duty stations. The alarm will not disappear until the event has been processed, and the handler can add the processing result as a brief note in the remarks field for future reference.

Alarm events can also be used as keywords for querying recorded video, allowing retrieval of stored footage and reducing the time spent on manual video comparison.

6) Alarm event contingency plans

Contingency plans for police incidents are necessary. In the event of an emergency, in addition to dispatching the necessary police forces, the system software platform can also execute a series of automated actions:

Ø The main console automatically switches to map mode, displaying the alarm source location

Ø Images from points associated with the alarm source are automatically displayed in pop-up windows

Ø Recording is initiated

When an alarm or other police incident occurs, the system can automatically switch to the corresponding monitoring point, display the image of that point on the screen, provide an indication on the electronic map, issue an audible alert from the computer, and record the relevant alarm information. During camera switching and control, adjacent monitoring points can be indicated on the electronic map.

According to the alarm source, alarms are classified into motion detection and external system access. Motion detection areas and valid time periods can be configured separately. Multiple alarm notification methods are provided, including SMS, alarm boxes, and real-time printing. Upon alarm, the system automatically switches video, saves video, and captures snapshots. Video can be associated with alarm volume, and recorded footage related to alarm events can be automatically retrieved using alarm events as index keywords.

2.2.3 Distance Education Subsystem

Ø Establish a data center: implement online teaching-related work such as learning, training, examinations, and certification;

Ø Utilize Internet technology: enable teaching across different locations, different times, and without spatial limitations;

Ø Multimedia technology: enhance teaching quality through tools such as recording, video, and electronic whiteboards.

2.2.4 Campus Broadcasting and Background Music Subsystem

A smart campus brings not only convenience and comfort to daily life. With the background music system, one can stroll leisurely. In the event of an emergency, urgent notices and broadcasts can also be issued.

Background music can be broadcast by zone, or users can customize it through smart terminals, with a multi-machine broadcast control mode set by priority levels. For example, shopping malls, teaching buildings, cafeterias, and dormitory buildings can each customize their own music.

All broadcast terminals use IP stereo broadcast terminals. Existing broadcast systems can also be retrofitted.

Background music and LCD screens enhance the auditory and visual experience on campus. This brings not only convenience and comfort to study and life — with the background music system, one can stroll leisurely across campus, walking to the rhythm of piano music. LCD screens eliminate the need to post notices and advertisements on various bulletin boards, reducing pollution and enhancing aesthetics.

The broadcast system adopts a pure digital network audio broadcast system based on the IP data network. The system supports digital conversion of various analog audio sources, and as a digital audio broadcast system, it directly applies audio resources in digital format. According to the different broadcast areas of the prison, the system is divided into one broadcast master control center and multiple broadcast sub-control centers.

The master control center serves as the broadcast master control center, using a digital broadcast host combined with multimedia master control software to implement broadcasting throughout the entire prison. The master control center can directly broadcast to and communicate with armed police on duty at the two guard posts to handle police incidents. Each sub-control center serves as a broadcast sub-control center, using multimedia auxiliary control software to implement independent broadcasting to each prison area. The routine duty of the monitoring center is perimeter surveillance. When a linkage alarm occurs in a certain defense zone, the broadcast (intercom) equipment on the two adjacent armed police guard posts automatically establishes an intercom broadcast state with the master control center, and the video wall displays the broadcast access status. After disarming, the system automatically resets. The overall system platform records in detail the entire process of the incident and its handling.

The broadcast system has the following main functions:

1. Fire-fighting linkage emergency broadcast

When a fire emergency alarm occurs, emergency broadcasts can be automatically conducted in one-to-one or one-to-many group modes.

2. Point-to-point paging broadcast

Sub-control workstations can use microphones through sound cards to conduct single-point or group paging broadcast to broadcast terminals.

3. Paging and intercom function

Intercom terminals can communicate with each other. This enables office broadcast to any area, and call intercom between duty rooms, and between command centers and duty rooms.

4. Single-point playback support

Broadcasting can be conducted to any single point, group, zone, or all areas. The system can set any number of groups to play designated audio programs at the same time, or conduct broadcast announcements to any designated area.

2.2.5 Campus All-in-One Card Subsystem

The all-in-one card system uses the IC card as the information carrier, IC card read/write devices as information exchange units, and computer and communication technologies as the means, connecting various campus facilities into an organic whole. In this all-in-one card system, students, faculty, staff, and visitors can use a single IC card representing their personal identity to realize "all-in-one card" functions on campus, including identity verification, vehicle access management, access control management, consumption management, security patrol, and attendance. It also provides integration with virtual currency for students, faculty, and staff, enabling electronic wallet payments, online card-swiping payments, and other functions, providing users with a safer, more convenient, and more comfortable working and living environment. It provides managers with more convenient management tools, organically integrating the various subsystems on campus into a complete intelligent all-in-one card system.

The enterprise all-in-one card system is architected on the campus network, utilizing computers, network equipment, terminals, and other devices, fully leveraging network advantages and using IC cards as the carrier to implement an advanced information management system. From the perspective of IC card data, through systematic analysis of IC card application processes, the entire network system architecture adopts a three-tier platform structure: the digital campus central data serves as the first-tier platform; the front-end service system serves as the second-tier platform; and each application system serves as the third-tier platform.

First-tier platform: The campus shared data center, unified identity authentication, and unified portal system serve as the core for data exchange and sharing;

Second-tier platform: Front-end services serve as the application access second-tier platform, carrying data transmission, load balancing, access auditing, third-party subsystem coordination, and isolating applications from direct database operations, greatly improving system performance.

Third-tier platform: The various application subsystems of this project and other application subsystems associated with the card.

The large-scale all-in-one card system adopts a three-tier architecture in its main design, providing better processing performance and clear division of responsibilities among systems. It is constructed from various functional modules. When a functional module in the all-in-one card management section is upgraded or modified, other modules do not need recompilation — only minimal configuration or settings are required. When application systems are upgraded or modified, the platform and corresponding management sections require no changes, only simple configuration based on registration information such as system codes, machine codes, and IP addresses. This fully achieves phased construction of multiple applications, independent operation, centralized management, and global data sharing.

The system structure design fully considers dual-mode usability and compatibility for networked/standalone operation.

System operating modes generally distinguish between real-time communication and non-real-time communication. Based on years of engineering implementation experience, our company believes that a stable and secure campus all-in-one card system must be a system that tightly integrates both operating modes — capable of both networked and standalone operation. When networked, the system operates in online communication mode with automatic data exchange. Once a network failure occurs, the card payment/identification media and terminal devices can still operate normally in standalone mode.

The overall system structure diagram is as follows:

2.2.6 Campus Security Intercom Subsystem

2.2.7 Campus Vehicle Management Subsystem

The vehicle management system covers vehicle management, parking lot traffic planning, pedestrian guidance, and other aspects. All entrances and exits adopt networked management, with Mifare card-based fee collection, divided into fixed and temporary billing methods.

Parking lot exits feature main city road network traffic condition maps, entrances feature parking space availability indicator signs, and internal areas feature parking guidance signs. Full guidance can be provided for important vehicles.

Scientific management is implemented for vehicles entering and exiting campus gates and underground parking lots through all-in-one card swipe sensing. Residents can share one card with entrance/exit management, unit door management, and other management systems. Visiting vehicles can use temporary cards for entry and exit, complemented by vehicle image comparison functionality — this ensures the safety of owners' vehicles on one hand, and prevents unauthorized vehicles from entering on the other, with the capability to expand to campus consumption areas.

The system can implement the following functions:

Ø Temporary vehicle fee collection: Temporary vehicles receive a temporary card from the ticket dispenser upon entry and must pay the prescribed fee upon exit before being allowed to leave after security confirmation;

Ø Parking lot management: Parking lot management is the core function for centralized aggregation, comprehensive processing, and intelligent response of parking lot information. Managers can comprehensively control all parking lot information indicators through this function, implementing integrated publishing, unified scheduling, automatic backup, and alarm notification functions;

Ø Parking space guidance: Provides drivers with parking space occupancy status and internal driving route information through SMS queries, online queries, terminal displays, and other methods, guiding drivers to find parking spaces in an optimized and convenient manner;

Ø Reverse car-finding: The reverse car-finding function allows users to query the vehicle's parked location and guidance route through smart terminals or mobile phone SMS, helping users quickly locate the area where their vehicle is parked;

Ø Special vehicle management: Special vehicle management is an important upgrade function of the intelligent parking lot. Using technologies such as parking space sensing, video recognition, and intelligent card reading, it provides exclusive permissions for special vehicles. The parking lot entrance can proactively identify special vehicle identities and automatically guide them to dedicated parking spaces. When a special vehicle's parking space is illegally occupied, the system automatically issues an alarm;

Ø Image comparison: When vehicles enter and exit the parking lot, the digital video recorder automatically activates the camera function and stores photo files on the computer. Upon exit, the computer automatically compares the new photo with the vehicle's last entry photo, allowing monitoring personnel to monitor vehicle safety in real time;

Ø School shuttle real-time information: Provides campus personnel with shuttle bus status, routes, and arrival times through stop sign displays, mobile terminal displays, and other methods, guiding faculty, staff, and students to use shuttle services in an optimized and convenient manner.

2.2.8 Water, Electricity, and Gas Remote Meter Reading Subsystem

The remote meter reading and metering system is an important component of campus intelligence. It replaces traditional door-to-door fee collection and IC card metering fee collection methods, making the metering of water, electricity, gas, heating, and heat meters in student dormitories, faculty dormitories, classrooms, and office buildings more accurate, convenient, and efficient, facilitating centralized management.

2.2.9 Campus Street Lighting and Landscape Lighting Subsystem

Street lighting monitoring controls the switching of road and landscape lights through the network, and the status of lights can be monitored through the central monitoring platform. This greatly saves labor costs and electricity expenses while improving management efficiency.

Industrial control computers can be used at the monitoring center to monitor the working status of lighting systems on each road section at any time, allowing real-time awareness of whether lights are functioning normally on each section, and enabling real-time observation of lighting rates, switch states, and other real-time data, greatly improving lighting management levels. Monitoring computers can be used to set daily scheduled on/off times for lighting systems on each road section, ensuring that daily switching times perfectly match dawn and dusk times. The system can also integrate with various sensors — turning off lights when no one is present and turning on lights in designated areas upon alarm. Temporary light switching commands (including fountain systems) can be issued to lighting switch cabinets as needed at any time.

2.2.10 Public Area WiFi Coverage and Authentication System

WiFi signal coverage includes both the intranet and extranet networks, covering primarily the teaching buildings, cafeteria, and public areas of the campus. The intranet WiFi is mainly used for transmitting short messages and communication among campus staff, faculty, and students, and may also serve for notifications or reminders, requiring a password for network access. The extranet WiFi is available for free use and is primarily intended for visitors or personnel to interact with the Internet; free WiFi is an essential part of attracting visitors. Free WiFi also serves as an excellent promotional tool — when users connect to the free WiFi hotspot and open a browser, a WiFi welcome page automatically pops up, which can be used for school introduction and publicity.

2.2.11 Emergency Command and Dispatch System

The multimedia dispatch system is based on the existing campus infrastructure transmission and communication methods, integrating TDM communication, VOIP communication, wireless trunking, fixed telephone, and GSM communication to achieve one-key direct calling for dispatchers. It is equipped with all common functions of a dispatch system, including barge-in, forced release, monitoring, group calling, conference mode, and call recording.