Profile V Security Add-on (Release Candidate)

For secure cloud authentication and encrypted recordings

• Secures the access and configuration channel using the OAuth 2.0 framework
• Specifies video and audio encryption methods for cloud recording

Overview

ONVIF Profile V Security Add-on provides a standardized framework for secure authentication between a device and cloud-based client. It supports authentication with cloud services, such as storage providers, WebRTC signaling servers, and Uplink servers. The access and configuration channel is secured using the OAuth 2.0 framework, with mutual TLS (mTLS) for identity verification and access tokens for cloud communication.

The security add-on also specifies the encryption methods and MP4/CMAF container formats that an ONVIF Profile V conformant device must support to securely and efficiently send video and audio for cloud recording.

The specifications in this add-on must be implemented by a product that claims to be an ONVIF Profile V conformant device (such as an IP camera, video encoder or streaming application) or a Profile V conformant client (such as a cloud-based video management system or Video Surveillance as a Service).

Download the ONVIF Profile V Security Add-on Specification (Release Candidate) and ONVIF Profile V Specification (Release Candidate). (Accessible only to eligible ONVIF members.)

Learn more about ONVIF Profile V and read the FAQ.

Future-proofing

Because security requirements evolve rapidly, this add-on is designed to be dynamic and able to adopt newer security mechanisms without rewriting the entire Profile V specification.