Amendment 2 Attachment 8 - ESS_Video_Surveillance_VSS (ProjNet ID 8304557).pdf

FOR OFFICIAL USE ONLY

(December 2018)

DHA PERFORMANCE STANDARDS

FOR

SECTION 28 23 00

VIDEO SURVEILLANCE

12/18

TABLE OF CONTENTS

GENERAL

1.1 REFERENCES

2.1 DESCRIPTION & MATERIALS

3.1 SUBMITTALS

3.2 PERFORMANCE VERIFICATION AND ACCEPTANCE TESTING

3.2.1 Qualifications of Installers and Inspectors

3.2.2 Inspections and Tests to be Performed

3.3 WARRANTY

3.4 OPERATIONS AND MAINTENANCE (O & M)

GENERAL

This Performance Specification (PS) specifies the installation and quality of video surveillance systems (VSS) and its integration with other systems in a facility.

a. The VSS shall be fully compliant with Department of Defense (DOD), Department of Army, Military Standards, Unified Facilities Criteria (UFC), and Unified Facilities Guide Specifications (UFGS). Codes, industry standards, National Institute of Science Technology and Federal Information Processing Standards are applicable for security systems and are included in the reference section of this specification.

b. Designer and installation contractor shall ensure that design and installation of the VSS, its hardware and software, as well as integration modules and equipment selected, and configured, shall meet DOD criteria and requirements.

VSS is a sub-set of the facility security system, and shall have the required features, software, hardware, firmware, software development kits which shall allow seamless integration with access control system (ACS), intrusion detection system (IDS), infant alarm protection system (IPASS), duress alarm system, and behavioral health staff assist alarm system.

c. This specification shall be used in conjunction with UFGS 28 10 05 Electronic Security Systems, UFGS 28 01 10 Electronic Security System Acceptance Testing, UFC 4-021-02, and other UFGS listed in the reference section below along with other criteria documents to design, integrate, provide, calibrate, test and commission the VSS.

1.1 REFERENCES

Contractor shall comply with the following criteria for providing the video surveillance system:

1.1.1 United Facilities Criteria (UFC)

A. UFC 1-200-01 General Building Requirements B. UFC 3-501-01 Electrical Engineering C. UFC 4-021-02 Electronic Security Systems D. UFC 4-010-06 Cybersecurity E. UFC 4-510-01 Military Medical Facilities

1.1.2 Military Standard

A. Reserved for future

1.1.3 Military Health Services Standards

A. Defense Health Agency Standards

1. Building Control Systems Categorization Memorandum

2. Cyber Security Controls for Physically Isolated Systems

3. Cyber Security Controls for Medical Community of Interest (MEDCOI)

B. Department of Defense Standards

1. Department of Defense Instruction (DoDI) Number 8500.01

2. Department of Defense Instruction (DoDI) Number 8510.01

1.1.4 Other Standards

A. American National Standards Institute (ANSI)

1. ASC/X9 X9.52 (1998) Triple Data Encryption Algorithm Modes of Operation

B. Electronic Components Industry Association (ECIA)

1. ECIA EIA/ECA 310-E (2005) Cabinets, Racks, Panels, and Associated Equipment

C. FCC Part 15 - Subpart B Class B D. Society of Motion Picture & Television Engineers

1. SMPTE 296M (HDTV 720p)

2. SMPTE 274M (HDTV 1080p)

E. International Organization for Standardization

1. ISO/IEC 14496-10 Advanced Video Coding (H.264)

2. ANSI ISO/IEC 7816 (R 2009) Identification Cards - Integrated Circuit Cards F. Institute of Electrical and Electronics Engineers

1. IEEE 802.3 (2015; CORR 2017; AMD 1 2017) Ethernet

2. IEEE 802.3af/802.3at (Power over Ethernet)

3. IEEE 802.1X (Authentication)

4. C62.41.1 - IEEE Guide on Surge Environment in Low-Voltage (1000 V and Less) AC Power Circuits

5. C62.41.2 - IEEE Recommended Practice on Characterization of Surges in Low-Voltage (1000 V and Less) AC Power

Circuits

6. C62.43 - IEEE Guide for the Application of Surge Protectors Used in Low-Voltage (Equal to or Less than 1000 Vrms or

1200 Vdc) Data, Communications, and Signaling Circuits

7. C62.45, IEEE Guide on Surge Testing for Equipment Connected to Low-Voltage AC Power Circuits.

8. IEEE Standard 1100 - Recommended Practice for Powering and Grounding Electronic Equipment (2005)

9. IEEE C2 (2017; Errata 1-2 2017; INT 1 2017) National Electrical Safety Code

G. International Electrotechnical Commission

1. IEC 60529:1989 - Degrees of protection provided by enclosures (IP Code)

H. National Fire Protection Association (NFPA):

1. NFPA 70 - National Electrical Code.

2. NFPA 101 - Life Safety Code

3. NFPA 780 - Standard for the Installation of Lightning Protection Systems

I. National Electrical Manufacturers Association (NEMA)

1. NEMA 250 (2014) Enclosures for Electrical Equipment (1000 Volts Maximum)

1. NEMA ICS 1 (2000; R 2015) Standard for Industrial Control and Systems: General Requirements

2. NEMA ICS 2 (2000; R 2005; Errata 2008) Industrial Control and Systems Controllers, Contactors, and Overload

Relays Rated 600 V

3. NEMA ICS 6 (1993; R 2016) Industrial Control and Systems: Enclosures

J. Open Network Video Interface Forum (ONVIF)

1. ONVIF (2017) Core Specification Version 17.06

K. Telecommunication Industry Association (TIA)

1. TIA-222 Structural Standards for Steel Antenna Towers and Antenna Supporting Structures

2. TIA-568-C.2 Balanced Twisted-Pair Telecommunications Cabling and Components Standards

3. TIA-606 (2017c) - Administration Standard for the Telecommunications Infrastructure

4. TIA-607-C Telecommunications Bonding and Grounding (Earthing) for Customer Premises

L. Internet Protocol

1. IPv4 (RFC 791)

2. IPv6 (RFC 2460)

3. QoS – DiffServ (RFC 2475)

M. Underwriters Laboratories

4. UL 60950 – Information Technology Equipment – Safety

N. Unified Facilities Guide Specifications (UFGS)

1. UFGS 26 20 00 Interior Distribution System

2. UFGS 27 10 00 Building Telecommunications Cabling System;

3. UFGS 33 71 01 Overhead Transmission and Distribution;

4. FGS 33 71 02 Underground Electrical Distribution;

5. UFGS 33 82 00 Communication Outside Plant (OSP);

6. UFGS 28 08 10 Electronic Security System Acceptance Testing;

7. UFGS 28 10 05 Electronic Security Systems

1.2 DEFINITIONS

1.2.1 General abbreviations and acronyms

1.2.2 ACS: Access Control System

1.2.3 AGC: Automatic gain control

1.2.4 AES: Advanced Encryption Standard

1.2.5 API: Application Programming Interface

1.2.6 Aspect ratio: A ratio of width to height in images

1.2.7 Bit Rate: The number of bits/time unit sent over a network

1.2.8 Bonjour: Enables automatic discovery of computers, devices, and services on IP networks.

1.2.9 CCTV System Closed Circuit Television System; also referred to as Video Surveillance System (VSS)

1.2.10 DHCP: Dynamic Host Configuration Protocol

1.2.11 DNS: Domain Name System

1.2.12 EIS: Electronic Image Stabilization

1.2.13 FPS: Frames per Second

1.2.14 FTP: File Transfer Protocol

1.2.15 H.264 (Video Compression Format)

1.2.16 IEEE 802.1x: Authentication framework for network devices

1.2.17 IP: Internet Protocol; Intrusion Protection

1.2.18 IR light: Infrared light

1.2.19 ISO: International Standards Organization

1.2.20 JPEG: Joint Photographic Experts Group (image format)

1.2.21 LAN: Local Area Network

1.2.22 LED: Light Emitting Diode

1.2.23 LPR: License Plate Recognition

1.2.24 Lux: A standard unit of illumination measurement

1.2.25 MBR: Maximum Bit Rate

1.2.26 MPEG: Moving Picture Experts Group

1.2.27 Multicast: Communication between a single sender and multiple receivers on a network

1.2.28 NEC: Network Engineering Command/ National Electrical Code

1.2.29 NTP: Network Time Protocol

1.2.30 NTSC: National Television System Committee – a color encoding system based on 60Hz

1.2.31 ONVIF: Global standard for the interface of IP-based physical security products

1.2.32 PACS: Physical Access Control System

1.2.33 PAL: Phase Alternating Line – a color encoding system based on 50Hz

1.2.34 PoE: Power over Ethernet (IEEE 802.3af/at) standard for providing power over network cable

1.2.35 Progressive scan: An image scanning technology which scans the entire picture

1.2.36 PTZ: Pan/Tilt/Zoom

1.2.37 QoS: Quality of Service

1.2.38 RAID: Redundant Array of Independent Disks

1.2.39 SaaS: Software as a Service

1.2.40 SIP: Session Initiation Protocol

1.2.41 SMTP: Simple Mail Transfer Protocol

1.2.42 SMPTE: Society of Motion Picture and Television Engineers

1.2.43 SNMP: Simple Network Management Protocol

1.2.44 SSL: Secure Sockets Layer

1.2.45 TCP: Transmission Control Protocol

1.2.46 TLS: Transport Layer Security

1.2.47 Unicast: Communication between a single sender and single receiver on a network

1.2.48 UPnP: Universal Plug and Play

1.2.49 UPS: Uninterruptible Power Supply

1.2.50 VBR: Variable Bit Rate

1.2.51 VMS: Video Management System

1.2.52 WDR: Wide dynamic range

2.1 DESCRIPTION & MATERIALS

2.1.1 General

A. Materials used must be suitable for the environment in which they are installed.

B. Video surveillance system must be non-proprietary. All hardware and software shall be selected to meet requirements of DODI 8500.01 and DoDI 8510.01.

C. Utilize the most current approved version of Windows operating systems at the time of initial testing or as specifically approved for workstations and servers. Entire network must be supervised, monitored, patched, maintained, and life-cycled. Coordinate with Government to establish a plan of action for approval and dissemination of required Information Assurance Vulnerability Alert (IAVA) patches as well as software and security updates. Locate server in computer room (room code CMP01).

D. Provide cabling and other appurtenances in accordance with the manufacturer’s recommendations.

E. Provide surge protection for all system components in accordance with IEEE C41.1, IEEE C41.2 and IEEE C43.2.

F. Coordinate with Medical Treatment Facility (MTF), the installation's Network Engineering Command (NEC), and the

Defense Health Agency (DHA) officials for the requirements and information on their currently installed servers, data and video switches, client workstations and other network interface equipment. Contractor shall also obtain all needed information from the installation's Directorate of Emergency Services (DES) and Provost Marshall related to Access Control System, Intrusion Detection Systems, closed circuit television (CCTV) System also referenced as video surveillance system, and associated security systems to ensure compliance with DOD and NEC criteria. All security systems and their interfaces shall be designed and installed to meet the referenced standards of Department of Defense.

All data and video switches shall be selected as listed on the Department of Defense Information Systems' (DISA) Approved Product List. Interfaces from or with other systems, such as Infant Protection Alarm System, Duress Alarm Systems, Behavioral Health Staff Assist Alarm Systems, etc. with the VSS or intrusion detection System shall conform the DOD criteria for protection of systems and networks per DODI 8500.01 and DODI 8510.01. Where no manufacturer's requirements conflict, provide hardware components to be fully compatible with those currently installed in the MTF and as approved by the installations Network Engineering Command (NEC) and DHA.

G. The specified unit must be of manufacturer’s official product line, designed for commercial and/or industrial 24/7/365 use.

H. The specified unit must be based upon standard components and proven technology using open and published protocols.

I. System and other appurtenances provided must not have an anticipated end of system support in the next 36 [18] [___] months. Systems, system components, firmware /middleware, as well as software being phased out, or have an end of life support from equipment /component manufacturer or vendor to be within [2 years] [3 years] are not acceptable.

J. System and other appurtenances must not have an anticipated end of system support in the next [18] [___] months.

K. Systems being phased out are not acceptable.

2.1.2 Other System Interfaces

A. The Video Surveillance system must interface with the Duress Alarm System Infant Protection Alarm System, Access

Control System, Intrusion Detection System. Components may be shared between interfaced systems as long as the required system functionality is maintained for each interfaced system.

B. A fault in any interfaced system must not affect the performance of any other interfaced systems. Each system must operate in a stand-alone mode if the system interfaces are lost.

2.2 VIDEO SURVEILLANCE SYSTEM HARDWARE

2.2.1 Video Servers: All VSS servers shall be provided with Xenon E5 2600 v4 central processors, with 64 GB Random Access

Memory (RAM), 500 GB solid State drive, dual power supplies, internal hard drive bay, hot-plug backplane, communication ports for connectivity with redundant servers, time server, network storage systems, network switches, peripheral component interconnect express (PCIe), ECC memory, hot-plug hard drives, hot-plug redundant cooling, hot-plug redundant power, internal dual SD Module, single device data correction (SDDC). Minimum of four ports which support of throughput of a minimum of one GB per second. Servers shall have all software and tools for server configuration, management and operating system which meets criteria for high availability, redundancy, and cybersecurity.

2.2.2 Workstations: As a minimum, each workstation shall be e Intel® Core™ i9-7900X 3.3GHz, 4.3GHz Turbo, Memory 16 GB - DDR4. HDMI, USB 3.0, USB 2.0 ports for connectivity with peripherals, monitors, printers, and network switches. Discrete video card hardware, connectivity via PCIe 3.0/2.0 at 16 x on the workstation motherboard. Storage for data shall be on HDD/SSD and Front M.2, Non-Volatile Memory (NVMe) SSDs, installed and configured on all workstations. Each workstation shall be configured to interface with VSS nd ACS servers, o security system (VSS) servers, and all requisite peripherals, such as printers, monitors, scanners, badge printers, cameras, etc.

2.2.3 Monitors: Provide dual monitors each operator workstation, monitors shall be high definition, 2,560 by 1,440-pixel resolution minimum diagonal size of 27 inches, with at least two multiple USB and a minimum of two HDMI ports.

2.2.4 Video and Data Switches: Provide fully managed switches, with a minimum of 24 ports per switch. SPF interface and modules shall be provided for all switches. All switches shall be provided, which are on the DISA Approved Product List, and shall conform to DODI 8500.01 and DODI 8510.01.

2.3 VIDEO SURVEILLANCE CAMERAS

2.3.1 General

A. All VSS cameras shall be IP-based and comply with established network and video standards. Outdoor camera enclosures shall be rated per IEC to meet IP67 and shall be vandal resistant. Indoor cameras shall be rated IP 65.

B. Cameras shall use either power over Ethernet (PoE) or standard Ethernet cables for transmission of video from digital cameras from each camera to the digital video switch. Cameras with cabling distances over 100 meters utilizing fiber optic cables with media converters shall be provided with a dedicated and a separate power supply.

C. Cameras must be fully supported by an open and published API (Application Programmers Interface), which provides necessary information for integration of functionality into third party applications.

D. Comply with relevant ONVIF profile as defined by the ONVIF Organization.

2.3.2 Certifications

A. The specified unit must carry the following EMC approvals:

1. FCC Part 15 - Subpart B Class B B. The specified unit must meet the following product safety standards:

1. IEC/EN/UL 60950-1

2. IEC/EN/UL 60950-22

C. The specified unit must meet relevant parts of the following video standards:

1. SMPTE 296M (HDTV 720p)

2. SMPTE 274M (HDTV 1080p)

D. The specified unit must meet the following standards

1. MPEG-4:

a) ISO/IEC 14496-10 Advanced Video Coding (H.264)

2. Networking:

a) IEEE 802.3af/802.3at (Power over Ethernet)

b) IEEE 802.1X (Authentication)

c) IPv4 (RFC 791)

d) IPv6 (RFC 2460)

e) QoS – DiffServ (RFC 2475)

3. Network video

a) Relevant ONVIF profile as defined by the ONVIF Organization.

2.3.3 Video Surveillance Schedule

A. Camera types listed below describing various resolutions, form-factor and features must be supplied by a single source manufacturer video surveillance system.

2.3.4 Fixed dome 1080p network cameras

A. The fixed dome network camera must meet or exceed the following design specifications:

1. The camera must be equipped with an IR-sensitive progressive scan megapixel sensor.

2. The camera must provide a removable IR-cut filter, providing day/night functionality.

3. The camera must provide local video storage utilizing a microSD/microSDHC/microSDXC memory card expansion, supporting memory up to 64 GB.

4. For outdoor applications the camera must be manufactured with an IEC ingress protection (IP) rating of IP67- and

NEMA 4X-rated, with IK10 impact-resistant aluminum casing. For indoor applications the cameras shall be manufactured with a rating of IP65. Each camera enclosure shall have a tamper switch, this switch shall be wired to a set of contacts, and shall transmit tamper alarm to the video server and operator workstation.

5. The camera must provide a manual 3-axis (pan/tilt/rotation) positioning to allow adjustment for optimum camera rotation and placement.

B. The fixed dome network camera must meet or exceed the following performance specifications:

1. Illumination

a) The camera must meet or exceed the following illumination specifications:

1) 0.8 lux in color

2) 0.16 lux in B/W

2. Resolution

a) The camera must be designed to provide at least two video streams in HDTV 1080p (1920x1080) at up to 30 frames per second (60Hz mode) or 25 frames per second (50Hz mode) using H.264 or Motion JPEG.

b) The camera must support video resolutions including:

1) 1920x1080 (HDTV 1080p)

c) The camera must provide both landscape format (4:3 and 16:9 aspect ratio) as well as corridor format (3:4 and

9:16 aspect ratio).

3. Encoding

a) The camera must support the following video encoding algorithms:

1) Motion JPEG encoding in a selectable range from 1 up to 25/30 frames per second in all resolutions.

2) Main Profile H.264 encoding with motion estimation and context-adaptive binary arithmetic coding

(CABAC) in up to 25/30 frames per second.

b) The camera must provide independently configured simultaneous H.264 and Motion JPEG streams.

c) The camera must in H.264 support Variable Bit Rate (VBR) for video quality adapted to scene content. To protect the network from unexpected bit rate spikes. The camera must support Constant Bit Rate (CBR) or Maximum Bit Rate (MBR).

d) The camera must provide configurable video compression levels.

e) Support motion estimation in H.264/MPEG-4 Part 10/AVC.

4. Transmission

a) The camera must allow for video to be transported over:

1) HTTP (Unicast)

2) HTTPS (Unicast)

3) RTP (Unicast & Multicast)

4) RTP over RTSP (Unicast)

5) RTP over RTSP over HTTP (Unicast)

b) The camera must support Quality of Service (QoS) to be able to prioritize traffic.

5. Image

a) The camera must incorporate Automatic and Manual White Balance.

b) The camera must incorporate an electronic shutter operating in the range of 1/30500 s to 2 s.

c) The camera must incorporate Wide Dynamic Range – Dynamic contrast.

d) The camera must provide backlight compensation functionality.

e) The camera must support manually defined values for:

1) Color level

2) Brightness

3) Sharpness

4) Contrast

f) The camera must allow for rotation of the image in steps of 90º.

6. User Interface

a) Web server

1) The camera must contain a built-in web server making video and configuration available to multiple clients in a standard operating system and browser environment using HTTP, without the need for additional software.

2) [Optional components downloaded from the camera for specific tasks, e.g. Active X, must be signed by an organization providing digital trust services, such as Verisign, Inc. ]

b) IP addresses

1) The camera must support both fixed IP addresses and dynamically assigned IP addresses provided by a

Dynamic Host Control Protocol (DHCP) server.

2) The camera must allow for automatic detection of the camera based on UPnP and Bonjour when using a server/ client workstation with an operating system supporting this feature.

3) The camera must provide support for both IPv4 and IPv6.

7. PTZ functionality

a) The camera must:

1) Provide Digital PTZ functionality.

2) Provide:

3) Pan: ±175°

4) Tilt 70°

5) Rotation ±180°

8. Event functionality

a) The camera must be equipped with an integrated event functionality, which can be trigged by:

1) Video Motion Detection

2) Live Stream Accessed

3) Camera tampering

4) Manual Trigger/Virtual Inputs

5) PTZ functionality

6) External input

7) Embedded third party applications

8) Edge storage disruption detection

b) Response to triggers must include:

1) Send notification, using HTTP, HTTPS, TCP, SNMP trap or email

2) Send images, using FTP, HTTP, HTTPS, network share or email

3) Send video clip, using FTP, HTTP, HTTPS, network share or email

4) Recording to local storage and/or network attached storage

5) Activating external output

6) PTZ control functionality

c) The camera must provide memory for pre & post alarm recordings.

9. Edge storage

a) The camera must support continuous and event controlled recording to:

1) Local memory added to the cameras SD-card slot; SD card data shall be encrypted at the camera.

2) Network attached storage, located on the local network

b) The camera must be able to detect and notify Edge storage disruptions.

10. Protocol

a) The camera must incorporate support for at least IPv4/v6, HTTP, HTTPS, SSL/TLS, QoS Layer 3 DiffServ, TCP, ICMP, SNMPv1/v2c/v3 (MIB-II), RTSP, RTP, UDP, IGMP, RTCP, SMTP, FTP, DHCP, UPnP, ARP, DNS, DynDNS, SOCKS, SSH, NTP, CIFS/SMB, Bonjour.

b) The SMTP implementation must include support for SMTP authentication.

11. Text overlay

a) The camera must:

1) Provide embedded on-screen text with support for date & time from the Network Time Synchronization system, and a customer-specific text, camera name, of at least 45 ASCII characters.

2) Provide the ability to apply privacy masks to the image.

3) Allow for the overlay of a graphical image, such as a logotype, into the image.

12. Security

a) The camera must support the use of HTTPS and SSL/TLS, providing the ability to upload signed certificates to encrypt and secure authentication and communication of both administration data and video streams.

b) [The camera must provide centralized certificate management, with both pre-installed CA certificates and the ability to upload additional CA certificates. The certificates must be signed by an organization providing digital trust services.]

c) The camera must support IEEE 802.1X authentication.

d) The camera must provide support for restricting access to pre-defined IP addresses only, so-called IP address filtering.

e) The camera must restrict access to the built-in web server by usernames and passwords at three different levels.

13. API support

a) The camera must be fully supported by an open and published API (Application Programmers Interface), which must provide necessary information for integration of functionality into third party applications.

b) The camera must support relevant ONVIF profiles as defined by the ONVIF Organization.

14. Embedded applications

a) The camera must provide a platform allowing the upload of third party applications into the camera.

15. Installation and maintenance

a) The camera must be supplied with Windows-based management software which allows the assignment of IP addresses, upgrade of firmware and backup of the cameras’ configuration.

b) The camera must support the use of SNMP-based management tools according to SNMP v1, 2c & 3 / MIB-II.

c) The camera must allow updates of the software (firmware) over the network, using FTP or HTTP.

d) The camera must provide the ability to apply a rectangle of customer-defined number of pixels to the image, which can be used as a pixel counter identifying the size of objects in number of pixels.

e) The camera must accept external time synchronization from the Network Time Synchronization system.

f) The camera must store all customer-specific settings in a non-volatile memory that must not be lost during power cuts or soft reset.

16. Access log

a) The camera must provide a log file, containing information about the 250 latest connections and access attempts since the unit’s latest restart. The file must include information about the connecting IP addresses and the time of connecting.

b) Provide a connection list of all currently connected viewers. The file must include information about connecting IP address, time of connecting and the type of stream accessed.

17. Camera diagnostics

a) The camera must be equipped with LEDs, capable of providing visible status information. LEDs must indicate the camera’s operational status and provide information about power, communication with receiver, the network status and the camera status.

b) The camera must be monitored by a watchdog functionality, which must automatically re-initiate processes or restart the unit if a malfunction is detected.

c) The camera must send a notification when the unit has re-booted and all services are initialized.

18. Hardware interfaces

a) Network interface

1) The camera must be equipped with one 100BASE-TX Fast Ethernet-port, using a standard male RJ45 connector and must support auto negotiation of network speed (100 MBit/s and 10 MBit/s) and transfer mode (full and half duplex).

b) Inputs/Outputs

1) The camera must be equipped with one digital (alarm) input and one digital output, accessible via a removable terminal block. This input must be configurable to respond to normally open (NO) or normally closed (NC) dry contacts.

19. Enclosure

a) The camera must:

1) Be manufactured with an IP67- and NEMA 4X-rated, IK10 impact-resistant aluminum casing.

2) Be fitted with a clear transparent cover

3) Be equipped with a preinstalled 2 m (6.6 ft) network cable.

20. Power

a) Power over Ethernet IEEE 802.3af/802.3at Type 1 Class 2

21. Environmental

a) Operate in a temperature range of -30 C to +50 C (-22 F to 122 F).

b) Operate in a humidity range of 10–100% RH (condensing).

2.3.5 Fixed dome 1080p network camera

A. The fixed dome network camera must meet or exceed the following design specifications:

1. The camera must be equipped with an IR-sensitive progressive scan megapixel sensor.

2. The camera must provide a removable IR-cut filter, providing day/night functionality.

3. The camera must be equipped with a varifocal lens with P-iris, and iris control.

4. The camera must provide local video storage utilizing a microSD/microSDHC/microSDXC memory card expansion.

5. The camera must be manufactured with an IP65-rated, IK08 impact-resistant, polycarbonate casing.

6. The camera must provide a manual 3-axis (pan/tilt/rotation) positioning to allow adjustment for optimum camera rotation and placement.

7. The camera must provide options for clear and smoked lower dome.

B. The fixed dome network camera must meet or exceed the following performance specifications:

1. Illumination

a) HDTV 1080p 25/30 fps with WDR - forensic capture

1) 0.15 lux, F1.4 (color)

2) 0.03 lux, F1.4 (B/W)

b) Analog cameras or cameras using HDTV 720p 50/60 fps without WDR shall not be designed or installed indoors or outdoors of the facility.

2. Resolution

a) All cameras must provide both landscape format (4:3 and 16:9 aspect ratio), and indoor cameras as well must support corridor format (3:4 and 9:16 aspect ratio).

b) The outdoor camera must be designed to provide at least two video streams in HDTV 1080p (1920 x1080) at a minimum of 30 frames per second (60Hz mode) or 25 frames per second (50Hz mode) using H.264 or Motion JPEG (WDR active). Five (5) megapixel (MP) camera, lens shall be f1.5 and camera maximum video resolution shall be a minimum of 3272 x 1728 pixels.

c) The indoor camera must be designed to provide at least two video streams in HDTV 1080p (1280x1080) at up to 30 frames per second (60Hz mode) or 25 frames per second (50Hz mode) using H.264 or Motion JPEG (WDR active). Two (2) megapixel (MP) camera, lens shall be f1.5 and camera maximum video resolution shall be a minimum of 1920 x 1080 pixels.

d) The indoor cameras for hall ways, stairwells and areas where physical structure require limited assessment shall be HDTV at 1080p, up to 30 frames per second, varifocal lens, iris control, maximum resolution of 2068 x 1520 pixels. These hall ways and narrow spaces cameras must be designed to provide at least two video streams in HDTV 1080p (1280x1080) at up to 30 frames per second (60Hz mode) or 25 frames per second (50Hz mode) using H.264 or Motion JPEG (WDR active).

e) The camera must be designed to provide 2 individually cropped out view areas.

3. Encoding

a) The camera must support the following video encoding algorithms:

1) Motion JPEG encoding in a selectable range from 1 up to 25/30 frames per second.

2) Motion JPEG encoding in a selectable range from 1 up to 50/60 frames per second.

3) Baseline Profile H.264 encoding with motion estimation in up to 25/30 frames per second.

4) Baseline Profile H.264 encoding with motion estimation in up to 50/60 frames per second.

5) Main Profile H.264 encoding with motion estimation and context-adaptive binary arithmetic coding

(CABAC) in up to 25/30 frames per second.

6) Main Profile H.264 encoding with motion estimation and context-adaptive binary arithmetic coding

(CABAC) in up to 50/60 frames per second.

7) Support High Profile H.264 encoding with motion estimation up to 25/30 frames per second.

8) Support High Profile H.264 encoding with motion estimation up to 50/60 frames per second.

9) Support H.264 with automatic scene adaptive bitrate control.

b) The camera must provide independently configured simultaneous H.264 and Motion JPEG streams.

c) The camera must in H.264 support Variable Bit Rate (VBR) for video quality adapted to scene content. To protect the network from unexpected bit rate spikes the camera must support Constant Bit Rate (CBR) or Maximum Bit Rate (MBR).

d) The camera must provide configurable compression levels.

e) Support standard baseline profile H.264 with motion estimation.

f) Support motion estimation in H.264/MPEG-4 Part 10/AVC.

g) The camera must for its H.264 implementation support scene adaptive bitrate control with automatic dynamic

ROI to reduce bitrate in unprioritized regions in order to lowering bandwidth and storage requirements.

4. Transmission

a) The camera must allow for video to be transported over:

1) HTTP (Unicast)

2) HTTPS (Unicast)

3) RTP (Unicast & Multicast)

4) RTP over RTSP (Unicast)

5) RTP over RTSP over HTTP (Unicast)

b) The camera must support Quality of Service (QoS) to be able to prioritize traffic.

5. Image

a) The camera must incorporate Automatic and Manual White Balance.

b) The camera must incorporate an electronic shutter operating in the range of

c) 1/66500 s to 1 s.

d) The camera must incorporate capture mode with the following settings:

1) 25/30 fps (WDR-Forensic Capture) (50/60 Hz)

2) 50/60 fps (no WDR-Forensic Capture) (50/60 Hz)

e) The camera must incorporate Wide Dynamic Range - Forensic Capture functionality providing up to120dB dynamic range.

f) The camera must support manually defined values for:

1) Color level

2) Brightness

3) Sharpness

4) Contrast

g) The camera must incorporate a function for optimization of low light behavior.

h) The camera must allow for rotation of the image in steps of at least 90º.

6. User Interface

a) Web server

1) The camera must contain a built-in web server making video and configuration available to multiple clients in a standard operating system and browser environment using HTTP, without the need for additional software.

2) [Optional components downloaded from the camera for specific tasks, e.g. Active X, must be signed by an organization providing digital trust services, such as Verisign, Inc.]

3) .

b) IP addresses

1) The camera must support both fixed IP addresses and dynamically assigned IP addresses provided by a Dynamic Host Control Protocol (DHCP) server.

2) The camera must allow for automatic detection of the camera based on UPnP and Bonjour when using a PC with an operating system supporting this feature.

3) The camera must provide support for both IPv4 and IPv6.

7. PTZ functionality

a) The camera must:

b) Provide Digital PTZ functionality.

8. Event functionality

a) The camera must be equipped with an integrated event functionality, which can be trigged by:

1) Video Motion Detection

2) Live Stream Accessed

3) Day/Night Mode

4) Camera tampering

5) Manual Trigger/Virtual Inputs

6) PTZ functionality

7) Embedded third party applications

8) Edge storage disruption detection

b) Response to triggers must include:

1) Send notification, using HTTP, HTTPS, TCP, SNMP trap or email

2) Send images, using FTP, HTTP, HTTPS, network share or email

3) Send video clip, using FTP, HTTP, HTTPS, network share or email

4) Send SNMP trap message

5) Recording to local storage and/or network attached storage

6) PTZ control functionality

7) WDR mode

c) The camera must provide memory for pre & post alarm recordings.

9. Edge storage

a) The camera must support continuous and event controlled recording to:

1) Local memory added to the cameras microSD-card slot

2) Network attached storage, located on the local network

b) The camera must be able to detect and notify Edge storage disruptions.

10. Protocol

a) The camera must incorporate support for at least IPv4/v6, HTTP, HTTPS, SSL/TLS, QoS Layer 3 DiffServ, TCP, ICMP, SNMPv1/v2c/v3 (MIB-II), RTSP, RTP, UDP, IGMP, RTCP, SMTP, FTP, DHCP, UPnP, ARP, DNS, DynDNS, SOCKS, SSH, NTP, CIFS/SMB, Bonjour.

b) The SMTP implementation must include support for SMTP authentication.

11. Text overlay

a) The camera must:

1) Provide embedded on-screen text with support for date & time from Network Time Synchronization system, and a customer-specific text, camera name, of at least 45 ASCII characters.

2) Provide the ability to apply privacy masks to the image.

3) Allow for the overlay of a graphical image, such as a logotype, into the image.

12. Security

a) The camera must support the use of HTTPS and SSL/TLS, providing the ability to upload signed certificates to encrypt and secure authentication and communication of both administration data and video streams.

b) The camera must provide centralized certificate management, with both pre-installed CA certificates and the ability to upload additional CA certificates. The certificates must be signed by an organization providing digital trust services.

c) The camera must support IEEE 802.1X authentication.

d) The camera must provide support for restricting access to pre-defined IP addresses only, so-called IP address filtering.

e) The camera must restrict access to the built-in web server by usernames and passwords at three different levels.

f) Video in storage or in transmission shall be encrypted per DOD criteria. SD cards at every camera, used as backup, shall be configured to capture and encrypt video and data.

13. API support

a) The camera must be fully supported by an open and published API (Application Programmers Interface), which must provide necessary information for integration of functionality into third party applications.

b) The camera must support relevant ONVIF profiles as defined by the ONVIF Organization.

14. Embedded applications

a) The camera must provide a platform allowing the upload of third party applications into the camera.

15. Installation and maintenance

a) The camera must be supplied with Windows-based management software which allows the assignment of IP addresses, upgrade of firmware and backup of the cameras’ configuration.

b) The camera must support the use of SNMP-based management tools according to SNMP v1, 2c & 3 / MIB-II.

c) The camera must allow updates of the software (firmware) over the network, using FTP or HTTP.

d) The camera must provide the ability to apply a rectangle of customer-defined number of pixels to the image, which can be used as a pixel counter identifying the size of objects in number of pixels.

e) The camera must accept external time synchronization from the Network Time Synchronization system, or a

Time Server.

f) The camera must store all customer-specific settings in a non-volatile memory that must not be lost during power cuts or soft reset.

g) The camera must provide Remote zoom and Remote focus functionality.

16. Access log

a) The camera must provide a log file, containing information about the 250 latest connections and access attempts since the unit’s latest restart. The file must include information about the connecting IP addresses and the time of connecting.

b) Provide a connection list of all currently connected viewers. The file must include information about connecting IP address, time of connecting and the type of stream accessed.

17. Camera diagnostics

a) The camera must be equipped with LEDs, capable of providing visible status information. LEDs must indicate the camera’s operational status and provide information about power, communication with receiver, the network status and the camera status.

b) The camera must be monitored by a Watchdog functionality, which must automatically re-initiate processes or restart the unit if a malfunction is detected.

c) The camera must send a notification when the unit has re-booted and all services are initialized.

18. Hardware interfaces

a) Network interface

b) The camera must be equipped with one 10BASE-T/100BASE-TX PoE Fast Ethernet-port, using a standard connector, a second port for standard Ethernet connection using RJ45 connector. All cameras must support auto negotiation of network speed (100 MBit/s and 10 MBit/s) and transfer mode (full and half duplex).

19. Enclosure

a) The camera must:

1) Be manufactured with an IP65-rated, IK08 impact-resistant, polycarbonate casing.

2) Be fitted with a dehumidifying membrane.

3) Providing encapsulated electronics and captive screws.

20. Power

a) Power over Ethernet IEEE 802.3af/802.3at Type 1 Class 2

1) Max: 4.8 W

2) Typical 3.5 W

21. Environmental

a) Operate in a temperature range of 0 C to +50 C (+32 F to 122 F).

b) Operate in a humidity range of 10–85% RH (non-condensing).

2.4 VIDEO SURVEILLANCE SOFTWARE

2.4.1 Video NVR Characteristics

A. The Video Appliance NVR – Network Video NVR (NVR) must have the following characteristics:

1. The system must be a networked device purpose built exclusively for the capture and processing of digital video and supporting audio, metadata, alarm, storage and other services.

2. The NVR must be part of a family of dedicated IP NVRs consisting of 64, 48 and 32 channel variants.

3. The NVR must employ a common software provisioning interface regardless of the model selected. This will yield consistent user training materials, documentation and system interaction.

4. The NVR family must meet or exceed the following performance depending on the model that is selected:

2.4.2 NVR Performance

A. 1U IP NVR

1. Video Inputs: 32

2. Throughput (Mbps): 200

B. 2U IP NVR

1. Video Inputs: 64

2. Throughput (Mbps): 400

2.4.3 NVR Hardware

A. Video Outputs

1. The NVR must have a single video output which is capable of displaying video from selected camera inputs in a sequenced display application, with a programmable dwell sequence being available for each display.

2. This sequence must be interruptible in order to display specific video related to an event (i.e., alarm trigger) on the NVR unit, and must return to the preset sequence once that event has completed.

B. Storage

1. The NVR must write to multiple hard drives to provide [60] [90] [___] days of video.

2. The hard drives must contain no operating system information, thereby avoiding any reduction in video storage capacity and increasing system robustness.

3. The internal drives must be expandable by the user, from a single drive configuration through to 8 high-capacity drives

(depending on model) for extensive in-system storage. Drives from the certified list can be installed in the field.

4. All video must be stored at the NVR and only be delivered over the network when either the recorded video is searched and retrieved or if live video is requested.

C. Network

1. The NVR must have at least two GigE network ports; one for communicating with the hospital or clinic networks, and one for communicating with a segregated camera network.

2. The NVR software must ensure that there is no routing between the two networks ensuring that the cameras are protected from malware attacks, and access to DOD networks shared or used by the VSS.

D. Hardware Watchdog

1. The NVR must have built-in hardware watchdog circuitry that will reset the unit and enable it to return to an operation state if ever it gets into an unknown state.

2. Any reset initiated by the watchdog must be logged.

E. Electrical

1. The NVR must be powered by 115 volt or 230 volt AC power sources.

2. The NVR must be equipped with an internal battery which enables the unit to perform a systematic shutdown should external power be removed.

3. The NVR must operate seamlessly with any external UPS without the need of a control cable.

F. Regulatory

1. The NVR must have passed the following safety standards:

a) IEC60950-1 (ed.2)

b) UL 60950-1 (ed.2)

c) CSA C22.2 No.60950-1-07 (ed.2)

2. The NVR must conform to the following FCC rules and regulations:

a) EMC FCC 47 CFR Part 15 (Subpart 15)

b) ICES-003

c) EN55022, CISPR 22, AS/NZS CISPR 22

d) EN61000-3-2, EN 61000-3-3

e) EN50130-4, EN55024

3. The NVR must have the following markings indicating compliance with the regulations for sale into the countries that accept the marking:

a) CE-mark

b) cULus

c) C-tick

d) WEEE

G. Warranty

1. The NVR must have a warranty of at least 2 years.

2. Should the NVR fail during the warranty period, a replacement NVR must be available as an advance replacement at no additional cost in order to return the end user to full functionality as quickly as possible.

H. Secure Hardware

1. The NVR must have a locking mechanism that prevents individual hard drives from being removed from the unit.

2.5 NVR CONTROL SOFTWARE

2.5.1 Concept of Operation

A. The NVR must simultaneously handle the capture and recording of media (video, audio, metadata) from integrated sources as well as network connected IP sources (cameras and sensors). In addition to this, the NVR must distribute live or recorded media from multiple sources to multiple clients. The NVR must operate in a mode where all media will be recorded for a short period of time and then retained for longer periods based on schedules or events (motion, alarms, or user events). The stored media must be capable of being searched using time of day, events, or associated metadata.

Media must be directly played back from the NVR without having to be retrieved in its entirety prior to viewing at the client. Media must also be able to be retrieved and stored remotely for viewing off-line by third parties. The NVR must be capable of operating discreetly or being managed by a centralized enterprise management server. In either case, the NVR must continuously supervise its operation and report any health related occurrences that have exceeded the configurable thresholds.

2.5.2 Startup and Shutdown

A. The NVR must start up and reach full functionality when power is applied.

B. When power is removed from the NVR, the battery must enable the NVR to continue to operate until it has performed a systematic shutdown.

2.5.3 System Operations

A. The NVR must have multiple inputs and configurations to ensure that it’s time is accurate:

1. Manual synchronization with the provisioning client PC time.

2. Synchronization with the Network Time Synchronization system that is reachable on the network.

3. Synchronization with the centralized enterprise Time Server.

B. The NVR must automatically adjust to Daylight Saving Time, and adjust for deployment in varying time zones.

C. The NVR must timestamp captured media using UTC time and any offset due time zone or DST must be handled by the client with knowledge of the location of the NVR.

2.5.4 Video Recording IP

A. For each connected IP camera, the NVR must capture video and audio stream compressed by the camera. The NVR that be able to capture the following formats from connected cameras:

1. H.264

2. MPEG4

3. MJPEG

B. The NVR must capture a primary and secondary stream from any IP camera that supports multiple streams.

C. For the purpose of discovering cameras, the NVR must discover cameras on either network port when requested and pass the list of discovered cameras back to the remote provisioning application.

2.5.4 Recording Architecture

A. The NVR must be designed to record any video source as soon as it has been connected to the NVR into a location which is referred to as the Critical Recording Buffer (CRB). Video from the NVR to this buffer must be at the highest configurable settings for the NVR by default such that mistakes cannot be made during the initial provisioning of the

NVR.

B. The NVR must have a Long Term and Extended Term area where video will be retained as per the configuration of events (e.g., motion video, alarm video, retail or financial transaction video) occurring on the NVR.

C. Once video exceeds the capacity it must become a candidate for removal from the NVR. The NVR must review the events associated with the candidate video and determine if the video should be retained at high frame rate, retained at low frame rate, or be removed entirely.

D. Video that is stored in the Extended Term are must be kept as long as there is room on the hard drives.

E. The NVR must operate in an environment where there are rules defining how long video can be kept on the NVR. The

NVR must be able to limit recordings to a maximum of 72 hours (3 days).

2.5.5 Events

A. The NVR must respond to the events and when detected must initiate an action. Monitored events must include:

1. Daily Schedules (up to 20 unique schedules)

2. External Alarm Inputs

3. Video Motion

4. Video Analytics

B. A schedule must have a start time and a stop time which can be set for each day of the week on 30 minute intervals.

The NVR must be able to manage a minimum of 20 unique schedules.

C. Each physical alarm connected to the NVR must be configurable to initiate an action based on its opening or closing.

The alarm must be capable of being configured with a delay for either of its state changes.

D. The NVR must be able to accept video analytic alerts from an IP camera.

2.5.6 Event Actions

A. The NVR must perform actions in response to an event detected by the NVR. Actions intimated must include:

1. Retain Video

2. Monitor Events

3. Activate Switch

4. Move to PTZ Preset

5. Output to Public View Monitor

6. Control Bandwidth

7. Copy to External Media

8. Tag Media

B. The “Retain Video” action must cause the NVR to retain video for long and extended periods of time in response to configured events. If no events are configured, all video is retained by default for as long as storage allows.

C. The “Monitor Events” action must cause the NVR to start monitoring events that otherwise would be ignored.

D. The “Activate Switch” action must cause a relay to open or close in response to a specific event. A switch must be capable of being configured to automatically return to its default state after a period of time or when the event changes state once again.

E. The “Move To PTZ Preset” action must cause a PTZ camera to move to a pre-configured present in response to a specific event. The PTZ camera must be capable of being configured to return to its home position after a specified period of time.

F. The “Output to Public View Monitor” action must cause specific camera or set of cameras to be displayed on the attached

PVM.

G. The “Control Bandwidth” action must cause the NVR limit the amount of data that it will transmit over the network while the event is active.

H. The “Copy to External Media” action must cause the NVR to queue up and copy video to a USB attached device. The NVR must wait until the device is present before transferring the information and must be able to transfer multiple cameras concurrently.

I. The “Tag Media” action must cause the NVR to transfer video to a central location. This feature works in conjunction with the Command Media Archiver.

2.5.7 Health Alerts

A. The NVR must continuously supervise the various components of the NVR and send alerts should any component not be functioning to its full expectations. The following areas will be monitored:

1. Camera connections

2. Audio connections

3. Hard drives

4. Power interruptions

5. Battery function

6. System resets

7. Watchdog initiation

8. Tamper alarms from cameras

9. Each alert must be configurable for the threshold it must reach prior to being reported. Thresholds can be set to occurrences within a period of time and duration of an occurrence.

10. Public View Monitor

B. The NVR must display cameras on a monitor connected to the NVR’s HDMI port in a sequence with a configurable dwell period between cameras.

C. Up to 16 cameras must be displayed in a 4X4 display format as an option.

2.5.8 I/O Extension Module

A. The NVR must connect to an external I/O module and a video server, which shall interface with the ACS and IDS servers for transmission of video to the client workstations operated by the security system operators.

2.5.9 Pan Tilt and Zoom (PTZ) Control

A. IP cameras equipped with PTZ capability must be controlled by the NVR upon receiving commands from the client.

B. Up to 20 PTZ presets must be saved by the NVR for each PTZ camera and called up when requested.

2.5.10 Network Configuration

A. The NVR must support a minimum of two network interfaces for the purpose of keeping the camera/video network segregated from the corporate network.

B. The “Network” port connected to the Government/corporate network must support DHCP or static IP configuration.

C. The NVR must restrict traffic from passing between the network ports on the NVR. The only time non video and control traffic must pass between ports will be for the purpose of configuring cameras or trouble shooting scenarios. This passing of data through a secure tunnel will be under the control of an authenticated user and will be for limited time periods.

D. The NVR must require authentication to gain access to the NVR regardless of which network port the NVR is being accessed from.

E. The NVR must adhere to industry standard TLS 1.2 with strong AES encryption, HTTPS encryption, strong hashing algorithms SHA256, and continuous security vulnerability assessment.

F. The NVR must…