C2 TOC Mobile
Deliverable SYS-002. Structure per cc02-standards/SYSTEM-STANDARD.md. Every component traces to a design basis (NEED/REQ) and to an acceptance criterion.
1. Purpose and Design Basis
1.1 Scope and Objective
C2 TOC Mobile (v2) provides a deployable tactical operations center (TOC) for field engagements. It bundles a rugged mini-PC computing array, tactical control tablets, and local networking interfaces to maintain localized command, control, and mapping outputs for the detail.
1.2 Design Basis
This system establishes a local tactical network footprint independent of static internet connectivity. It allows operators to coordinate movements, track locations, and share situational awareness data via off-grid radio or local wireless links.
1.3 Needs
- NEED-SYS-002-01: Detail operators require a portable C2 node to monitor ATAK telemetry and coordinate local movements when operating away from primary vehicles.
- Source: Team Leader (RF)
- Context: Cloud networks can be disrupted or physically blocked; local offline tactical networks are required.
- NEED-SYS-002-02: Systems engineer requires energy-efficient, rugged hardware nodes to maintain C2 availability under field operating battery power.
- Source: Systems Engineer (CS)
- Context: Systems must run on standard portable battery banks for extended field use.
1.4 Requirements
- REQ-SYS-002-01 (Traceability: NEED-SYS-002-02): The mobile C2 node shall run an offline TAK router instance on a Beelink SER3 mini-PC running Windows 11 Pro [VR-SYS-002-01].
- Verification Method: Test (T)
- REQ-SYS-002-02 (Traceability: NEED-SYS-002-01): The mobile C2 station shall support real-time mapping output to a Samsung Galaxy Tab S11 control tablet via secure local Wi-Fi [VR-SYS-002-02].
- Verification Method: Demonstration (D)
- REQ-SYS-002-03 (Traceability: NEED-SYS-002-02): The mobile C2 hardware components shall operate using a standard 12V DC power input to support portable battery bank power [VR-SYS-002-03].
- Verification Method: Demonstration (D)
- REQ-SYS-002-04 (Traceability: NEED-SYS-002-01): The deployable C2 station shall feature a secure tactical laptop for administrators to configure system settings (model is a GAP) [VR-SYS-002-04].
- Verification Method: Inspection (I)
2. Architecture As Built
+-----------------------------------------------------------------------+
| SYS-002 C2 TOC Mobile (Local Field Pack) |
| |
| [Beelink SER3 Mini PC] <--- Private Wi-Fi ---> [Galaxy Tab S11] |
| (Local TAK Router) (Local COP Display) |
| ^ |
| | |
| v |
| [Tactical Laptop (GAP)] |
| |
+-----------------------------------------------------------------------+
3. Components and Bill of Materials
| Component | Spec | Vendor / Link | Price | Tier | Status | Traceability |
|---|---|---|---|---|---|---|
| Mini-PC array node | Beelink SER3, Ryzen 3 3200U, 16GB, 500GB, Win 11 Pro | Amazon | $299.00 | - | SELECTED | REQ-SYS-002-01 |
| Control tablet | Samsung Galaxy Tab S11 128GB WiFi (renewed) | Amazon | $609.99 | - | SELECTED | REQ-SYS-002-02 |
| Laptop | [UNSPECIFIED] | [VENDOR] | [PRICE] | - | GAP | REQ-SYS-002-04 |
Note: The tactical laptop remains a GAP row because specific hardware models and pricing are ungrounded in program-development.md.
4. Build and Deployment
4.1 Mini-PC Provisioning
- Mount the Beelink SER3 mini-PC into the rugged field case.
- Install the offline TAK router database and local map packages.
- Configure Windows 11 Pro to boot directly into the TAK router service.
- Verify the 12V power supply connection interfaces correctly with the field battery bank.
4.2 Tablet Provisioning
- Power on the Samsung Galaxy Tab S11 and run the initial setup wizard.
- Sideload the ATAK-CIV application package.
- Import the local tactical profile configuration file.
- Establish Wi-Fi connection to the mini-PC’s private SSID.
5. Hardening Baseline
- Local Network Hardening: Enforce WPA3-Personal encryption on the private C2 Wi-Fi network; restrict connection access to pre-registered MAC addresses only; disable SSID broadcasting on the routing node [REQ-SYS-002-02].
- Operating System Hardening: Enforce BitLocker full volume encryption on the mini-PC and tactical laptop; disable auto-run features for USB devices; set up automatic account lockout after 5 consecutive failed login attempts [REQ-SYS-002-01, REQ-SYS-002-04].
- Hardware Port Hardening: Cover unused USB and Ethernet ports on the field unit with tamper-evident stickers [REQ-SYS-002-03].
6. Integration Points
- Inputs: Receives coordinates and alerts from static node
SYS-001. - Produces For: Communicates with tactical interface platforms.
- Proposed Seam: Links to
EP-011(Communications Plan) to synchronize local tactical frequencies and mesh net settings.
7. Acceptance Tests
| Criterion | Method | Expected Result | Reference |
|---|---|---|---|
| REQ-SYS-002-01 | Test | Verify local offline TAK router starts up and runs without active WAN connection on Beelink SER3. | VR-SYS-002-01 |
| REQ-SYS-002-02 | Demonstration | Verify Galaxy Tab S11 connects to the mini-PC Wi-Fi and updates position coordinates. | VR-SYS-002-02 |
| REQ-SYS-002-03 | Demonstration | Power the mobile array from the 12V battery bank for 4 hours continuously without power drop. | VR-SYS-002-03 |
| REQ-SYS-002-04 | Inspection | Verify BitLocker encryption is active and administrative controls are restricted on the laptop. | VR-SYS-002-04 |
8. Run and Maintenance Handover
- Operational Check: Confirm battery levels and execute a wireless connection check prior to field deployment.
- Update Cadence: Apply offline map updates and software patches monthly.
- Ownership: Systems Engineer (CS) for security configurations and backups; Operations Manager (BR) for battery maintenance and physical hardware inventory.
END OF SYSTEM
Model wiring
Generated from cell frontmatter at publish time.
- Related: SYS-001