Architecture and components
What you install, where it runs, how it communicates. For those who design the system and those who commission it.
Diagram
Everything surveillance needs is on the site network. The CIAS portal is used for licences and updates and also works without a connection, with files.
CIAS devices
CIAS sensors and barriers, connected to the terminal servers.
IP-Doorway and IP-Doorway2 terminal servers
They bring the devices onto the IP network. The encrypted channel with IP-Doorway2 is coming soon.
Multisphera server
On the site network: Sphera-Core, web interface, event database.
Workstations and third-party systems
Operators in the browser over HTTPS; VMS, PSIM and supervisory systems through CIAS02, CIAS03 and CIAS04.
CIAS portal
Licences, signed updates and security advisories: online, or with files for sites without Internet.
Components
Sphera-Core
The engine: it manages the terminal servers, receives events, keeps the sensor status, writes the event database, checks licence and subscriptions.
Web interface
Synoptic, LiveMap, Tuner, event log, users and settings, with a single sign-in and the «How do I…» interactive guide.
Process supervisor
It starts the modules, watches them and restarts them if they stop.
IP-Doorway and IP-Doorway2 terminal servers
They bring the lines of CIAS devices onto the IP network. Each IP-Doorway2 has a unique identity generated at the factory; the encrypted channel with a dedicated key comes with the new firmware.
CIAS portal
The channel’s cloud service: licence issue and activation, subscriptions, downloads, signed updates and advisories, tickets.
Database and archive
24 months of events online, then a monthly local archive with SHA-256 fingerprints, restorable from the Event log page.
Sphera-Twin Available
High availability with two servers, for business continuity.
Network
Multisphera is designed for the site’s local network and must not be exposed to the Internet.
- Operator workstations: web interface over HTTPS and real-time updates over encrypted WebSocket (TLS).
- Terminal servers: IP-Doorway and IP-Doorway2 on the site network; with IP-Doorway2 the encrypted channel is coming soon.
- Third-party systems: CIAS02, CIAS03 and CIAS04 outputs, the latter over TLS 1.3 with mutual authentication.
- CIAS portal: optional connection; activation and updates also with files.
Licences and activation
Perpetual licence
The licence does not expire. Only the optional subscriptions have an end date.
Online activation
The server contacts the CIAS portal and receives the signed licence package, bound to the installation.
Offline activation
For isolated sites: the .lreq request file goes to the portal from a connected PC and a signed .licpkg package comes back.
Minimum requirements
- Operating system
- Windows 11 Pro, Windows Server 2022 and later (with WSL or Hyper-V); Debian and Ubuntu Linux. It also runs without a graphical interface (headless).
- Processor
- x64, at least quad-core
- Memory
- at least 8 GB of RAM
- Disk
- at least 20 GB free
- Workstations
- an up-to-date browser; Google Chrome recommended
- Terminal servers
- IP-Doorway, IP-Doorway2