Primary: TEMS LiDAR for precise height measurement (millimeter accuracy)
Secondary: Bosch VCA for vehicle classification, video recording &
streaming
Processing: Real-time TCP and RTSP stream processing
Debouncing: Prevents duplicate alerts within configurable time windows
Correlation: Links LiDAR events with video recordings
Distribution: MQTT-based message routing to dotstream™
Local Storage: PostgreSQL for event correlation
Streaming: Real-time MQTT message distribution
Integration: Nifi MQTT consumption -> dotstream™ ingestion
VMS Control: Digital I/O relay activation
PTZ Control: RCP+ camera positioning (bridge)
Video Recording: 2 minutes bridge recording
Docker containerization on Ubuntu Linux
Python 3.10 runtime environment
PostgreSQL with SQLAlchemy ORM
Automated retention policies
TLS 1.2 encryption, SSH authentication
CORS-restricted admin access
Process watchdog, memory management
Real-time health status reporting
Real-time TCP processing
Millimeter-accurate height measurement
Immediate OHVD
detection
Streaming buffer processing
Confidence-based selection (18→1)
Memory stable at ~100MB
Configurable debounce windows
Video correlation for LiDAR events
5-second deduplication
logic
CPU usage: 6-25% normal operation
Memory: base: 18 peak:32%
Uptime: 90+ days
operational periods
| NYSDOT Requirement | Implementation | Status | Technical Details |
|---|---|---|---|
| LiDAR OHVD Detection SICK LMS511-22100 Heavy Duty / SICK TIC501 Controller Submittal: D264759_14_683.30222708 |
TEMS LiDAR TCP integration with real-time height analysis and traffic controller | IMPLEMENTED | TCP port 54345, 2D laser scanner, XML configuration, trigger line detection |
| Video Analytics Camera Bosch NBE-7702-ALX Bullet Camera Submittal: D264759_23_683.30222808 |
RTSP stream processing with VCA metadata extraction and ONVIF Profile M Requirements | IMPLEMENTED | RTSP port 554, XML metadata parsing, 18-to-1 vehicle detection optimization |
| PTZ Camera Control Bosch MIC-7522-Z30W PTZ Camera |
RCP+ protocol implementation for preset control, recording, and stopped vehicle detection | IMPLEMENTED | RCP+ port 80, HTTP/HTTPS control, configurable recording duration, 3D calibration support |
| VMS Sign Control Vermac VMS with Digital I/O Submittal: D264759_18-21_683.30222008 |
RLH Industries Smart Series Output Contact integration with relay control | IMPLEMENTED | 24-48VDC relay control, preset message activation, digital I/O configuration |
| Field Computer Deployment Single field computer architecture Tensor I22 i7 C1185G7E CPU (pending final selection) |
Docker containerization on Ubuntu Linux with all OHVD services co-located | IMPLEMENTED | Ubuntu 18.04/20.04 LTS, Docker containers, PostgreSQL database, isolated networking |
| Data Exchange Integration dotstream™ platform compatibility |
MQTT → NiFi → dotstream™ data pipeline with AVRO serialization | IMPLEMENTED | MQTT port 1883, AVRO data format, REST API endpoints, HVTMC ATMS integration |
| NIST SP 800-160 Vol. 1 Trustworthy Secure Systems |
Flask + SQLAlchemy + Bcrypt multidisciplinary security approach | IMPLEMENTED | Container isolation, consistent environments, trustworthy system architecture |
| NIST SP 800-37 Risk Management Framework |
VPN-protected data transmission, JWT authentication, CSRF protection | IMPLEMENTED | Local FTP + SFTP, lifecycle risk management, secure authentication tokens |
| NIST SP 800-160 Vol. 2 Developing Cyber Resilient Systems |
Encryption with cryptography.fernet, MQTT TLS/SSL, microservices architecture | IMPLEMENTED | Container segmentation, rapid deployment/recovery, system resilience design |
| NIST SP 800-47 Rev. 1 Managing Security of Information Exchanges |
Dual FTP SERVER (local + external SFTP), Docker network policies, secrets management | IMPLEMENTED | SFTP secure transmission, controlled network access, API key management |
| OHVD Detection Logic Height threshold triggering and VMS activation logic |
Configurable height thresholds with debouncing and alert correlation | IMPLEMENTED | Real-time threshold checking, 5-second deduplication, video correlation with UUID |
| Network Outage Resilience Continued operation during TMC connectivity loss |
Local field computer operation with data buffering and retry mechanisms | IMPLEMENTED | Local PostgreSQL storage, MQTT buffering, automatic reconnection logic |
| Server Infrastructure HVTMC Dell server specifications Dell D264759_OHVD requirements |
dotstream™ platform deployment on specified hardware | IMPLEMENTED | Windows Server 2019, PostgreSQL 13.4, specified CPU/RAM/storage requirements |
| Data Integration Polling 1-second polling rate requirement |
Real-time TCP and RTSP stream processing with sub-second response times | EXCEEDED | Real-time stream processing, <100ms LiDAR response, continuous monitoring |
| Video File Transfer FTP-based video file management |
Automated FTP transfer from camera RAM to field computer and TMC systems | IMPLEMENTED | FTP/SFTP transfer, local + external servers, automated file management |
| Enhancement Category | Added Capability | Business Value | Technical Implementation |
|---|---|---|---|
| Advanced VCA Processing | Intelligent handling of 18 duplicate vehicle detections per real vehicle | Higher detection accuracy, reduced false positives | Streaming optimization with confidence-based selection |
| Video Correlation System | Automatic UUID-based video linking with alert events | Improved incident documentation and forensic capability | Cross-process correlation with 5-second deduplication |
| Memory Management | Proactive memory optimization and process monitoring | Enhanced system stability and uptime (17+ days typical) | Real-time monitoring with automatic optimization |
| Alert Debouncing | Configurable time windows to prevent duplicate alerts | Reduced operator fatigue, improved response efficiency | Intelligent alert processing with configurable parameters |
| Express Admin Interface | Secure remote administration for TMC operations | Enhanced operational control and system management | Docker-isolated Express server with SSH proxy |
| Database Automation | Automated cleanup policies and retention management | Reduced maintenance overhead, consistent performance | Configurable retention periods with background processing |
| Process Orchestration | Watchdog system with automatic recovery capabilities | Improved system reliability and reduced downtime | Multi-process coordination with health monitoring |
Trustworthy Systems: Flask + SQLAlchemy + Bcrypt integration
Container Security: Docker isolation with controlled networking
Multidisciplinary Approach: Defense in depth architecture
Risk Management: VPN-protected FTP and SFTP data transmission
Lifecycle Security: JWT authentication with CSRF protection
Continuous Monitoring: Real-time security status reporting
Cyber Resilience: Encryption with cryptography.fernet module
Secure Communication: MQTT as the only ouput to TMC server
Recovery Capability: Automated service restart and health checks
Secure Exchanges: Dual FTP servers (local FTP + external SFTP)
Access Control: Docker network policies and secrets management
Data Protection: End-to-end encryption for all data flows
TLS 1.2 for all communications
Fernet symmetric encryption for stored
data
Certificate-based authentication
SSH key-based authentication
CORS restrictions to TMC networks
JWT tokens with CSRF
protection
Docker network isolation
VPN-protected data transmission
Firewall-friendly port
configuration
Encrypted database storage
Secure file transfer protocols
Automated key rotation
capability
System health and status information
Process monitoring data
Configuration state
Vehicle height measurements
Speed and classification data
Includes video_id when
applicable
Video analytics metadata
Vehicle classification and confidence
Object tracking
information
lidar_ohvd_detected: Height threshold violations
vca_ohvd_detected: VCA-based
confirmations
Correlated with video recordings
Uptime Target: >99.5% availability
Typical Operation:Tested over 90+ days continuous periods
Recovery Time:
<30 seconds automatic restart
Fault Tolerance: Process isolation with watchdog monitoring
CPU Usage: 6-25% during normal operation
Memory: Stable ~100MB per process
Network:
<1Mbps typical data transmission
Storage: Automated cleanup prevents disk exhaustion
LiDAR Response: Real-time (
<100ms)
VCA Processing:
<60 seconds per vehicle group
Alert Latency:
<500ms from detection to MQTT
Video Correlation: UUID assignment within 5 seconds
Vehicle Processing: Unlimited concurrent detections
MQTT Publishing: >1000 messages/minute capacity
Database Operations: Batch processing for efficiency
File Management: Automated retention and cleanup
Hardware Integration: LiDAR sensor calibration, IP camera configuration, PTZ
positioning
Network Architecture: MQTT broker setup, TCP/RTSP stream optimization
Database Management: PostgreSQL tuning, retention policy configuration
Container Orchestration: Docker networking, service dependencies, health
monitoring
24/7 Monitoring: Process watchdog management, memory optimization cycles
Alert Correlation: Debounce parameter tuning, video UUID synchronization
Performance Optimization: Stream buffer management, batch processing
cycles
Security Maintenance: Certificate rotation, encryption key management
Cross-System Dependencies: LiDAR-VCA correlation issues, MQTT connectivity
failures
Timing-Critical Processes: Alert debouncing logic, video correlation
windows
Memory Management: VCA processing optimization, container resource
allocation
Network Diagnostics: TCP connection stability, RTSP stream quality assessment
TEMS Configuration: XML schema validation, trigger line calibration
Bosch RCP+ Protocol: PTZ preset management, recording automation
MQTT Architecture: Topic structure, AVRO serialization, NiFi integration
Security Frameworks: NIST Requirements validation, TLS certificate management
Advanced process management with watchdog monitoring provides superior uptime compared to basic requirements. Typical operational periods exceed 17 days with automated recovery capabilities.
Intelligent VCA processing handles modern camera capabilities (18 duplicates per vehicle) with confidence-based selection, significantly improving detection accuracy beyond baseline requirements.
Alert debouncing, video correlation, and automated maintenance reduce operator workload while providing superior incident documentation and forensic capabilities.
Modular design with containerized services enables easy scaling, updates, and integration with evolving TMC infrastructure without requiring system redesign.