Unofficial translation
Note of ILLI!The order of enforcement of this Order, see paragraph 4.
In accordance with paragraph 5 of Article 30-1 of the Law of the Republic of Kazakhstan dated November 24, 2015 "On informatization" I HEREBY ORDER:
1. To approve the attached Rules for the functioning of the National video monitoring system.
2. The Information and Cyber Security Service of the National Security Committee of the Republic of Kazakhstan shall ensure:
1) state registration of this Order with the Ministry of Justice of the Republic of Kazakhstan;
2) posting this Order on the Internet resource of the National Security Committee of the Republic of Kazakhstan.
3. Control over the execution of this Order shall be entrusted to the supervising Deputy Chairman of the National Security Committee of the Republic of Kazakhstan.
4. This Order shall come into effect upon the expiration of ten calendar days from the date of its publication, except for the provisions concerning private entrepreneurship, which shall come into effect on July 1, 2021.
|
Chairman of the National Security Committee of the Republic of Kazakhstan |
K. Massimov |
AGREED
State Security Service of the
Republic of Kazakhstan
AGREED
Ministry of Internal Affairs of the
Republic of Kazakhstan
AGREED
Ministry of Digital Development,
Innovation and Aerospace Industry of the
Republic of Kazakhstan
AGREED
Ministry of Finance of the
Republic of Kazakhstan
AGREED
Ministry of National Economy of the
Republic of Kazakhstan
| Approved by Order of the Chairman of the National Security Committee of the Republic of Kazakhstan dated October 27, 2020, No. 69-қе |
Rules for the functioning of the National video monitoring system
Chapter 1. General Provisions
1. These Rules for the functioning of the National video monitoring system (hereinafter referred to as the Rules) have been developed in accordance with paragraph 5 of Article 30-1 of the Law of the Republic of Kazakhstan dated November 24, 2015 "On Informatization" (hereinafter referred to as the Law) and shall determine the procedure for the functioning of the National Video monitoring system.
2. The following basic concepts shall be used in these Rules:
1) subscriber - an individual or legal entity who possesses and (or) use an object that is subject to mandatory connection to the National Video monitoring system;
2) hardware and software complex - a set of software and hardware, jointly used to solve problems of a certain type;
3) video analytics - software or technology that uses computer vision methods for automated data collection based on the analysis of streaming video (video analysis);
4) coordinator - a state body that provides intersectoral management and interaction of participants in the National Video monitoring system;
5) National video monitoring system - an information system, which is a set of software and hardware that collect, process, and store video images to solve the problems of ensuring national security and public law and order;
6) data transmission network operator - a communication operator that ensures the functioning and development of communication channels for data transmission between the participants of the National Video monitoring system;
7) user - a state body determined in accordance with Article 30-1 of the Law of the Republic of Kazakhstan dated November 24, 2015 "On Informatization", which has access to the National video monitoring system to perform the tasks and functions assigned by the legislation;
8) the register of the National video monitoring system - an informatization object containing information about subscribers, users, and video surveillance systems of subscribers of the National Video monitoring system;
9) technical capabilities - a set of certain conditions and factors that directly affect the user's ability to gain access to the National Video monitoring system;
10) technical conditions - a set of certain conditions and factors that directly affect the ability to connect a subscriber's video surveillance system to the National Video monitoring system;
11) technical operator - an organization that ensures the functioning and participates in the development of hardware and software systems and technological platforms of data processing centers;
12) technological platform - a set of software and hardware data processing centers designed for data processing and analysis;
13) data processing center - a specialized facility for placing the server and network equipment of the National Video monitoring system.
Chapter 2. Procedure for the functioning of the National video monitoring system
Paragraph 1. Connection of subscribers to the National video monitoring system
3. To connect the subscriber's video surveillance system to the National Video monitoring system, the coordinator shall send the subscriber a notification about the need to connect the video surveillance system to the National Video monitoring system.
4. After receiving the notification, the subscriber, within 15 working days, shall send an application to the technical operator for the provision of technical conditions for connecting their video surveillance system to the National video monitoring system in the form in accordance with Annex 1 to these Rules with the attachment of documents containing the following information:
1) architecture of the video surveillance system;
2) composition and number of software and hardware used in the video surveillance system, and their characteristics;
3) parameters of the used communication channels of the video surveillance system;
4) format of the video stream in which the video image is transmitted;
5) set of commands for controlling video surveillance equipment;
6) functionality for controlling the positioning of video surveillance equipment (if any);
7) functionality for managing user access to video surveillance equipment;
8) functionality for managing the archive of video images;
9) functionality of user access control in the system and the archive of video data of the subscriber of the National Video monitoring system.
5. After receiving the application specified in paragraph 4 of these Rules, the technical operator within 15 working days shall send the subscriber technical specifications indicating the term for connecting the video surveillance system to the National Video monitoring system, which shall not exceed 12 months.
6. The subscriber, after receiving the technical conditions, shall ensure its implementation, which includes coordination with the technical operator of the technical parameters for connecting the video surveillance system.
The connection of the subscriber's video surveillance system shall be carried out subject to the presence of the minimum technical conditions provided for in Annex 2 to these Rules.
7. After providing the technical conditions, the subscriber shall send an appeal to the technical operator to check the completeness and correctness of the technical conditions. Within 10 working days, the technical operator shall check the completeness and correctness of the fulfillment of the technical conditions and provides permission to connect the video surveillance system to the National video monitoring system or a conclusion on the need to eliminate deficiencies, indicating their list and the deadline for elimination.
After the subscriber has eliminated the identified deficiencies, a repeated check of the completeness and correctness of the technical conditions shall be performed.
8. After the subscriber receives permission to connect the video surveillance system to the National Video monitoring system, the technical operator together with the subscriber (if necessary, together with the data transmission network operator), within 20 working days, shall organize the data transfer from the subscriber's video surveillance system to the hardware and software complex of the National Video monitoring system.
9. Upon completion of the arrangements for the data transfer, the subscriber and the technical operator within 10 working days sign the act of connecting the video surveillance system to the National video monitoring system indicating the date of the start of data transfer.
Information about the video surveillance system connected to the National video monitoring system and the subscriber shall be reflected in the Register of the National Video monitoring system. A copy of this act shall be sent by the Technical Operator to the coordinator.
10. Connection of the subscriber's video surveillance systems to the National video monitoring system shall be carried out using the communication channels of the data transmission network operator or the subscriber's and the user's communication channels, if technical capabilities are available, and shall be reflected in the Register of the National Video monitoring system.
The terms of the interaction between the technical operator and the operator of the data transmission network shall be determined by the agreement, taking into account the requirements of these Rules.
The terms of the interaction between the technical operator and the subscriber shall be determined by the agreement, taking into account the requirements of these Rules.
11. Individuals or legal entities who own and (or) use the video surveillance system may send an application for connecting the video surveillance system to the National video monitoring system voluntarily, to which a motivated refusal or a decision on assigning the “subscriber” status may be sent by the coordinator.
Paragraph 2. The functioning of the National video monitoring system
12. The collection, processing, and storage of video images in the National video monitoring system shall be carried out using hardware and software systems and technological platforms of data processing centers of the National Video monitoring system.
13. The storage period of video images in the National video monitoring system is 30 days, except for video images on events (incidents) within the framework of solving the problems of ensuring national security and public order, the storage period of which in the National video monitoring system shall be at least 7 years.
14. Participants of the National video monitoring system shall be the coordinator, technical operator, user, data transmission network operator and subscriber.
15. Coordinator shall provide:
1) creation, development and organization of ensuring the functioning of the National Video monitoring system; approval and coordination with state bodies of the list of services provided by the Technical Operator;
2) approval of draft agreements on the interaction between the technical operator and the operator of the data transmission network, the technical operator and the subscriber;
3) consideration of subscribers' requests and provision of an official response in accordance with the laws of the Republic of Kazakhstan and taking into account the requirements of these Rules;
4) coordination of the connection of the video surveillance system of the owners or possessor, who own, operate or manage the video surveillance systems to the National Video monitoring system, who have announced their connection voluntarily;
5) consideration of requests from state bodies for obtaining archival data and checking the existence of legal grounds for providing information; sending the requested information to the state body or a reasoned refusal to provide it in accordance with the laws of the Republic of Kazakhstan and taking into account the requirements of these Rules;
6) ensuring the round-the-clock functioning of the operational duty service for making management decisions;
7) ensuring the organization of communication channels for the functioning of the National Video monitoring system.
16. Technical operator shall provide:
1) provision of the following services to the subscriber, users of the National Video monitoring system, taking into account the requirements of these Rules:
provision of technical conditions for connecting a video surveillance system to the National Video monitoring system;
provision of technical capabilities for users to gain access to the National Video monitoring system;
connection of the video surveillance system to the National Video monitoring system;
providing users with access to the National Video monitoring system;
2) implementation of system maintenance and support of hardware and software systems and technological platforms of data processing centers of the National Video monitoring system; provision of timely information to users about abnormal (emergency) situations and scheduled maintenance work carried out concerning the National Video monitoring system; periodic submission to the coordinator of a comprehensive report on the functioning of the National Video monitoring system; informing the coordinator about emergencies that have arisen in the National Video monitoring system;
3) development of agreements on the interaction between the coordinator and the technical operator, the technical operator and the data transmission network operator, the technical operator and the subscriber, the technical operator and the user;
4) consideration of subscribers' applications for the provision of technical conditions for connecting a video surveillance system; determination of the term for connecting the video surveillance system to the National video monitoring system and sending technical specifications to the subscriber; coordination of technical parameters for connecting a video surveillance system; checking the completeness and correctness of the fulfillment of technical conditions; granting permission to connect a video surveillance system or an opinion on the need to eliminate the identified deficiencies; organization of data transmission from the subscriber to the hardware and software complex of the data processing center; formation and maintenance of the Register of the National Video monitoring system;
5) consideration of users' applications for the provision of technical capabilities for obtaining access; verification of technical capabilities and determination of technical parameters for users to gain access to the National Video monitoring system; organization of the creation of technical capabilities, including the coordination of measures for the creation, modernization, installation, setting up communication channels and other technical means; organization of data transmission from the user to the hardware and software complex of the National video monitoring system and from the hardware and software complex of the National video monitoring system to the user;
6) ensuring the round-the-clock functioning of the duty service to manage, control the operability and monitor the functioning of the National Video monitoring system, as well as monitor information (cyber) security events and respond to information (cyber) security incidents of the National Video monitoring system;
7) ensuring data storage in the National Video monitoring system, taking into account the requirements of these Rules.
17. Operator of the data transmission network shall provide:
1) organization of communication channels for the functioning of the National video monitoring system in the manner and under the conditions determined by these Rules; carrying out activities for the creation, modernization, installation, and configuration of communication channels and other technical means of communication;
2) implementation of system maintenance and support of communication channels; ensuring timely informing of the technical operator about the planned maintenance work carried out concerning communication channels; periodically sending to the technical operator a comprehensive report on the functioning of communication channels; informing the technical operator about incidents that have occurred on communication channels;
3) participation in the development of an interaction agreement that defines the conditions for interaction between the technical operator and the operator of the data transmission network;
4) ensuring the round-the-clock functioning of the duty service for managing, monitoring the performance, and monitoring the functioning of communication channels, as well as monitoring information (cyber) security events and responding to information (cyber) security incidents of the communication channels of the National Video monitoring system.
18. Subscriber shall provide:
1) the ability to connect the existing video surveillance system to the National video monitoring system in the manner and under the conditions determined by these Rules;
2) the implementation of system maintenance and support of the video surveillance system and technical means of data transmission; ensuring timely informing of the technical operator about the planned maintenance work carried out concerning the video surveillance system and technical means of data transmission; informing the technical operator about shutdowns of the video surveillance system in the cases provided for by the laws of the Republic of Kazakhstan, and about incidents that have arisen in the video surveillance system and technical means of data transmission;
3) sending applications for the provision of technical conditions for connecting a video surveillance system; ensuring the fulfillment of technical conditions, including coordination with the Technical Operator of the technical parameters for connecting the video surveillance system; elimination of deficiencies after checking the completeness and correctness of the technical conditions;
4) ensuring timely notification of the technical operator about changes in the information specified in the interaction agreements signed with the technical operator and (or) contained in the act of connecting the video surveillance system to the National video monitoring system;
5) provision of physical servers, power supply and cooling for the transitional and related equipment, organization of physical security (safety) of the transitional equipment, as well as round-the-clock access to it for system maintenance.
19. Users shall provide:
1) use of access to the National video monitoring system for solving problems of ensuring national security and public order;
2) timely informing the technical operator about changes in the information specified in the interaction agreements signed with the technical operator and (or) contained in the act of gaining access to the National Video monitoring system.
20. Users shall have continuous access to the National Video monitoring system, which shall be provided by the coordinator together with the technical operator.
The use of information obtained as a result of the functioning of the National video monitoring system shall be limited on the grounds provided for by the legislation of the Republic of Kazakhstan.
The interaction of the coordinator and/or technical operator with the user shall be determined by the agreement, taking into account the requirements of these Rules and the legislation governing the user's activities.
Section 3. Procedure for obtaining access and archival information
21. To connect to the National Video monitoring system, the coordinator and the technical operator shall provide access to the user based on his application in the form in accordance with Annex 3 to these Rules.
22. After receiving the application specified in paragraph 21 of these Rules, the technical operator within 15 working days shall check the technical capabilities and send the coordinator the technical parameters for gaining access to the National Video monitoring system, which shall not exceed 12 months.
Extension of access to the National video monitoring system shall be carried out in the order of connection to the National Video monitoring system, provided for in this paragraph.
23. After receiving from the technical operator the technical parameters of gaining access to the National Video monitoring system, the coordinator within 10 working days shall provide the user with permission based on the technical capabilities of the National Video monitoring system, with a copy of the decision sent to the technical operator.
24. After gaining access to the National Video monitoring system, the technical operator, user and, if necessary, the operator of the data transmission network shall organize the creation of technical capabilities, which may include measures for the creation, modernization, installation and configuration of communication channels and other technical means of communication.
25. After the creation of technical capabilities, the user and the technical operator shall sign an agreement on interaction within 10 working days.
26. After signing the agreement on interaction, the technical operator within 10 working days shall organize access to data from the hardware and software complex of the National video monitoring system to the user in accordance with the permission received.
27. Upon completion of the arrangements for obtaining access, the user and the technical operator, within 10 working days, shall sign an act of obtaining access to the National video monitoring system indicating the date of the start of data transmission. A copy of this act is sent by the technical operator to the coordinator.
28. To receive archival information from the National Video monitoring system, subscribers who are state bodies in cases established by the laws of the Republic of Kazakhstan shall send to the coordinator a motivated request for information, to which two information carriers shall be attached.
29. After receiving the request specified in paragraph 28 of these Rules, the coordinator within 10 working days shall check the existence of legal grounds and technical capabilities and send the subscriber the requested information on the first information carrier or a reasoned response to refuse to provide it.
30. Copies of the request and response with the second medium shall be stored for at least 24 months, after which physical destruction shall be carried out with the registration of the corresponding act in any form.
31. The procedure for subscribers to receive archived information from the National Video monitoring system, as defined in paragraphs 28-30 of these Rules, may be automated (simplified) by translating the procedure for submitting a request and receiving a response to an electronic format by the coordinator's decision.
Paragraph 4. Features of the implementation of the software platform
32. To increase the efficiency of video surveillance systems, a software platform shall be organized as part of the National Video monitoring system, which implements the functions of video analytics.
33. The software platform implements functionality in accordance with the tasks defined by the Law of the Republic of Kazakhstan dated November 24, 2015 "On Informatization".
34. To ensure information security, the software platform shall function only on the hardware and software complexes of the data processing centers of the National Video monitoring system, including the transitional equipment of the National Video monitoring system.
35. The decision to install the transitional equipment of the National video monitoring system shall be made by the technical operator, taking into account the number of cameras in the subscriber's video surveillance system, the throughput of the available communication channels, and technical capabilities.
36. The subscriber shall be provided with the organizational and technical conditions for the installation of the transitional equipment of the National Video monitoring system, its physical security, and round-the-clock access to the technical operator in accordance with departmental regulations and taking into account the requirements for secure facilities.
37. The specifics associated with the placement of the transitional equipment of the National video monitoring system shall be determined in the relevant agreement between the technical operator and the subscriber, taking into account the requirements of these Rules.
| Annex 1 to the Rules of Operation of the National video monitoring system |
|
| Form |
Application for the provision of technical conditions for connecting a video surveillance system
Surname, name, patronymic (if any) of an individual, IIN, name of a legal entity,
____________________________________________________________________
____________________________________________________________________
Address of the location of the video surveillance system: city ___________________,
street _____________________________, building __________________________,
object ______________________________________________________________
Connection format (highlight the required one): mandatory, voluntarily
The documents containing the following information shall be attached to the application:
1) architecture of the video surveillance system;
2) composition and quantity of software and hardware used in the video surveillance system and their characteristics;
3) parameters of the used communication channels of the video surveillance system;
4) format of the video stream in which the video image is transmitted;
5) set of commands for controlling video surveillance equipment;
6) functionality for controlling the positioning of video surveillance equipment (if any);
7) functionality for managing user access to video surveillance equipment;
8) functionality for managing the archive of video images;
9) functionality of user access control in the system and the archive of video data of the subscriber of the National Video monitoring system.
| Annex 2 to the Rules of Operation of the National video monitoring system |
Minimum technical specifications for video surveillance systems
1. General capabilities of video cameras:
1) resolution (effective surface of the matrix) - not less than 1920 x 1080 pixels;
2) bitrate value - not less than 5000 kbps;
3) video signal conversion speed - not less than 25 fps;
4) packet loss - no more than 20%;
5) focusing - Auto/Manual (optional);
6) minimum photosensitivity - 0.01 lux;
7) image improvement - WDR not less than 120 dB;
8) "Day/Night" mode - Mechanical IR cut filter;
9) switching "Day/night" - auto/scheduled;
10) external working conditions - not less than the protection level IP66;
11) parameter of the degree of protection - IK10;
12) image quality at the boundaries of the controlled area shall be set within the following limits:
at least 150 pixels per meter - on review cameras with detail,
not less than 250 pix/m per meter - for entrance groups,
at least 50 pix/m per meter - on survey cameras without detailing.
2. Capabilities of video cameras in accordance with the type:
3. Installation of video cameras.
1) to eliminate interference in the frame: in the field of view of the camera, it is necessary to exclude objects that block the view and allow people, objects under observation, or vehicles to move unnoticed in the observation area. In the frame, it is necessary to avoid or limit the areas of television screens, interactive billboards, revolving doors, escalators, swinging branches, and other objects that create constant movement, if these objects are not the purpose of observation;
2) newly installed video cameras shall be protected from induced interference (both signal transmission circuits of the video stream and power lines), to take into account the grounding and grounding circuits. When installing video cameras on supports, provide for vibration resistance of the structure, base;
3) for general video surveillance to monitor and observe the territory adjacent to the object, cameras shall be installed at a height of at least 4 meters on the wall of the object or supports;
4) the installation of cameras for monitoring the traffic situation shall be carried out at a height of up to 12 meters, for recognition of the state registration number plate on a vehicle - from 6 to 30 meters;
5) for entrance groups and potential identification of citizens at pedestrian crossings, cameras shall be installed at a height of up to 2.5 meters, at existing entrances and exits (at least 2 on the main, at least 1 on secondary) up to 3.5 meters.
4. Types of cameras to be installed depending on the classifications of objects:
5. Capabilities of video surveillance systems.
1) video surveillance systems of subscribers shall provide for technical support, updating and development of software in accordance with the requirements of these Rules;
2) video surveillance systems developed, implemented and financed by government agencies, regardless of the funding model, shall ensure the transfer of video data to the National Video monitoring system;
3) technical means used in video surveillance systems shall have a guaranteed power supply from power sources and stand-alone in a mode of at least 60 minutes.
6. Video surveillance systems shall provide:
1) working hours 24/7/365;
2) synchronization of precise time signals with the clocks of devices, servers and workstations;
3) centralized management and differentiation of access rights and security policies for all objects and services of the system;
4) automatic recording of information (logging) of actions of users of all levels of access in the system, as well as exclude the possibility of access to make changes at the level of the operating system and database;
5) secure networking;
6) multi-protocol video broadcast;
7) support for customizable, automatic downloading and transmission of video fragments (video recordings) to the National Video monitoring system;
8) automatic logging of alarm messages and the ability to create and configure rules for responding to events with the possibility of centralized processing of alarms for all objects and services of the system in a single interface for processing alarms;
9) recording video from IP cameras into a distributed file archive with the ability to restore missing records in case of problems with the network or the recording server;
10) obligatory archive depth - at least 30 calendar days;
11) open platform-independent API for integration with external systems;
12) ability to connect third-party and develop own video analytic modules (external plugins) based on a freely distributed (free) SDK;
13) ability to connect cameras using the Onvif, PSIA protocols;
14) ability to support MJPEG, MPEG-4, MPEG-4 ASP, MxPEG, H.264, and H.265 codecs;
15) ability to increase the recording speed upon motion detection, the occurrence of a certain event or time interval (schedule);
16) possibility of HTTPS connection with IP cameras;
17) ability to connect to the National video monitoring system by organizing a unified hierarchy using parent/child logic, the ability to interconnect systems with each other to connect and receive a video clip.
18) ability to detect problems and remotely manage related objects. Subsidiaries shall function as stand-alone sites, including when network connectivity is lost;
19) ability to set the maximum bandwidth at which records can be received from a remote site for all devices loaded in parallel.
20) ability to view and control video cameras from the National video monitoring system online.
7. Data transmission medium.
The data transmission medium is fiber-optic (wired) or wireless data transmission lines with permanent connection and data transmission.
1) when installing switching equipment used to create (modernize) a video surveillance system, a local video surveillance system, it is necessary to provide for the possibility of creating virtual local networks to delimit access to network resources, protocol routing, address translation technology (NAT), Multicast and others, record-keeping occurring events, setting priorities for the transmission of various types of traffic (control channel, video surveillance channel in real-time, access channel to the video archive, etc.);
2) communication and data transmission systems need to ensure reliable routing and switching of transmitted data over communication lines, as well as to exclude transmission delays and data loss that affect the quality of transmitted video information;
3) protocols of information exchange between the components of the video surveillance system shall be open;
4) communication lines and telecommunication "joints" used in video surveillance systems shall exclude the possibility of intercepting the video stream, as well as making changes to it, and shall comply with the requirements of the current legislation in the field of information security;
5) downtime due to failure and maintenance reasons does not exceed 50 hours per year, subject to compliance with operating requirements;
6) the level of infrastructure for the situation center is established in accordance with the Decree of the Government of the Republic of Kazakhstan dated December 20, 2016, No. 832 "On approval of uniform requirements in the field of information and communication technologies and ensuring information security";
7) the main networks for data transmission and video signal delivery from cameras to the video surveillance system are fixed fiber-optic communication lines (FC), as the only data transmission medium that does not depend on the weather, electromagnetic and other operating conditions and a stable environment for interception and decryption of data;
8) it is possible to support backup data transmission by wireless networks;
9) the use of wireless networks is possible upon agreement with the technical operator using data encryption protocols agreed with the authorized bodies.
| Annex 3 to the Rules for the functioning of the National video monitoring system |
|
| Form |
Application for the provision of technical capabilities to obtain access
User name: _____________________________________
______________________________________________
Access point location address:
city __________________________________,
street _________________________________,
building ______________________________.
The list of video surveillance systems to which it is necessary to get access
and the number of accounts indicating access rights shall be attached to the application.
