ONVIF Ending Support for Profile S

ONVIF Ending Support for Profile S  

A commonly asked question is ​“what is ONVIF protocol?” This question confuses two different concepts: a standard and a protocol. ONVIF is a security standard, whereas RTSP — a key element of video and audio streaming — is a protocol.

For the avoidance of doubt, ​“ONVIF protocol” is an incorrect term, because it is a standard. The ONVIF standards are defined by several manufacturers in the video security industry, including Pelco, enabling products across brands to work together and interface seamlessly. This standard determines how a protocol like RTSP will work. 

RTSP stands for Real Time Streaming Protocol. It controls video and audio transmission between two endpoints, and enables it to happen with minimal latency (delay) over an internet connection. ONVIF IP cameras use a specific standard (known as a profile) to stream video and audio. In doing so, the standard defines certain rules about how RTSP should work and which ONVIF specifications it should follow.

Over a larger ONVIF security camera system, this means that all devices are using the same streaming protocol to transmit video to network recording devices, which are primed to receive it in that specific format.

ONVIF stands for Open Network Video Interface Forum. Its aim is to provide a standard for the interface between different IP-based physical security devices. In simple  terms, ONVIF specifications provide a consistent way for devices from multiple manufacturers to work together, where previously they would not have been able to. These standardized ONVIF specifications are like a common language that all devices can use to communicate.

The end user benefits from this interoperability because they are no longer tied to a single brand for everything to work; now, a business can use several different brands’ systems, with a single standard to communicate. Want to use the best ONVIF camera from Brand A, but you also want Brand B’s ONVIF IP cameras, and Brand C’s ONVIF NVR? No problem — because the ONVIF standard enables them all to work together.

ONVIF is ending support for Profile S on March 31, 2027. Profile S, which was introduced in 2011, specifies authentication methods that are no longer aligned with current cybersecurity standards. 

“After 14 years, Profile S has served its purpose of enabling basic video streaming interoperability for more than 33,000 conformant devices and clients from different vendors,” said Leo Levit, Chairman of the ONVIF Steering Committee. “As ONVIF profiles do not change to preserve the interoperability of conformant products, we recognize the need to phase it out in line with today’s security recommendations.”

ONVIF recommends the use of Profile T as a replacement for Profile S. Launched in 2018, Profile T includes virtually all Profile S features plus advanced video surveillance capabilities. End users can still use Profile S for basic video streaming between Profile S conformant devices and clients, but for security reasons, ONVIF strongly encourages customers to discontinue the use of the username token authentication method and choose instead more secure authentication mechanisms like digest authentication supported in Profile T or through TLS (HTTPS mode).

Cybersecurity Best Practices for IP-based Physical Security Products

ONVIF recommends following local regulations, industry best practices, and staying on top of updates from the marketplace. ONVIF has outlined a general, non-exhaustive set of recommendations for best practices within cybersecurity. The recommendations should not be considered as the only source or guideline to combat cybersecurity threats.

In addition to the recommendations, ONVIF supports TLS (Transport Layer Security), a secure communication protocol that allows ONVIF devices with that feature to communicate with clients across a network in a way that protects against tampering and eavesdropping.

Profile S Conformant Products

After March 31, 2027, it will not be possible for manufacturers to submit new products or older products with new firmware/software versions for Profile S conformance. Products that have already achieved Profile S conformance will always remain conformant for the specified firmware version and date of conformance. Profile S conformant products will continue to be searchable in the ONVIF conformant products database.

ONVIF conformant products and is the authoritative source for determining whether or not a product is officially ONVIF conformant and supports one or multiple ONVIF profiles. A product is registered in the database after it successfully passes the relevant ONVIF test tool and all the necessary documents have been submitted to ONVIF by the member manufacturer. Conformance is tied to a product’s specific firmware/software version and is valid indefinitely for the specific firmware/software version of that product. To ensure an existing product is conformant, the product’s firmware/software version must match the version listed for the product in the database. ONVIF releases new device and client test tools twice a year (June and December), and each test tool version is valid until a new version is released, plus a further grace period of about three months. For more information, see the Conformance FAQ page.

Note that products may use ONVIF specifications, but they may not claim to be ONVIF conformant without completing the ONVIF Conformance Process. Only ONVIF members can claim conformance, but ONVIF membership alone does not guarantee that products sold by members are ONVIF conformant.

TLS Configuration Add-on

As ONVIF adapts to new cybersecurity requirements, the specifications of the current ONVIF TLS Configuration Add-on will also be upgraded at the end of 2026. Unlike profiles, add-ons are adaptable to changing technology/specification requirements due to version handling.

Distributing Video Over CAT 5 and CAT 7

Some SI Need to Know About Video Distribution Through Cat5 or Cat7


When thinking of setting up your home video system, it means that you should know something about distributing video over CAT5 and CAT7 because it is the kind of system that will broadcast optimum performance. It also means that you can now have your source from a distance away from the display device, television or monitor.
There are three (3) general types of video distribution system:
1) Analog or Baseband
2) Internet Protocol
3) Radio Frequency

Any of these types may use coaxial cables, category 5 or more commonly known as CAT5 cables, CAT5e, CAT6, CAT6e or CAT7 cables. What are the differences between them?
1) CAT-5 distributes video up to 100M.
2) CAT-5e 350M.
3) CAT-6 and CAT6e distributes video as far as 550M to 1000M
4) CAT-7 is rated from 700M to 1000M.

Viewing Video Over CAT5 or CAT7
Video over CAT5 or CAT7 like those delivered by CATV, data, and telephone are all distributed in similar wiring closets. It delivers videos that may run along a distance of 100M for CAT 5 or even up to 1000M for CAT7. Video over CAT5 or CAT7 all goes out on the same cabling system. The system is channeled in a passive broadband balun that converts any uneven coaxial signal into a balanced signal through the video over CAT5 or CAT7. Even when distributed to different channels simultaneously, it will not slow down the network because the air analog signals do not travel on that similar network, and thus, it does not rely on the bandwidth of the video signals.
Presently, the use of FTP or UTP cables for audio and video needs is prevalent. Instead of using coaxial cables, CAT5 and CAT7 cables are used. Coax are first installed into the hubs and everything else is distributed through the FTP/UTP. Video over CAT7 or CAT5 for that matter are now possible at a limited cost. There is ease in the installation and location change is not a big deal. All one needs to do is connect patch cords from the distribution hub to the patch panel and have a single port converter connected to the television.

Advantages of a Video System Using CAT5 and CAT7
1) Video over CAT5 or CAT7 is cost effective as it eliminates the need for additional coaxial cables.
2) Configuration of video over CAT5 or CAT7 is much easier than having multiple splitter taps, amplifiers and combiners of coax.
3) A high quality signal is maintained as the distribution system of video over CAT5 or video over CAT7 uses active RF video hubs. It makes automatic slope adjustments hence all video channels’ image quality is sustained.
4) The video distribution system of CAT5 or CAT7 can carry out voice and auxiliary signals simultaneously. There are no interferences between the voice and video data.
5) A system with video over CAT5 or CAT7 allows video streaming from the computer and it is made possible through a broadband video system.
Distributing video over CAT5 and CAT7 is made possible through an RF broadband system. It broadcasts CATV, HDTV, internally generated video, video-on-demand services, and satellite videos through twisted pairs of CAT5 or CAT7 cables.

Capturing Crystal Clear Images With Megapixel Technology

Megapixel surveillance is not a new concept — its applications and benefits are starkly clear. What has changed are smarter cameras, taking advantage of the added pixels and a better understanding of illumination in real life. In the first of a two-part report, A&S examines how smarter megapixel cameras are getting; the second part looks at best practices for optimal performance.

The big picture for megapixel surveillance cameras looks bright, in the wake of the recession. HD and megapixel cameras are expected to make up nearly 30 percent of network camera shipments in 2011, according to IMS Research. By 2015, it is forecast that more than 60 percent of network cameras shipped will be of megapixel resolution.

The resolution increase has a noted effect on the whole surveillance system. While a 2.1-megapixel or 1,080p HD image is six times larger than a D1 image, the additional pixels require a bigger pipe to transmit more data. The infrastructure and storage costs for megapixel are well-documented, with ROI and TCO being used as arguments in favor of bigger pictures. The fate of megapixel is linked to the future of IP networks, with HD forecast to make up most high-resolution cameras compared to megapixel, according to IMS.

Megapixel surveillance requires careful planning, but the benefits of added resolution boost the accuracy of analytics. Edge devices take advantage of faster processors, resulting in smarter use of pixels. Analytics can help reduce bandwidth, as an event will trigger video streaming, rather than constantly sending the same still images over the network. A more distributed architecture puts less strain on networks and makes life easier.

Clarity is the main driver for megapixel. “At the end of the day, you're putting in a security system to protect life and provide evidence in a court of law,” said Stephen Moody, Security Development Manager for ViS Security Solutions, an integrator in Ireland.

Cracking the Code
H.264 is the de facto standard compression for megapixel cameras, due to its efficiency in crunching large data files into smaller ones for transmission and storage. As compression evolved from M-JPEG's stills to MPEG-4 and now to H.264, a variety of profiles yield differences in performance. With 17 profiles in all, three are the most common: baseline, main and high, said Sachin Khanna, PM for CCTV, Bosch Security Systems.

By profile, the baseline is appropriate for video conferencing; the main profile is good for broadcast video; and high profile is most applicable for HD broadcast video. “H.264 requires a fair amount of processing power for encoding and decoding; this may limit the camera's frame rate and dictate the NVR platform to achieve the desired performance,” said Rich Pineau, CTO of Oncam Global.

Most H.264 profiles stem from 2-D applications, with not all profiles being capable of integration. “Even if both cameras are H.264 and the manufacturers are partners, the system could still not work,” said Patrick Lim, Director of Sales and Marketing for Ademco Far East. “The I/O and output are hard to integrate. Some engineers say it's easy to plug and play — there's no such thing.”