Beijing Raytrans Smart Education System Solution

1 Smart Education Demand Analysis

Building a regional educational resource and management platform: enhancing the sharing of courseware, test papers, and other resources between schools and regions, and improving the informatization level of regional education management;

Advancing the application level of smart classrooms and digital campuses, enabling interaction between teachers and students, lecture recording, and convenient courseware access; improving teachers' informatization application capabilities;

Combining theory with practice to establish a scientific and standardized infrastructure standard system, applied to the construction of informatization hardware environments such as education network coverage, equipment, and classrooms in regions and schools.

Through the introduction of cloud computing technology, flexible allocation of hardware resources is achieved, maximizing resource utilization and reducing hardware construction and maintenance costs.

2 Smart Education System Design

2.1 Smart Education Overall Architecture

The smart education system includes network construction, data centers, operation platforms, education systems, courseware content, learning terminals, and consulting services. Raytrans provides vertical industry solutions based on the needs of customers in different industries, offering customized solutions for customers in basic education, higher education, enterprise education, and vocational education.

2.2 Smart Education Subsystem Design

2.2.1 Campus and Education Bureau Unified Network Access Subsystem

Currently, most school informatization construction focuses on digital campuses, connecting to social networks based on the campus. This not only brings a lot of daily management work and high costs to schools but also imposes limitations on inter-school cooperation, unified management by the education bureau, and the functioning of the education private network. Therefore, the construction of a regional education optical fiber private network will bring greater advantages. By integrating excellent online educational resources, it can fully compensate for the shortage of educational resources in marginal schools.

The education optical fiber private network we recommend connects schools together via 2.5G optical fiber, providing multiple physically isolated Ethernet channels. The 2.5G transmission bandwidth is chosen because this rate can typically achieve a transmission distance of 80KM without optical amplifiers, whereas switching to 5G or higher bandwidth optical fiber can only transmit a few kilometers, and lower rates would make it difficult to transmit multiple physically isolated Gigabit Ethernet channels. Therefore, 2.5G optical fiber is the best choice for long-distance transmission.

Central equipment is placed at the education bureau or information center, providing unified interfaces for each school to connect to carriers and higher-level education management institutions. The advantages are as follows: 1. As a major customer, unified access to broadband carriers fully introduces competition, giving teachers and students multiple choices and greater benefits; 2. Avoiding disorderly competition from repeated construction by multiple campus owners; 3. Schools have a unified Internet interface, facilitating big data processing in the education industry, public opinion monitoring, and Internet behavior management; 4. Unified telephone number access for schools, presenting a unified image, and allowing internal control of extension numbers; 5. Sufficient external bandwidth to access more private network services.

The education bureau or information center uses Raytrans IDM MSAP-CP equipment as the core switching and aggregation device, and our IDM NT421 or IDM GTD442 terminal equipment can be installed in office floors, student dormitories, and teaching buildings.

On the 2.5G optical fiber, 2 line-speed Gigabit Ethernet channels, 4 line-speed Fast Ethernet channels, and 24 E1 channels can be transmitted. One Gigabit network is mainly used for carrier Internet access, for teachers and students to access the Internet, IPTV, and publishing surveillance video from important locations to the public. Another Gigabit network can be used for video conferencing, video recording, and video surveillance upload. The other 4 Fast Ethernet networks can be used for other inter-school intranet transmission, such as financial networks, examination-specific networks, education-specific networks, and management-specific networks. E1 interfaces can be used for telephone access, high-fidelity audio transmission, and digital bell broadcasting.

There are multiple methods for accessing multiple carriers. One is to use a multi-interface router and configure interface policies based on factors such as network speed and price; another is to provide only the desired carrier's access based on the needs of teachers and students, directly routing that channel to the computer.

The Internet egress for each school can be uniformly equipped with a high-end firewall, which is more cost-effective than each school purchasing one separately, which would require significant funding and dedicated maintenance personnel.

2.2.1.1 Information Center Aggregation Access

The main functions implemented are as follows:

1. Provide local telephone internal switching, enabling free short-number dialing within the campus and between schools;

2. Provide trunk access to the telephone switching networks of carriers such as China Unicom/Mobile/Telecom, enabling external call functions on campus;

3. Provide access to Ethernet services from carriers such as China Unicom/Mobile/Telecom, using an Ethernet firewall to isolate the internal and external networks and ensure information security;

4. Provide telephone trunk interfaces that can connect to the telephone networks of the education bureau or other partner institutions, enabling telephone interconnection among all units;

5. Provide a radio and television IPTV data interface, allowing access to IPTV television signals to provide television services to teaching buildings and office buildings;

6. Provide remote meter reading data processing functions, enabling centralized management of water, electricity, and gas meter reading data in office buildings;

7. Provide video surveillance and conferencing functions, enabling centralized retrieval and monitoring of remote network video signals at the central end, as well as video conferencing;

8. Dispatch servers and public address broadcasting servers can be installed, providing additional functions based on meeting the customer's basic integrated services optical fiber access needs, supporting campus multimedia dispatching and public address broadcasting;

9. The central end reserves secondary development interfaces for smart campuses, enabling centralized access to multimedia information such as electronic fences, parking lot surveillance, campus all-in-one cards, and campus advertising through optical fiber.

2.2.1.2 Teaching Building and Office Terminal Optical Fiber Access

Teaching buildings and offices are nodes where terminal access equipment is installed, directly providing users with broadband, telephone, IPTV, and remote meter reading data interfaces, using our company's IDM NTD421 terminal equipment. Depending on end-user needs, one NTD421 terminal can be installed per office, and several NTD421 devices can be installed per floor to meet the business needs of each office and floor.

The terminal provides the following functions:

1. Provide a telephone interface for direct connection to office telephones;

2. Provide a network interface for direct connection to user Internet access devices, such as computers and routers;

3. Provide a network interface for connecting IPTV set-top boxes, providing network television functions;

4. Provide a network interface for connecting network cameras, enabling video surveillance signals from floors and important offices to be uploaded to the surveillance center, as well as connecting office video conferencing cameras for video conferencing functions;

5. Provide remote meter reading interfaces (RS485/RS422, etc.) for connecting water, electricity, and gas meters in office buildings, enabling meter reading data to be uploaded to the surveillance center.

2.2.1.3 Key Features of the Optical Fiber Access Solution

1. All-optical fiber transmission access

Communication from the information center equipment room to schools and campus business communications all use optical fiber transmission technology. This solution adopts PDH+PCM technology to achieve high-speed fiber-to-the-home full coverage.

2. Campus telephone internal switching, independent operation

The information center equipment room uses our company's IDM MSAP-G3CP equipment to directly implement internal switching for campus telephones, allowing campus virtual operators to independently operate telephone services and provide free internal telephones on campus.

At the same time, E1 digital trunk interfaces or FXO analog trunk interfaces are provided through this equipment, enabling access to carrier telephone switching networks and the telephone systems of the education bureau and other partner institutions, achieving telephone interconnection.

3. Isolation of internal and external networks

The core equipment IDM MSAP-G3CP in the central equipment room uses TDM technology, and all Ethernet network channels provide physically isolated channels, achieving isolation between internal and external networks and ensuring information security.

2.2.2 Campus Security Surveillance Subsystem

2.2.2.1 Overall Functions

The entire system requires an intelligent network management platform to achieve unified management of all network devices and user permissions. Functions include automatic batch device configuration, automatic fault alarm and location management, real-time image switching display, historical image playback, front-end camera control, system alarms, and data storage backup.

2.2.2.1.1 Real-time Image Display and Switching Functions

Supports three video display modes: client, IE browser, and video wall display, supporting single-screen, multi-screen, and full-screen display modes. Each screen can select any video source for real-time image browsing;

The system has an automatic image patrol function, which can cyclically display surveillance images using self-configured trigger sequences and time intervals, with images displayed in rotation in designated windows. The images participating in patrol and their order can be arbitrarily selected;

In addition to displaying on-site video information, the system can overlay corresponding video location, time, and alarm markers on the video image. The identification characters of a specific video source can be edited, time information can be automatically overlaid, and the display position of characters on the image can be flexibly set;

Camera location information can be associated with electronic maps, supporting a dual-screen function that simultaneously displays video information and electronic map information;

The system should have an image capture function, allowing video playing in a surveillance window to be captured and saved as image files. The image file format must be standard formats such as JPEG, BMP, or GIF, convenient for browsing with image viewing tools under the Windows system;

When browsing real-time video images or playing back historical images through the video client, image zoom display can be conveniently performed, supporting full-screen display of a single image.

2.2.2.1.2 Front-end Camera Control Functions

Surveillance centers at all levels can control all PTZ cameras and cameras through professional keyboards and the soft keyboard provided by the video client. The rotation angle of the PTZ, camera aperture size, focus level, heater switch, wiper switch, zoom level, and lighting switch can be controlled;

The system supports user camera locking and unlocking functions. If a user needs exclusive control of the PTZ for a certain period, they can choose to lock the camera. Once the camera is locked, other users cannot seize PTZ control. Only the user who performed the lock operation or an administrator with unlock permission can release the lock;

When multiple surveillance centers control the same camera simultaneously, the higher-level surveillance center has priority control;

When camera control is not possible, the system should prompt the current controller's information;

Cameras have preset trajectory rotation functions to comprehensively capture on-site video information. The time for starting camera patrol, preset positions, and patrol trajectories can be set. Cameras can patrol along different preset trajectories at different time periods.

2.2.2.1.3 System Storage and Security Functions

Professional IP SAN and CVR storage system technologies are adopted, supporting the iSCSI protocol, providing Gigabit IP interfaces, with optional SATA disks of different capacities such as 1TB and 4TB, enabling centralized management of digital images in the system and dynamic allocation of storage resources;

Supports cache protection with built-in batteries during power failures, supports hot-swappable disks and online replacement of faulty disks, supports sequential disk power-on at startup, and disk power short-circuit protection;

The maximum number of host connections in the SAN environment is ≥250, with all connection licenses configured, supporting RAID levels such as RAID 0, 1, 5, and 10. The total capacity includes a 10% redundant backup space of the required capacity for long-term storage of important surveillance images.

Supports graphical management software, allowing management of multiple storage devices in one management interface, as well as automatic email alarm functions;

The system supports configuring the retention time for historical images for each video source. When the retention time is exceeded, expired historical images can be automatically deleted without administrator intervention;

The system can monitor the current storage resource status of all storage devices in real time;

The system supports setting storage plans for each video source, recording in time segments. The time segment granularity is no greater than 30 minutes, and multiple recording segments can be set per day. When a video source fails to record according to the plan, the system should promptly report an alarm and notify the administrator for corresponding fault location analysis.

The system shall support local recording functionality. When viewing real-time images and replaying historical images, authorized users can initiate local recording to temporarily store images on the client's local storage media. The client interface shall provide convenient controls for starting and stopping the local recording function. The video client shall support playback of locally recorded videos.

The system shall have data backup functionality to back up important data for redundant storage. The system supports manual backup, where users with appropriate permissions can initiate data backup through the video client to back up data from specified video sources for specific time periods. The system also supports automatic backup policies, which can periodically back up data from specified video sources for specific time periods. When backing up data, descriptive information can be added to the backup data. Users can perform fuzzy searches on backup data based on the descriptive information and initiate on-demand playback.

The storage application management unit obtains information about all video sources in the system through the network and stores it in high-capacity storage devices. The system supports a distributed cluster storage architecture composed of n computers. The communication foundation among these computers is our high-performance communication platform technology. Under normal operation, each storage computer is responsible for storing certain recording information from the entire system. First, we need to define storage groups, with each storage group consisting of n channels of images. We bind a storage group to a storage server. In this way, images from the entire system are stored through different storage servers. The model we adopt is a comprehensive approach combining front-end distributed recording and back-end centralized recording. The specific functions are as follows:

1. Support direct recording and backup management of large numbers of remote image channels that are not being viewed in real-time by the central client, while also supporting the management of various centralized storage devices, not just local hard drives.

2. Support rapid retrieval of data stored in centralized storage devices and provide services.

3. Support retrieval of specific surveillance recordings and associated data through the Web interface, both locally and on clients, by camera, by time, by associated events, by logs, by alarms, and by other criteria.

4. Allow viewing of the detailed storage location of the recording, display relevant status information, and enable timely playback of the recording.

5. Allow browsing of corresponding surveillance files on hard drives and SAN storage devices.

6. Support recording schedules and supplementary recording. Each recording group can have its own recording schedule, and the underlying execution of recordings is handled by our schedule and task scheduling engine. During each recording process, the system records the execution time of the recording. The system maintenance server calculates the time periods requiring supplementary recording based on the difference between the predetermined schedule and actual execution. The supplementary recording system will automatically download the missing recording information from the appropriate DVR. When the recording schedule changes, the earlier schedule is recorded, and the system can automatically determine whether the supplementary recording should reference the schedule before or after the change.

7. Disk cleanup policy and recording retention priority. When the system detects that storage capacity exceeds the maximum warning threshold specified by the system, it will initiate the disk cleanup task. This work is managed by the maintenance server, which periodically checks disk conditions and performs functions such as disk cleanup and automatic export.

2.2.2.1.4 Video File Retrieval and Historical Image Playback Function

The system can assist video decoders in establishing connections with storage resources, and can assist monitoring clients in establishing connections with storage resources to enable video data playback.

The system supports retrieval of historical image information using a combination of video source identifiers and start/end times, with retrieval results displayed in list form. For local historical image retrieval, the time from initiating the retrieval to obtaining results shall be less than 1 second, with no noticeable waiting time.

The system supports simultaneous playback of multiple channels of historical images. During historical image playback, pause and resume functions are supported, as well as normal speed, fast speed, and slow speed playback. Fast playback supports 1x, 2x, 4x, and 8x speeds. Slow playback supports 1/2x, 1/4x, and 1/8x speeds.

2.2.2.1.5 Network Operation and Maintenance Function

Provide full-process monitoring of front-end cameras, encoder status, transmission lines, storage devices, back-end decoding, and management platform operation, with the ability to diagnose video image quality.

The management platform can automatically detect the working status of devices in the system (encoders, decoders, video clients, storage devices), and quickly report alarms when devices go offline. When a faulty device recovers and comes back online, the device can automatically rejoin the system and operate normally without changes to existing configurations, and the recovery process requires no manual intervention.

Administrators can configure parameters of encoders and decoders in the system through a centralized management interface, and can perform software upgrades.

The system has comprehensive security auditing and logging functions, capable of recording device operation status, various alarm information, user login logs, etc.

The management server can provide unified management of IPSAN storage resources, formulate storage plans for cameras, and assist video management clients in establishing iSCSI connections with IPSAN.

Video data retrieval and playback: After confirming the retrieval data from the video management client, the retrieval results (whether corresponding data exists within the specified time period) are returned to the video management client. The client can select data from a specific time period for playback.

The video management platform shall support hierarchical, grouped, and device-based management of user permissions, effectively controlling and blocking connections from illegal users to ensure data security.

2.2.2.1.6 Permission Management Function

The platform shall provide a multi-level user management architecture, where each level of users has different management permissions, and can perform corresponding system access and monitoring operations according to the granted permissions, to prevent illegal login and unauthorized operations.

User levels shall be divided into at least three levels: super administrator (with system-level configuration permissions, capable of user management and device management), general administrator, and regular user. User management and operation permissions shall be divided into at least the following categories: user management permissions, device management permissions, real-time viewing permissions, patrol configuration permissions, PTZ control permissions, historical image retrieval and playback permissions, image backup and download permissions, etc.

When users log into the system, user authentication and permission verification must be performed. User login account information transmitted over the network shall not be transmitted in plaintext.

Multiple users can simultaneously view real-time images from any monitoring point, and users of higher levels have priority control rights (such as PTZ control, etc.).

2.2.2.1.7 System Alarm Function

1) Alarm Methods

System alarm methods are divided into three types: motion detection alarms, external input alarms, and video source loss alarms:

1. Motion detection alarm: When changes occur in the monitored scene, the system generates alarm information and automatically executes alarm linkage functions such as screen switching and video storage. Each video channel is divided into more than 8 motion detection zones, and the sensitivity and effective time of each zone can be set individually.

2. External input alarm: The multimedia access units at the monitoring site have alarm input functions. Through alarm probes installed at the site, information such as smoke alarms, water leakage, gas alarms, glass breakage, and door opening can be collected from the monitoring site. The effective time of alarms can be set, and remote alarm reset functionality is available.

3. Video source loss alarm: When the video cable is disconnected or no video signal is obtained, the system generates a no-video-source alarm.

2) Alarm Linkage Function

Alarm and video linkage: When an alarm occurs, the system automatically switches to display the alarm video information, automatically stores the alarm video, automatically captures still images of the alarm scene, and displays the alarm list prominently on the client.

Alarm and control linkage: When an alarm occurs, the system automatically turns on on-site lighting, automatically activates on-site sirens, and starts other on-site equipment.

Alarm linkage output function: When an alarm occurs, the monitoring center has multiple alarm output methods including audible/visual alarms, alarm printing, alarm SMS, voice alarms, and electronic map alarms. Additionally, alarm information can also be output to other alarm processing systems (such as alarm dispatch systems, etc.).

3) Alarm Query Function

Historical alarm information can be queried by camera name, date and time, alarm type, and other conditions. With video and alarm association configured, when querying alarms, the system automatically searches for corresponding video files stored during the alarm time period.

2.2.2.2 Platform Control Function

2.2.2.2.1 Remote Real-time Image Viewing

Video images can be viewed directly through IE, and the layout of cameras and detectors across the entire jurisdiction can be intuitively viewed through the district maps in the electronic map. Monitoring images of an area can be viewed by clicking on the camera icon responsible for that area on the electronic map. The system supports vector maps, allowing convenient map zooming, and can be seamlessly integrated with GIS, facilitating future positioning and monitoring of vehicles or other GPS terminal devices within the jurisdiction. Future upgrades can also incorporate wireless video access from vehicle 3G networks and vehicle positioning through the map.

2.2.2.2.2 Remote Camera Control

PTZ control of cameras (up/down/left/right, auto), camera control (aperture, zoom, focus), auxiliary switch control (PTZ, wiper), image effect adjustment (brightness, contrast, chroma, saturation, volume), and speed dome control (preset position setting and calling, auto cruise).

2.2.2.2.3 Real-time Detection and Scheduled Inspection

The system can monitor the operating status of devices in real-time. When device abnormalities occur, alarms can be issued, and the alarm location and content can be displayed on the electronic map with audible and visual prompts. Administrators can view the operating status of all devices, the current activities of all logged-in users on the network, alarm and handling status, and operation logs at any time, and can generate statistical charts.

The system has the function of scheduled inspection and clock synchronization for devices. The inspection content includes storage status, network connection status, system operation status, number of connected clients, and operating status parameters provided by device manufacturers. The obtained data is stored in logs and can be displayed as curves, charts, and other formats to show current or historical status.

2.2.2.2.4 Remote/Local Image Retrieval and Playback

Recording materials such as normal recordings, motion detection recordings, alarm recordings, and captured images can be retrieved, downloaded, and played back based on retrieval conditions including time, channel, local, and remote. They can also be saved to the storage server at the monitoring center. During playback, operations such as play, pause, stop, fast forward, fast rewind, image capture, and recording file editing can be performed. Multiple channels can also be played back simultaneously for convenient viewing of recording materials.

2.2.2.2.5 Multi-screen Preview Groups

Preview group patrol switching. Preview groups can be customized, with 1, 3, 9, 16, 24, and 32 multi-screen preview groups configurable. Automatic channel opening and patrol can be initiated upon system startup.

2.2.2.2.6 Remote Device Upgrade and Maintenance

For the maintenance of various remote alarm and audio/video terminal devices on the network, administrators do not need to physically visit the device sites. Device operating status can be monitored and device parameters can be modified remotely, which improves equipment maintenance efficiency, saves manpower and time, facilitates overall system management, and provides strong assurance of the entire monitoring system's reliability.

2.2.2.2.7 Remote Alarm Arming/Disarming

The working status of all front-end alarm hosts can be viewed in real-time through the network, and alarm host arming, disarming, zone bypass, and alarm system reset can be controlled.

2.2.2.2.8 Alarm Linkage

Emergency alarm information from any location can be monitored through the network, such as robbery alarms, burglary alarms, and incident disputes. When an alarm occurs at a location, the alarm information is automatically uploaded to the monitoring center, and the on-site images linked to the alarm signal are simultaneously transmitted to the monitoring center for pop-up display and automatic recording backup at the monitoring center. The location of the site on the electronic map will flash. Simultaneously, the monitoring center generates audible or visual alarms.

2.2.2.2.9 Voice Intercom and Monitoring

The monitoring center can conduct two-way voice intercom with incident sites equipped with intercom devices. Through the monitoring system center software, calls can be made to the areas where front-end cameras are located for voice intercom, enabling mutual communication and guidance for daily work content.

2.2.2.2.10 Automatic Time Synchronization Function

The monitoring center provides an automatic time synchronization service. When a site's DVR connects to the main control server, it will update its local time to match the main control server's time. This ensures the accuracy of time parameters in surveillance recording materials and improves the credibility of the materials.

2.2.2.2.11 Various Permission Controls

Users at all levels may only view authorized video and audio signals and perform corresponding remote PTZ control operations with authorization from the monitoring center server; control terminal devices are registered in the management server via MAC address encryption, which restricts the functions of the control terminals.

2.2.2.2.12 Leadership Inquiry Function

Leaders at all levels can use desktop PC office systems to query statistical data (operator attendance, summary of violations, summary of alarm information, etc.) and video recordings (non-real-time recordings, recordings of violations, alarm recordings, etc.) through IE browsers, and can also directly connect to real-time images for on-site supervision.

2.2.2.3 Platform Management Functions

2.2.2.3.1 Device Management

As the scale of digital surveillance systems expands, the number of devices connected to the system will increasingly burden management tasks, and system operation may also be affected by business adjustments, while various system operating parameters will continue to be optimized. Therefore, the management platform should have full-network device management capabilities. Depending on the level of openness of the connected hardware devices, it should provide at least the configuration capabilities required for routine user maintenance, and as far as possible achieve device maintenance and management capabilities for all matters other than hard failures.

These management capabilities will be specifically reflected in the following aspects:

Ø Monitoring of device operating status

Ø Multi-level cascaded networking management of analog matrices

Ø Online modification of operating parameters for DVRs or video encoders

Ø Modification of operating parameters for centralized storage devices

Ø Auxiliary fault diagnosis and reporting

Ø Remote software upgrade

Modifiable operating parameters for DVRs or video encoders include: video format (CIF/D1), transmission bitrate adjustment, character overlay modification, camera index name modification, recording strategy, external alarm source configuration, PTZ or speed dome camera communication protocol settings, etc.

Complex distributed network video systems require interconnection of multiple subsystems. Initial installation and commissioning may require configuration of thousands or even tens of thousands of parameters, and during actual operation, new devices frequently need to be added or parameters adjusted. These tasks can no longer be accomplished through simple command-line statements. Relying on developers to perform system configuration and maintenance would lead to a dramatic increase in system implementation costs and make it impossible to complete the handover to the owner.

The Raytrans video surveillance management platform supports the connection of various devices equipped with communication interfaces and communication protocols. All image resources are subject to unified numbering, unified configuration, unified scheduling, and unified management. Administrators can remotely read and configure any device in the system in batch, and can adjust various parameters of devices individually or in groups; the system configuration process runs in the background and does not affect users' current surveillance operations.

2.2.2.3.2 User Management

Includes login and logout; adding, deleting, and modifying users, etc. User information includes login username, password, permissions, user description, and other information. Permissions are divided into three types: system administrator, operator, and ordinary user. The system administrator has the highest authority and can use all management functions; operators cannot execute functions such as modifying logs, adding users, or attendance and performance statistics; ordinary users can only play authorized recorded files. Operators or system administrators log into the system to obtain corresponding permissions. (Detailed time records implement the check-in function)

2.2.2.3.3 Log Management

The system automatically records operator log information (operator login, logout, routine operations, alarm information, device fault information, operation type, operation time, operator, whether the operation was successful, etc.), and can automatically upload it to the monitoring center management server database as a basis for staff performance assessment and determination of whether violations occurred, for future leadership inspection. In addition, operator operations on surveillance subsystems can also be optionally recorded in logs, such as viewing images or controlling remote surveillance hosts. Users can view logs by category.

2.2.2.3.4 Video Recording Management

The video recordings stored on the monitoring center storage devices consist of video clips of the corresponding time periods at the scene captured when violations are detected or alarms occur, along with the corresponding generated records. Management of this data information should include: record information generation, such as file name, generation time, operator identifier, time period, event type, recording storage path, etc. Records are automatically generated by background programs; video recording maintenance, such as periodic backup archiving and cleanup; reception of remote video recordings, where during non-business hours, based on custom extraction policies such as time periods, video information from remote surveillance is extracted; support for multi-user retrieval of video recordings, where authorized operators or leaders can view corresponding video clips afterwards, for example by opening a web browser, entering username and password information, obtaining a statistics page, and based on the statistics, calling up relevant recordings, clicking to view video information, obtaining a list of authorized video events, and clicking on one video event to automatically launch the media player for playback.

2.2.2.3.5 Maintenance Management

Register and catalog all digital surveillance hosts within the jurisdiction to form complete device records. Registration contents include: device name, manufacturer, name of the branch location where applied, service contact phone number, etc. Operations such as modification, deletion, addition, browsing, and querying can also be performed. When a device fails, the operator registers it and marks the device as unavailable; after the fault is resolved, the operator removes the fault marker. Operations such as modification, deletion, addition, browsing, and querying can be performed.

2.2.2.3.6 Operation Management

1) Multiple Image Operation Control Mechanisms

Network clients can monitor multiple real-time image channels simultaneously and display them on one screen at the same time; multiple network clients can simultaneously monitor any front-end image. Images from any front-end monitoring point can be displayed in real time on the video wall, with sequential switching for patrol display. With network conditions support, multiple users at different locations can simultaneously view real-time video from any branch location in the system online. Personal monitoring terminals can display multi-screen views with 4 to 16 divisions, where each screen can switch to any image in the system, and monitoring modes such as multi-screen combinations, patrol switching sequences, and camera preset positions can be saved as files for repeated use.

Camera grouping: Supports grouping and switching selection by surveillance area, management authority, and actual usage conditions (such as patrol routes), with simple configuration.

Patrol: The system has automatic video patrol functionality, performing image inspection of surveillance points across the entire network at configurable intervals. Objects participating in patrol can be arbitrarily set, and patrol interval times are configurable. Surveillance images can be displayed in rotation using preset trigger sequences and time intervals; specific devices can be designated to perform specific actions within a certain time period.

Camera information configuration: Can configure information for all cameras in the system, including location, IP, alias, area, site, etc.

Character overlay and image masking: Chinese names, current date, time, site, camera number, and other character information can be overlaid at any position on the image; images and black frame boxes can be overlaid at any position on the image to mask image areas requiring concealment. Each camera can have more than 8 different location names preset, and when the camera rotates to the corresponding angle, the system automatically displays the corresponding location name. The system can use subtitles from different devices as needed, with parameters such as subtitle content and display position kept consistent.

PTZ and speed dome control: Supports direction control, auto scan, preset position management, aperture and focal length management, and lens zoom; PTZ speed is adjustable; supports light, wiper, and power switch control; supports custom auxiliary switch control; supports camera lock and unlock; facilitates parameter configuration for PTZ/speed dome controllers. Features a full-function PTZ lens control interface and custom communication protocol definition, compatible with multiple decoders; can set and control full-range stepless speed variation, preset position control, and cruise control for high-speed domes.

Keyboard and monitor operation management: Supports matrix keyboards from multiple manufacturers, full-network roaming for keyboards, and multiple monitors forming a large screen. Operators can complete the vast majority of real-time surveillance operations through the keyboard. Supports monitor permission settings and locking. Supports complex corresponding relationships between monitors and keyboards with on-screen display. Monitors can automatically switch according to preset camera browsing sequences; total session time can be set for each keyboard user; physical parameters such as keyboard model and serial port can be configured. Users can input camera numbers or switch by multi-level camera lists, or click camera icons on the electronic map to switch; operations can be performed by clicking a soft keyboard with the mouse, or by connecting a hard keyboard and using the joystick; in addition to PTZ directional operations, the keyboard joystick can also perform lens zoom operations.

2) Automatic Operation Timeout Protection

Monitoring center users can operate using either analog matrix keyboards or computer monitoring terminals; the system provides an automatic logout time for each operation keyboard. If no operation is performed on the keyboard after the automatic logout time elapses, the keyboard will automatically relinquish control of the device; the automatic logout time is adjustable from 1 to 255 seconds. If an operator with high-level permissions leaves without locking the control keyboard, the system will automatically lock the keyboard after a certain period to prevent unauthorized personnel from performing illegal operations; the automatic lock time is adjustable from 1 to 99 minutes.

3) Recording Operation Management

The system can record all images in 4CIF format for 24 hours a day, with a retention period of 15 days; scheduled recording, alarm-triggered recording, and motion detection recording can also be configured as needed, with time periods definable separately; each camera can have multiple recording time periods set per day. Important recordings should have upload and backup functions; users can query by entering camera number and time, or by clicking on a monitoring point on the electronic map and then querying through the time list; selected image segments can be additionally saved in standard formats such as AVI or DivX, and selected images can be saved in JPEG and BMP file formats or printed as photos; video files can be freely spliced during playback, and video streams can be edited and played during playback.

4) Camera Automatic Cruise

Cameras have an automatic cruise function, allowing them to patrol preset surveillance positions according to preset times and speeds. When a user operates the camera, the cruise state should be temporarily cancelled or terminated; when the user abandons operation or the operation keyboard is automatically logged out, the camera should return to the preset cruise state.

5) GIS Linkage Operation

The video surveillance management platform can integrate an electronic map (GIS) system for surveillance operations through expansion. Authorized users should be able to re-edit each camera point on the electronic map, and users can set their own map login interfaces. When a surveillance user logs in, the system will pop up the default map interface of the area under their jurisdiction.

2.2.2.3.7 Alarm Management Functions

1) Alarm Information Management

The central control terminal can receive device abnormality alarm information uploaded from front-end acquisition terminals (video/audio signal loss, hard disk errors, software abnormalities, etc.), probe alarm information (alarm probe alarms, video loss alarms, etc.), and can automatically call up the video images of the relevant channels at the alarm point according to preset settings. Alarm information is simultaneously stored by category on the server, and text descriptions are promptly added to relevant recordings to facilitate file storage and querying.

Alarm access: Through I/O alarm inputs or RS232 serial ports, the system can connect various standard alarm signals; supports connection of multiple models of alarm boxes and alarm hosts.

Remote alarm and linkage control: Detects multiple alarm signals. When an alarm occurs, it automatically activates various corresponding linkage devices, switches video to the corresponding camera, triggers automatic recording, and reports the alarm to the monitoring center over the network, with an alarm notification pop-up on the client.

Alarm linkage worksheet: On the client, an alarm linkage worksheet is designated for each alarm input. The worksheet can specify which alarm outputs are linked for different time periods from Monday to Sunday and on holidays.

System alarm events can be further subdivided into device fault alarms, incoming alarms, and network linkage alarms.

2) Device Fault Alarms

The management software platform communicates with front-end installed devices at a certain refresh rate and processes request commands from various devices. Within this refresh cycle, if a device does not respond to commands from the management software platform, it can be considered a device fault or network fault, and based on this, fault alarm display and analysis for all managed devices across the entire network can be implemented. The most common types include:

Unplanned disconnection alarms for DVRs and encoders

Single-channel video loss or abnormality alarms

Network congestion alarms

Storage device operation abnormality alarms

3) External Physical Device Alarms

This alarm type refers to various switch-type alarms connected to the system and already configured, including other alarms identified by the software.

Various manual button-type alarms

Probe sensor-type alarms

Motion detection alarms

4) Network-linked alarms

The system software platform can accept open database form-type alarms, such as alarms from the 110 alarm dispatch center and license plate blacklist alarms. The system software platform has corresponding database query and trigger policies, and can issue processing instructions based on the interface type.

5) Alarm event handling procedures

When an alarm event occurs, the system notifies the duty personnel in the form of a pop-up event window, supplemented by audible and visual alerts. Alarm event display is treated as the highest priority level, and according to predefined settings, various alarms can be classified into three levels: general, urgent, and critical. Critical-level alarms require priority handling, and any unprocessed alarm event will remain displayed at the topmost layer for an extended period to alert the operator.

The system software platform can route alarm events to designated duty stations for processing, either by specifying the IP address of the duty station workstation or by specifying the user account for handling. Alarm events can be sent to a single duty station or to multiple duty stations. The alarm will not disappear until the event has been processed, and the handler can add the processing result as a brief note in the remarks field for future reference.

Alarm events can also be used as keywords for querying recorded video, enabling retrieval of stored footage and reducing the time spent on manual video comparison.

6) Alarm event contingency plans

Contingency plans for police incidents are essential. In the event of an emergency, in addition to dispatching the necessary police forces, the system software platform can also execute a series of automated actions:

Ø The main console automatically switches to map mode, displaying the alarm source location

Ø Images from points associated with the alarm source are automatically displayed in pop-up windows

Ø Recording is initiated

When an alarm or other police incident occurs, the system can automatically switch to the corresponding surveillance point, display the image of that point on screen, provide an indication on the electronic map, issue an audible alert from the computer, and record the relevant alarm information. During camera switching and control, adjacent surveillance points can be indicated on the electronic map.

Alarm sources are categorized into motion detection and external system access. Motion detection zones and valid time periods can be configured separately. Multiple alarm notification methods are provided, including SMS, alarm boxes, and real-time printing. Upon alarm, the system automatically switches video, saves video, and captures snapshots. Video can be linked to alarm volume, and recorded footage associated with alarm events can be automatically retrieved using alarm events as search keywords.

2.2.3 Distance Education Subsystem

Ø Establish a data center: enable online teaching-related functions such as learning, training, examinations, and certification;

Ø Utilize Internet technology: enable teaching across different locations, different times, and without spatial limitations;

Ø Multimedia technology: enhance teaching quality through tools such as recording/broadcasting, video, and electronic whiteboards.

2.2.4 Campus Broadcasting and Background Music Subsystem

A smart campus brings not only convenience and comfort to daily life — with the background music system, one can stroll leisurely. In the event of an emergency, urgent notices and broadcasts can also be issued.

Background music can be broadcast by zone, or customized by users through smart terminals. A multi-machine broadcast control mode with priority levels can be configured, allowing shopping areas, teaching buildings, cafeterias, and dormitory buildings to each customize their own music.

All broadcast terminals use IP stereo broadcast terminals. Existing broadcast systems can also be retrofitted.

Background music and LCD screens enhance the auditory and visual experience on campus. This brings not only convenience and comfort to study and daily life — with the background music system, one can stroll leisurely across campus, walking to the rhythm of piano music. LCD screens eliminate the need to post notices and advertisements on various bulletin boards, reducing pollution and enhancing aesthetics.

The broadcast system adopts a pure digital network audio broadcast system based on the IP data network. The system supports digital conversion of various analog audio sources, and as a digital audio broadcast system, it directly utilizes audio resources in digital format. Based on the different broadcast zones of the prison, the system is divided into one broadcast master control center and multiple broadcast sub-control centers.

The master control center serves as the broadcast master control center, using a digital broadcast host combined with multimedia master control software to achieve broadcast throughout the entire prison. The master control center can directly broadcast to and communicate with the armed police on duty at the two guard posts to handle police incidents. Each sub-control center serves as a broadcast sub-control center, using multimedia auxiliary control software to achieve independent broadcast to each prison area. The routine duty of the monitoring center is perimeter surveillance. When a defense zone triggers a linked alarm, the broadcast (intercom) equipment at the two adjacent armed police guard posts automatically establishes an intercom broadcast state with the master control center, and the video wall displays the broadcast connection status. After disarming, the system automatically resets. The overall system platform records in detail the entire process of the incident and its handling.

The broadcast system provides the following main functions:

1. Fire-linked emergency broadcast

Upon fire emergency alarm, emergency broadcasts can be automatically triggered in one-to-one or one-to-many group configurations.

2. Point-to-point paging broadcast

Sub-control workstations can use a microphone through the sound card to conduct single-point or group paging broadcasts to broadcast terminals.

3. Paging and intercom function

Intercom terminals can communicate with each other. This enables office broadcast announcements to any area, as well as call intercom between duty rooms, and between the command center and duty rooms.

4. Single-point playback support

Broadcast can be made to any single point, group, zone, or the entire area. The system can set any number of groups to play designated audio programs simultaneously, or conduct broadcast announcements to any designated area.

2.2.5 Campus All-in-One Card Subsystem

The all-in-one card system uses the IC card as the information carrier, IC card read/write devices as the information exchange apparatus, and computer and communication technologies as the means, connecting all campus facilities into an integrated whole. In this all-in-one card system, students, faculty, staff, and visitors can use a single IC card representing their personal identity to access campus identity verification, vehicle access management, access control management, consumption management, security patrol, and attendance functions — all through the "one-card" capability. The system also integrates virtual currency for students, faculty, and staff, enabling electronic wallet payments, online card-swipe payments, and other functions, providing users with a safer, more convenient, and more comfortable working and living environment. It provides managers with more convenient management tools, organically integrating the various campus subsystems into a complete intelligent all-in-one card system.

The enterprise all-in-one card system is architected on the campus network, utilizing computers, network equipment, terminals, and other devices to fully leverage network advantages, with the IC card as the carrier, to achieve an advanced information management system. From the perspective of IC card data, through systematic analysis of IC card application processes, the entire network system architecture adopts a three-tier platform structure: the digital campus central data serves as the first-tier platform; the front-end service system serves as the second-tier platform; and the various application systems serve as the third-tier platform.

First-tier platform: The campus shared data center, unified identity authentication, and unified portal system serve as the core for data exchange and sharing;

Second-tier platform: The front-end service serves as the application access second-tier platform, carrying data transmission, load balancing, access auditing, third-party subsystem coordination, and isolating applications from direct database operations, greatly enhancing system performance.

Third-tier platform: The various application subsystems of this project and other card-related application subsystems.

The main design of the large-scale all-in-one card system adopts a three-tier architecture for better processing performance and clear division of responsibilities among systems. It is constructed from various functional modules. When a functional module in the all-in-one card management section is upgraded or modified, other modules do not require recompilation — only minimal configuration or settings are needed. When application systems are upgraded or modified, the platform and corresponding management sections require no changes — only simple configuration based on registration information such as system codes, machine codes, and IP addresses. This fully achieves phased construction of multiple applications, independent operation, centralized management, and global data sharing.

The system architecture design fully considers dual-mode compatibility for networked/standalone operation.

System operating modes generally fall into real-time communication and non-real-time communication. Based on years of engineering implementation experience, our company believes that a stable and secure campus all-in-one card system must be one that tightly integrates both operating modes — capable of both networked and standalone operation. When networked, the system operates in online communication mode with automatic data exchange. Should the network fail, the card payment/identification media and terminal devices can still operate normally in standalone mode.

The overall system structure diagram is as follows:

2.2.6 Campus Security Intercom Subsystem

2.2.7 Campus Vehicle Management Subsystem

The vehicle management system covers vehicle management, parking lot traffic planning, pedestrian guidance, and other aspects. All entrances and exits adopt networked management, with toll collection using Mifare cards, divided into fixed and temporary billing methods.

Parking lot exits feature main city road network traffic condition maps, entrances feature parking space availability indicator signs, and the interior features parking guidance signs. Full guidance can be provided for important vehicles.

Scientific management is implemented for vehicles entering and exiting campus gates and underground parking lots through all-in-one card swipe sensing. Residents can share one card with entrance/exit management, unit door management, and other management systems. Visiting vehicles can use temporary cards for entry and exit, complemented by vehicle image comparison functionality — this ensures the safety of owners' vehicles on one hand, and prevents unauthorized vehicles from entering on the other, with the capability to extend to campus consumption areas.

The system can implement the following functions:

Ø Temporary vehicle toll collection: Temporary vehicles receive a temporary card from the ticket dispenser upon entry, and must pay the prescribed fee upon exit before being allowed to leave after security confirmation;

Ø Parking lot management: Parking lot management is the core function for centralized aggregation, comprehensive processing, and intelligent response of parking lot information. Managers can fully control all parking lot information indicators through this function, enabling integrated publishing, unified dispatch, automatic backup, and alarm notification;

Ø Parking space guidance: Provides drivers with parking space occupancy status and internal route information through SMS queries, online queries, terminal displays, and other methods, guiding drivers to parking spaces in an optimized and convenient manner;

Ø Reverse car-finding: The reverse car-finding function allows users to query the vehicle's parked location and guidance route via smart terminals or SMS, helping users quickly locate the area where their vehicle is parked;

Ø Special vehicle management: Special vehicle management is an important upgrade function of the intelligent parking lot. Using technologies such as parking space sensing, video recognition, and intelligent card reading, it provides exclusive permissions for special vehicles. The parking lot entrance can proactively identify special vehicle identities and automatically guide them to dedicated parking spaces. When a special vehicle's parking space is illegally occupied, the system automatically raises an alarm;

Ø Image comparison: When vehicles enter and exit the parking lot, the digital recorder automatically activates the camera function and stores photo files on the computer. Upon exit, the computer automatically compares the new photo with the vehicle's last entry photo, allowing monitoring personnel to monitor vehicle safety in real time;

Ø School shuttle real-time information: Provides campus personnel with shuttle bus status, routes, and arrival times through stop sign displays, mobile terminal displays, and other methods, guiding faculty, staff, and students to use shuttle services in an optimized and convenient manner.

2.2.8 Water, Electricity, and Gas Remote Meter Reading Subsystem

The remote meter reading and metering system is an important component of campus intelligence. It replaces traditional door-to-door collection and IC card metering collection methods, making the metering of water, electricity, gas, heating, and heat meters in student dormitories, faculty dormitories, classrooms, and office buildings more accurate, convenient, and efficient, while facilitating centralized management.

2.2.9 Campus Street Lighting and Landscape Lighting Subsystem

Street lighting monitoring controls the switching of road and landscape lights through the network, and the status of lights can be monitored through the central monitoring platform. This greatly saves labor costs and electricity expenses while improving management efficiency.

Industrial control computers at the monitoring center can monitor the working status of lighting systems on each road section at any time, providing real-time awareness of whether lights are functioning normally on each section, and allowing real-time observation of lighting rates, on/off status, and other real-time data — greatly improving lighting management levels. The monitoring computer can be used to set daily scheduled on/off times for lighting systems on each road section, ensuring that daily switching times precisely match dawn and dusk. The system can also integrate with various sensors — turning off lights when no one is present, and turning on lights in designated areas upon alarm. Temporary on/off commands (including the fountain system) can be issued to lighting switch cabinets as needed at any time.

2.2.10 Public Area WiFi Coverage and Authentication System

WiFi signal coverage includes both the intranet and extranet networks, covering primarily the teaching buildings, cafeteria, and public areas of the campus. The intranet WiFi is mainly used for transmitting short messages and communication among campus staff, faculty, and students, and may also serve for notifications or reminders, requiring a password for network access. The extranet WiFi is available for free use and is primarily intended for visitors or personnel to interact with the Internet. Free WiFi is an essential part of attracting visitors, and it also serves as an excellent promotional tool — when users connect to the free WiFi hotspot and open a browser, a WiFi welcome page automatically pops up, which can be used for school introduction and publicity.

2.2.11 Emergency Command and Dispatch System

The multimedia dispatch system is based on the existing campus infrastructure transmission and communication methods, integrating TDM communication, VOIP communication, wireless trunking, fixed telephone, and GSM communications to achieve one-key direct calling for dispatchers. It is equipped with all common functions of a dispatch system, including barge-in, forced release, monitoring, group calling, conference mode, call recording, and other features.