About marioverhaeg

Question   How can be configured BVMS to function in a GDPR compliant organization?   Answer   The GDPR (General Data Privacy Regulation) is enforced on the 25th of May 2018. As a regulation it is directly applicable to all EU member states without the need for national implementing legislation. As information captured, processed and stored by video surveillance systems is classified as "sensitive" the GDPR will cause significant impact on the video surveillance installations throughout Europe. This article gives insights into the new legislation and describes how a video surveillance system can be designed and configured in order to help an organization comply with this new regulation. This article describes how the GDPR impacts video surveillance systems and how BVMS can be configured to function in a GDPR compliant organization. Since the publication of this guide the European Data Protection Board (EDPB) has issued a paper specifically targeted at video surveillance installations: GDPR video surveillance guide. Section 1 of the article:  will describe the functional requirements as they were extracted from the GDPR by the Bosch legal teams. Section 2 of the article:  will describe how these functional requirements affect the system design phase of a project. Section 3 of the article: will describe how these functional requirements affect the system installation phase of a project. Section 4 of the article:  lists some general exceptions which are applicable for all video surveillance systems. Last, but not least, a list with frequently asked questions and a dictionary is included.   General Data Protection Regulation (GDPR)   The full text of the "Position of the Council at first reading with a view to the adoption of a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)" can be found on the website of the European Union.   Key changes   A description of the key changes can be found on http://www.eugdpr.org/key-changes.html   Information Website Description https://ec.europa.eu/info/ Official EU website. Stronger rules on data protection mean people have more control over their personal data and businesses benefit from a level playing field. https://edpb.europa.eu/edpb_en The European Data Protection Board (EDPB) is an independent European body, which contributes to the consistent application of data protection rules throughout the European Union, and promotes cooperation between the EU’s data protection authorities. https://en.wikipedia.org/wiki/General_Data_Protection_Regulation General Data Protection Regulation on Wikipedia.   Requirements   1. Functional requirements Bosch has analyzed the GDPR. The analysis resulted in the functional requirements listed in the table below. These functional requirements are applicable to all systems that process personal information and not specific for a video management system. The "Description" column describes how the requirement is related to a video surveillance system.   2. Concepts   System design   1. Data protection impact assessment Next to the requirements of the system itself, article 35 requires an organization to conduct a data protection impact assessment. "Where a type of processing in particular using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall, prior to the processing, carry out an assessment of the impact of the envisaged processing operations on the protection of personal data." Source: GDPR full text, Article 35, section 1 (page 164)   2. Camera positioning Related to requirement(s): [20,21] Video cameras should only be installed in areas where they serve a specific goal. The installed location of a camera, which is gathered personal data (or biometric data), should be justified.   3. System resilience Related to requirement(s): [23] Hardware mechanisms (RAID, redundant components) as well as software mechanisms (for example dual recording) are available to minimize the chance data is lost. Hardware mechanisms (access control to rooms, physical locks, and others) as well as software mechanisms (encryption of data, the architecture of the software itself) are available to minimize the chance data is stolen.   System configuration and operation   1. Signage Related to requirement(s): [7,8] The data protection notice cannot be made easily available to data subjects in the context of a video surveillance system. (IFSEC Global)   2. Time-service Related to requirement(s): [10] Offering a reliable time-service to entire video surveillance environment ensures that all the components, such as cameras and software clients, are using the same, synchronized, clock. Bosch provides a recommendation on how to setup a reliable time-service within the video surveillance environment. This recommendation is available on the Bosch Building Technologies community: BVMS - Configure Time services.   3. Video Authentication Related to requirement(s): [12,20,23] The video authentication functionality should be enabled. This allows system operators to check (either during export or on the actual recorded video) if (unauthorized) modifications are made to the recorded video footage.   4. Removing personal data Related to requirement(s): [13,14,15,25] A self management erasure functionality may be considered only if personal data can be erased without further assessment (for example, regarding retention obligations under applicable tax or commercial law). Summarized: it would not be allowed for people which appear on recorded footage to delete this footage themselves. The system includes a retention time mechanism which automatically removes recorded footage and logbook data after the maximum retention time has passed.   5. Removing biometric data Related to requirement(s): [13,14,15,25] A self management erasure functionality may be considered only if personal data can be erased without further assessment (for example, regarding retention obligations under applicable tax or commercial law). Summarized: it would not be allowed for people to delete their own biometric data from the system. The system includes a retention time mechanism which automatically removes biometric data from the logbook as well as a mechanism to remove biometric data manually by anonymizing information in the logbook and removing subjects from the person identification subject list.   6. Restrict access to data Related to requirement(s): [16] Access to person and biometric data (recorded video and logbook) can be restricted to specific (groups of) operators.   7. Video Export Related to requirement(s): [17] Video footage can be exported in several file formats, proprietary (Bosch) as well as open standards (mov, asf). The proprietary export format can be read by Bosch software, the open standard exports can be read by industry standard software (Apple Quicktime, VLC, Windows Media Player, etc...)   8. Export biometric data Related to requirement(s): [17] Biometric data can be exported using the logbook export functionality for operators(groups) who are authorized to do this.   9. User authorizations Related to requirement(s): [19,22,23] The system allows complex user rights configurations. This allows a system administrator to give access to specific system components (cameras, sensors, maps) and system functionality (live, recording, alarms, export) to specific operator (groups). Additionally most operator tasks are logged in the system logbook for further reviews   10. System protection Related to requirement(s): [23] Bosch recommends implementing the tips mentioned in the data security guidebook to decrease the risk of personal or biometric data being accessed, modified, or destroyed by unauthorized persons.   Exceptions   1. Provide personal information Related to requirement(s): [11] At this moment the video surveillance system is not able to identify a person without adding a, separate, person identification system generating biometric data. Personal data can be (theoretically) provided, but would require the operator to manually browse thousands of hours of recorded video. (GDPR full text)   Conclusion   After some intensive discussions with experts on all of these topics, Bosch has concluded that the current video surveillance products (including cameras, software and recording hardware) will allow an organization to be GDPR "compliant".   Frequently asked questions   The questions and answers below are gathered from several sources for the readers convenience. At the moment of writing this article the answers are valid. Question Answer Source Who does the GDPR affect? "The GDPR not only applies to organizations located within the EU but it will also apply to organizations located outside of the EU if they offer goods or services to, or monitor the behavior of, EU data subjects. It applies to all companies processing and holding the personal data of data subjects residing in the European Union, regardless of the company’s location." https://www.eugdpr.org/gdpr-faqs.html Does my business need to appoint a Data Protection Officer (DPO)? "DPOs must be appointed in the case of: (a) public authorities, (b) organizations that engage in large scale systematic monitoring, or (c) organizations that engage in large scale processing of sensitive personal data (Art. 37). If your organization doesn’t fall into one of these categories, then you do not need to appoint a DPO." https://www.eugdpr.org/gdpr-faqs.html What is considered as "sensitive personal data"? "Personal data which are, by their nature, particularly sensitive in relation to fundamental rights and freedoms merit specific protection as the context of their processing could create significant risks to the fundamental rights and freedoms. Those personal data should include personal data revealing racial or ethnic origin,..." https://data.consilium.europa.eu/doc/document/ST-5419-2016-INIT/en/pdf What is considered as "biometric data"? "Biometric data' means personal data resulting from specific technical processing relating to the physical, physiological or behavioral characteristics of a natural person, which allow or confirm the unique identification of that natural person, such as facial images or dactyloscopic data;" https://data.consilium.europa.eu/doc/document/ST-5419-2016-INIT/en/pdf Are images captured by a video surveillance system considered as sensitive personal data? Yes, as a photo can reveal racial or ethnic origin this information is considered sensitive. https://data.consilium.europa.eu/doc/document/ST-5419-2016-INIT/en/pdf Does the GDPR require the system to anonymize all data subjects by using of "pixelization"? Pixelization is a technique whereby any moving object appearing in front of a video surveillance camera is blurred. In the context of the GDPR this process is called pseudonymisation. In contrast to what is marketed by many, data subjects do not have to be anonymized and therefore the use of pixelization software is not required. However, "Where the processing for a purpose other than that for which the personal data have been collected is not based on the data subject's consent... the controller shall...take into account: the existence of appropriate safeguards, which may include encryption or pseudonymisation." Summarized and put into context: if the position of a camera cannot be justified, pseudonymisation may be used to keep a legal basis for the position of that specific camera. https://data.consilium.europa.eu/doc/document/ST-5419-2016-INIT/en/pdf How does GDPR influence the deployment of person identification? According to article 9 the processing of biometric data is prohibited: "Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation shall be prohibited." https://data.consilium.europa.eu/doc/document/ST-5419-2016-INIT/en/pdf Does GDPR allow processing of biometric data at all? GDPR only allows processing biometric data based on the description of article 9 section 2, in which exceptions on article 9 section 1 are described. https://data.consilium.europa.eu/doc/document/ST-5419-2016-INIT/en/pdf     Dictionary   This section provides some important definitions of terms. The source of these definitions, and all other definitions, can be found in: GDPR full text Article 4, page 112.   Term Definition Controller "The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;" Data subject "...identified or identifiable natural person..." Personal data "Any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; Processing "...means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;" Pseudonymisation "...means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;" ... View more

 Note For the latest info in relation to BVMS version 12 or above, please contact the Central Technical Support team: Bosch VIDEO Security Systems request and Central Technical Support Team   Possible causes and solution(s)   Causes   Alarm recording and continuous recording set in BVMS increase the storage consumption.   Solution   Video surveillance cameras generate more data as a result of higher resolutions and frame-rates. This has a direct impact on the storage costs of the entire video surveillance environment. The storage consumption can be reduced to use alarm recording instead of continuous recording. This means the system will only start the recording when an alarm is generated (for example, when motion is detected). However, in some projects continuous recording is still required. This article describes how the Bosch Video Management System can be used to combine the best of alarm recording and continuous recording, and as a result further decrease the storage consumption when continuous recording is required.   Adaptive streaming Adaptive streaming is a functionality which combines the Intelligent Streaming and Quad Streaming of the Bosch cameras with the stream management functionality in BVMS.   1. Intelligent streaming Storage consumption is related to the bandwidth (data) generated by a camera. There are several settings which will influence the bandwidth generated by the camera, including the (most known) frame-rate and resolution. However, Bosch cameras are equipped with Intelligent Streaming, which allows the camera to automatically adjust advanced encoding settings based on the content of the scene.   1.1 Intelligent streaming Intelligent Streaming is defined by four parameters. Bitrate optimization: „refers to the priority given towards image quality or bitrate reduction. The “High quality” or “Maximum quality” provides less or no bitrate saving, but a good to excellent picture. “Low bitrate” and “Medium bitrate” save more bandwidth, but the resulting image may provide less details. Maximum bitrate: defines the highest allowed bitrate. Target bitrate: „defines the average bitrate assuming the “Averaging period” parameter is set. Averaging period: the task of Intelligent Streaming is to keep the average bitrate during the averaging period at the level of configured target bitrate. When there is less movement in the scene the camera will use much less bandwidth than the configured target bitrate. For scenes with a lot of movement it will utilize more bandwidth but never more than configured maximum bitrate. If there is more movement than could be averaged, into the target bitrate, Intelligent Streaming will slightly reduce image quality to keep the average target bitrate over the averaging period. As a result, Intelligent streaming does not only reduce the bandwidth, it also allows the system administrators to improve the prediction on the amount of storage that is consumed by the video surveillance system. The image below shows the existing situation, with bitrate optimization and averaging disabled. Between 8am and 4pm the quality of the stream might be reduced due to the cut-off at the maximum bitrate.   The image below shows the situation with bitrate optimization and averaging set.   1.2 Group of pictures In order of size, a group of pictures can consist out of three different types of frames: I-frame: I-frames (intra frame) is a complete picture. P-frame: P-frames (predictive frames) reduce bandwidth and storage usage as they are smaller in size than I-frames. P-frames use data from previous frames and only contain the changes compared to the leading I-frame. B-frame: „B-Frames (bi-directional predictive frames) reduce bandwidth and storage usage as they are smaller in size than P-Frames (predictive frames). „B-Frames have references to previous (frames generated before the B-Frame) and to following frames (frames which will be generated after the B-Frame)  Image source: Wikipedia - Video compression picture types A group of pictures (GOP) starts with an I-frame (Inter-frame) and ends before the next I-frame comes. The I-frame distance shows how many frames the GOP is made of. For example, an I-frame distance of 10 means that the GOP consists out of 1 I-frame and 9 B or P frames. From BVMS 9.0 onwards, IP, IBP and IBBP structures can be configured (depending on the camera capabilities).   Transmitting I-frames requires more bandwidth then P or B frames. A large GOP is saving bandwidth and reduces the storage consumption because there are less I-frames generated over a time period (e.g. 1 minute) by the encoder. From BVMS 9.0 onwards, the maximum size of a GOP is 255 frames.   2. Quad Streaming Bosch cameras are able to offer four streams with different capabilities. The capabilities that can be set are a combination of the resolution and the base frame-rate. The exact possible settings depend on the camera model.     2.1 Camera capabilities and platforms Each Bosch camera has different streaming capabilities. There are mentioned in the datasheet of the specific camera, and depend on the performance of the camera. Bosch video devices are broken up into categories known as Common Product Platforms (CPP). A device’s category is based on several factors to include the Digital Signal Processor (DSP) it is equipped with, and its inherent capabilities. When selecting firmware to install on a device, the firmware is also categorized by CPP number.   When working in BVMS, you will notice that video devices are further broken down into categories called Device Families. These Device Family categories make the configuring and management of devices simpler and more effective. • Device Family 1: This device family is comprised of older H.263 IP cameras and encoders that are categorized as CPP-ENC • Device Family 2: This family includes SD and HD CPP-3 devices that are H.264 capable. This family also include the VIDEOJET multi 4000 encoder (CPP-5) • Device Family 3: All CPP-4 and newer devices are members of this family    There are several “key” configurations that are performed in BVMS that are specific to a family type. These family groupings provide you a way to configure SD, HD, MP, UHD, and panoramic cameras simultaneously, even though they all support different resolutions, frame rates, aspect ratios, and compression codecs.   3. Stream Management BVMS offers extensive stream management functionality, ranging from (customizable) schedule-based stream management to, specific, situation-based stream management. Although Intelligent Streaming is able to optimize most settings automatically, further savings can be achieved with using the specific stream management settings.   3.1 Triggers Schedules The first step in configuring stream management is to set-up specific schedules. Schedules allow a system to differentiate in recording quality.   By default the system contains three schedules: day; night and weekend. The schedules are based on a seven-day week and exception days (holidays) within a schedule can be created as well. Additionally events can be created on reoccurring triggers, for example a specific day in the week, month or year. These settings can be found in the "Schedules" tab of the configuration client. Below is a simple modified schedule: Day 6AM to 8PM / Night 8PM to 6AM. Alarms Next to schedules, alarms can also be used to trigger changes in the recording quality. The start of alarm recording can be configured within each specific alarm, for multiple cameras. When the alarm is active, the alarm recording settings, which are further discussed in the next section, will be applied to the selected cameras. This is independent of the configured schedules.   3.2 Profiles BVMS pushes streaming profiles out to groups of cameras. A streaming profile does not impact the resolution of the stream, but rather influences other parameters (for example the encoding interval and the GOP structure) of the stream. An encoder or camera can change the settings in the profile on the fly, which makes the profile suitable for adjustments based on the actual situation or schedule.   Configuration out of the box In order to ease the configuration, BVMS has specific streaming profiles pre-configured. The profiles are built up using the overview in the two tables below.   The scene type and use-case are combined into a profile, which can be selected for each camera, as shown in the image below. Additionally PTZ optimized, and Cloud optimized profiles are added.   Profile definition * Bitrate optimization is switched off for CPP4 cameras.   Fine-tuning To create and properly modify a new Stream Quality Setting: 1. Select the correct profile: a. If the new profile will be deployed on cameras using different platforms: open the desired base profile you want to use as a starting point, and select the correct platform. b. If the new profile will be deployed on cameras using the same platform: open the desired base profile you want to use as a starting point. 2. Select the plus (+) tab under Stream Qualities. 3. This will create a duplicate of the selected profile. 4. Highlighting the new profile allows the renaming of the profile as well as edit access to all sub profiles.   If 1b has been chosen: by selecting the “drop-down” option of the profile, it reveals multiple sub-menus: • Each sub-menu is associated with a specific camera and any of the different Application Variants that it can be configured in. • Each sub-menu allows access to stream 1 and 2 of each profile device. This allows for framerate and bitrate modification.     4. Recording Management In order to ensure that a system is configured to record at the correct bit rates and framerate, the correct recording settings must be configured. To access the recording settings menu, select the “Edit scheduled recording settings” icon in the toolbar.     The “Scheduled Recording Settings” menu comes with six (6) base recording profiles that can be modified. This menu can manage over fifty different scheduled recording settings.     To create a new scheduled recording setting, select any of the base recording profiles and then select the plus (+) tab at the top of the menu. A copy of the base recording schedule will be made. The newly created copy can be renamed and modified as needed. In this example, the recording profile was renamed “MY SYSTEM”. Once you have created or selected a recording setting, prior to making modifications, be aware of the device family you are working with. • Device Family tabs will appear only if an applicable device has been added to the system. • If working with more than one Device Family, you must modify the recording settings for each family tab if the recording setting is used for all families.   Each family tab also allows you to access the system’s “Recording Schedules”. Each family’s recording profile needs to be modified for each “active” schedule. The Continuous or Pre-Alarm Recording section of the menu allows the following modifications: • Recording: On or Off. • Recording Mode: Continuous or Pre-Alarm. • Stream: Stream 1, Stream 2, or I-frame only (depending on device capabilities). • Quality: Select the profile to be used by stream 1 to record. • Pre-alarm: the pre-alarm time that should be recorded. • When the pre-alarm time is < 10 seconds: the recording can be buffered within the memory of the camera (even when no SD card is available). • When the pre-alarm time is > 10 seconds: depending on the camera model and bandwidth, the recording cannot be buffered with the memory of the camera. The camera will continuously record. This will be indicated in the time-line by a "moving" recording block (this is continuously overwritten). This setting always takes precedence over Stream 1 quality settings.   he Alarm Recording section of the menu allows the following modifications: • Alarm Recording: This is enabled by default and allows the video to be tagged as alarm recording for any associated configured event in the system. • Motion Alarm: This is off by default. This must be enabled, if motion alarms from the device are to be tagged as alarm video.       4.1 Assigning recording settings Assigning specific “Scheduled Recording Settings” to devices is performed in the “Cameras and Recording” menu, VRM submenu. On the far right hand portion of the menu page, there is the “Recording” section: • Setting: This menu allows you to select the desired recording profile. Example “MY SYSTEM” • Storage Min: This menu allows you to define the minimum time that recordings will be kept before they are allowed to be overwritten • Storage Max: This menu allows you to define the maximum time that recordings will be kept before they are released • Unlimited places the recording into a classic “FIFO” mode, like a DVR   ... View more

Possible causes and solution(s)   Causes   The network infrastructure for the video surveillance system is similar to a road for a car: you can have a 500.000 EUR Ferarri, but that will not allow you to drive through the desert. The network infrastructure needs to fit the application, in this case a video surveillance system, and can make or break the entire system. This guide should help system architects, designers and installers to prevent network-related issues and troubleshoot network-related issues. A video surveillance system is nothing more than an IT application, running on top of an IT infrastructure. This means that the system is depending on IT components, but system functionality can also be expanded using standard IT tools. An example, mentioned in this guide as well, relates to system monitoring. There are hundreds of IT applications build to monitor the state of an IT system, which can also be used to monitor the state of a, BVMS based, video surveillance system.   Solution   ❗️ BVMS - Network design guide.pdf   The purpose of this guide is to cover only those IP technologies that are relevant for Bosch video surveillance systems. It is not the goal to serve as training or textbook for IP network technology in general. “Simplicity is the ultimate sophistication.” (Clare Boothe Luce) Keeping things simple is key in keeping them understandable. It will make things easier in the installation, configuration, maintenance and troubleshooting. ... View more

Question   Which are the different design options available when designing a BVMS system (BVMS - Blueprints)?   Answer   The attached documents show the different design options that are available when designing a BVMS system.   BVMS Blueprints BVMS 10.0.1 - Blueprints.pdf BVMS 10.1 - Blueprints.pdf BVMS 11.0 - Blueprints.pdf BVMS 12.0 - Blueprints.pdf ... View more

Question   How is the exact functionality of the BVMS system (Architects and Engineering specification)?   Answer   The attached documents from this article describe the exact functionality that BVMS system provides. It allows architects and engineers to specify the behavior of a video management system. ... View more