Media Signing Add-on (Release Candidate)

For signing video to support video authenticity and integrity

  • Cryptographic signing of live video stream at the point of creation or encoding
  • Applicable only to encoded H.264 and H.265 video

 

Overview

When using surveillance video as evidence, establishing authenticity and integrity is essential. Authenticity validates the video’s source, while integrity verifies that the video has remained unaltered since the moment of capture.

The ONVIF Media Signing Add-on addresses these needs through interoperable support for signed video from the source. It defines a standardized way for clients to configure the device for signed video and for devices to cryptographically sign video at the point of creation, enabling traceability to the origin and accountability for each image frame.

Download the ONVIF Media Signing Add-on Specification Version 1.0 (Release Candidate) from the Member Portal (accessible for eligible ONVIF members)

 

How cryptographic video signing works

A device, such as an IP camera or video encoder, that is conformant to ONVIF Media Signing adds cryptographic signing information to the encoded video stream at the point of creation. The signing information is associated with each image frame and the signing device, allowing a media player that supports the Media Signing Specification to verify the integrity of the signed video later in the workflow.

A selected time interval of a signed video file may be copied, stored, transported, packaged, or exported without affecting verifiability, provided that the signed encoded video data remains unchanged and the metadata required to verify the exported content is included.

The verification process:
  1. Capture and encode: A conformant device captures and encodes video.
  2. Sign: The device adds cryptographic signing information to the encoded video stream.
  3. Transmit and record: The signed video stream is recorded while preserving the metadata.
  4. Verify: A media player that supports the Media Signing Specification checks the digital signatures.
  5. Report: The media player can determine if the video is valid or invalid.

 

Conformance requirements

Conformant devices

A conformant device, such as an IP camera, video encoder, or other video source, that is conformant to the add-on must be able to:

  • Be configured by a conformant client to produce signed video.
  • Add cryptographic signing information to encoded video using a media signing key associated with the device, allowing clients to verify that signed video has remained unaltered since the moment of signing.
  • Expose media signing support through video encoder configuration options and expose the capabilities and configuration options required by conformant clients.
Conformant clients

A conformant client, such as video management software, a recording system, a forensic analysis tool, or a cloud service, must be able to:

  • Use video encoder configuration options to determine whether media signing is supported for a usable media profile and encoder configuration.
  • Configure conformant devices to produce signed video.
  • Receive signed encoded video streams and the signing information required for verification.

 

Current scope

The Media Signing Add-on currently applies only to live video. Audio support may be added in future versions. Unlike ONVIF profiles, add-ons support version handling and may be updated over time.