Technologies & Architecture

Campus Hub's technical infrastructure is built by QL Studio and governed by the master security framework of Qim Lab Enterprise. Read full security governance at policies.qimlab.com.my/security.html.
Master Security
On This Page
Technical Inquiry?

Have a question about API integration, POS hardware, or IoT devices?

Technical Support
Technical Framework

Campus Hub Technologies

How we build, secure, and deliver smart campus services and cloud retail solutions.

1.0 Architecture & Engineering Philosophy

Campus Hub (campushub.my) is engineered by QL Studio, the software division of Qim Lab Enterprise. Our architecture combines cloud microservices, edge IoT controllers on campus hardware, and merchant web/mobile applications.

Our core architectural principles are:

Security-First

End-to-end TLS 1.3 cryptography, zero plain-text credentials, and isolated databases.

High Availability

99.5% operational SLA designed to withstand peak exam printing and laundry rushes.

Campus Edge IoT

Direct, real-time telemetry with smart printers and smart laundromat hardware.

2.0 Multi-Tenant Cloud SaaS

Campus Hub powers both institutional campus management and independent retailer commerce through modern multi-tenant cloud software:

  • Logical Tenant Isolation: Every campus merchant and academic institution operates within a cryptographically isolated tenant namespace. Row-Level Security (RLS) policies at the database layer prevent any cross-tenant data leakage.
  • Containerized Services: Microservices run within hardened, auto-scaling container environments to ensure immediate response times during high-volume campus events.
  • Distributed Web Application Firewall (WAF): Enterprise perimeter protections actively filter DDoS threats, automated credential-stuffing bots, and malicious injection payloads.

3.0 Smart Campus IoT Printing & Dobby (Laundry)

Campus Hub bridges digital mobile applications with physical campus machinery via secure, real-time Internet of Things (IoT) protocols:

Smart Self-Service Printing Technology
  • Document Spooling & Sandbox: Files uploaded by students are parsed and rendered into print spool formats in isolated temporary sandboxes. Document payloads are encrypted with AES-256.
  • Dynamic QR Release: Physical printers display a dynamic, cryptographically signed QR code. The job is released only when the student scans the printer on-site, preventing documents from lying unattended.
  • Hardware Telemetry & Jam Detection: The printer controller communicates page-completion feedback over secure MQTT/TLS channels. If a jam or out-of-paper event occurs, the system records the exact completed pages and automatically halts credit deductions.
Smart Dobby (Laundry) Controller Protocol
  • Microcontroller Integration: Industrial IoT relay controllers connect washing machines and dryers to the Campus Hub edge network.
  • Machine Status Detection: Machine availability (Available, In-Use, Cycle Complete, Maintenance) is reported in real-time to the student mobile app.
  • Cycle Trigger & Auto-Alerts: Scanning the machine QR code triggers the controller pulse to start the cycle. The cloud scheduler tracks cycle duration and dispatches a push notification when the wash or dry cycle ends.

4.0 Retailer Systems Architecture (POS & PMS)

Our B2B software is built for high reliability in retail and campus logistics environments:

Point of Sale (POS)
  • Cross-platform web and Android tablet applications.
  • Offline-resilient transaction cache for brief campus network drops.
  • Driverless USB/Bluetooth ESC/POS thermal receipt printing.
  • Automated daily settlement and sales category analytics.
Parcel Management (PMS)
  • Rapid 1D/2D optical barcode scanning for courier parcels.
  • Automated student matric/phone matching and notification dispatch.
  • Single-use OTP and dynamic QR pickup verification.
  • Digital audit log with parcel age and overdue collection tracking.

5.0 Payment Security & Cryptography

To safeguard all financial transactions across student credit top-ups and merchant SaaS billing:

  • Zero Plaintext Storage: Campus Hub never stores full debit/credit card numbers (PAN), CVVs, or online banking passwords on its infrastructure.
  • Regulated Payment Gateways: Transactions route directly through Bank Negara Malaysia (BNM) licensed payment infrastructure supporting FPX, DuitNow QR, and major card schemes.
  • Cryptographic Webhook Verification: Payment confirmation signals are verified using SHA-256 HMAC cryptographic signatures with secret keys to eliminate transaction spoofing.
  • Argon2id Password Digests: User credentials are protected using memory-hard Argon2id hashing with distinct cryptographic salts.

6.0 Mobile Permissions & Cookies

We maintain total transparency regarding why our software accesses device resources:

Resource Scope of Usage Privacy Protection
Camera Optical scanning of dynamic QR codes on printers, dobby washers, and pickup counters. Active only while scanner viewfinder is open. No video recording or photo gallery access.
Push Notifications Alerting students when print jobs finish, laundry cycles complete, or parcels arrive. Configurable in device settings. No unsolicited promotional spam.
Cookies / Local Storage Essential session authentication tokens and user UI preferences. Enforced with HttpOnly, Secure, and SameSite=Strict attributes.

To read the full technical security policy of Qim Lab Enterprise, visit policies.qimlab.com.my/security.html.