Bosch/Genetec Video Cybersecurity Partnership Examined (CHAVE)

Author: Brian Karas, Published on Feb 15, 2017

Surveillance products have been relatively weak when it comes to cyber security. Default passwords, open ports, and weak authentication mechanisms led to a wave of exploits.

Now, Bosch and Genetec are working together to deliver a system that is "resilient against unauthorized access, malware, brute force cracking and other exploit techniques."

The two companies described the solution, which Bosch is marketing as CHAVE (Credentialed High Assurance Video Encryption), in a conversation with IPVM.

In this report we describe how CHAVE differs from other security mechanisms, what it adds in terms of costs, and how installation and day to day use vary from other systems.

************ ******** **** **** ********** **** **** ** ***** ** cyber ********. ******* *********, **** *****, *** **** ************** ********** led ** * **** ** ********.

***, ***** *** ******* *** ******* ******** ** ******* * system **** ** "********* ******* ************ ******, *******, ***** ***** ******** *** ***** exploit **********."

*** *** ********* ********* *** ********, ***** ***** ** ********* as ***** (************ **** ********* ***** **********), ** * ************ **** ****.

** **** ****** ** ******** *** ***** ******* **** ***** security **********, **** ** **** ** ***** ** *****, *** how ************ *** *** ** *** *** **** **** ***** systems.

[***************]

CHAVE ****** ********

***** ** ** ***-**-*** ******** *********** *** ***** *******. ** utilizes ******* **** ********** ******** / ******** *** ******** **** encryption, ***** **** ***-****** ******** ************ *** * *** **** can ********* **** *** ** ***** **********.

*** **** ** ***** ** ** ****** *** ********* ** video, **** *** ******* **** *** **** ***********, *** ** better ****** *** *** **** ****** ** **** *** ****** video. ***** ***** *.*. ************** ***-****** * ************, ***** ***** ****** ** ***** ************ ** able ** **.

*********, ***** ** ********* *****-******* *******, *** ******* ** ****** CHAVE ******* ** ** ******** ******** ****** *******.

User **************

***** ** * ***** ****** *** ****** ***** *****, **** commonly**********-****** ****-** *****, ***** **** **** ** ********** ****. ***** ** *** VMS ******** ********* ***** ***** **** ** * ****** ******** to *** ****** ** *** ******** * ***.

Target *********

*******/**********, ** ******* ********* **** **** ********** ** ********** ************ around ************* *** *** ****** ******. ** ** ******** **** even * ***** ********** *******-****** ******** ***** ********* ***** ******* outside ************.

CHAVE ********** ********

********* ** *****, *** ********** ********** ** ***** *** *** based ** *********-********* ********, **** ***.*** ****************** (********* ***** ********). ***** ** *****'* ********* **** *** ******* ***** ********* together **** ** ** ******, *** ************ *** ******** *** accessing *** *******.

******* ******* *** ******** ** **** ******** ******** ********** ** support *****, ** ** *** * ******* **** *** ** added ** ******** ******* *** ******** ******** ** ***** *******.

Username/Password ** ****

***** *************** ***** **************, ***** ********** ********/******** ****** ** *******, *** *** **** of ****** ** ******* *********. *** ****** ** ******** ** have ****** ** *** ********, ** **** *** ******* *** routinely ******* *** *********** ********* ** ****** *** ***** *** still *****. ********* ** *****, *** ******** ****** *********** ** not ** *****, **** *** ********-****** ********** *************, ** *** systems ********* ******* **** ******** ****** *** ****** ******/************** ********.

Supported *******

***** ***** *** ********* ******* ** ********* ********** *****:

  • ********* ** **** ** ***** **** ******
  • ********* ** ********* **** ** ***** **** ******
  • ****** ** ********* **** ** ***** *** ******
  • ********* ** **** ** ********* ******
  • ******** ** ******* **** ** ***
  • *** ** ********* **** ** ********** ***
  • ****** ** ****** **** ** ******

Genetec *******

******* **** **** *** ****** ** **** **** ******* *** CHAVE ** *** **** ******* ** ******** ******, ***** ****** be *.*.

********* ***** ******* ** ********* ** *******, ****** ******* ***** nor ******* ***** ******* *** **** *** ********* *********** ** intended ** ****.

Additional ******** *** ************ ************

******* **** ** **** *** ******** ************ ***-********* ****** ********, this **** ** ******* **************. *** *********** ******* ******* **** ******** ****-**** ********, ********* to *****, *** ****** *** *** **** **** * *** extra ****.

**** ********, ************* ************ **** ** ** ******** **** ******** Center ****** *** ******* *** ** ***** ** *** *** and **********. ***** ******** ** ****** *****, **** ** ******** bitrate ******** ** ******** ******** *** *** **** ** ***-***** cameras.

*******, *** ********** **** ******** ** ******* *** ********* *****-******* cameras ****** ** *******, *** **** ******* ***** ** ** through * ********/************* *******.

Training ************

***** **** **** *********** **** **** ** ******* ********** ******** before **** *** ********* ** **** *** ******* ***** ********. The ******** ** ******** ** ** ********* *****, *** **** likely ** * **** *** ******.

Cost ** *****

***** *** ********** ******* ***** ** ********* ***** ** * non-CHAVE ******. ***** *** ********* ******* ** *** **** ***** and ***-***** ********, ******* **** * ******** **** *** *** more *** ***** *******, *** ******* ***** *** * ***** camera *** ** ****** **** * *********** *******.

*** ******** ******** ************ **** $**-$***, ********* ** *** ***** level ** *** *********** ***** ******, *** **** **** ** be ******* ***** * *****.

******* **** **** **** *** ********* ******* *** ******** ****** with *****, *** *** *** ** ***** ****** ** * different ******* *******, **** ** ********** ****.

***** **** **** **** ** ** ****** ***** *****, *** have ****** *** ******** **** ***** **** *******. *******, ** is ****** **** ********* ************ ***** **** ******* ** ***** smart *****, ** **** **** *** *** ** ********, ** may **** ******* * *** *** ** **** ***** **** readers *****.

Compared ** ***** ******** *******

*****'* ******* *************** *** *** **** ***-* ***** * **********, and ***********-***** ****** **** *** *********** ** ********/******** *****. **** *** **** ******** ** *** ***** ** **** ************ claims *** **** **********, ***** ***** ** ******** ** ********* that **** ** **** ***** ************, ** ** ***** ********* the **** ** ****** ** *********** ******** *** *******/********. *********** the ******* ** ***** **** * ****/**** ***** ***** ** valuable ** ********-****** *********, **** ** **** *** *** **** to **** *** ******** ********** ************.

*******, * ***** ****** ***** ****** ** ************ **** ********* than *********** *******, **** ** ***** * *** *** ******* that ******* ***** ************** *** ***** *********, ** ** ******** specific ****** ********, ************ **** **** ** ** ****** ********* and **** ******* ***** * *****, **** ********** *****/************ ****.

Outlook *** *****

***** **** ** ****** ******** ** ********** ************, ** **** help *** * ********* *** **** *** ** **** **** a ************* *********** ** **** ******* **** **********. ****/** ***** VMSes ******* *****, ** *** ****** **** ** ***** ******** methods ** *******-**** ** ******** *******, ****** ****** **** ******* requirements (*.*., ** *********** *** ***** *****). *****, **** ** unlikely ** ****** ** ****, ****** ***** * ********** ***** concept **** **** ** *** ********** ******.

Comments (19)

Undisclosed Manufacturer #1

02/15/17 02:12pm

**** ** * ********* *** ******** ******** **** ***** **** come ** ****. * ** *******.

John Honovich

IPVM | In reply to Undisclosed Manufacturer #1 | 02/15/17 02:16pm

****, * *** *** * ** **** ******* *** *** cost ** ****** **** *** *********** ** *****, ** *** may ***** **** **** ********** ;)

Eddie Perry

02/15/17 02:27pm

*****'* ******* *************** *** *** **** ***-* ***** * **********, and ***********-***** ****** **** *** *********** ** ********/******** *****. ** is *** **** ******** ** *** ***** ** **** ************ claims *** **** **********, ***** ***** ** ******** ** ********* that **** ** **** ***** ************, ** ** ***** ********* the **** ** ****** ** *********** ******** *** *******/********. *********** the ******* ** ***** **** * ****/**** ***** ***** ** valuable ** ********-****** *********, **** ** **** *** *** **** to **** *** ******** ********** ************

********* *** ********* ******* ** **** **** ***** **** *****-* or ********* ** *** *** ******* ******* ****** *** ***** with *** *** **-*****.

******* *** ***** ***** ** *** *** ******** ******** **** the **** ****** *** *** ***** *** * ***** ****** really *** **** *** ****** ** *** **** ************* ** my **** *** ****** ** *'** **** **** ******** **** i *** *****.

Thumbnail brk1

Brian Karas

IPVM | In reply to Eddie Perry | 02/15/17 02:58pm

**** ***-* *** * ****** ** **********, * ***** *** most *****, * ***** *** **** ******.

********* ***** **** ***-* ***** * ** ***** ******* ****** release.** ******* **** **** ******* ** *** ***** ******* *******, *** ******* * ****.

*** ********* ******* **** **** ***** **** *** ***** ***** options, *** ***** ******* **** ******* *** * ***** ***, 5MP *** ******, *** **** *********.

Undisclosed

02/15/17 04:45pm

**** ** *** **** **********, *'* **** ** *** *** camera ************* ******* ************ (***** ** ***** **** *** ***) when *** ****** ** ****** ***-** ******** ******* * ************ number. **** ***** ******* *** ****** ************* ********** ** *** often * ***** ** *** ***. ** ********** ** ****** to *** *******.

Thumbnail profile pic

Ethan Ace

IPVM | In reply to Undisclosed | 02/15/17 04:52pm

* ***** **** **** *********. * ********** **** *****, ******, and ********* **** ***** **** ******* ****, *** * ******* only ********* ****** ****** ** ** **** ** ****** **** to *** ****** (*** * ******* ****'* **** ********** **** iVMS, *** * *****'* *******). ******* *** ******* ** ****, but ******* ************, *** **** ****** **** ** ***** **.

**** ***** ** ********* ******* ** ****:

*** ****** ***** ** *** *** ************* ******* ****** ***** detection ** ***. ** ***** ***** ** *** ****** ******* tries ** ***** **** * ***** ********, *** ******* *** VMSes, ******** ** *********** ********, ** ***?

John Honovich

IPVM | In reply to Undisclosed | 02/15/17 05:33pm

*'* **** ** *** *** ****** ************* ******* ************ (***** or ***** **** *** ***) **** *** ****** ** ****** log-in ******** ******* * ************ ******.

*******:****: **% ** ***** *** *** *** ************'* ************** *** **** **** *** ******* ****.

Thumbnail image

Jon Dillabaugh

Pro Focus LLC | In reply to Undisclosed | 02/16/17 01:35am

**** ********* *******, ****** **** *** ******* ******* ** **** lock ** ******* ***** ******* *** *** **** *** ***** you ** *** ****** ***** *******. ****** ** **** **** any ****** ***.

Thumbnail profile pic

Ethan Ace

IPVM | In reply to Jon Dillabaugh | 02/16/17 01:55am

******* ** ******* ** * ********* ****** *****'* **** *** stream ***********, **** *** *** *********. * **** ****** **** with ***** *** *'** **** *** **** ** ***** *****. It ***** **** ********* ** *** ***, ******.

******, **** ** ** *** ******** **** **** *** ****** offline, **** ************ **** **** **** *** **'* *******. **** you're **** ************* *** **'* ******* **********. ******** ******* * discrete ***** ***** ** **********.

Undisclosed

In reply to Ethan Ace | 02/16/17 04:47pm

* ** ****** **** ****** ************* *** ******* ****... ** an *** **** *** ****** ********* ** * ********** ***** video ************ ****** - * **** ** ****** ********** ********* based **** *** ******'* *****-******** ********.. *** ***** ***** **** be ******* **** *** ****** ** ****** ** ***** ** SDK **** **** * *** **** ****** ***** ******** ***** as * ***** ************** ** **** ****** ************* *** ** a ****** *** **** ***, ******* ******* ***. * ***'* think * ** ***** ** ****....

Thumbnail brk1

Brian Karas

IPVM | In reply to Undisclosed | 02/16/17 05:08pm

*******, ***** *** ***** *****-******** ******** *** ***** ************? **-***** analytics, ****** ***********, ****** ***********, ******** ***?

Undisclosed

In reply to Brian Karas | 02/16/17 05:33pm

*****, *** **, *** ******** **** *** ****** *** **** to ***** *** *** ******** ** *** ********* ******* ************. That ***** ****, * ** * *** *** ** *** Smart ****** *** ******** **** ******* *** ****** ********** ***.

** ** *******, **** * ********* ******* ********** - ****** features **** ******* ************ ** ****** ** *** ******** ** your ***** ************ ****** ** * ****** ******** (***** ****** which *** ******* *********** ***) .

******* **** *** ******** - * ** ******* *** * 4K **** **** ***** ** ** , ** ********* **** dynamic *****, **** *** ***** ***********, ******** * ***** ***** and ******** ***-** ******* ************ - ** * ****** *** too **** :) ??

Thumbnail brk1

Brian Karas

IPVM | In reply to Undisclosed | 02/16/17 06:11pm

* ***'* ***** *** *** ****** *** *** **** ** the ***** ** ******* * ******* ********** **** ** ***********. I ***** *** ********* *** ************* ** **** ** ** often * ****-*** **** **** *********** *********. ************ **** *****-******** features ***** ********* **** **** *** ** *******. ***** **** delay ** **** * *******, ***** ** ** * ****, hard ** ***.

* ***** **** ********* **** ** **** ** ***** *** cyber ******** ************ ***** ** **** ********* **** "****** *****" like ********* ** *****(**) ****** (******** ** ****** **** *** other ****** ******** *** ** *** **** ******** *********, * company **** ** *** *.*** ***** ***** ** ****** *** working ** **** *****).

Undisclosed

In reply to Brian Karas | 02/17/17 04:04pm

* ***** **** **** *** *** ****** - *** ****** being ***** ** **** **** ******* ********* **** **** ****** security ********. ** **** ***** * **** **** ************ ***** add **** ***** **** *** ** *** ******** ******** ** using *********** ***** ************** ***.

Undisclosed Integrator #3

02/16/17 09:19am

"*** ****** ** ******** ** **** ****** ** *** ********, so **** *** ******* *** ********* ******* *** *********** ********* to ****** *** ***** *** ***** *****. ********* ** *****, the ******** ****** *********** ** *** ** *****, **** *** security-minded ********** *************, ** *** ******* ********* ******* **** ******** access *** ****** ******/************** ********."

**** ** ***** * ******* *******. ** ******* ** ** security ******* ****** ** **** ********* ** *** ********. ********** not *** ****** ************** ********.

******* ***** * **** **** **** ****** **** *** **** one **** *** * *****/******** ***** *** *** *** ***** to *** ******. ***** *** ** ****** ** ******, ** your ****** ** ********** *****.

** *** **** ** ******* ** *** ********, *** ***'* the **** *** ***** ********** *** **** *** ******** *********** reader, ****** ************* ****** *** ** ********* *** *** ** Android, * **** *** ****** **** **** *******.

Thumbnail photo

Michael Archer

In reply to Undisclosed Integrator #3 | 02/16/17 11:53pm

** ** *** **** *** ** ******? ** *** ********* a ****** ** * ****** **** *** *** ***** ** touch ** **** **** ******* *****!

**** ********* *** ** *** ********* ** **.****** ** *** does *** ******* *** *****, ****** ***** ***** ****.

** *** ** **** * ****** *** *** * *********** cost **** ******* ******?

*. ****** *** * ********* ******, *** ******** ** **** is * ** **** *****. *********.

*. ******* ****** ***** ** ******, ******** ***** *** ** direct.

*. ****** ** ***** ***** ** **** ** **** ************* / ******** ********** ****.

*. ********* *** *** *********** ***** ***, ***** **** **** after * **** **** ***** * ******* **** *** ******, for **** ****** **** ** **** ************* ******** ** **** from ***** (******* ** **** **** * ****** ****** ** a ****** **********) ****** *** *** ****** *** ****** **** the ****** ** ** **** * **** ** *** *********** generation. (*** ***** ******** ***** ** **** *** ** *** the *****)

*. **** ******** *** ****** **** *** ****** ******** *************, close *** *********.

*. ***** *** *** *** * ****** ****** / ******* codes ******, **** **** *** ** ****** ** *** ********, this ***** ** ***** *****.

*. ****** ********* **'* *** ********, ** **** ******* *********** of *** *** ** ******** * ********.

*.****/**** *** ** *** **** ***** ** ****** ** ******** at ***** **** ***** **** **** **** *******.

*. ****: ** ************ ******** *** *** ** ****** ***** software ****, ** **** *** **** *** *********. ******** *** certificate *** **** ********* ** *** ******** ****, ** **** as **** ** ********.

*. **** *********** **** ******** ******** ** ** ********, *** allow ***** - ****** (*** ** ** ********) ** **** a *** ***-***** ** *** *********** ***** *** ****** ** added.

* ******** ******** *** ** ******** ** ***** *** ** we ***'* **** **** ********.

**. ************ ******* ***** **** ****** ** ****** ****, *** even ******* *** **** ********.

**. ****** **** **** *** ******* ** ************* **** *** generated ***********.

***** ** **** ** **** *** ******* *** *** ******** certificate **********, *** ******** ********** ********* ***. * ******'openssl **** -****** **' gives you a lovely password nobody would be able to guess.

Undisclosed Integrator #3

In reply to Michael Archer | 02/20/17 03:58pm

**, * ***** ******* ** ** *** *** ******:

***** ** *** *** ******** ********* ***** ***** **** ** a ****** ******** ** *** ****** ** *** ******** * PIN.

Thumbnail 201511 baud sgpp

Baudouin Genouville

In reply to Undisclosed Integrator #3 | 03/17/17 04:56am

******* ***** * **** **** **** ****** **** *** **** one **** *** * *****/******** ***** *** *** *** ***** to *** ******. ***** *** ** ****** ** ******, ** your ****** ** ********** *****.

** *** *****!

***** *** ******* **** **** *********** *******, ** ** *** have *** ***********, **** ***** *** ****** **** ******* ** well

=>*****://**.*************.***/**/********/********************/***************/****************/**********************

Thumbnail img 20180328 180024

Fabian Muyawa

LONTECH SYSTEMS | IPVMU Certified | 11/30/17 01:10pm

***** ** ** ************ ** ********** **** ***** ** ******* and ***** ** * ***** **** ******* ******* ********* ****** hardening. ** ** **** ******** ** ***** **** ************** ** been ******** ** ********* ***** ******* ** ** **** ********.

* **** ** ******* **** *** **** **** ** *** installers *** *********** ** ******* *** ******* ***** *** ************ to **** ********.

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports on VMS

Magos Radar Company Profile on Nov 12, 2018
Magos America General Manager Yaron Zussman admits when he first came across Magos, he asked himself: "What's innovative about radar?" Be that as...
Axis 2N Intercom Tested on Nov 08, 2018
Axis expanded its video intercom business buying Czech-based 2N in 2016. Despite competing against owner Axis' intercoms, 2N recently registered as...
Dahua Dual Imager Dome Camera Tested (HDBW4231FN-E2-M) on Nov 07, 2018
Dahua has introduced a dual-imager dome model, the HDBW4231FN-E2-M, with two independently positionable sensors including integrated IR, not found...
Avigilon Opens Up Analytics And Cameras on Nov 06, 2018
Avigilon is opening up. The company historically famous for advocating its own end-to-end solutions and making it harder for 3rd parties to...
Worst Products on Nov 03, 2018
Security integrators periodically report on their favorite and worst products to IPVM. These are known integrators who IPVM pays to answer surveys....
Unisight Company Profile on Nov 01, 2018
Hikvision's largest US OEM, LTS has started to carry Unisight, whose products (shown below) look a lot like Hikvision's rival Dahua: Who is...
VMS Camera Management Shootout - Avigilon, Dahua, Exacq, Genetec, Hanwha, Hikvision, Milestone, Network Optix on Oct 29, 2018
Camera setup, configuration and maintenance are the most common tasks when managing a surveillance system. Who does it best and worst? Who offers...
Axxon Face Search Tested on Oct 26, 2018
AxxonSoft has brought facial recognition to their Axxon Next VMS for free with the simply named Face Search, claiming to allow users to find...
Exacq Co-Founders Return, Start Qumulex on Oct 24, 2018
Exacq co-founders Dan Rittman, Tom Buckley, and David Underwood are back, starting up Qumulex. In 2000, they sold Integral to Andover...
Geutebruck Company Profile on Oct 22, 2018
Geutebrück has been in business for nearly 50 years, but they are not well known within the US surveillance market. In this report, we profile...

Most Recent Industry Reports

'Sticker' Surveillance Camera Developed (CSEM Witness) on Nov 16, 2018
The Swiss Center for Electronics and Microtechnology (CSEM) has announced what it calls the: world’s first fully autonomous camera that can be...
ISC East 2018 Mini-Show Final Report on Nov 16, 2018
This is our second (updated) and final show report from ISC East. ISC East, by its own admission, is not a national or international show, billed...
Facial Detection Tested on Nov 16, 2018
Facial detection and recognition are increasingly offered by video surveillance manufacturers. Facial detection detects faces in an image/video...
Throughtek P2P/Cloud Solution Profile on Nov 15, 2018
Many IoT manufacturers either do not have the capabilities or the interest to develop their own cloud management software for their devices....
ASIS Offering Custom Research For Manufacturers on Nov 15, 2018
Manufacturers often want to know what industry people think about trends and, in particular, the segments and product they offer.  ASIS and its...
Hikvision Silent on "Bad Architectural Practices" Cybersecurity Report on Nov 14, 2018
A 'significant vulnerability was found in Hikvision cameras' by VDOO, a startup cybersecurity specialist. Hikvision has fixed the specific...
French Government Threatens School with $1.7M Fine For “Excessive Video Surveillance” on Nov 14, 2018
The French government has notified a high-profile Paris coding academy that it risks a fine of up to 1.5 million euros (about $1.7m) if it...
Integrator Credit Card Alternative Divvy on Nov 13, 2018
Most security integrators are small businesses but large enough that they have various employees that need to be able to expense various charges as...
Directory of Video Intercoms on Nov 13, 2018
Video Intercoms, also known as Video Door-Phones or Video Entry Systems, have been growing in the past decade as more and more IP camera...
Beware Amazon Go Store Hype (Tested) on Nov 13, 2018
IPVM's trip to and testing of Amazon Go's San Francisco store shows a number of significant operational and economic issues that undermine the...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact