ONVIF® has unveiled the Release Candidate for Profile V, a draft standard for cloud-based video surveillance. This new specification aims to advance the capabilities of IP-based physical security by facilitating interoperability across various brands without the limitations of being tied to a single vendor. System integrators, consultants, and end users can thus construct cloud video systems with a flexible infrastructure.
A cloud-based video management system (VMS) offers a streamlined solution by reducing reliance on on-site hardware. By utilising remote servers, it diminishes the need for local servers, simplifies upkeep, allows remote access through a web client, and permits easily expandable storage.
Video management software integration
Currently, proprietary systems dominate the cloud video surveillance market, often tying cameras, software, and recordings to one provider. ONVIF's Profile V, however, facilitates compatibility across products from different manufacturers. This mitigates vendor lock-in, allowing components to be swapped without overhauling the entire system.
"Standardising cloud video surveillance is a natural next step for ONVIF," remarked Leo Levit, Chairman of the ONVIF Board of Directors. "As more security systems move to the cloud, we want that shift to give customers more choice, not less. When the fundamentals are standardised, companies can build on top of them, and customers can trust that what they invest in today will still work with what they choose tomorrow."
Secure Connectivity and Encryption
Profile V ensures robust security by necessitating the implementation of the ONVIF Profile V Security Add-on
Profile V facilitates a VMS's ability to access cameras behind local firewalls without the need for port forwarding or VPNs. By enabling secure outbound connections, devices stream live video and audio via WebRTC to authorised clients. Additionally, these devices can transmit event notifications to the VMS to prompt actions. Security is enhanced by encrypting video and audio intended for cloud storage platforms such as Amazon S3 or Microsoft Azure Blob Storage.
Profile V ensures robust security by necessitating the implementation of the ONVIF Profile V Security Add-on. This encompasses the OAuth 2.0 framework for authorising data exchanges and encrypting recordings for storage. The decision to implement these as add-ons allows ONVIF to update security measures in response to evolving threats without altering the core Profile V specification.
The draft Profile V specification is presently open for review by ONVIF members and is expected to be finalised by the year's end. Interested parties can access a detailed technical FAQ concerning the Profile V Release Candidate for more information.
ONVIF®, whose open standards make IP-based physical security products interoperable worldwide, has introduced the Release Candidate for ONVIF Profile V, a draft standard for cloud-based video surveillance. Profile V extends the ONVIF brand-independent approach to the cloud, giving system integrators, consultants and end users a way to build cloud video systems that are not tied to a single vendor.
A cloud-based video management system reduces or replaces on-site hardware and runs video through a remote server. It minimises the need for local servers, simplifies maintenance, supports remote access from a web client, and makes it easier to expand storage as a system grows.
Video management software
Most cloud video surveillance systems today are proprietary, tying a customer's cameras, video management software and recordings to a single provider. Profile V delivers those cloud benefits without the lock-in: conformant products from different manufacturers work together, and any one of them can be replaced without redesigning the whole system.
"Standardising cloud video surveillance is a natural next step for ONVIF," said Leo Levit, Chairman, ONVIF Board of Directors. "As more security systems move to the cloud, we want that shift to give customers more choice, not less. When the fundamentals are standardised, companies can build on top of them, and customers can trust that what they invest in today will still work with what they choose tomorrow."
Secure outbound connection
Profile V enables a conformant cloud-based video management system (VMS) to reach cameras behind a local firewall, typically without port forwarding or VPN configuration. The conformant device makes a secure outbound connection to the cloud VMS, then streams live video and, if applicable, audio over WebRTC to an ONVIF client or an authorised standard web client.
The device can also send event notifications to the cloud VMS to take action. Video and audio are encrypted before they are pushed to cloud storage, such as Amazon S3 or Microsoft Azure Blob Storage. Profile V can be combined with other ONVIF video and access control profiles for integrated or hybrid systems.
Evolving security requirements
Security is built in. Profile V conformant products must implement the ONVIF Profile V Security Add-on, which covers two areas: it uses the OAuth 2.0 framework so that only authorised devices, clients and cloud services can connect and exchange data, and it encrypts recordings on their way to storage. ONVIF placed these requirements in an add-on instead of the profile itself because an add-on can be updated to keep pace with evolving security requirements without rewriting the full Profile V specification.
The draft Profile V specification is available now for review by ONVIF members, and ONVIF expects to finalise it by the end of the year. A technical FAQ about the Profile V Release Candidate is available here.
