Beijing Raytrans Smart Education System Solution

1 Smart Education Demand Analysis

Build a regional education resource and management platform: enhance resource sharing of courseware, test papers, etc. between schools and regions, and improve the informatization level of regional education management;

Advance the application level of smart classrooms and digital campuses, enabling interaction between teachers and students, lecture recording, and convenient courseware access; improve teachers' informatization application capabilities;

Combine theory with practice to establish a scientific and standardized infrastructure standard system, applied to the construction of informatization hardware environments such as education network coverage, equipment, and classrooms in regions and schools.

Through the introduction of cloud computing technology, achieve elastic allocation of hardware resources, maximize resource utilization, and reduce hardware construction and maintenance costs.

2 Smart Education System Design

2.1 Smart Education Overall Architecture

The smart education system includes network construction, data centers, operation platforms, education systems, courseware content, learning terminals, and consulting services. Raytrans provides vertical industry solutions based on the needs of customers in different industries, offering customized solutions for customers in basic education, higher education, enterprise education, and vocational education.

2.2 Smart Education Subsystem Design

2.2.1 Campus and Education Commission Unified Network Access Subsystem

Currently, school informatization construction is mostly focused on digital campuses, connecting to social networks based on the campus. This not only brings a lot of daily management work and high costs to schools, but also imposes limitations on inter-school cooperation, unified management by the education commission, and the functionality of the education private network. Therefore, a region-oriented education optical fiber private network construction will be able to leverage greater advantages. By integrating excellent online education resources, it can fully compensate for the shortage of education resources in marginal schools.

The education optical fiber private network we recommend connects schools together via 2.5G optical fiber, providing multiple physically isolated Ethernet channels. The 2.5G transmission bandwidth is chosen because this rate can typically achieve a transmission distance of 80KM without optical amplifiers, whereas switching to 5G or even higher bandwidth fiber can only transmit a few kilometers, and using lower rates makes it difficult to transmit multiple physically isolated Gigabit networks. Therefore, 2.5G optical fiber is the best choice for long-distance transmission.

Central equipment is placed at the Education Bureau or Information Center, providing unified interfaces for each school to carriers and higher-level education management institutions. The advantages are as follows: 1. As a major customer, unified access to broadband carriers fully introduces competition, giving school teachers and students multiple choices and greater benefits; 2. Avoids disorderly competition from repeated construction by multiple property owners on campus; 3. Schools have a unified Internet interface, facilitating big data processing in the education industry, public opinion monitoring, and Internet behavior management; 4. Unified access for school telephone numbers, presenting a unified image, and allowing internal control of extension number expansion; 5. Sufficient external bandwidth to access more private network services.

The Education Bureau or Information Center adopts Raytrans IDM MSAP-CP equipment as the core switching and aggregation device. IDM NT421 or IDM GTD442 terminal equipment can be installed in office floors, student dormitories, and teaching buildings.

On the 2.5G optical fiber, 2 wire-speed Gigabit Ethernet channels, 4 wire-speed Fast Ethernet channels, and 24 E1 channels can be transmitted. One Gigabit network is mainly used for carrier Internet access, for teachers and students to access the Internet, IPTV, and publishing surveillance from important locations to the public. Another Gigabit network can be used for video conferencing, video recording, and video surveillance upload. The other 4 Fast Ethernet networks can be used for other inter-school intranet transmission, such as financial networks, dedicated examination networks, dedicated education networks, and dedicated management networks. E1 interfaces can be used for telephone access, high-fidelity audio transmission, and digital bell broadcasting.

There are multiple methods for accessing multiple carriers. One is to use a multi-interface router, configuring interface policies based on factors such as network speed and price; another is to provide access only to the desired network carrier based on the needs of teachers and students, directly routing that channel to the computer.

The Internet egress for each school can be uniformly equipped with a high-end firewall, which is more cost-effective than each school purchasing one individually, which requires significant funding and dedicated maintenance personnel.

2.2.1.1 Information Center Aggregation and Access

The main functions implemented are as follows:

1. Provide local telephone internal switching, enabling free short-number dialing between campus phones and between schools;
   

2. Provide trunk access to the telephone switching networks of carriers such as China Unicom/China Mobile/China Telecom, enabling external call functions on campus;
   

3. Provide Ethernet service access from carriers such as China Unicom/China Mobile/China Telecom, achieving isolation between internal and external networks through an Ethernet firewall to ensure information security;
   

4. Provide telephone trunk interfaces that can be connected to the telephone networks of the Education Commission or other partner institutions, enabling telephone interconnection among all units;
   

5. Provide radio and television IPTV data interfaces, allowing access to radio and television IPTV TV signals, providing TV services to teaching buildings and office buildings;
   

6. Provide remote meter reading data processing functions, enabling centralized management of water, electricity, and gas meter reading data in office buildings;
   

7. Provide video surveillance and conferencing functions, enabling centralized retrieval and monitoring of remote network video signals at the central end, as well as video conferencing;
   

8. Dispatch servers and public address broadcasting servers can be installed, implementing additional functions based on meeting customers' basic integrated service fiber access needs, supporting campus multimedia dispatch and public address broadcasting functions;
   

9. The central end reserves secondary development interfaces for smart campuses, enabling centralized access of multimedia information such as electronic fences, parking lot surveillance, campus all-in-one cards, and campus advertising through optical fiber.
   

2.2.1.2 Teaching Building and Office Terminal Fiber Access

Teaching buildings and offices are nodes where terminal access equipment is installed, directly providing users with broadband, telephone, IPTV, and remote meter reading data interfaces, using our company's IDM NTD421 terminal equipment. Based on end-user requirements, 1 NTD421 terminal can be installed per office, and several NTD421 devices can be installed per floor to meet the business needs of each office and floor.

The terminal provides the following functions:

1. Provide telephone interfaces for direct connection of office telephones;
   

2. Provide network interfaces for direct connection of user Internet devices, such as computers and routers;
   

3. Provide network interfaces for connecting IPTV set-top boxes, providing network TV functions;
   

4. Provide network interfaces for connecting network cameras, enabling video surveillance signal upload from floors and important offices to the surveillance center, as well as connecting office video conferencing cameras for video conferencing functions;
   

5. Provide remote meter reading interfaces (RS485/RS422, etc.) for connecting water, electricity, and gas meters in office buildings, enabling meter reading data upload to the surveillance center.
   

2.2.1.3 Important Features of the Fiber Access Solution

1. All-fiber transmission and access
   

Communication from the information center telecommunications room to schools and campus business communications all use optical fiber transmission technology. This solution adopts PDH+PCM technology to achieve full coverage of high-speed fiber-to-the-home.

2. Campus telephone internal switching, independent operation
   

The information center telecommunications room uses our company's IDM MSAP-G3CP equipment to directly implement internal switching for campus telephones, allowing campus virtual carriers to independently operate telephone services and provide free internal telephones on campus.

At the same time, the equipment provides E1 digital trunk interfaces or FXO analog trunk interfaces, which can be connected to carrier telephone switching networks and the telephone systems of the Education Commission and other partner institutions, achieving telephone interconnection.

3. Isolation of internal and external networks
   

The core equipment IDM MSAP-G3CP in the central equipment room adopts TDM technology. All Ethernet network channels provide physically isolated channels, achieving isolation between internal and external networks and ensuring information security.

2.2.2 Campus Security Surveillance Subsystem

2.2.2.1 Overall Functions

The entire system is required to adopt an intelligent network management platform to achieve unified management of all network devices and user permissions. Functions include automatic batch device configuration, automatic fault alarm and location management, real-time image switching display, historical image playback, front-end camera control, system alarms, and data storage backup.

2.2.2.1.1 Real-time Image Display and Switching Functions

Supports three video display modes: client, IE browser, and video wall display, supporting single-screen, multi-screen, and full-screen display modes. Each screen can select and browse the real-time image of any video source;

The system has an automatic image patrol function, which can cyclically display surveillance images using self-defined trigger sequences and time intervals, with the images participating in patrol and their order arbitrarily selectable in designated windows;

In addition to displaying on-site video information, the system can overlay corresponding video location, time, and alarm markers on the video image. The identification characters of a specific video channel can be edited, time information can be automatically overlaid, and the display position of characters on the image can be flexibly set;

Camera location information can be associated with electronic maps, supporting a dual-screen display function that simultaneously displays video information and electronic map information;

The system should have an image capture function, allowing video playing in a surveillance window to be captured and saved as image files. The image file format must be standard formats such as JPEG, BMP, or GIF, for convenient browsing using image viewing tools under the Windows system;

When browsing real-time video images or playing back historical images through the video client, image zoom display can be conveniently performed, supporting full-screen display of one image.

2.2.2.1.2 Front-end Camera Control Functions

Surveillance centers at all levels of the system can control all PTZ units and cameras through professional keyboards and the soft keyboard provided by the video client. The rotation angle of the PTZ, camera aperture size, focus level, heater switch, wiper switch, zoom level, and lighting switch can be controlled;

The system supports user camera locking and unlocking functions. If a user needs exclusive control of the PTZ for a certain period, they can choose to lock the camera. Once the camera is locked, other users cannot seize PTZ control. Only the user who performed the lock operation or an administrator with unlock permission can release the lock;

When multiple surveillance centers control one camera simultaneously, the higher-level surveillance center has priority control;

When camera control is not possible, the system should prompt the current controller's information;

Cameras have a preset trajectory rotation function to comprehensively capture on-site video information. The camera patrol start time, preset positions, and patrol trajectories can be set. Cameras can patrol along different preset trajectories at different time periods.

2.2.2.1.3 System Storage and Security Functions

Adopts professional IP SAN and CVR storage system technologies, supporting the iSCSI protocol, providing Gigabit IP interfaces, with optional SATA disks of different capacities such as 1TB and 4TB, enabling centralized management of digital images within the system and dynamic allocation of storage resources;

Supports built-in battery cache protection during power failures, hot-swappable disks and online replacement of faulty disks, sequential disk power-on at startup, and disk power short-circuit protection;

The maximum number of host connections in the SAN environment is ≥250, with all connection licenses configured, supporting RAID levels such as RAID 0, 1, 5, and 10. The total capacity includes a redundant backup space of 10% of the required capacity for long-term storage of important surveillance images.

Supports graphical management software, allowing management of multiple storage devices in one management interface, as well as automatic email alarm functions.

The system supports configuring the retention time for historical images for each video source. When the retention time is exceeded, expired historical images can be automatically deleted without administrator intervention;

The system can monitor the current storage resource status of all storage devices in real time;

The system supports setting storage plans for each video source, recording in time segments. The time segment granularity is no greater than 30 minutes, and multiple recording time segments can be set per day. When a video source fails to record according to the plan, the system should promptly report an alarm and notify the administrator for corresponding fault location analysis.

The system shall support local recording. When viewing live images or playing back historical images, authorized users can initiate local recording to temporarily store images on the client's local storage media. The client interface shall provide convenient controls for starting and stopping local recording. The video client shall support playback of locally recorded files.

The system shall have data backup functionality to back up and redundantly store important data. The system supports manual backup, where users with appropriate permissions can initiate data backup through the video client to back up data from specified video sources over specific time periods. The system also supports automatic backup policies, which can periodically back up data from specified video sources over specific time periods. When backing up data, descriptive information can be added to the backup data. Users can perform fuzzy searches on backup data based on descriptive information and request on-demand playback.

The storage application management unit obtains information on all video sources in the system through the network and stores it in high-capacity storage devices. The system supports a distributed cluster storage architecture composed of n computers. The communication layer of these computers is built on our high-performance communication platform technology. Under normal operation, each storage computer is responsible for storing certain recording information from the entire system. First, we need to define storage groups, with each storage group consisting of n channels of images. We bind a storage group to a storage server. In this way, images from the entire system are stored through different storage servers. The model we adopt is a combined approach of front-end distributed recording and back-end centralized recording. The specific functions are as follows:

1. Support direct recording and backup management of large numbers of remote image channels that are not being viewed in real time by the central client, while also supporting management of various centralized storage devices, not just local hard drives.

2. Support rapid retrieval of data stored in centralized storage devices and provide services.

3. Support retrieval of specific surveillance recordings and associated data through the Web interface, both locally and on clients, by camera, by time, by associated event, by log, by alarm, and by other criteria.

4. Allow viewing of the detailed storage location of recordings, display relevant status information, and enable timely playback of the recordings.

5. Allow browsing of corresponding surveillance files on hard drives and SAN storage devices.

6. Support recording schedules and supplementary recording. Each recording group can have its own recording schedule, and the underlying execution of recordings is handled by our schedule and task scheduling engine. During each recording process, the system records the execution time of the recording. Based on the difference between the predetermined schedule and the actual execution status, the system maintenance server can calculate the time periods requiring supplementary recording. The supplementary recording system will automatically download the missing recording information from the appropriate DVR. When a recording schedule changes, the earlier schedule is recorded, and the system can automatically determine whether supplementary recording should reference the schedule before or after the change.

7. Disk cleanup policy and recording retention priority. When the system detects that storage capacity exceeds the maximum warning threshold specified by the system, it will initiate the disk cleanup task. This work is managed by the maintenance server, which periodically checks disk status and performs functions such as disk cleanup and automatic export.

2.2.2.1.4 Video File Retrieval and Historical Image Playback

The system can assist video decoders in establishing connections with storage resources, and can assist surveillance clients in establishing connections with storage resources to enable video data playback.

The system supports retrieval of historical image information using a combination of video source identifier and start/end time, with retrieval results displayed in list form. For local retrieval of historical images, the time from initiating the retrieval to obtaining results shall be less than 1 second, with no noticeable waiting time.

The system supports simultaneous playback of multiple channels of historical images. During historical image playback, pause and resume functions are supported, as well as normal speed, fast speed, and slow speed playback. Fast playback supports 1x, 2x, 4x, and 8x speeds. Slow playback supports 1/2x, 1/4x, and 1/8x speeds.

2.2.2.1.5 Network Operation and Maintenance Functions

Provide full-process monitoring of front-end cameras, encoder status, transmission lines, storage devices, back-end decoding, and management platform operation, with the ability to diagnose video image quality.

The management platform can automatically detect the working status of devices in the system (encoders, decoders, video clients, storage devices), and can quickly report alarms when devices go offline. When a faulty device recovers and comes back online, the device can automatically rejoin the system and operate normally without changes to the original configuration, and the recovery process requires no manual intervention.

Administrators can configure parameters of encoders and decoders in the system through a centralized management interface, and can perform software upgrades.

The system has complete security auditing and logging functions, capable of recording device operation status, various alarm information, user login logs, etc.

The management server can provide unified management of IPSAN storage resources, formulate storage plans for cameras, and assist video management clients in establishing iSCSI connections with IPSAN.

Video data retrieval and playback: After confirming the retrieval data requested by the video management client, the retrieval results (whether corresponding data exists within the specified time period) are returned to the video management client. The client can select data from a specific time period for playback.

The video management platform shall support hierarchical, grouped, and device-based management of user permissions, effectively controlling and blocking connections from illegal users to ensure data security.

2.2.2.1.6 Permission Management Functions

The platform shall provide a multi-level user management architecture, with each level of users having different management permissions. Based on the granted permissions, users can perform corresponding system access and surveillance operations to prevent illegal login and unauthorized operations.

User levels shall be divided into at least three levels: super administrator (with system-level configuration permissions, capable of user management and device management), general administrator, and ordinary user. User management and operation permissions shall be divided into at least the following categories: user management permission, device management permission, real-time viewing permission, patrol configuration permission, PTZ control permission, historical image retrieval and playback permission, image backup and download permission, etc.

When users log into the system, user authentication and permission checking must be performed. User login account information transmitted over the network shall not be transmitted in plaintext.

Multiple users can simultaneously view real-time images from any surveillance point, and users of higher levels have priority control rights (such as PTZ control, etc.).

2.2.2.1.7 System Alarm Functions

1) Alarm Methods

System alarm methods are divided into three types: motion detection alarm, external input alarm, and video source loss alarm:

1. Motion detection alarm: When changes occur in the surveillance scene, the system generates alarm information and automatically executes alarm linkage functions such as image switching and video storage. Each video channel is divided into more than 8 motion detection zones, and the sensitivity and effective time of each zone can be set individually.

2. External input alarm: The multimedia access units at surveillance sites have alarm input functions. Through alarm detectors installed on site, information such as smoke alarms, water leakage, gas alarms, glass breakage, and door opening can be collected from the surveillance site. The effective time of alarms can be set, and remote alarm reset functions are available.

3. Video source loss alarm: When a video cable is disconnected or no video signal is obtained, the system generates a video source loss alarm.

2) Alarm Linkage Functions

Alarm and video linkage: When an alarm occurs, the system automatically switches to display the alarm video information, automatically stores the alarm video, automatically captures still images of the alarm scene, and displays the alarm list prominently on the client.

Alarm and control linkage: When an alarm occurs, the system automatically turns on on-site lighting, automatically activates on-site sirens, and starts other on-site equipment.

Alarm linkage output functions: When an alarm occurs, the monitoring center has multiple alarm output methods including audible/visual alarms, alarm printing, alarm short messages, voice alarms, and electronic map alarms. At the same time, alarm information can also be output to other alarm processing systems (such as alarm dispatch systems, etc.).

3) Alarm Query Functions

Historical alarm information can be queried by camera name, date and time, alarm type, and other conditions. With video and alarm association configured, when querying alarms, the system automatically searches for corresponding video files stored during the alarm time period.

2.2.2.2 Platform Control Functions

2.2.2.2.1 Remote Real-Time Image Viewing

Video images can be viewed directly through IE, and the layout of cameras and detectors in each jurisdiction can be intuitively viewed through the electronic maps of each jurisdiction. Surveillance images of an area can be viewed by clicking on the camera icon responsible for that area on the electronic map. The system supports vector maps, allowing convenient map zooming, and can be seamlessly integrated with GIS, facilitating future positioning and monitoring of vehicles or other GPS terminal devices within the jurisdiction. Future upgrades can also incorporate wireless video access from vehicles via 3G networks, with vehicle positioning through the map.

2.2.2.2.2 Remote Camera Control

PTZ control of cameras (up/down/left/right, auto), camera control (aperture, zoom, focus), auxiliary switch control (PTZ, wiper), image effect adjustment (brightness, contrast, chroma, saturation, volume), and speed dome control (preset position setting and calling, auto cruise).

2.2.2.2.3 Real-Time Detection and Scheduled Inspection

The system can monitor device operation status in real time. When device abnormalities occur, alarms can be issued, and the alarm location and content can be displayed on the electronic map with audible and visual prompts. Administrators can view the operation status of all devices, the current activities of all logged-in users on the network, alarm and handling status, and operation logs at any time, and can generate statistical charts.

The system has the function of scheduled inspection and clock synchronization for devices. Inspection contents include storage status, network connection status, system operation status, number of connected clients, and operation status parameters provided by device manufacturers. The obtained data is stored in logs and can be displayed as current or historical status in curves, charts, and other formats.

2.2.2.2.4 Remote/Local Image Retrieval and Playback

Recording materials such as normal recordings, motion detection recordings, alarm recordings, and captured images can be retrieved, downloaded, and played back based on retrieval conditions including time, channel, local, and remote. They can also be saved to the storage server at the monitoring center. During playback, operations such as play, pause, stop, fast forward, fast rewind, image capture, and recording file editing are supported. Multiple channels can also be played back simultaneously for convenient viewing of recording materials.

2.2.2.2.5 Multi-Screen Preview Groups

Preview group patrol switching. Preview groups can be customized, with 1, 3, 9, 16, 24, and 32 multi-screen preview groups configurable. Automatic channel opening and patrol can be initiated upon system startup.

2.2.2.2.6 Remote Device Upgrade and Maintenance

For maintenance of various remote alarm and audio/video terminal devices on the network, administrators do not need to travel to the device site. Device operation status can be monitored and device parameters can be modified remotely, which improves equipment maintenance efficiency, saves manpower and time, facilitates overall system management, and provides strong assurance of the reliability of the entire surveillance system.

2.2.2.2.7 Remote Alarm Arming/Disarming

The working status of all front-end alarm hosts can be viewed in real time through the network, and alarm host arming, disarming, zone bypass, and alarm system reset can be controlled.

2.2.2.2.8 Alarm Linkage

Emergency alarm information from any location can be monitored through the network, such as robbery alarms, burglary alarms, and incident disputes. When an alarm occurs at a location, the alarm information is automatically uploaded to the monitoring center, and the on-site images linked to the alarm signal are simultaneously transmitted to the monitoring center for pop-up display and automatic recording backup at the monitoring center. The location of the site on the electronic map will flash. At the same time, the monitoring center generates audible or visual alarms.

2.2.2.2.9 Voice Intercom and Monitoring

The monitoring center can conduct two-way voice intercom with incident sites equipped with intercom devices. Through the surveillance system center software, the center can call the area where the front-end camera is located for voice intercom, enabling mutual communication and guidance for daily work content.

2.2.2.2.10 Automatic Time Synchronization

The monitoring center provides an automatic time synchronization service. When a site's DVR connects to the main control server, its local time will be changed to match the main control server's time. This ensures the accuracy of time parameters in surveillance recording materials and improves the credibility of the materials.

2.2.2.2.11 Various Permission Controls

Users at all levels may only view authorized video and audio signals and perform corresponding remote PTZ control operations with authorization from the monitoring center server; control terminal devices are registered in the management server via MAC address encryption, which restricts the functions of the control terminals.

2.2.2.2.12 Leadership Inquiry Function

Leaders at all levels can use desktop PC office systems to query statistical data (operator attendance, summary of violations, summary of alarm information, etc.) and video recordings (non-real-time recordings, violation recordings, alarm recordings, etc.) through IE browsers, and can also directly connect to real-time images for on-site supervision.

2.2.2.3 Platform Management Functions

2.2.2.3.1 Device Management

As the scale of digital surveillance systems expands, the number of devices connected to the system will increasingly burden management tasks, and system operation may also be affected by business adjustments, while various system operating parameters will be continuously optimized. Therefore, the management platform should have full-network device management capabilities. Depending on the level of openness of the connected hardware devices, it should provide at least the configuration capabilities required for routine maintenance by users, and as far as possible achieve device maintenance and management capabilities for all items other than hard faults.

These management capabilities will be specifically reflected in the following aspects:

Ø Monitoring of device operating status

Ø Multi-level cascade networking management of analog matrices

Ø Online modification of operating parameters of DVRs or video encoders

Ø Modification of operating parameters of centralized storage devices

Ø Auxiliary fault diagnosis and reporting

Ø Remote software upgrade

Modifiable operating parameters of DVRs or video encoders include: video format (CIF/D1), transmission bitrate adjustment, character overlay modification, camera index name modification, recording strategy, external alarm source configuration, PTZ or speed dome camera communication protocol settings, etc.

Complex distributed network video systems require interconnection of multiple subsystems. Initial installation and commissioning may require configuration of thousands or even tens of thousands of parameters, and during actual operation, new devices frequently need to be added or parameters adjusted. These tasks can no longer be accomplished through simple command-line statements. Relying on developers to perform system configuration and maintenance would lead to a dramatic increase in system implementation costs and make it impossible to complete the handover to the owner.

The Raytrans video surveillance management platform supports the connection of various devices equipped with communication interfaces and communication protocols. All image resources are uniformly numbered, uniformly configured, uniformly scheduled, and uniformly managed. Administrators can remotely read and configure any device in the system in batch, and can adjust various parameters of devices individually or in groups; the system configuration process runs in the background and does not affect users' current surveillance operations.

2.2.2.3.2 User Management

Includes login and logout; adding, deleting, and modifying users, etc. User information includes login username, password, permissions, user description, and other information. Permissions are divided into three types: system administrator, operator, and ordinary user. The system administrator has the highest authority and can use all management functions; operators cannot perform functions such as modifying logs, adding users, or attendance and performance statistics; ordinary users can only play authorized recorded files. Operators or system administrators log into the system to obtain corresponding permissions. (Detailed time records implement the check-in function)

2.2.2.3.3 Log Management

The system automatically records operator log information (operator login, logout, routine operations, alarm information, device fault information, operation type, operation time, operator, whether the operation was successful, etc.), and can automatically upload it to the monitoring center management server database as a basis for staff performance assessment and determination of whether violations occurred, for future inspection by leaders; in addition, operator operations on surveillance subsystems can also be optionally recorded in logs, such as viewing images or controlling remote surveillance hosts. Users can view logs by category.

2.2.2.3.4 Video Recording Management

The video recordings stored in the monitoring center storage devices consist of video clips of the corresponding time periods at the scene captured when violations are discovered or alarms occur, along with the corresponding generated records. Management of this data information should include: record information generation, such as file name, generation time, operator identifier, time period, event type, recording storage path, etc. Records are automatically generated by background programs; video recording maintenance, such as periodic backup and archiving, cleanup, etc.; reception of remote video recordings, where during non-business hours, based on custom extraction policies such as time periods, video information from remote surveillance points is extracted; support for multi-user retrieval of video recordings, where authorized operators or leaders can view corresponding video clips afterwards, for example by opening a web browser, entering username and password information, obtaining a statistics page, and based on the statistics, calling up relevant recordings, clicking to view recording information, obtaining a list of authorized recording events, and clicking on one recording event to automatically launch the media player for playback.

2.2.2.3.5 Maintenance Management

Register and catalog all digital surveillance hosts within the jurisdiction to form complete device records. Registration contents include: device name, manufacturer, applied branch/outlet name, service contact phone number, etc. Operations such as modification, deletion, addition, browsing, and querying can also be performed. When a device fails, the operator registers it and marks the device as unavailable; after the fault is resolved, the operator removes the fault marker. Operations such as modification, deletion, addition, browsing, and querying can be performed.

2.2.2.3.6 Operation Management

1) Multiple Image Operation Control Mechanisms

Network clients can monitor multiple real-time image channels simultaneously and achieve multi-screen display on a single machine; multiple network clients can simultaneously monitor any front-end image. Images from any front-end surveillance point can be displayed in real time on the video wall, with round-robin switching display. With network conditions supported, multiple users at different locations can simultaneously view real-time video from any outlet within the system online. Personal surveillance terminals can display 4 to 16 split-screen multi-image views, where each screen can switch to any image in the system, and surveillance modes such as multi-image combinations, round-robin switching methods, and camera preset positions can be saved as files for repeated use.

Camera grouping: Supports grouping and switching selection by surveillance area, management authority, and actual usage conditions (such as patrol routes), with simple configuration.

Round-robin: The system has automatic video patrol functionality, performing image inspection of surveillance points across the entire network at configurable intervals. Objects participating in round-robin can be arbitrarily set, and round-robin interval times are configurable. Surveillance images can be displayed in rotation using preset trigger sequences and time intervals; specific devices can be designated to perform specific actions within a certain time period.

Camera information settings: Can set the location, IP, alias, area, site, and other information of all cameras in the system.

Character overlay and image masking: Chinese names, current date, time, site, camera number, and other character information can be overlaid at any position on the image; images and black frame boxes can be overlaid at any position on the image to mask image areas that need to be hidden. Each camera can have more than 8 different preset location names; when the camera rotates to the corresponding angle, the system automatically displays the corresponding location name. The system can use subtitles from different devices as needed, with parameters such as subtitle content and display position kept uniform and consistent.

PTZ and speed dome control: Supports direction control, auto scan, preset position management, aperture and focal length management, lens zoom; PTZ speed is adjustable; supports light, wiper, and power switch control; supports custom auxiliary switch control; supports camera lock and unlock; facilitates parameter configuration of PTZ/speed dome controllers. Features a full-function PTZ lens control interface and custom communication protocol definition, compatible with multiple decoders; can set and control full-range stepless speed variation, preset position control, and cruise control of high-speed domes.

Keyboard and monitor operation management: Supports matrix keyboards from multiple manufacturers, full-network roaming of keyboards, and multiple monitors forming a large screen. Operators can complete the vast majority of real-time surveillance operations through the keyboard. Supports monitor permission settings and locking. Supports complex corresponding relationships between monitors and keyboards with on-screen display. Monitors can automatically switch according to preset camera browsing sequences; total session time can be set for each keyboard user; physical parameters such as keyboard model and serial port can be configured. Users can input camera numbers or switch by multi-level camera lists, or click camera icons on the electronic map to switch; operations can be performed by clicking a soft keyboard with the mouse, or by connecting a hard keyboard and using the joystick; the keyboard joystick can perform not only PTZ directional operations but also lens zoom operations.

2) Operation Timeout Auto-Protection

Monitoring center users can operate using either analog matrix keyboards or computer surveillance terminals; the system provides an automatic logout time for each operation keyboard. If no operation is performed on the keyboard after the automatic logout time elapses, the keyboard will automatically relinquish control of the device; the automatic logout time is adjustable from 1 to 255 seconds. If an operator with high operation authority leaves without locking the control keyboard, the system will automatically lock the keyboard after a certain period to prevent unauthorized personnel from performing illegal operations; the automatic lock time is adjustable from 1 to 99 minutes.

3) Recording Operation Management

The system can record all images in 4CIF format for 24 hours a day, with a retention period of 15 days; scheduled recording, alarm-triggered recording, and motion detection recording can also be performed as needed, with time periods definable separately; each camera can have multiple recording time periods set per day. Important recordings should have upload and backup functions; users can input camera numbers and times for query, or click surveillance points on the electronic map and query through the time list; selected image segments can be additionally saved in standard formats such as AVI or DivX, and selected images can be saved in JPEG and BMP file formats or printed as photos; video files can be freely spliced during playback, and video streams can be edited and played during playback.

4) Camera Auto Cruise

Cameras have an auto cruise function that can patrol preset surveillance positions according to preset times and speeds. When a user operates the camera, the cruise state should be temporarily cancelled or terminated; when the user relinquishes operation or the operation keyboard is automatically logged out, the camera should return to the preset cruise state.

5) GIS Linkage Operation

The video surveillance management platform can integrate an electronic map (GIS) system for surveillance operations through expansion. Authorized users should be able to re-edit each camera point on the electronic map, and users can set their own map login interfaces. When a surveillance user logs in, the system will pop up the default map interface of the area under their jurisdiction.

2.2.2.3.7 Alarm Management Functions

1) Alarm Information Management

The central control terminal can receive device abnormality alarm information uploaded from front-end acquisition terminals (video/audio signal loss, hard disk errors, software abnormalities, etc.), probe alarm information (alarm probe alarms, video loss alarms, etc.), and can automatically call up the video images of the relevant channels at the alarm point according to preset settings. At the same time, alarm information is stored by category on the server, and text descriptions are promptly added to relevant recordings to facilitate file storage and query.

Alarm access: Through I/O alarm inputs or RS232 serial ports, the system can connect various standard alarm signals; supports connection of multiple models of alarm boxes and alarm hosts.

Remote alarm and linkage control: Detects multiple alarm signals. When an alarm occurs, it automatically activates various corresponding linkage devices, switches video to the corresponding camera, triggers automatic recording, and reports the alarm to the monitoring center over the network, with the client popping up an alarm information notification.

Alarm linkage worksheet: On the client, an alarm linkage worksheet is designated for each alarm input. The worksheet can specify which alarm outputs are linked for different time periods from Monday to Sunday and holidays.

System alarm events can be further subdivided into device fault alarms, incoming alarms, and network linkage alarms.

2) Device Fault Alarms

The management software platform communicates with front-end installed devices at a certain refresh rate and processes request commands from various devices. Within this refresh cycle, if a device does not respond to commands from the management software platform, it can be considered a device fault or network fault, and based on this extension, fault alarm display and analysis for all managed devices across the entire network can be achieved. The most common types include:

Unscheduled disconnection alarms of DVRs and encoders

Single-channel video loss or abnormality alarms

Network congestion alarms

Storage device operation abnormality alarms

3) External Physical Device Alarms

This alarm type refers to various switch-type alarms connected to the system and already configured, including other alarms identified by the software.

Various manual button-type alarms

Probe sensor-type alarms

Motion detection alarms

4) Network-linked alarms

The system software platform can accept open database form-type alarms, such as alarms from the 110 alarm dispatch center and license plate blacklist alarms. The system software platform has corresponding database query and trigger strategies, and can issue processing instructions based on the interface type.

5) Alarm event handling procedures

When an alarm event occurs, the system notifies the duty personnel in the form of a pop-up event window, supplemented by audible and visual alerts. Alarm event display is treated as the highest priority level, and according to predefined settings, various alarms can be classified into three levels: general, urgent, and critical. Critical-level alarms require priority handling, and any unprocessed alarm event will remain displayed at the topmost layer for an extended period to alert the responsible personnel.

The system software platform can send alarm events to designated duty stations for processing, either by specifying the IP address of the duty station workstation or by specifying the user account for handling. Alarm events can be sent to a single duty station or to multiple duty stations. The alarm will not disappear until the event has been processed, and the handler can add the processing result as a brief note in the remarks field for future reference.

Alarm events can also be used as keywords for querying recorded video, allowing retrieval of stored footage and reducing the time spent on manual video comparison.

6) Alarm event contingency plans

Contingency plans for police incidents are necessary. In the event of an emergency, in addition to dispatching the necessary police forces, the system software platform can also execute a series of automated actions:

Ø The main console automatically switches to map mode, displaying the alarm source location

Ø Images from points associated with the alarm source are automatically displayed in pop-up windows

Ø Recording is initiated

When an alarm or other police incident occurs, the system can automatically switch to the corresponding monitoring point, display the image of that point on the screen, provide an indication on the electronic map, issue an audible alert from the computer, and record the relevant alarm information. During camera switching and control, neighboring monitoring points can be indicated on the electronic map.

According to the alarm source, alarms are classified into motion detection and external system access. Motion detection zones and valid time periods can be configured separately; multiple alarm notification methods are provided, including SMS, alarm boxes, and real-time printing. Upon alarm, the system automatically switches video, saves video, and captures snapshots; video can be linked to alarm volume, and recorded footage associated with alarm events can be automatically retrieved using alarm events as search keywords.

2.2.3 Distance Education Subsystem

Ø Establish a data center: implement online teaching-related work such as learning, training, examinations, and certification;

Ø Utilize Internet technology: enable teaching across different locations, different times, and without spatial limitations;

Ø Multimedia technology: enhance teaching quality through tools such as recording, video, and electronic whiteboards.

2.2.4 Campus Broadcasting and Background Music Subsystem

A smart campus brings not only convenience and comfort to daily life — with the background music system, one can stroll leisurely. In the event of an emergency, urgent notices and broadcasts can also be issued.

Background music can be broadcast by zone, or users can customize it through smart terminals, with multi-machine broadcast control modes set by priority, such that shopping malls, teaching buildings, cafeterias, and dormitories can each customize their own music.

All broadcast terminals use IP stereo broadcast terminals. Existing broadcast systems can also be retrofitted.

Background music and LCD screens enhance the auditory and visual experience on campus. This brings not only convenience and comfort to study and daily life — with the background music system, one can stroll leisurely across campus, walking to the rhythm of piano music. LCD screens eliminate the need to post notices and advertisements on various bulletin boards, reducing pollution and enhancing aesthetics.

The broadcast system adopts a pure digital network audio broadcast system based on the IP data network. The system supports digital conversion of various analog audio sources, and as a digital audio broadcast system, it directly applies audio resources in digital format. According to the different broadcast zones of the prison, the system is divided into one broadcast master control center and multiple broadcast sub-control centers.

The master control center serves as the broadcast master control center, using a digital broadcast host combined with multimedia master control software to implement broadcasting throughout the entire prison. The master control center can directly broadcast to and communicate with armed police on duty at two guard posts to handle police incidents. Each sub-control center serves as a broadcast sub-control center, using multimedia auxiliary control software to implement independent broadcasting to each prison area. The routine duty of the monitoring center is perimeter surveillance. When a linked alarm occurs in a defense zone, the broadcast (intercom) equipment on the two adjacent armed police guard posts automatically establishes an intercom broadcast state with the master control center, and the video wall displays the broadcast connection status. After disarming, the system automatically resets. The overall system platform records in detail the entire process of the incident and its handling.

The broadcast system has the following main functions:

1. Fire-linked emergency broadcasting

Upon fire emergency alarm, one-to-one or one-to-many group automatic emergency broadcasting can be performed.

2. Point-to-point paging broadcasting

Sub-control workstations can use microphones through sound cards to perform single-point or group paging broadcast to broadcast terminals.

3. Paging and intercom function

Intercom terminals can communicate with each other. This enables office broadcasting to any area, and call intercom between duty rooms, and between command centers and duty rooms.

4. Single-point playback support

Broadcasting can be performed to any single point, group, zone, or all areas. The system can set any number of groups to play designated audio programs at the same time, or broadcast to any designated area.

2.2.5 Campus All-in-One Card Subsystem

The all-in-one card system uses the IC card as the information carrier, IC card read/write devices as information exchange units, and computer and communication technologies as the means, connecting various campus facilities into an integrated whole. In this all-in-one card system, students, faculty, staff, and visitors can use a single IC card representing their personal identity to realize "all-in-one card" functions on campus, including identity verification, vehicle access management, access control management, consumption management, security patrol, and attendance. It also integrates virtual currency for students, faculty, and staff, enabling electronic wallet payments, online card-swipe payments, and other functions, providing users with a safer, more convenient, and more comfortable working and living environment. It provides managers with more convenient management tools, organically integrating the various subsystems on campus into a complete intelligent all-in-one card system.

The enterprise all-in-one card system is architected on the campus network, utilizing computers, network equipment, terminals, and other devices, fully leveraging network advantages and using IC cards as the carrier to implement an advanced information management system. From the perspective of IC card data, through systematic analysis of IC card application processes, the entire network system architecture adopts a three-tier platform structure: the digital campus central data serves as the first-tier platform; the front-end service system serves as the second-tier platform; and each application system serves as the third-tier platform.

First-tier platform: The campus shared data center, unified identity authentication, and unified portal system serve as the core for data exchange and sharing;

Second-tier platform: Front-end services serve as the application access second-tier platform, carrying data transmission, load balancing, access auditing, third-party subsystem coordination, and isolating applications from direct database operations, greatly enhancing system performance.

Third-tier platform: The various application subsystems of this project and other application subsystems associated with the card.

The large-scale all-in-one card main design adopts a three-tier architecture for better processing performance, with clear division of responsibilities among systems. It is constructed from various functional modules. When a functional module in the all-in-one card management section is upgraded or modified, other modules do not need recompilation — only minimal configuration or settings are required. When application systems are upgraded or modified, the platform and corresponding management sections require no changes — only simple configuration based on registration information such as system codes, machine codes, and IP addresses. This fully achieves phased construction of multiple applications, independent operation, centralized management, and global data sharing.

The system architecture design fully considers dual-mode usability and compatibility for networked/standalone operation.

System operating modes generally fall into real-time communication and non-real-time communication. Based on years of engineering implementation experience, our company believes that a stable and secure campus all-in-one card system must be one that tightly integrates both operating modes — capable of both networked and standalone operation. When networked, the system operates in online communication mode with automatic data exchange. Should the network fail, the card payment/identification media and terminal devices can still operate normally in standalone mode.

The overall system structure diagram is as follows:

2.2.6 Campus Security Intercom Subsystem

2.2.7 Campus Vehicle Management Subsystem

The vehicle management system covers vehicle management, parking lot traffic planning, pedestrian guidance, and other aspects. All entrances and exits adopt networked management, with toll collection using Mifare cards, divided into fixed and temporary billing methods.

Parking lot exits feature main city road network traffic condition maps, entrances feature parking space availability indicator signs, and internal areas feature parking guidance signs. Full guidance can be provided for important vehicles.

Scientific management is implemented for vehicles entering and exiting campus gates and underground parking lots through all-in-one card swipe sensing. Residents can share one card with entrance/exit management, unit door management, and other management systems. Visiting vehicles can use temporary cards for entry and exit, complemented by vehicle image comparison functionality — this ensures the safety of owners' vehicles on one hand, and prevents unauthorized vehicles from entering on the other, with the capability to extend to campus consumption areas.

The system can implement the following functions:

Ø Temporary vehicle toll collection: Temporary vehicles collect a temporary card from the ticket dispenser upon entry, and must pay the prescribed fee upon exit before being allowed to leave after security confirmation;

Ø Parking lot management: Parking lot management is the core function for centralized aggregation, comprehensive processing, and intelligent response of parking lot information. Managers can comprehensively control all parking lot information indicators through the parking lot management function, implementing integrated publishing, unified scheduling, automatic backup, and alarm notification functions;

Ø Parking space guidance: Provides drivers with parking space occupancy status and internal driving route information through SMS queries, online queries, terminal displays, and other methods, guiding drivers to find parking spaces in an optimized and convenient manner;

Ø Reverse car-finding: The reverse car-finding function allows users to query the vehicle's parked location and guidance route through smart terminals or mobile phone SMS, helping users quickly locate the area where their vehicle is parked;

Ø Special vehicle management: Special vehicle management is an important upgrade function of the intelligent parking lot. Using technologies such as parking space sensing, video recognition, and intelligent card reading, it provides exclusive permissions for special vehicles. The parking lot entrance can proactively identify special vehicle identities and automatically guide them to dedicated parking spaces. When a special vehicle's parking space is illegally occupied, the system automatically raises an alarm;

Ø Image comparison: When vehicles enter and exit the parking lot, the digital recorder automatically activates the camera function and stores photo files on the computer. Upon exit, the computer automatically compares the new photo with the vehicle's last entry photo, allowing monitoring personnel to monitor vehicle safety in real time;

Ø School shuttle real-time information: Provides campus personnel with shuttle bus status, routes, and arrival times through stop sign displays, mobile terminal displays, and other methods, guiding faculty, staff, and students to use shuttle services in an optimized and convenient manner.

2.2.8 Water, Electricity, and Gas Remote Meter Reading Subsystem

The remote meter reading and metering system is an important component of campus intelligence. It replaces traditional door-to-door collection and IC card metering collection methods, making the metering of water, electricity, gas, heating, and heat meters in student dormitories, faculty dormitories, classrooms, and office buildings more accurate, convenient, and efficient, while facilitating centralized management.

2.2.9 Campus Street Lighting and Landscape Lighting Subsystem

Street lighting monitoring controls road and landscape lights through the network, with switching operations performed via the central monitoring platform, which also monitors the status of lights. This greatly saves labor costs and electricity expenses while improving management efficiency.

Industrial control computers at the monitoring center can monitor the working status of lighting systems on each road section at any time, allowing real-time awareness of whether each section has been properly illuminated, and enabling real-time observation of lighting rates, on/off status, and other real-time data, greatly improving lighting management levels. The monitoring computer can be used to set daily scheduled on/off times for lighting systems on each road section, ensuring that daily switching times perfectly match dawn and dusk. The system can also integrate with various sensors — turning off lights when no one is present and turning on lights in designated areas upon alarm. Temporary on/off commands (including fountain systems) can be issued to lighting switch cabinets as needed at any time.

2.2.10 Public Area WiFi Coverage and Authentication System

WiFi signal coverage includes both the intranet and extranet networks, covering primarily the teaching buildings, cafeteria, and public areas of the campus. The intranet WiFi is mainly used for transmitting short messages and facilitating communication among campus staff, faculty, and students, and may also serve for notifications or reminders; password authentication is required for network access. The extranet WiFi is available free of charge and is primarily intended for visitors or personnel to interact with the Internet. Free WiFi is an essential component for attracting visitors, and it also serves as an excellent promotional tool — when users connect to the free WiFi hotspot and open a browser, a WiFi welcome page automatically appears, which can be utilized for campus introduction and publicity.

2.2.11 Emergency Command and Dispatch System

The multimedia dispatch system is built upon the existing campus infrastructure transmission and communication methods, integrating TDM communication, VoIP communication, wireless trunking, fixed-line telephony, and GSM communications to enable one-key direct calling for dispatchers. It incorporates all common functions of a dispatch system, including barge-in, forced release, monitoring, group calling, conference mode, and call recording.