Denkovi smartDEN Opener, Руководство пользователя

Страница: 108 / 119

smartDEN Opener User Manual
24 Apr 2018
- 108 -
13. Security considerations
There are no extraneous IP services found on general-purpose operating systems (e.g. fingerd,
tcp_wrapper, etc.) that can possibly be exploited by an unauthorized agent. In particular, the
smartDEN Opener does not run protocols such as Telnet and FTP which may have the potential
for security breech.
Web-browser access
A challenge-response authentication is used in login process. When the password is entered, it
is transmitted across the network in encrypted form, so eavesdropping on the data transmission
will not reveal the password. Subsequent transmissions of the password to "login" onto the device
are encrypted and "safe". The only case when the password is transmitted across the network "in
the open", is when it is being changed and submitted in
General
Settings
form. Therefore, you
must set passwords in the secure environment where you can make sure that no one is
"eavesdropping".
MQTT operation
MQTT protocol uses encrypted topics subscription. However when MQTT operation is used on
public brokers, messages could be eavesdropped. smartDEN Opener does NOT use SSL
communication and each messages are transmitted in plain text. For more security own private
MQTT broker could be used.
XML operation
XML operation uses open authentication so the requests are sent over the network in plain text
and could be eavesdropped. Use it on your own risk.
Web server and HTTP XML and JSON requests access can be restricted by IP Address
(range of IP Addresses) as additional security.
RF remote
RF remote controller uses "rolling code" encryption which is considered safe enough. The RF
remote controllers with smartDEN Opener are just the same as cars' RF remote controllers.