HikCentral Integration

2025
HikCentral Integration
100%

About This Project

Developed a secure, scalable remote device integration platform allowing Hikvision face recognition devices to connect to cloud infrastructure through ISUP 5.0 outbound communication. Each device establishes an encrypted connection to a HikCentral Professional instance hosted on a Google Cloud Windows Server VM, enabling reliable registration and data transfer without any inbound exposure at client sites. The architecture spans device firmware, network transport (ISUP over TCP with TLS), cloud infrastructure (GCP Compute Engine), and application services (HikCentral ISUP Gateway, Web Client, and OpenAPI). Security controls include TLS encryption, outbound-only device traffic, firewall allowlists, RBAC enforcement, and token-based API authentication. The system exposes a REST-based OpenAPI interface for seamless third-party integration over HTTPS, supporting external applications built with technologies such as Node.js, Python, and .NET.

Technologies Used

Hikvision DevicesISUP 5.0 ProtocolNATNTPDNSHTTPSTCP/IPISUP over TCPTLS/HTTPSHikvision FirmwareFirewallGoogle Cloud Platform (GCP)Compute EngineWindows Server VMSSL CertificatesHikCentral ProfessionalHikCentral ISUP GatewayHikCentral Web ClientHikCentral DatabaseHikCentral OpenAPIREST APIJSONNode.jsPython.NETTLS EncryptionRBACAPI Tokens & Authentication

Status

Completed
Shaxriyor Jabborov - DevOps Engineer