SECURITY TEST ENVIRONMENT โ€” FICTIONAL DATA โ€” NOT FOR PRODUCTION USE
Satellite Child Find

System Architecture & Implementation Package

Complete Base44 + AWS technical specification for Satellite Child Find

1. Database Schema (Base44 Entities)

CaseCore Entity
  • child_name
  • age_at_disappearance
  • date_reported
  • last_known_location
  • status
  • priority
  • risk_level
  • known_companion
  • vehicle_description
  • law_enforcement_contact
  • photo_url
  • latitude / longitude
  • case_number (NCMEC GUID)
NotificationReal-time Alerts
  • user_id
  • title
  • message
  • case_id
  • type (critical_case | case_update)
  • read
CaseUpdateAudit Trail
  • case_id
  • content
  • author_name
  • author_role
  • update_type
  • status_change
Geofence + GeofenceAlertGeo Tracking
  • case_id
  • latitude / longitude
  • radius_meters
  • trigger_on (enter|exit|both)
  • is_active
  • agency_name
Resource + MissionField Ops
  • name
  • type (Drone|K9|Helicopter...)
  • status
  • assigned_case_id
  • current_lat/lng
  • operator_name
SharedSearchDataSecure Sharing
  • case_id
  • token (secure random)
  • shared_with_agency
  • expires_at
  • access_count
  • is_revoked
TipCitizen Input
  • case_id
  • tip_content
  • last_seen_location
  • contact_info
  • is_anonymous
  • status
TriageResultAI Triage
  • case_id
  • risk_score (0โ€“100)
  • risk_level
  • routing
  • score_breakdown
  • acknowledged
EvidenceBoard + CaseMediaInvestigation
  • case_id
  • items (media|suspect|location)
  • connections
  • media_type
  • platform
  • url

2. API Workflow โ€” RSS Ingestion Pipeline

NCMEC RSS Feed

missingkids.org/rss/missingkidsrss.xml

Polled every 5 min
fetch XML
syncNCMECAlerts

Deno backend function

Parse RSS items
Deduplicate by GUID
Extract: name, age, state, companion, vehicle, LE contact
write to DB
Case Entity

Base44 Database

New records only
notify
Notification Engine

Admin alerts dispatched

๐Ÿšจ Critical case alert
Automation: schedule โ†’ every 5 minutes โ†’ syncNCMECAlerts()
Dedup check: Case.filter({ case_number: item.guid })
Notification broadcast: User.filter({ role: 'admin' }) โ†’ Notification.create()

3. Real-Time Notification Engine

Trigger:
NCMEC RSS sync detects new alert
Action:
Notification dispatched to all admins
type: critical_case
Trigger:
Case status changed
Action:
Assigned users notified of update
type: status_change
Trigger:
Geofence breach detected
Action:
Agency + admin alerted with coordinates
type: geofence_alert
Trigger:
Resource exits assigned sector
Action:
ResourceAlert created + admin pinged
type: resource_alert
Trigger:
New citizen tip submitted
Action:
Admin review queue updated
type: case_update
Trigger:
AI triage runs on new case
Action:
Senior queue routed if Critical
type: ai_triage

4a. AWS Infrastructure Stack โ€” Request Flow

End-to-End Request Flow ยท Satellite Child Find AWS Stack

๐ŸŒ
CloudFrontEdge Layer

Global CDN ยท Edge caching ยท DDoS protection

1
โ–ผ
๐Ÿ”€
Route 53DNS

DNS routing ยท Health checks ยท Failover

2
โ–ผ
โšก
AWS AmplifyFrontend Hosting

React app hosting ยท CI/CD pipeline ยท Auth UI

3
โ–ผ
๐Ÿ”—
API GatewayAPI Layer

REST API ยท Rate limiting ยท JWT authorization ยท CORS

4
โ–ผ
ฮป
Lambda FunctionsServerless Compute

syncNCMECAlerts ยท triageCase ยท sendNotification ยท checkGeofences

5
โ–ผ
๐Ÿ—„๏ธ
DynamoDBNoSQL Database

Cases ยท Notifications ยท Tips ยท GeofenceAlerts ยท Resources ยท Missions

6
โ–ผ
๐Ÿค–
Amazon Bedrock AIAI / ML

Claude / Titan models ยท Risk triage scoring ยท AMBER alert classification ยท Media tagging

7
โ–ผ
๐Ÿ””
SNS NotificationsPush Alerts

Push alerts ยท AMBER broadcast ยท Geofence breach ยท Resource alerts

8
โ–ผ
โœ‰๏ธ
SES EmailEmail Service

Critical case emails ยท Agency notifications ยท Tip confirmation ยท Pilot program comms

9
โ–ผ
๐Ÿชฃ
S3 Case ImagesObject Storage

Child photos ยท Evidence documents ยท Satellite imagery ยท Court documents

10
Security Layer
Cognito (MFA + Roles)
WAF (Web App Firewall)
KMS (Encryption at Rest)
VPC Private Subnets
Monitoring
CloudWatch Logs
X-Ray Tracing
CloudTrail Audit
Cost Explorer
Compliance
CJIS Compatible
SOC 2 Type II
AMBER Alert Standard
DHS FEMA Grant-Ready

4b. AWS Grant Architecture โ€” Service Details

AWS Services Used

EC2 / ECSBase44 backend hosting (Deno edge functions)
RDS (PostgreSQL)Persistent entity storage (Cases, Notifications, etc.)
S3Case documents, photos, satellite imagery
CloudFront CDNReact app delivery + media assets
LambdaScheduled syncNCMECAlerts (5-min cron)
SNS / SESEmail alert dispatch for critical cases
CognitoLaw enforcement identity + MFA
CloudWatchUptime monitoring, alert logs, cost tracking

Security & Compliance (for Grant)

CJIS ComplianceRole-based access, audit logging, encrypted at rest
SOC 2 Type IIAll access logs via FileAccessLog + geofence alert tracking
TLS 1.3All API traffic encrypted in transit
Zero-Trust AuthJWT-scoped sessions per role (admin/police/analyst)
AMBER Alert IntegrationReal-time NCMEC RSS + automated ingestion
DHS FEMA EligibilityChild safety infrastructure, nonprofit 501(c)3 use
Multi-Region FailoverCritical alert service SLA โ‰ฅ 99.9%
Audit TrailFileAccessLog + CaseUpdate immutable log per case

5. Law Enforcement Portal โ€” Role Matrix

FeatureAdminPoliceProsecutorAnalystAgency User
AMBER Alert Command Centerโœ…โœ…โœ…โŒโŒ
Missing Child Map Dashboardโœ…โœ…โœ…โœ…โœ…
Case Brief (full)โœ…โœ…โœ…โœ…โœ…
Create / Edit Casesโœ…โœ…โŒโŒโœ…
Coordinate Sharing (Secure)โœ…โœ…โœ…โŒโŒ
Resource Tracking & Missionsโœ…โœ…โŒโŒโŒ
Citizen Tips Reviewโœ…โŒโŒโœ…โŒ
AI Triage & Senior Queueโœ…โŒโŒโœ…โŒ
Analytics & Insightsโœ…โŒโŒโœ…โŒ
Geofence Managerโœ…โœ…โŒโœ…โŒ
Evidence Boardโœ…โœ…โœ…โœ…โŒ
NCMEC Sync (force)โœ…โŒโŒโŒโŒ
User & Agency Managementโœ…โŒโŒโŒโŒ