modifyPassword: Modify Device Password for Network Camera Apps - Imou Open Platform

Deprecated: Use Change password (device.password.set). This legacy HTTP page is retained for existing integrations.

Function details

Modify the device password.

Note: This interface is valid for devices with password-management capability (historically TCM; other models such as prosegur may be supported).

Request address

https://openapi-[DataCenter].easy4ip.com/openapi/modifyPassword

Request format

HTTP POST. JSON body layout: Request conventions. Sign with Signature.

Introduction parameter description

Password encryption algorithm detailed description: Password calculated formula is: Base64 (AES256_CBC (SourcePassword, Key [], IV []); Encryption rules are as follows:

1. The algorithm is AES / CBC / PKCS5PADDING in the method of encrypting the CBC packet. 2, SourcePassword is the plain text password of the device; 3, Key [] is a binary array of key (Key); 4, key (key) is: LowerCase(MD5(UpperCase(Base64(KDF(deviceId,MD5(appsecret)))))), the KDF algorithm is PBKDF2WITHMACSHA256, iterates 1200 times, exports the secret key length 256; 5, IV [] is the binary array of initialized vector, which is: MD5 (Appsecret), encrypting the MD5 algorithm of MessageDigest with Java.

Apparatus new password rules require:

1. Password composition must contain at least two of the numbers, uppercase letters, lowercase letters, and special characters, length of 8 to 32 characters long. Among them, in addition to ['] ["] [;] [:] [&] [space], any visible character outside the six characters; 2, password cannot be Chinese characters.

oldPasswordV2 / newPasswordV2 encryption (V2)

Same algorithm as v2 capability device.password.set:

Device password field encryption (v2 OpenAPI)

Applies to passwordV2 on device.password.verify and oldPasswordV2 / newPasswordV2 on device.password.set. All three use the same algorithm (same family as bind encryptCodeV2; different field names).

appSecret is not used in v2 key derivation.

New password plaintext (before encrypting newPasswordV2 only): length 8–32; at least two of digit, uppercase, lowercase, special; special means visible chars except ', ", ;, :, &, and space; no CJK.

After a successful verify, the full passwordV2 ciphertext from that request may be copied into oldPasswordV2 (same appId, deviceId, same plaintext).

Sample input

{
 "id":"d5c287b4-5b2f-4f03-baf5-8032c5c354af",
 "system":{
 "ver":"1.0",
 "appId":"lcdxxxxxxxxx",
 "sign": "xjhCQBoJ9hRDsCjyDcHjtDNzRZ3ZJezcawsfWeiaoxU=",
 "time":1599031074,
 "nonce":"8ec8a7bd1d1c95420de20d92422d457d"
 },
 "params":{
 "token":"At_00006acr3456d12312d3grf60147de7ec",
 "deviceId":"TESTQWERXXXX",
 "oldPassword":"jdueu37ajusdii3873jsc8",
 "newPassword":"ewurosd739fdjf102kg823"
 }
}

Return data field description

No data returned

Sample output

{
 "result":{
 "msg":"The operation was successful.",
 "code":"0"
 },
 "id":"d5c287b4-5b2f-4f03-baf5-8032c5c354af"
}

Error codes

This method may return the codes below. See Return codes and Capability errors for the full catalog.

Gateway and auth (SN / TK / OP)

See Return codes · OP/SN/TK for the full catalog.

Sub-accounts (SUB)

See Return codes · SUB.

Device access and channels (DV10xx)

See Return codes · DV.

Device password (DV10xx)

See Return codes · catalog.

Related

• Development specification
• API conventions
• Change password
• Module index