Security Events → SMS Notifications
Independent architecture + build engagementGallagher Command Centre ↔ Telstra Messaging API
The Problem
The client's physical security platform (Gallagher Command Centre) generates critical events — door forced, access denied, alarm triggered — but has no native SMS notification capability. Operators needed real-time alerts on mobile, with filtering to prevent alert fatigue.
The Approach
Designed and built an event-driven middleware bridge. The system polls Gallagher's REST API over mutual TLS, processes and deduplicates events through a rules engine, composes human-readable messages, and delivers via Telstra's Messaging API v3.
Architecture
Security
All communication uses TLS 1.2+. Gallagher API access is authenticated via mutual TLS client certificates. Telstra API uses OAuth2 bearer tokens with automatic refresh. API keys are hashed with PBKDF2 and stored with AES-256 encryption. The system handles minimal personal data — event metadata only, no PII in transit.
Outcomes
Delivered working middleware with an operator dashboard, certificate management, and comprehensive audit logging. Zero-touch deployment capability for non-technical operators. Deployment pending customer rollout.
Extensibility
Architecture supports additional notification channels (email, Teams webhooks), configurable filtering rules, and multi-tenant deployment. Rate limiting and message queuing are built in.
Delivered as an independent architecture + build engagement.