Cybersecurity
The IT and data security requirements for a networked physical security information management system that captures security-relevant data and controls critical security systems are exacting.
The leading browser-based PSIM GEMOS is a state-of-the-art system that is equipped with the necessary functions to respond to the current threat situation and the thematic complexity of "Cybersecurity" and has long been an integral part of the development roadmap.
-
Core functions for IT security in GEMOS
- GEMOS 5 platform and non manufacturer-specific browser-based client application with highly-encrypted server connection (HTTPS)
- TLS 1.3 – AES-256 encryption is used as standard according to BSI specifications to safeguard communication between system components (server, workstations and GEMOS interfaces for example)
- Physical separation of GEMOS networks and customer networks
- Non platform-specific and non manufacturer-specific browser-based client application with highly-encrypted server connection (HTTPS)
- Server-side protection and monitoring of application configurations and data against unauthorized changes
- High-availability server solution for outstanding operating reliability and automatic changeover to backup systems
- Encryption of relational database with encryption standard AES-256
- Regular IT security check by external bodies (penetration tests, security checks and independent certifications)
- Protection of relational database from unauthorized access
- Product LifeCycle Management
-
Adaptations implemented so far:
- Fire alarm systems
- Assault and intrusion detection systems
- Video surveillance systems
- Access control systems
- Fire extinguishing and SHEV systems
- Escape door and sluice door control systems
- Intercom and cell call systems
- Electrical loudspeaker systems
- Telephone systems (telephone communication systems, Voice over IP)
- Building management system
- Personal emergency response system
- Radio systems
- Media technology (audio, video, control)
- Hazard alert systems, failure reporting systems, alarm systems
- IT hardware over SNMP
- Elevator control
- Event-controlled autonomous drone flight
In 2020 ela-soft GmbH received the LenelS2 certification within the scope of the LenelS2® OpenAccess Alliance Program
The LenelS2 certification means that GEMOS participates in the LenelS2 OpenAccess Alliance Program (OAAP). GEMOS interfaces with the OnGuard®access control system using approved OnGuard APIs. The advantage for users is that the GEMOS system automatically detects changes to devices in the OnGuard system and displays these changes in the GEMOS system. Consequently GEMOS remains synchronised with ongoing expansions or changes in the security structure.
GEMOS 5 Next Generation PSIM
The GEMOS 5 "Next Generation PSIM" was launched on the market at the end of 2021. GEMOS 5 marks a fundamental redesign of GEMOS PSIM (advanced physical security information system) from the core to the modular structure, new user interfaces (GUI) and master data management.
Numerous media, communication and security systems, such as fire alarm systems, intrusion detection systems, video surveillance systems, access control systems, fire extinguishing and smoke and heat exhaust ventilation systems and much more, can be managed irrespective of the manufacturer in GEMOS.
High availability and secure interfaces are the basis for the smooth-functioning linking of third-party systems to management systems. Intelligent GEMOS interfaces provide a separate driver for linking with every third-party system.
-
The major modifications of GEMOS 5 are:
- GEMOS Refactoring (structural improvement of source codes while maintaining the observable programme behaviour) of all core processes.
- The three pillars of GEMOS security: Encryption: TLS cryptologies 1.3 – AES-256 to BSI
- Integrity: operating reliability and attack security
- Availability: GEMOS redundancy concept solutions
- GEMOS user authentication: extensive support of security settings (password length/validity/complexity)
- GEMOS Mosaic: powerful 4th generation of visualization, usage and control
- GEMOS GUI relaunch: revision of the web-based user and operator interface while retaining free, individual and requirement-based design options
- GEMOS – platform independent: possible to use operating systems such as Windows or Linux on servers and workstations
- GEMOS IPv6 ready: for “Next Generation” interfaces (manufacturer support relevant)
- GEMOS Video: browser-based HTML5 video stream integration, e.g. on H.264 basis, from various leading video management systems (live, archive), or ONVIF compatible or RTSP compatible IP cameras. Control of PTZ cameras.
- GEMOS – browser independent: supports Microsoft Edge Chromium, Google Chrome, Mozilla Firefox
- GEMOS server independence of the modular GEMOS interfaces to the different sub-systems. Server-based central control (installation, system configuration, updates) by GEMOS Distribution and Remote Control Service
- Active directory authentication in GEMOS
- GEMOS HTTP/2: improved speed, increased efficiency and security of data transmission
- GEMOS Web API: possibility of independent development of GEMOS user interfaces by partners
- GEMOS SDK: possibility of future independent development of GEMOS interfaces and GEMOS modules by partners
- GEMOS Geographic Information Systems (GIS) – supports mapping of fixed and dynamically acting sensors using GPS coordinates
GEMOS 5 Enterprise solutions
With the Enterprise solution, all buildings can be monitored from one control center.
- GEMOS 5 "Enterprise Light" describes a redundant system locally in one place with two servers. In this configuration, the redundant system steps in when the main server fails and once the main server has been restored and activated, messages and events of the redundant system that have accumulated in the meantime are transferred automatically to the main system. In this expansion stage, although the master data is in fact regularly transferred automatically from the main server to the redundant server, this data would not be transferred from the redundant server back to the main server following restoration in the event of a failure.
- GEMOS 5 "Enterprise Standard" consists of a control room installation and up to eighteen locations. If requested, the installation at the locations can have the functional scope of the "Enterprise Light" system (local redundancy). The messages from local interfaces, events and messages are transferred from the locations to the control room in real time. Master data is only maintained at the control room and automatically transferred to the locations (central data administration/data sovereignty). The control room has a redundant configuration, in the event of a total failure of the control room, or connection of a location to the control room, the location operates locally and autonomously. Accumulated messages and events are also transferred automatically from the location to the control room in this case once the connection or control room systems have been restored and activated.
GEMOS 5 Mosaic
- GEMOS Mosaic – the powerful 4th generation of visualization, use and control of views, ground floor plans, layouts and their contents in GEMOS
- Stepless zooming in on ground floor plans resulting in increasing display of detail ("Google Maps Effect"), e.g. zooming into the building.
- Geographic Information Systems (GIS) – supports mapping in GEMOS 5 of fixed and dynamically acting sensors using GPS coordinates
- Monitoring of moving objects (e.g. drones)
- In this connection also definition of areas ("alarm zones") and issuing of alarms in cases where moving objects leave or enter these areas (e.g. restricted zones)
- Embedding of video streams: the video live stream of a drone during a surveillance flight can be displayed.
GEMOS 5 HTML5 video
- Video images in GEMOS 5 are integrated natively via HTML5/Web RTC which means that external additional client applications are no longer required
- Video Management Systems and cameras that offer an HTML5 video stream can be integrated into GEMOS 5 directly.
- GEMOS 5 is equipped with an optional video proxy so that HTML5-capable Video Management Systems and cameras can be integrated into GEMOS 5
- Access to functions of the Video Management System such as archive images, control commands/presets, etc. through intuitive browser operation (used in same way as "YouTube")
- Highly-scaleable video proxy facilitates integration of a large number of video cameras and several Video Management Systems in parallel. The Proxy Server transcodes the video streams of the various cameras and Video Management Systems which reduces the demands on the GEMOS client systems.
- Streaming of HTML5 videos in the browser (installation of a separate application for displaying videos at the workstation is not required)
GEMOS 5 new interfaces, graphics and more
- GEMOS 5 GUI relaunch – revision of the web-based user and operator interface while retaining free, individual and requirement-based design options
- Icons and symbols in vector graphic format – infinitely-variable scalability with zero loss of quality
- CAD import – support of the current DWG AutoCAD file formats in GEMOS for the graphic import of drawings without requiring external conversions. Positioning, exchange of properties and import of detectors via the CAD drawing block attributes. Support of CAD layer structures, working with referenced drawings (XRefs).
- Improved operability and user-friendliness based on so-called UI/UX concepts. This makes it easier for new operators to initially get to grips with the system, the application can be used more intuitively and the training requirements also reduced.
- This involves reworking of the control elements in GEMOS 5 with a view to modernising the graphics and increasing user-friendliness.
GEMOS advanced PSIM is equipped with more than 900 interfaces for nearly all known manufacturers, is a market and technology leader in this sector. Although many of the core requirements are similar for all projects, they are also equally diverse in terms of detailed implementation.
Solutions
Sector-specific solutions
Individual project solutions for different sectors.
Sector-specific solutions
Contact
Leave no questions unanswered
If you have any questions or need further information, please contact us – We are glad to help you!
Contact now
