The Visualizer supports authentication in an Ethernet network which can be enabled in the on-screen menu by changing the Ethernet-Mode to AUTH (Advanced Settings / Ethernet Settings / Security Settings).
The Visualizer supports two security levels represented by their user names (case sensitive):
admin has FW+CTRL+IMG rights (firmware update, control, image transfer - means full access)
guest has IMG rights only (image transfer).
The default password for both users is Password (case sensitive with a maximum length of 10 characters inclusive blank/space).
The admin password as well as the guest password can be changed in the on-screen menu. The admin password is protected (***) and must be entered correctly to change it or to change the guest password or the Ethernet-mode.
A forgotten admin password can only be recovered by entering the master password.
The master password is different for each device and must be requested by WolfVision service personnel (contact support@wolfvision.com).
Command: Request a session ID. The session ID is necessary to defeat replay attacks. The session ID is a 32 bit random number.
Request |
00 D3 00 |
Reply |
00 D3 04 d0 d1 d2 d3 |
Command: Login. The Login is done with an MD5 encoded string containing the session ID, the user name, the password and the IP address
Request |
01 D4 24 d0..dn |
|
Reply |
01 D4 00 |
Login successful |
Reply |
81 D4 07 |
Login not successful, access denied |
Request |
01 D5 01 00 |
Reply |
01 D5 00 |
d0..dn = MD5 (SessionID, Username, Password, IP)
MD5=16Bytes
Padding for calculating MD5: SessionID=4Bytes, Username=16Bytes, Password=10Bytes, IP=4Bytes
Strings are padded with "0"
The Single User Mode grants access to a Visualizer, to a single IP address.
To obtain SIP access it is necessary to have physical access to a device.
Additional to sending the SIP login request it is necessary to put a handheld device with a special login video onto the working surface of the Visualizer (pick-up area of the respective Visualizer camera).
The meaning of the SIP mode is, that a presenter cannot be disturbed by anybody while holding a lecture.
Put the VZ to Ethernet Mode AUTH (built-in on-screen menu)
Cmd: Send the SIP Login
Request |
01 1D 01 00 |
|
Reply |
01 1D 01 01
|
Busy, another person is trying SIP login at the moment |
Reply |
01 1D 08 d0..dn |
Specs for the handheld device, how to do the blink sequence (colors,pattern,timeout)
|
Handheld device with sequence is placed on working surface (this can also be done before the Login request is being sent)
Poll the Login status
Request |
01 1D 00 |
|
Reply |
01 1D 01 d0 |
Bit0: Login (0...not successful, 1...successful) |
If polling is successful blinking sequence can be turned off and login was successful
Timeout: No command has been sent for SIP_TIMEOUT time (300 sec at the moment)
Logout cmd
Request |
01 1D 01 01 |
|
Reply |
01 1D 00 |
|
7 |
Access Denied |
|
8 |
Auth Required |
In case Ethernet mode is not AUTH |
10 |
SIP Required |
If somebody else holds SIP |
Commands allowed for everybody while somebody has SIP:
0x1D |
SINGLE_IP_AUTH |
getting status |
0x74 |
ETH_MODE |
getting level |
0xCD |
OSD_LAYOUT_SUPPORT |
getting info |
0x1A |
DESCRIPTION |
device info |