Authentication

The Visualizer supports authentication in an Ethernet network which can be enabled in the on-screen menu by changing the Ethernet-Mode to AUTH (Advanced Settings / Ethernet Settings / Security Settings).

The Visualizer supports two security levels represented by their user names (case sensitive):

The default password for both users is Password (case sensitive with a maximum length of 10 characters inclusive blank/space).

The admin password as well as the guest password can be changed in the on-screen menu. The admin password is protected (***) and must be entered correctly to change it or to change the guest password or the Ethernet-mode.

A forgotten admin password can only be recovered by entering the master password.

The master password is different for each device and must be requested by WolfVision service personnel (contact support@wolfvision.com).

Authentication sequence

Login

  1. Command: Request a session ID. The session ID is necessary to defeat replay attacks. The session ID is a 32 bit random number.

Request

00 D3 00

Reply

00 D3 04 d0 d1 d2 d3

 

  1. Command: Login. The Login is done with an MD5 encoded string containing the session ID, the user name, the password and the IP address

Request

01 D4 24 d0..dn

 

Reply

01 D4 00

Login successful

Reply

81 D4 07

Login not successful, access denied

Logout

Request

01 D5 01 00

Reply

01 D5 00

Calculating the MD5 hash code

d0..dn = MD5 (SessionID, Username, Password, IP)

MD5=16Bytes

Padding for calculating MD5: SessionID=4Bytes, Username=16Bytes, Password=10Bytes, IP=4Bytes

Strings are padded with "0"

Single User Mode (SIP):

The Single User Mode grants access to a Visualizer, to a single IP address.

To obtain SIP access it is necessary to have physical access to a device.

Additional to sending the SIP login request it is necessary to put a handheld device with a special login video onto the working surface of the Visualizer (pick-up area of the respective Visualizer camera).

The meaning of the SIP mode is, that a presenter cannot be disturbed by anybody while holding a lecture.

Login:

  1. Put the VZ to Ethernet Mode AUTH (built-in on-screen menu)

  2. Cmd: Send the SIP Login 

Request

01 1D 01 00

 

Reply

01 1D 01 01

 

Busy, another person is trying SIP login at the moment

Reply

01 1D 08 d0..dn

Specs for the handheld device, how to do the blink sequence (colors,pattern,timeout)

  • colors:
    red and blue

  • pattern:
    0 (not used)

  • timeout:
    time the sequence is running as max

  1. Handheld device with sequence is placed on working surface (this can also be done before the Login request is being sent)

  2. Poll the Login status

Request

01 1D 00

 

Reply

01 1D 01 d0

Bit0: Login (0...not successful, 1...successful)

  1. If polling is successful blinking sequence can be turned off and login was successful

Logout:

  1. Timeout: No command has been sent for SIP_TIMEOUT time (300 sec at the moment)

  2. Logout cmd

Request

01 1D 01 01

 

Reply

01 1D 00

 

Errorcodes:

7

Access Denied

 

8

Auth Required

In case Ethernet mode is not AUTH

10

SIP Required

If somebody else holds SIP

Exceptions:

Commands allowed for everybody while somebody has SIP:

0x1D

SINGLE_IP_AUTH

getting status

0x74

ETH_MODE

getting level

0xCD

OSD_LAYOUT_SUPPORT

getting info

0x1A

DESCRIPTION

device info