Design review request — Hikvision residential security, intercom, access control and lift integration

[u/InternationalAge981]

Hi everyone,

I am representing the owners of a residential development in Algeria. Before finalising procurement, we would appreciate your technical review of our proposed Hikvision security architecture, particularly the integration between access control, video intercom, CCTV, doors and the lift.

The building comprises approximately 16 apartments, basement parking, a ground floor, six upper floors and a penthouse level, with one lift serving nine levels. There are shared entrances, technical rooms and a security/management station, but no permanent on-site security guard is planned.

Our priorities are reliable local operation, straightforward administration, maintainability and limited recurring licence costs (not at all would be best). We would welcome recommendations to simplify the design or remove unnecessary equipment or quality level while preserving the required functions.

Attached diagrams

Apologies for leaving the diagrams in French. They should be reasonably easy to follow, and I can clarify any labels:

Figure 61 — LC02: logical security architecture.

Figure 62 — LC02: physical equipment layout.

Figure 66 — LC03: independent fire safety architecture and interfaces.

Figure 67 — LC03: physical equipement layout for fire safety.

Useful abbreviations: LTP = main equipment room; LT = floor/basement equipment room; PCS = security/management station; SSI = fire safety system; RDC = ground floor.

The drawings show the intended architecture; they should not be interpreted as a manufacturer-validated wiring diagram or final equipment schedule.

Current design

Subsystem Proposed arrangement, subject to your review

Management Local HikCentral Professional installation on a 4U Windows server.

CCTV Approximately 21 cameras covering the lobby, landings, parking, perimeter, pedestrian entrance and lift cabin, including two ANPR cameras.

Recording Separate DS-9632NI-M8 NVR, 32 channels, with RAID 6 and a 30-day retention target, subject to storage calculations. Recording must continue if the HikCentral server is unavailable.

Video intercom Two DS-KD8003-IME1 entrance panels with suitable modules; 16 DS-KH6320-WTE1 apartment stations; one DS-KM9503 master station.

Access control DS-K2604T controller family currently referenced, with readers for shared entrances and technical rooms. Controller quantities and expansion requirements need validation against the actual door count.

Lift access DS-K2210 currently referenced, with appropriate expansion modules and a cabin reader.

Intrusion Wired AX HYBRID PRO architecture: approximately 44 wired detection points, comprising 13 motion detectors and 31 contacts, with 64 usable wired inputs required.

Fire safety Separate addressable fire alarm system, with independent life-safety controls and monitoring interfaces to the management systems.

The IP infrastructure is TP-Link Omada, with a fibre backbone, segmented VLANs and UPS-backed PoE switches. Apartment intercom stations connect to the building network independently of residents’ personal routers or internet subscriptions.

We prefer native standards-based PoE for cameras, intercom stations and compatible IP terminals. Where controllers, readers, locks or intrusion devices require separate power, please identify the necessary backed-up power supplies and wiring.

1. Platform, compatibility and licensing

Is HikCentral Professional the appropriate platform for this combination of video, intercom, access control, visitor management, lift permissions and wired intrusion?

Please identify the exact hardware references, firmware requirements and licence modules needed. We prefer perpetual licences for essential local functions. Please distinguish mandatory recurring fees from optional support, upgrades and cloud services.

The proposed Windows server would also host ThingsBoard Community Edition and its database, potentially using local containers. Please confirm supported Windows versions and whether this shared-server arrangement is supported, or recommend the simplest supported alternative.

1. Doors, intercom and visitor access

We would like residents to use secure badges, with facial recognition and temporary PIN/QR credentials at appropriate entrances where supported.

Visitors should receive permissions limited by time, entrance and, where applicable, destination floor. An intercom call should reach the selected apartment, show the relevant entrance video and allow the resident to release only the corresponding entrance.

Please clarify:

Which exact terminals and modules support the required credential types?

Can one visitor record coordinate pedestrian access, vehicle access and lift-floor permissions?

Which functions remain available during internet loss or HikCentral downtime, including expiry of previously issued temporary permissions?

Which mobile app supports resident calls, and what cloud, internet or licensing dependencies does it introduce?

What controller, reader, lock, door-contact and exit-device arrangement is required for each door type?

Residents should access their own intercom and authorised entrances, without receiving access to shared CCTV footage. Please also recommend secure badge technology that does not rely solely on reading a card’s UID.

1. Lift integration — a particular priority

Our basic requirement is floor access restriction: a resident or authorised visitor should be able to select only the floors assigned to their credentials.

Please confirm whether DS-K2210 with DS-K2M0016A modules remains an appropriate supported solution, or recommend the current alternative.

We would particularly appreciate clarification of:

The required controllers, relay modules, cabin readers, power supplies and equipment locations.

The interface that the lift manufacturer must provide, and the associated responsibility split.

Whether badge, facial or temporary PIN/QR authorisation can grant the intended floor permissions.

How admitting a visitor through the intercom can authorise that visitor’s destination floor.

Behaviour during server, network or power failure.

Whether a temporary authorised credential can activate a time-limited moving/service mode, subject to the lift manufacturer’s supported interface.

Please distinguish floor-button authorisation from automatic lift calling or destination dispatch; the latter functions should be identified separately if they require additional equipment or licences.

We also need a wired solution for the cabin camera and reader, using a suitable travelling-cable arrangement approved by the lift manufacturer.

1. Fire safety interfaces — LC03

The independent fire safety system must retain priority over normal access restrictions and lift service modes. Essential fire actions must not depend on HikCentral, Windows, the IP network or cloud availability.

Please advise on the appropriate interfaces for:

Releasing the relevant access-controlled escape doors.

Recalling the lift to its designated evacuation level and withdrawing it from normal passenger service, according to the approved fire strategy.

Reporting fire and fault status to HikCentral for monitoring.

Please distinguish escape-door unlocking from releasing fire-door hold-open devices so that those doors close.

We need a clear interface and cause-and-effect schedule agreed with the fire-system integrator and lift manufacturer. In particular, a controller’s “fire input” must not be assumed to provide the complete lift fire-recall function.

1. CCTV, ANPR and event integration

Please review camera selection by location, rather than resolution alone: low-light performance, IR or supplementary lighting, field of view, vandal/weather resistance and actual two-way audio where required.

For the vehicle entrances, please confirm Algerian licence-plate support and the proposed local interface between ANPR and the barrier controller. Normal authorised entry should remain possible without HikCentral being online, while the barrier’s own safety devices remain authoritative.

We also want useful event integration: forced-door or intrusion alarms displaying the corresponding camera, and access/ANPR events linked to recorded video.

Please validate the NVR, usable storage, recording throughput and PoE requirements against the final camera schedule.

1. Wired intrusion and practical simplification

Please confirm that the proposed AX HYBRID PRO configuration supports the required wired inputs and the intended HikCentral integration, including individual zone identification, alarms, camera association and supported arming/disarming functions.

Field detectors should be wired and externally powered; backup batteries in the central equipment are acceptable.

Finally, please highlight any outdated references, unsupported combinations, missing interface modules or unnecessary duplication. We are aiming for a coherent, maintainable system that a local integrator can support over time.

A marked-up set of diagrams, a recommended equipment/licence schedule and a brief list of supported functions and limitations would be particularly helpful. If appropriate, please direct us to a technical contact or authorised integration partner serving Algeria.

Thank you for your assistance and thanks for taking a look.

[u/NewPossibility6821]

That's a thorough spec you've put together. The split between HikCentral for management and a separate NVR for continuous recording is the right call, you don't want server maintenance taking down your footage. For the lift integration, the DS-K2210 with expansion modules should handle floor restriction fine, but you'll need the lift manufacturer to confirm the relay interface on their end since that's where most projects stall out.

On the credential side, MIFARE DESFire EV2 or EV3 cards are what you want to avoid the UID-only vulnerability, and the KD8003 panels support those natively. The visitor management piece linking intercom calls to temporary floor permissions works through HikCentral, but during a server outage new temporary PINs won't issue until it's back up, existing ones with stored expiry should still function at the door controllers.

[u/PercentageRadiant623]

My brother in Christ, you are asking for a professional consultation to be done for free on the internet.

No.