Contract 1000-203 KPIZ Port Special Systems

Contract 1000-203 KPIZ Port Special Systems Workshop – Control Systems, 24th May 2011 Port Operating System

AGENDA • Requirement Review • POS Solution Review • System Architecture • Control Rooms, Video wall & Consoles • User Profiling and Roles • POS Screens & Navigation • POS Operations Console • Alarms Management • Interface Design with Port Special Systems

KPIZ Requirements highlights • POS provide an integrated front end to the various security, communications and M&E systems in the port; providing monitoring, control and the functionality of distributed equipment where applicable from central control rooms. • Dual redundant servers shall interface with other port systems via the PLC Network or the Site-Wide IP Network • Multiple multi-headed client workstations and video walls will be provided in control rooms for the display of POS SCADA GUI graphics and CCTV. • The POS SCADA GUI Software shall use a server / client architecture and offer a user-friendly Graphical User Interface • The POS SCADA GUI Software shall be developed using software tools 100% compatible with the PLC Network • The POS SCADA GUI Software shall have different password-secured levels of access for different user groups. • The POS SCADA GUI shall display alarms to the operators. Alarms shall be either security /safety related or equipment / fault alarms

POS solutionreview:POS SCADA embedding • Comprises ProximexSurveillint and VijeoCitect servers • Surveillint is the physical security information management (PSIM) software • Citect is the industrial automation monitoring and control application software for graphical process visualization • Surveillint is the front-end for security command and control, emergency /incident response and PSS • Citect is the front-end for M&E plant systems • POS GUI is Surveillint GUI with Citect embedded in it • Alarms, trends and reports generated and archived in Surveillint; Citect only flags alarm data to Surveillint • Log-in security is configured in LDAP/Active Directory, Surveillint and Citect share the same authentication credentials but have individually configured profiles

POS solutionreview:POS SCADA Integrated software Architecture Surveillint Primary Server Citect Primary Server Surveillint Secondary Server Citect Secondary Server Embedded Web Client GUI for Security Command & Control Emergency/Incident Response PSS integrated via API/SDK or Database Operator Station PLC Network CCTV Joystick Video Wall Controller PA/VA Intercom Telecom TETRA Mobile

System Architecture

System Architecture - Redundancy

Control rooms: Video Wall • One in Onshore Control Room in the Control Centre Building (CCB) • One in Offshore Control Room in the Harbor Master Building (HMB) 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 4:3 Aspect Ratio Rear-Projection Display Cube 2500:1 Contrast Ratio 1400 pixels 170cm 1050 CCTV SCADA GUI Controller Unit Television

Control rooms: Video Wall during normal routine operations VIDEO GUARD TOUR GIS MAP AND NAVIGATION TREE EVENT MONITOR ALARM STACK SATELLITE TV

Control rooms: Video Wall during emergency response situations (eg. fire emergency) EVENT MONITOR MAP AND ALERT INFORMATION INCIDENT VIDEO SATELLITE TV INCIDENT VIDEO

Control rooms design: operator consoles • POS OPERATOR WORKSTATION • OPERATION: workstation dedicated for pos during the normal operation. • SPARE(EMERGENCY): workstation used in case of crisis • SUPERVISOR: workstation dedicated to “Administrator” that is able to monitor and control the operators’ work and manage alarm escalation • VTS OPERATOR WORKSTATION • BACKUP: workstation dedicated at VTS operator. this is used in case of emergency and in case that the off-shore VTS workstation offline

Control rooms design: operator consoles • POS OPERATOR WORKSTATION • OPERATION: workstation dedicated for pos during the normal operation. • SPARE(EMERGENCY): workstation used in case of crisis • SUPERVISOR: workstation dedicated at “superuser” that is able to monitoring and control the operators’ work • VTS OPERATOR WORKSTATION • MANNED: operative workstation active 24 hours. • SPARE: workstation used in case of emergency.

Operator console

Operator console: Quad head console usage ALARM CONSOLE MAIN PSIM APPLICATION GUI VIDEO CONSOLE MULTI PURPOSE MONITOR: APPLICATION WEB CLIENT, POS REPORT CONSOLE, VIDEO WALL MANGER,CLIENT APP. MAPS

User Profiling and Roles

POS Navigation Menu

POS Screens : 1st Level - Main Navigation

POS Screens : 2nd Level – ADPC Layout

POS Screens : 3rd Level - ADPC Onshore

POS Screens : 4th Level – Data Centre Building

POS Operations Console

Multilingual Support

POS Alarms Stack

POS Alarms Management Security Alarm Handling Fault Alarm Handling

AGENDA • Requirement Review • POS Solution Review • System Architecture • Control Rooms, Video wall & Consoles • User Profiling and Roles • POS Screens & Navigation • POS Operation Console • Alarms Management • Interface Design with Port Special Systems

Integration Methods Summary API Access Control System Elevators Local Controller(by other) Volt free contacts SDK CCTV PSIM Proximex Surveillint Integrated Building Management System OPC Customs Embedded Web Client for GUI Terminal Operating System(ADT) Web Services API BACnet/IP SCADA Citect Offshore Gate Management System(ADT) Local Building BMS Embedded Web Client for GUI Gate Management System Pumping Stations Volt free contacts Traffic Signs Ethernet / IP Local Building BMS Vehicle Monitoring System Web Services OPC Fire Alarm System Sea Water Cooling System Vessel Traffic Services PLC SNMP Client Application Asset Management System ODBC Local Building BMS Data Network and Wireless LAN SNMP Control Net Sewage System NTP Master System Clock RIO Volt free contacts SNMP UPS TETRA Enhancers OPC API PA/VA System SNMP, Web Browser Telephony System Volt free contacts Perimeter Security System – µwave IDS Perimeter Security System – FO IDS SNMP Currentvalidatedmethod Availableoptioncorrelatedto Building contractor design finalizationforM&Eplants

Access Control System The interface with ACS is between the POS server and the ACS server via the site wide IP network. • API from ACS vendor allow the following functions: • Unicast door open/close override commands • The open/close commands will be easily accessible form the POS GUI. • The design choice is to prevent system configuration and functional modification from the POS operator. • The system maintenance and configuration is intended to be assigned to the dedicated ACS operator manned by an ACS system engineer.

Closed Circuit TeleVision The interface with CCTV is between the POS server and the CCTV server via the site wide IP network. • When the POS receives an alarm from equipment that has an associated camera, it instigates the following: • Automatically switches the relevant camera to appear on the events monitor of the control room video wall • If the camera is PTZ, automatically pans/tilts the camera and zoom in on the area of interest • Activates the camera images to be recorded at the event record rate • Operators via the SDK software integration with CCTV management systems have the option to utilize the following functions from POS: • Select cameras from POS location schematics • View Live, recorded & replay images from the selected CCTV camera(s) on operator screens or video wall. The POS allows switching of live camera images to POS client workstation monitors or video wall (either full screen, split screen up to 16 images, or picture in picture). • Access Pan Tilt Zoom (PTZ) functions of the camera, if the camera is PTZ, using a PTZ joystick provided

Integrated Building Management System, Lifts The POS GUI contains location layout and system schematic graphics pages for the BMS devices which show icons for active BMS devices. • The Control Room POS operator have the capability to receive the fault alarms form the BMS devices and plants. This will enable the monitoring of the plant when the M&E operator are offline. • The Control Room operator is not intended to be the building maintainer for this reason the control, configuration and scheduling functionalities will be disabled. • The POS M&E operator will have a full access to the BMS system software for plant control, monitoring and device operation scheduling. • Al the functionalities and monitoring point provided by the Local BMS will be available to the Integrated BMS platform.

Data Network, WLAN, Telephony system The interface with the Data Network, WLAN, Telephony system is be between the POS server and the respective management server enabled to forward SNMP traps from switches, access points and field devices. Therefore the medium for propagating the fault status is the site wide IP network. • Network configuration and administration is not recognized as a task to be performed from a POS control room security operator therefore the interface with the network systems is designed to forward just fault conditions to the operators. • However, network management software is reachable via Web browser that can be lunched from the POS GUI • The POS operator have access to the communication capabilities offered by the network infrastructure via a comprehensive communication environment linking the VoIP based communication via the Site-wide LAN with the TETRA infrastructure

Fire Alarm System Direct interface between the POS server and the FAS via the site wide data network. • FAS system frontend is the Building Information System Server (BIS Server): • BIS server collect al the alarm from the FAS • Provide alarm information via OPC (DA 3.0 and AE 1.01) communication protocol over Site Wide LAN • The fire detected alarm and device fault from FAS are compiled in the alarm stack

GMS, TOS, TRAFFIC SIGNS • The integration between Gate Management System (GMS) and POS server is through the Site-wide LAN. • The GMS due to the interface requirements between the onshore gates and the offshore gates requires a custom software development to allow the combination of the information provided from the security systems and correlate the same with the Active RFID and the concession area (TOS database) • Interface with the GMS is performed via SDK allowing the control and the fault detection of the gate devices • An additional interface level is needed to allow the POS to “tunnel” the XML based messages between the onshore and offshore GMS • Alarms, Control, Configuration not available for TOS because of changed stakeholder requirements and preferences.

Microwave Intrusion Detection System The interface between the POS and the Microwave IDS is via the PLC network Following table elaborates the alarms generation logic for the PLC System: the Remote Input/Output collect dry contacts form the MIDS barrier Tx/Rx for the purpose to deliver the below points to the PLC:

Fibre Optic Intrusion Detection System • The integration between the Fibre Optic Intrusion Detection System (FIDS) and the POS server is through the Site-wide LAN (IP Network). • A SNMP based message exchange method, enable the FIDS management server to propagate alarms via the Site-wide LAN to the POS. • The alarmed zone is visualized to the POS location maps

Public Address Voice Alarm • The POS is able to monitor the PA/VA equipment through interface with the PAVA server • The PAVA management server offers a set of API enabling the interaction with the PAVA system from the POS workstation • The alarm monitoring is available via an OPC server, enabling the control and monitoring via the Site wide LAN

TErrestrial Trunked RAdio • The current design of TETRA system allow the creation of a comprehensive communication environment allowing the recording of the control rooms communication in case of emergency . • Recoding: is extended to the fixed analog emergency phones, Voip telephone communications and TETRA communications • Communication framework: the proposed solution offers a unified communication environment via an application software to be installed in the POS workstation. • TETRA enhancer alarms: via dry contact collected from the PLC network • POS operator interoperability with communication systems: • The COTS software framework for communication do not provide SDK /API integration methods to embed the communication functionalities in a transparent way into the POS GUI. An application framework launched from the POS GUI offers the communication functionalities to the POS workstation. • The resource tracking functionality is still under consideration due to absence of COTS solution (according to the advised vendor suggestions) to perform resource tracking through TETRA mobiles. • Tetra alarms (Base Station): according to the best practice of UAE, the outcome of the interface meetings and workshop is considered AD Police the owner of the TETRA infrastructure fault alarms and relative maintenance.

Uninterruptible Power Supply The interface with the UPS is between the POS server and the individual UPSs via SNMP adaptation card over the Site wide LAN • The interface method advised in the specification based on the PLC dry contact do not allow to comply to the different alarm type request. Ro satisfy the requirements the usage of SNMP cards on the UPSs enable a more advance monitoring of the System. • The POS GUI contains location layout and system schematic graphics pages for the UPS which shows icons for active UPS devices

Vehicle Monitoring System The interface with VMS is between the POS server and the VMS via the site wide IP network. • The software integration with the VMS enable : • Alarms collection and data transfer via Web service published by the VMS server application. • Representing vehicle positions on POS GIS maps

Vessel Traffic Service The interface with the VTS is between the POS server and the VTS servers via the site wide IP network. • SNMP alarm monitoring, read-only client application for map visualization and projection on the video wall SNMP traps • The visualization of the VTS is achieved with the installation into the POS workstation of a read only application client. The choice of read only access is driven by the explicit request to ensure that only the VTS operator will be able to configure and control the VTS system. • According to the requirements the TIC video footage, recorded in the CCTV system is available to the control room operator but, also in this case according to the same design philosophy, the POS operator will not be allowed to control the TIC, this will avoid conflict with the VTS operators.

SCADA M&E: Pumping Stations, Sea Water Cooling System, Sewage System devices • The interface between the POS and the M&E plant is subject to the finalization of the plant design from the building contractor. • The integration methods available allowing plant monitoring and controlling are the following: • TCP/IP with the dedicated plant controller • Local DDC controlled to be interfaced via IBMS • Dry contact with the plant devices • The preferred method of integration is via the IBMS though the Site wide LAN. However, the final decision a cannot be defined till information relative to the plant monitoring solution is performed • Dry contact with the device composing the plant or TCP/IP with the dedicated plant controller Plant representation via SCADA IDE and monitoring/control points mapping Drawings from building contractors

Port Operating System Questions ?

Contract 1000-203 KPIZ Port Special Systems