Security
  • 11 Dec 2023
  • Dark
    Light
  • PDF

Security

  • Dark
    Light
  • PDF

Article Summary

Tamper Alarm Setting

The tamper alarm function prevents anyone from removing the devices without permission. It does this by setting off the tamper alarm and making calls to a designated location when the device detects a change in its gravity value from the original one.

To do this configuration on the web Security > Basic > Tamper Alarm.
image.png

Parameter Set-up:

  • Gravity Sensor Threshold: set the threshold for the gravity sensory sensitivity. The lower the value is, the higher the value will be. The gravity sensor value is 32 by default.
  • Trigger Options: select what can be triggered when the gravity sensor is triggered.

Client Certificate Setting

Certificates ensure communication integrity and privacy. To use the SSL protocol, you need to upload the right certificates for verification.

Web Server Certificate

It is a certificate sent to the client for authentication when the client requests an SSL connection with the Akuvox door phone. Please upload the certificates in accepted formats.

To upload Web Server certificate on the device web interface Security > Advanced > Web Server Certificate.
image.png

Client Certificate

This certificate verifies the server to the Akuvox door phone when they want to connect using SSL. The door phone verifies the server's certificate against its client certificate list.

To upload and configure client certificates on the same page.
image.png

Parameter Set-up:

  • Index: select the desired value from the drop-down list of Index. If you select Auto value, the uploaded certificate will be displayed in numeric order. If you select values from 1 to 10, the uploaded certificate will be displayed according to the value that the user selected.
  • Select File: click Choose File browse the local drive, and locate the desired certificate (*.pem only).
  • Only Accept Trusted certificates: if you select Enabled, as long as the authentication success, the phone will verify the server certificate based on the client certificate list. If you select Disabled, the phone will not verify the server certificate no matter whether the certificate is valid or not.

Upload TLS Certificate for SIP Account Registration

Before applying for a SIP account from a SIP or a DNS server using the TLS protocol, you'll need to upload a TLS certificate. This certificate is essential for server authentication.

To upload the TLS certificate, go to Security > Advanced > SIP Server Certificate.
image.png

Parameter Set-up:

  • Choose file: upload the certificate file. You can only upload the certificate file in .PEM, .DER, and CER format.

Motion Detection

Motion Detection is a feature that allows unattended video surveillance and automatic alarms. It detects any changes in the image captured by the camera, such as someone walking by or the lens being moved, and activates the system to perform the appropriate action.

Configure Motion Detection

You can turn on the motion detection and set up the motion detection interval on the web Intercom > Motion interface.
image.png

Parameter Set-up:

  • Suspicious Moving Object Detection: select Disable to disable the motion detection. Select IR Detection to enable the IR sensor-based motion detection for suspicious moving objects. And select Video Detection to enable the video-based motion detection during the monitoring of the suspicious moving object.
  • Timing Interval: the absolute triggering interval is 3 seconds. If you select a number greater than 3 seconds, then it requires a second triggering interval to trigger the alarm. For example, if you select 3 seconds, then the alarm will be triggered when a moving object is detected one time from 0 to 3 seconds (triggered any time from 0 to 3 seconds). However, for example, if you select 5 seconds (greater than 3 ), then the alarm will not be triggered until a moving object is detected for the second time from 3 to 5 seconds (triggered any time from 3 to 5 seconds). The default interval is 10 seconds.

Security Notification Setting

Email Notification Setting

Set up email notification to receive screenshots of unusual motion from the door phone.

Go to Intercom > Action > Email Notification interface.
image.png

Parameter Set-up:

  • SMTP Server Address: enter the SMTP server address of the sender.
  • SMTP User Name: enter the SMTP user name, which is usually the same as the sender’s email address.
  • SMTP Password: configure the password of the SMTP service, which is the same as the sender’s email address.
  • Email Test: click to test if the email can be sent and received.

FTP Notification Setting

To get notifications through FTP server, you need to set up the FTP settings. The door phone will upload a screenshot to the specified FTP folder if it senses any unusual motion.

Go to web Intercom > Action > FTP Notification interface.
image.png

Parameter Set-up:

  • FTP Server: enter the address (URL) of the FTP server for the FTP notification.
  • FTP Test: click FTP Test, then a triggered event snapshot will be sent to the FTP server for testing purposes.

SIP Call Notification Setting

In addition to FTP and Email notification, the door phone can also make a SIP call when some feature action is triggered. To configure a SIP call notification on web Intercom > Action > SIP Call Notification interface.
image.png

Call Event Notification

Enable this feature if you want to be notified when any outgoing calls from the door phone are not answered. The notification is made via FTP, Email, and HTTP. On the web, navigate to Intercom > Basic > Call Event.
image.png

Parameter Set-up:

  • Action To Execute: select FTP, Email or HTTP method for the notification. If FTP is selected, a screenshot of the caller will be sent via as notification. If Email is selected, the Emails containing a screenshot of the caller will be sent. If HTTP is selected, you can add the event message to the HTTP URL before sending.
  • HTTP URL: enter the HTTP URL that will be sent to the Http server. For example:http//192.168.31.6/door phone#1. HTTP URL format: http://http server IP address/any information

Security Action Configuration

Configure Action of Input

When the Input interface is working, it can also trigger an action. You can do this configuration on web Intercom > Input interface.
image.png

Parameter Set-up:

  • Action To Execute: to choose which action to execute after triggering.

Configure Action of Call

When pressing the push button, the door phone will trigger the pre-configured action type, the notification can be sent out by Email, FTP notification, or SIP call. To do this configuration on web Intercom > Basic interface.
image.png

Parameter Set-up:

  • No Answer Action: if the call will not be answered, it still triggers the action event after enabling this feature.
  • Action to execute: to choose which action to be executed after triggering.

Configure Action of Motion

When the Motion Detection feature is working, you can make it trigger an action. To do this configuration on web Intercom > Motion interface.
image.png

Parameter Set-up:

  • Action to execute: to choose which action to be executed after triggering.

Action URL

You can use the device to send specific HTTP URL commands to the HTTP server for certain actions. These actions will be triggered when the relay status, input status, PIN code, or RF card access changes.

Akuvox Action URL:

No

Event

Parameter format

Example

 1

 Make Call

 $remote

Http://server ip/ Callnumber=$remote

 2

 Hang Up

 $remote

Http://server ip/ Callnumber=$remote

3

Relay Triggered

 $relay1status

Http://server ip/ relaytrigger=$relay1status

 4

 Relay Closed

 $relay1status

Http://server ip/

relayclose=$relay1status

 5

 Input Triggered

 $input1status

Http://server ip/

inputtrigger=$input1status

 6

 Input Closed

 $input1status

Http://server ip/

inputclose=$input1status

 7

 Valid Code Entered

 $code

Http://server ip/

validcode=$code

 8

 Invalid Code Entered

 $code

Http://server ip/

invalidcode=$code

 9

 Valid Card Entered

 $card_sn

Http://server ip/

validcard=$card_sn

 10

 Invalid Card Entered

 $card_sn

Http://server ip/

invalidcard=$card_sn

11

Tamper Alarm Triggered

$alarm status

Http://server ip/tampertrigger=$alarm status

For example: http://192.168.16.118/help.xml? mac=$mac:ip=$ip:model=$model:firmware=$firmware:card_sn=$card_sn

Path: Phone > Action URL.
image.png

Voice Encryption

Secure Real-time Transport Protocol (SRTP) is a protocol derived from the Real-time Transport Protocol (RTP). It enhances the security of data transmission by providing encryption, message authentication, integrity assurance, and replay protection.

To configure this feature on web Account > Advanced > Encryption interface.
image.png

Parameter Set-up:

  • Voice Encryption(SRTP): choose Disabled, Optional or Compulsory for SRTP. If it is Optional or Compulsory, the voice during the call is encrypted, and you can grab the RTP packet to view.

User Agent

User agent is used for identification purpose when you are analyzing the SIP data packet.

To do this configuration on the web Account > Advanced > User Agent interface.
image.png

Parameter Set-up:

  • User Agent: support to enter another specific value, it is Akuvox by default.

High Security Mode

High security mode is designed to enhance the security. It employs encryption across various facets, including the communication process, door opening commands, password storage methods, and more.

To configure this feature on the web: Security > Basic > High Security Mode.

image.png

Important Notes

1. The High Security mode is off by default when you upgrade the device from a version without the mode to one with it. But if you reset the device to its factory settings, the mode is on by default.

2. This mode makes the old version tools incompatible. You need to upgrade them to the following versions or higher to use them.

·PC Manager: 1.2.0.0

·IP Scanner: 2.2.0.0

·Upgrade Tool: 4.1.0.0

·SDMC: 6.0.0.34

3. The supported HTTP format for relay triggering varies depending on whether high secure mode is enabled or disabled.

If the mode is on, the device only accepts the new HTTP formats below for door opening.

  • l http://username:password@deviceIP/fcgi/OpenDoor?action=OpenDoor&DoorNum=1
  • l http://deviceIP/fcgi/OpenDoor?action=OpenDoor&DoorNum=1

If the mode is off, the device can use both the new formats above and the old format below:

  • l http://deviceIP/fcgi/do?action=OpenDoor&UserName=username&Password=password&DoorNum=1

4. It is not allowed to import/export configuration files in tgz. format between a device with the high security mode and another one without it. For assistance with file transfer, please contact Akuvox technical support.


Was this article helpful?