Media security
Media security
Encrypted streams and alarm images do not share one decryptor. Use the component that matches the client.
OpenSDK (Android / iOS / PC)
The mobile and desktop guides keep image decryption in the client SDK, together with provisioning, init, playback, and talk. See Build a mobile app and Build a desktop app. Follow the SDK page and the demo; this page does not add another library.
ImouPlayer
The light-app player decrypts in the browser after you set code:
- custom audio and video key when the device has one;
- otherwise the device password;
- otherwise the device serial number.
Source: Integrate the light application. kitToken is a play credential, not the decrypt key. See Tokens.
Server-side Image Decryption Demo
Downloads lists Image Decryption Demo (updated 2025-12-25, resourceType=HTTPInterfaceCallDemo): server-side alarm image decryption from an image URL, with a Java sample. Use that archive when your backend must decrypt a picture it downloaded. Do not invent other decrypt components that are not in the download table.
HLS and public live URLs
bindDeviceLive and createDeviceRtmpLive return addresses that anyone who holds them can watch. Treat them as secrets, create them after your own ACL, and mint a new one when they expire. Encoding notes: Cloud live (HLS). Console live pages: Console · Live service.
This page does not describe extra wrapping, watermarking, or DRM beyond those live-address rules.