28000S04 Main Campus and UK Healthcare Security System Standard

Transcription

1 UK 28000S04 Main Campus and UK Healthcare Security System Standard 28000S04- ELECTRONIC SAFETY & SECURITY-Security System Standard University of Kentucky A n E q u a l O p p o r t u n i t y U n i v e r s i t y

2 Table of Contents PAGE 1.1 Summary DSI, Security Unit Price Contractor System Overview System Description UK Campus Security System 3.2 Network Architecture Business Units Delegated Authority Business Units Building Assignments Project Deliverables Products Network Appliance: NLSS GW Access Card Technology Keypads and Card Readers Access Control Hardware Long Range Card Reader Door Hardware Existing Door Key Locks Emergency Notification Tower Camera Pole IP Interior Notification Cameras WIFI IP Enabled Access Control Locks IP Power Over Ethernet Access Control Locks Manufacturer s Warranty 18 University of Kentucky 2

3 1.1 Summary In response to increased security needs and trends across the Nation, during spring 2011 the University of Kentucky Police Department, UKPD, determined that a campus wide unified security system was needed. The proposed system would provide a video management system (VMS) and security management system (SMS). The proposed system would provide situational awareness to targeted areas on campus and utilize Video Event driven analytics to alert UKPD of possible threats to campus. The proposed project would provide campus-wide camera monitoring, early warning system speakers, and other communication devices to monitor and respond to campus incidents. This centralized and campus-wide system would allow for large occupancy structures or restricted areas to be outfitted with access control devices that will restrict ingress remotely from a central location. The proposed new system would include a single ID card. This New ID card utilizes the highly secure iclass technology, as well as other technologies which would allow compatibility with many of the existing legacy systems. At the same time an updated UK Veterinary Diagnostic Lab, VDL, was being constructed. This lab had unique functions that are open to the public while maintaining highly restricted lab diagnostic areas. The VDL project had a state of the art security system that allowed for analytics and access control to be locally and centrally administered. A complete working demonstration of this system was presented in November of This system included many of the features that the UKPD required. A University Security Executive Team was responsible for soliciting additional vendors. Five national SMS/VMS vendors presented to the Executive Committee and UKIT. A Request for Proposal (RFP) inclusive of a Campus Security Master Plan was prepared by Biagi, Chance, Cummins, London Titzer, Inc. The RFP included 15 Academic buildings based on their highest student occupancies. Those building are White Hall, Chemistry-Physics, TH Morgan, WT Young Library, Funkhouser, Memorial Hall, Student Center, Main Building, Patterson Office, Bio Pharmacy, Smith Hall, Ingles Hall, Baldwin Hall, Roselle Hall and VDL. Next Level Security Systems (NLSS) was selected as the manufacturer of the VMS/SMS security platform. Dallmann Systems Incorporated was selected as the Security Integrator. DSI s proposal included a replacement of the UK Healthcare Video Management System (Occularis) and Security Management System (Ccure). This replacement was in lieu of integration between the new Security System and the existing Systems at UK Healthcare as required by the RFP. The NLSS / Security Platform will allow UKPD the ability to correlate video surveillance, analytic alerts and access control data into a single user interface that will enable the UKPD to initiate a proactive response by automated alerts and responses to critical events. Contact Tom Sorrell or Wayne Wilson of BCCLT, Inc. for additional technical information concerning the campus system design University of Kentucky 3

4 1.2 DSI, Security Unit Price Contractor In February 2013 DSI, Dallmann Systems Inc. of Jeffersonville, Indiana was issued a Work Order to install a complete VMS/SMS platform campus wide. The contract included the issuance of 40,000 iclass ID s, 26 Exterior Talk-A-Phones and 21 Building Interior Notification installations. In addition DSI was to provide the following additional services. 1.3 iclass ID Issuance As of September 1, ,000 iclass ID s will be issued. Please contact UKPD for additional information. 1.4 UK Installations A Gateway Installations B Building Access Control C Building Interior Cameras D Building Interior Notification E Campus Cameras F Campus Emergency Phone / Emergency Notification As of September 1, Gateways will be installed, 15 buildings have been provided Access control, 25 buildings have Interior Cameras, 4 buildings have Interior Notification, 150 Campus Cameras and 26 Campus Emergency Phones. Please contact UKPD for additional information. University of Kentucky 4

5 2.1 System Overview 1. Video Management System (VMS) monitors areas on campus. This VMS allows event-based monitoring of campus and situational awareness though IP cameras centrally managed from the University of Kentucky Police Department. The VMS utilizes analytics to identify potential situations on campus and preserving evidence for authorities to review. The NLSS VMS has the capability to be securely monitored via mobile devices or off-campus locations, video sharing with outside public safety first responders 2. Security Management System (SMS) to secure facilities on campus. The VMS platform partners with the Security Management systems on campus to provide UK Police with the ability to limit ingress to buildings but offering free egress from all buildings, from its Communications center and immediately lock buildings when necessary. 3. Standardized Campus ID. A standardized campus ID allows the Police to integrate SMS with existing and new Access Control systems on Campus. 4. Early warning speakers to broadcast threats to campus safety. In response to a crisis, the UK Police Department is able to provide immediate notifications to alert persons on campus through a combination of warning speakers, voice calls, s, and text messages. 5. Emergency Power. All Security System components will be on Emergency Power where available and where not available a UPS will be provided to allow for twenty (20) minutes of full backup on VMS Gateway and Access Control. Where Emergency Power is available the Gateway unit shall be on UPS to protect unit during power transfers. 2.2 System Description The NLSS system is an open standards-based, networked platform that integrates Video Surveillance, Video Analytics and Access Control in a single platform. The NLSS system allows for operation in a distributed model, and/or in conjunction with a Centralized model. University of Kentucky 5

6 3.1 UK Campus Security System 3.2 Network Architecture University of Kentucky 6

7 3.3 Business Units Delegated Authority It is estimated that over 50,000 ID cards will be actively used on campus daily. Due to this large number of participants, over 300 Lexington campus buildings in all operating within 700 acres of campus, a Delegated Authority was essential in managing the proposed VMS/SMS application. This Delegated Authority allows UKPD to be the owner of all components of the UK Main Campus Security System. It also delegates privileges to all Business Units to manage and authenticate. This approach allows the two PPD s to have building access privileges to multiple facilities to perform house keeping, operation and maintenance duties. This Delegated Authority also maintains that only Facilities assigned to each Business Unit has Access privileges. To date 43 Business Units have been granted Delegated Authority. University of Kentucky 7

8 3.4 Business Units Building Assignments The entire Lexington Main building inventory was assigned to each of the 44 Business Units. The assignment was based on the principal occupant of the building. Any building that had multiple Business Units with in the same building were assigned to UKPD. Further, any Business Unit not willing to perform their administrative functions also were assigned to UKPD. The assignments of buildings to individuals Business Units will be revised as buildings use and occupants change. UK Business Units Building Numbers 0050, 0062, 0064, 0066, 0073, 0076, 0088, 0091, 0092, 0094, 0097, 0099, 0154, 0155, 0156, 0157, 0158, 0159, 0160,0161, 0162, 0163, 0164, 0177, 0182, 0183, 0184, 0185, 0236, 0215, College of Agriculture 0229, 0231, 0236, 0275, 0276, 0282, 0287, 0312, 0002, 0024, 0028, 0044, 0051, 0053, 0056, 0057, 0058, 0059, 0061, 0065, 0078, 0082, 0090, 0216, 0225, 0343, 0344, 0345, College of Arts & Sciences 0346, 0347, 432, 618, Carol Martin Gatton College of Business & Economics 0034, 0047 College of Communications and Information Studies 0042, College of Dentistry 0297, 0489 College of Design 0035, 0041, College of Education 0001, 0016, 0038, 0043, 0045, 0046, 0052, 0070, 0107, 0108, 0209, 0237, College of Engineering 0281, 0286, 0495, 503, 633, College of Fine Arts 0021, 0022, 0101, 0102, 0207, 0210, 0241, 0402, 433, 482, College of Health Sciences 200 College of Law 0048, 0400, College of Medicine 0086, 0298, 506, 509, 517, 9983, College of Nursing 0232, College of Pharmacy 596, College of Public Health 0003, College of Social Work 0019, 0074, 0110, 0113, 0117, 0212, 0213, 0222, 0272, 0277, 0283, 285, 413, 448, 449, 450, 451, 452, 453, 485, 585, 604, Athletics 644 Chandler Hospital 0087, 0093, 0096, 0098, 0293, 0294, 602, 630, Good Samaritan 0010, 611, 8633, Kentucky Children's Hospital Shriners Hospital UK Clinic 0223, 0284, 0582 University of Kentucky 8

9 DLAR 0305, Research Facilities / RAD Services / Grant Restricted 0057, 0230, EHS 0214, 0314, 490, Libraries 0224, 0456, Student Affairs / Student Center / Rec Facilities 0030, 0031, 0049, 0219, 0220, 0227, 494, 504, 505, 592, 616, 0067, 0068, 0069, 0077, 0118, 0121, 0122, 0124, 0125, 0126, Fraternities and Sororities 0127, 0128, 0129, 0137, 0138, 0140, 0142, 0507, Food Service 0012,0014, 0071, 0081, 0147, Med Center PPD 0075, 0085, 0089, 0278, 612, 0004, 0005, 0103, 0204, 0279, 0288, 0289, 0300, 0302, 514, Main Campus PPD 518, CNS 0269, 0166, 0167, 0170, 0173, 0175, 0176, 0178, 0187, 0197, 0198, 0199, 0200, 390,391, 392, 393, 394, 397, 398, 399, 416, 418, Parking 419, 571, 572, 601, 613, 0006, 0007, 0008, 0009, 0011, 0012, 0072, 0105, 0106, 0110, 0130, 0131, 0132, 0135, 0136, 0143, 0144, 0145, 0146, 0148, 0149, 0150, 0151, 0152, 0153, 0188, 0190, 565, 566, 567, 568, 243, 244, 245, 246, 0247, 0248, 0249, 250, 251, 252, 253,254, 255, 256, 257, 258, 259, 260, 261, 262, 263, 264, 265, 266, 267, Housing 268, 0240, 0191, 0192, 0193, 0194, EDR 0079, 0080, 0023, 0025, 0026, 0027, 0015, 0029, 0032, 0033, 0036, 0037, 0040, 0054, 0083, 0119, 0211, 0301, 0315, 0324, 0325, 0327, 0333, 0336, 0337, 0348, 0349, 0351, 353, 355, 607, 608, 461, 442, 420, 356, 361, 362, 363, 365, 377, 378, 381, 386, 401, 412, 417, 8, 460, 461, 467, 473, 484, 487,488, 564, 600, 605, 607, 608, 609, 610, 614, 615, 617, 619, 621, 622, 623, 624, 625, 626, 631, 636, 637, 639, 641, 646, UKPD 647, 648, 649, 9127, Graduate School KCTCS/BCTC 0235, 0274, 0481, Maxwell Place 40, 211 CAER 3382 (Spindle Top Research Park) University of Kentucky 9

10 4.0 Project Deliverables A Capital Construction project typically exceeds $600, in Total Scope of Work. However, as shown in the Security Systems Procurement Drawing ALL contract types are available to CPMD PM s to use and implement security installations. This alternative method includes Job Orders to UKPPD or UK Key Shop, Purchasing Solicitations, Price Contracts, CPMD Bidding and Security Unit Price Contract. TYPICAL METHOD: It is envisioned that all CPMD projects in excess of $600,000 will obtain their Security components from a designer contracting and advertising for a Security Integrator. The Security Integrator will typically be a sub-contractor to the electrical contractor. Under this Method following the Security Integrator s installation and commissioning, DSI, the current Security Unit Price Contractor, would verify and connect the new installation on the campus Security Platform. ALTERNATIVE METHOD: 1.) DSI could also perform other steps in implementing the security design. 2.) DSI could provide an assignable allowance to design and install the security components. This proposed method is similar to the Simplex Fire Alarm allowance. Both of these Alternative Methods may not produce the most competitive pricing. RENOVATIONS: If the design contract is primarily renovation of an existing facility, a security assessment may be necessary. Today this assessment is being provided by BCCLT, Inc. Shelbyville, KY, The assessment provides a detail Security Scope of Work and an Estimate without incurring significant design expense. The assessment and estimate can typically be provided within 30 days following the issuance of a Work Order to DSI, Security Unit Price Contractor. University of Kentucky 10

11 University of Kentucky 11

12 5.1 Products Unit Price Contract Components Refer to Appendix A University of Kentucky 12

13 5.2 Network Appliance: NLSS GW-4000-UK Each building fitted with Access Control and or Cameras MUST have at a MINIMUM One (1) NLSS GW4000-UK Gateway installed. The number of Gateways will be determined by the quantities of Cameras and Access Control Points. a. The Gateway is a standards-based, networked platform based on Linux Ubuntu, MySQL, Apache, PHP and Flash. b. The Gateway supports an easy-to-use, intuitive, Web-browser interface to the system. c. The Gateway natively supports the security levels as established by the University. d. The Gateway supports multiple simultaneous users on the system. Appliance Hardware a. The Gateway has two (2) 1 GB Ethernet ports, one supports private connection to cameras the other normal network connectivity. b. The Gateway has four (4) or more USB 2.0 or above ports. c. The Gateway has an internal Hard Disk Drive (HDD) capacity of Eight (8) TB (Terabytes). 5.3 Access Card Technology a. The system supports the following access card bit formats: 1. HID Corporate (University of Kentucky format) 2. The system shall support user-definable custom card bit formats. b. The system requires HID iclass MHz credentials and readers. c. The system supports legacy 125 khz Proximity credentials and readers. 5.4 Keypads and Card Readers a. The system supports the use of keypads and iclass and Prox Card readers on, Assa Abloy wireless and POE models and Mercury controllers. b. The system supports the configuration of single door card-in/card-out readers on Mercury EP1501 controllers. University of Kentucky 13

14 5.5 Access Control Hardware a. The Gateway supports the following third party access controllers and readers: 1. Mercury Security EP Mercury Security EP HID Edge ERP40 Reader/Controllers 4. HID Edge+ E400 Controllers 5. HID bioclass Biometric Keypad Smart Card Reader 6. Sargent vs1 PoE locks 7. Sargent vs2 Wireless locks b. The Gateway supports the following third party AC Reader Interfaces: 1. Mercury Security MR52 2. Mercury Security MR50 3. Mercury Security MR51e c. The Gateway supports the following, but not limited to, third party access hardware I/O modules: 1. Mercury Security MR16in 2. Mercury Security MR16out d. The Gateway supports the following third party Power over Ethernet (PoE) devices mentioned below: 1. Mercury Security EP Mercury Security MR51e 3. HID 6120 (R40) Readers 4. Sargent v.s1 locks e. The Gateway supports the following third party card readers: 1. HID Prox 2. HID multiclass 3. HID iclass 5.6 Long Range Card Reader: 5.7 Door Hardware Long Range Card readers must be used at all ADA entry doors on all buildings. Refer to UK Standards ADA. Long Range Reader Shall be: 1. HID s iclass Long Range Reader 2. HID Model 6150 (R90) Refer to UK Standard Division 8 Windows and Doors for applicable installations. University of Kentucky 14

15 5.8 Existing Door Key Locks When Access Control is added to existing campus buildings any door with key locking Capability shall have Door Monitoring installed. After door position monitoring or access control is added all key cores will be removed. Key cores will remain at ADA doors only as the Emergency Access point on all buildings with SMS. Keys will no longer allow access to the building unmonitored. 5.9 Emergency Notification Tower Talk-A-Phone Model: WEBS-MT/R OP 4 Including: VOIP-500 IP Phone WEBS-BACKUP 24hr backup power WEBS-CONTACT WEBS Contact MNS Software Paging & Diagnostics Package WEBS-PA-2IP IP Outdoor Area Paging Unit General Description The unit is highly vandal-resistant free-standing steel emergency phone tower mount, with built-in combination LED Blue Light, illuminated faceplate, an integrated extension arm for mounting a CCTV dome camera and Emergency Notification System (ENS) capability. The tower houses an ADA-compliant, communication device. The Tower runs daily self- diagnostics, testing lights, phone, amps and UPS units and send reports to administration. University of Kentucky 15

16 5.10 Camera Pole SUMMARY Exterior cameras are mounted on top of decorative free-standing aluminum pole accommodating a variety of different manufacturers network cameras. PRODUCT Campus camera poles are a 14 foot Holophane Charlestown CH14F4 Black aluminum fluted pole or equal on central campus. South campus is a Moog VideoLarm P1800 or equal. Refer to UK Specification section 16530S01 - SITE LIGHTING for more information. Specification can be found at this URL: South campus area is defined as the area South of Woodland Ave., Hilltop Ave. and University Drive to Huguelet Ave over to Rose Street. The Dorm Complex, Central / Haggin Hall, Med Center, Ag Buildings and all parcels south of these buildings are included in this area. All other areas are considered central campus. Pole base must match the bases of existing poles in the area of installation. Poles must be installed to match the pattern of the existing pole in the area of installation IP Interior Notification Currently Interior Notification consists of utilizing InformaCast broadcasting thru Simplex Fire Alarm Panel 4100 or compatible voice evacuation system. All installations will be in accordance with the most current NFPA standards. Valcom IP Horn Model: VIP-480L-IC with V-9805 Vandal-Resistant Enclosure The IP Paging Horn is a self contained paging system which enables voice paging up to 1200 feet from an Ethernet connection. The Horn consists of a high efficiency 3 Watt Class-D Horn and a VOIP unit allowing it to be accessed from a variety of managed VoIP products. The Horn has a distance limit of 300 feet with connection to PoE switch, up to 1200 feet with use of an extender unit. The Horn supports InformaCast - IP Notification by Singlewire Software. It is Cisco compliant. University of Kentucky 16

17 5.12 Cameras Exterior: Sony SNC-ER580 (PTZ) with Sony UNI-ORL7C2/T2 Series (Dome Enclosure), Sony SNC-CH210 with Moog FDP75C2N Enclosure or AXIS P3346-VE. Interior: Sony SNC-VM601B or Samsung SNV General Requirements a. The camera must be of the manufacturer s official product line, designed for commercial / industrial 24/7/365 use. b. The camera is based upon standard components and proven technology using open and published protocols WIFI IP Enabled Access Control Locks: (MAY ONLY BE USED ON INTERIOR DOORS) IP Enabled IEEE b/g (2.4 GHz) WiFi Access Control Integrated Card Reader Lock, BHMA certified extra heavy duty, lever type lock. Lockset with integrated MHz contactless card reader, request-to-exit, latchbolt and deadbolt monitoring, and door position signaling in one complete unit. Emergency override access capability with optional mechanical key cylinder retraction of lock latch bolt without necessary electronic activation. Models: (Or Equal) Equal MUST READ ALL iclass Information SARGENT Manufacturing (SA) Profile S Series. SARGENT Manufacturing (SA) - N-120 Series IP Power Over Ethernet Access Control Locks (MAY ONLY BE USED ON INTERIOR DOORS) IP Enabled IEEE 802.3af Power-over-Ethernet (PoE) Access Control Integrated Card Reader Lock, BHMA certified extra heavy duty, lever type lock. Lockset with integrated HID MHz contactless card reader, request-to-exit, latchbolt and deadbolt monitoring, and door position signaling in one complete unit. University of Kentucky 17

18 Power Over Ethernet intelligent and integrated access control locking devices interface using IEEE 802.3af Ethernet data and power communication capability directly from the locking unit back to a host server over an existing or newly installed TCP/IP network. Emergency override access capability with optional mechanical key cylinder retraction of lock latch bolt without necessary electronic activation. Models: (Or Equal) Equal MUST READ ALL iclass Information Sargent Manufacturing (SA) Profile S Series. 6.1 Manufacturer s Warranty a. Product Warranty Period: One year commencing on Date of Substantial Completion. b. Z c. E d. Manufacturer s Warranty: Submit, for Owner s acceptance, manufacturer s standard warranty document. e. RFP Warranty: Five year commencing with the date of contract execution. University of Kentucky 18

19 Appendix A DSI Unit Prices University of Kentucky 19