ES-Prom Bastion

The Bastion hardware and software complex (APK Bastion) is a software product designed to build integrated security systems based on security and fire alarm devices, access control tools, video surveillance, perimeter security equipment and other security subsystems.

2023: Jatoba DBMS Compatibility

The companies Gazinformservice LLC "" and LLC ES-Prom"" completed a series of tests for the correctness of the joint functioning of the products Jatoba DBMS and the software complex "Bastion-3." Gazinformservice announced this on May 30, 2023. More. here

2015

APK "Bastion-2": Opportunities and structure

About the system

The Bastion-2 hardware and software complex (APC) is designed for integration into a single security system of the following subsystems:

• video surveillance and/or video recording;
• security and fire alarm system;
• perimeter security systems;
• security lighting systems;
• access control systems (MCDS);
• process control systems.

As of July 2015, the Bastion-2 agro-industrial complex provides ample integration with equipment from various manufacturers: Bolid, Sagittarius, Domination, Intrepid, Perfect, Forteza, etc.

Centralized management of all security systems, the ability to remotely monitor and control subsystems integrated through the Bastion-2 agro-industrial complex, allow the operator to draw up the most complete picture of the state of the facility. This makes it possible to quickly make the right decision in an abnormal situation.

Thanks to the distributed architecture, the Bastion-2 agro-industrial complex operates equally efficiently at facilities of various scales - from small offices to large enterprises with a developed branch network. Security systems for geographically remote objects can be combined using the Bastion-2 - Replication and Bastion-2 - PCN software modules. At the same time, each object will work with its own database of the APK "Bastion-2." This provides centralized event monitoring, device management, remote video surveillance, as well as synchronization of data on electronic passes between sites (branches) of the same enterprise and management of personal data of employees.

APK "Bastion-2" can be used as part of the enterprise management system. The technologies used allow integration with human resources and accounting systems.

Structure of the Bastion-2 agro-industrial complex system

Computer network of APK "Bastion-2" includes the following functional nodes:

Database Server (DB). All system configuration information is stored here. The database server is always one for the entire complex. This computer must work around the clock, since access to the database is necessary for the operation of all subsystems of the complex. Oracle 11g is used as a DBMS.

Together with the Bastion-2 agro-industrial complex, a free version of the Oracle 11g Express DBMS is supplied, which has the following restrictions:

• Use only one core of the computer process
• using up to 1 Gb of RAM;
• the size limit of all databases is 11 Gb.

In this regard, for large projects (for example, if there are more than 2000 active gaps in the MCDS, or there are more than 200 devices with a high flow of events in the system, etc.), it is recommended to use paid versions of the Oracle DBMS.

• The system server is one per system. Performs license validation, scripting and event response management, and a number of other system functions.
• Hardware servers are one or more computers (not limited to software) to which security engines are connected. The number of drivers serviced by each hardware server is limited only by the performance of that server.
• Customer workstations (AWS). Unlimited number of automated workstations without connected equipment.

All of the listed nodes can be combined on the same computer. For example, you can combine a database server, a system server, and a hardware server on a single computer.

The software of the APK "Bastion-2" is structurally divided into four main groups:

• Server license (you need to choose one of the options based on the number of active MCDS passes);
• Drivers (integration modules);
• AWS modules (designed to control the system, or to take into account working time, or to create gaps in MCDS);
• Auxiliary modules (for creation of web requests for passes, implementation of replication service, etc.)

Information about the module and driver usage, as well as the license restrictions of each module, can be found in the HASP Net security key that is installed on the system server.

The network of the APK "Bastion-2" is built on the basis of the TCP/IP protocol.

Features, architecture, licensing of APK "Bastion"

APK "Bastion" as part of the facility security complex ensures the creation and operation of an information collection and processing system (SSOI), which is a key element of modern information security systems.

The product is focused on working in computer networks, allows you to create an unlimited number of operator workstations, as well as perform both centralized and distributed collection of information from devices and transmit the necessary commands and data to them.

APK "Bastion" allows you to combine security systems of geographically remote objects, while providing centralized monitoring of events, control of devices, remote video surveillance, as well as synchronization of data on electronic passes between objects (branches) of one enterprise and management of personal data of employees.

Features of the APK "Bastion"

APK "Bastion" has a unique combination of characteristics and capabilities, which allows our product to occupy a strong position in the market for more than 15 years:

• The minimum set of running modules, simplicity and transparency of the architecture simplify the installation, launch and maintenance of the security complex.
• The modular principle of software license acquisition allows you to optimize the cost of software and use the Bastion complex at facilities of any complexity - from a small office to a large plant.
• Support for modern systems popular on the Russian market - APK "Bastion" successfully works with devices S2000, Strelets, Vista, Domination, ESMI, Intrepid, etc. For each declared manufacturer, the Bastion agro-industrial complex has integration modules that are continuously kept up to date.
• The mechanism of software integration modules, which act as a "layer" between the equipment and the software core, makes it possible to integrate any new equipment into the complex, using the standard graphical operator interface for monitoring and control.
• The openness of the complex and the lack of software binding to the equipment of one manufacturer allows you to best choose the technical means of security for the object both in terms of cost and functionality.
• The object-oriented interface allows the operator to control any devices and systems using interactive menus with typical commands ("put on guard," "show the image," etc.), without delving into the technical and architectural features of the existing information security system.
• Vector graphics allow you to efficiently display both the plan of the entire object and the plans of individual spaces, scaling a single plan in the user window of the main program.
• The software core of the APK "Bastion" provides automatic interaction of devices and systems with each other using the "event-reaction" mechanism. This allows you to increase the effectiveness of ISS and reduce the impact of the human factor on the process of maintaining the safety of the object.

Complex Architecture and Software

The software of the "Bastion" APC is installed on a given number of security system computers connected by an Ethernet network. The main software module of the "Bastion" APC provides a user interface of workplaces and management of technical security tools. This software module is the same for all computers, regardless of their functional purpose in the system.

The system kernel is implemented on any of the computers on the network, which is configured when installed as a database server. All information related to the object (settings, plans, user lists, event log, etc.) is stored in the database of this server.

One or more computers are connected to security appliances (either directly or via Ethernet) and software control and hardware integration modules are activated on them. These computers are commonly referred to as hardware servers. The equipment server can also be a database server - if any devices are connected to it.

The control/integration modules convert the instrument and system exchange protocol into the internal protocol of the complex and back, i.e. the modules broadcast the interface so that the instrument and the program "understand" each other. In addition, the modules provide user interface functions associated with their own device or equipment.

Some computers in the Bastion agro-industrial complex network may not have connected equipment and be clients of other computers - client workplaces. At the same time, in simple systems, one computer can perform all functions simultaneously, that is, it is a database server, an equipment server and an operator's workplace.

In addition to the main software that implements the user interface and device control, the Bastion agro-industrial complex includes additional software modules. Some of them (Bastion-Report report generator, Bastion-URV time accounting systems, Bastion-URV-Pro) are implemented in the form of separate applications and can work without launching the main Bastion program. In addition, the package includes a number of utility programs for system administration.

Licensing

Licensing issues in the APK "Bastion" are solved by using hardware security keys, which are necessarily installed at all workstations of the system, including equipment servers and a database server. The required set of licenses is stitched into the key of each workplace. There are four types of licenses in total:

• Equipment control modules;
• Integration modules with video systems;
• Additional program modules;
• Network workplace module "Bastion-Network."

Licenses for equipment management modules are installed on the equipment server. The name of the module corresponds to the system with which it is integrated, for example, "Bastion-Perfect," Bastion-C2000, "etc.

Video integration modules provide imaging from video surveillance systems. From the point of view of the user, integration modules are similar to control modules and are usually installed on the equipment server.

Each control/integration module license allows you to control not only devices connected to the computer where it is installed, but also devices located on other servers equipment, including viewing video information from surveillance systems.

Licenses for additional software modules are stitched into the keys of those workplaces where their functionality is in demand. These can be either hardware servers or network workstations.

The Bastion-Network license provides the creation of a network workplace without connecting equipment and allows you to monitor events from all control/integration modules available in the system, as well as manage devices connected to other computers.

Hardware

The devices are connected to the equipment servers, as a rule, using COM/USB interface converters in the RS-485. To create a system, you will need, in addition to software licenses, to purchase the necessary number of converters. Each interface converter serves one RS-485 link and requires one free port on the computer.

LLC "NIC" FORCE "produces converters of interfaces of two models:

Elsys-CU-USB/232-485 - provides connection of RS-485 communication line via USB port. Elsys-RC-232/485 - provides the connection of the RS-485 line via the COM port. Can operate in repeater mode to increase link length. Both converter models allow data to be transmitted and received at speeds up to 115 kbps.

Elsys MCDS

One of the subsystems of the Bastion APC is, ACS Elsys which includes Elsys-MB access controllers of various models. The controllers are connected to the computer via the RS-485 interface or via Ethernet using the Elsys-MB-Net network controllers and the Elsys-IP network interface modules.

MCDS operates under the control of the Bastion-Elsys agro-industrial complex software module. Also, during the operation of the MCDS, additional program modules are used: Bastion-URV, Bastion-URV-Pro, Bastion-Print of Passes, Bastion-Passport 2.0, Bastion-Web-Applications, Bastion-Replication, Bastion-Personal Data.

To build a budget version of the Elsys MCDS, you can use the special ElsysPass software, which allows you to create up to 5 MCDS workplaces, up to 10 points of passage, receive reports on events and working times (in a simplified form), as well as configure access controllers.

2011: Cognitive Passport as part of the APK "Bastion"

Cognitive Technologies announced in September 2011 that the Force Research Center is expanding the use of OCR technologies by using Cognitive Passport in the Bastion integrated security system.

NIC "Force" is engaged in the development, implementation and maintenance of its own software products in the field of security: the Bastion hardware and software complex (APC), the Elsys access control and control system and the VideoNova video surveillance system . Two years ago, the specialists of the NIC Force company integrated the Cognitive Passport software product Cognitive Technologies into the Bastion agro-industrial complex. To implement the recognition function of identity documents, the Cognitive Passport API was selected, which provides the functionality of the Cognitive Passport system. Cognitive Passport as part of the Bastion agro-industrial complex is used in several dozen organizations. Among them are the Novomoskovsk joint-stock company Azot, the Phosphorit production group, and the Volga Bank of Sberbank of Russia, Cognitive Technologies said in a statement.

Due to the growing needs of customers for security systems with automatic scanning and document entry functions, NIC Force additionally purchased 10 licenses for Cognitive Passport. According to experts at the Force Research Center, the operation of the Cognitive Passport system as part of the Bastion agro-industrial complex allows you to increase the average pass speed by 2.5 times due to a decrease in the number of input errors to 0.3-0.5% and the use of photo cutting technology. Now, to obtain the necessary data for the employees of the pass bureau, it was enough to put the visitor's passport in the scanner, wait 5 seconds and approve the results.