Disabling user account access

[mb_sk]

I've got a number of Hikvision IP cameras set up in an office/conference environment.

A Hik NVR is constantly recording throughout, and I have a piece of third-party software setup that accesses the cameras via the RTSP streams to allow staff to monitor from various locaions around the building.

Sometimes for various reasons when there are events going on, they don't want to be monitored. Happy to keep the NVR running and recording because it's in a secure environment and can only be accessed by authorised persons. However I'm trying to find a way to disable access to the RTSP streams that the third party system uses.

Considerations:

• It's around 10 cameras that need to be disabled while leaving the third-party access live for the others
• This is needed on an adhoc basis, so scheduling anything won't work
• I've already ruled out doing anything on the third-party software side, it needs to be done at the camera level
• The third-party software uses it's own user account to log into each camera which only has permission to live view
• Ideally I'd like a hardware solution, (a big red button somewhere) but really anything will do

Any thoughts or suggestions are gratefully received.

 

[codlord]

Perhaps you could use ISAPI interface and write automated scripts? I don't think there is any way to disable RTSP access on cameras but perhaps another way to do it something like:

• A disable access script which changes the passwords for the specific user on the 10 cameras to an incorrect password.
• A enable access script which changes the passwords for the specific user on the 10 cameras back to the correct password.

Or alternatively add/remove user permissions instead of changing passwords?

The HikVision ISAPI (Intelligent Security API) does have options for getting/setting user details although I have no experience there. I have only written very basic ISAPI scripts in bash to reboot certain cameras so I can do scheduled reboots. My scripts just use `curl` tool to send the correctly crafted URL to each camera. But other ways to achieve the same, for example I have seen things like python based ISAPI command line tool on github etc but never used them.

Not sure where best to download the HikVision ISAPI manual from, but hopefully you can find one here somewhere or online.

 

[trempa92]

IF third party is using basic auth on camera for RTSP, the ISAPI script on event receive could work

You would simply change RTSP auth to digest, and 3rd party would fail to authorize and after event restore to digest/basic.

So you need HTTPListener for realtime events as soon you get event you need, close the pipe on RTSP stream AUTH