Showing posts with label Security. Show all posts
Showing posts with label Security. Show all posts

Thursday, May 16, 2013

Digital Signage Need to Know: What does Web App/Cloudware mean for Digital Signage/LED Signs?

-Deacon Wardlow

Digital Signage (DS) and LED Signs have gotten somewhat easier to implement over time, but they're still very complex and daunting and the means of controlling the DS Solution can be the most frustrating component. Whether it's a few LCD screens in a building, an LED Sign on the street or a network of interior and exterior LCD and LED displays nationwide, the solution needs to be scalable, easy to access and (ideally) easy to use. 

For a long time, the only way to access and control the systems was through a network of computers running software which connected everything and made it all work. With the development of Cloudware and Web Apps (which one could argue are one and the same thing), software is going to the wayside just like pay phone booths and "rabbit ears" antenna on a TV. 

Cloudware/Web App
It's very likely you've accessed a web app/cloudware recently. Have you logged in to email on the web via Gmail/Yahoo/Rocketmail/Hotmail-MSN (now outlook.com)/others? Do you have Netflix/Hulu? Watched a YouTube video? These are all examples of web apps running on the cloud. When the five year old at home decides to be helpful and wash their parents' laptop with a sponge and hot soapy water, all is not lost. The email can still be accessed from the web as well as many documents the parents likely edited using Google Apps, Microsoft's 365, documents saved to Dropbox or a similar online "Storage" site, etc.

The cloud means universal access to the programs and information which are important to you without being locked-down to a single computer/access point. These days, web apps can be run on just about any device (smartphones, PC, Mac, tablet, etcetera). If a computer is broken or the smartphone's battery dies, grab another computer someplace and logon. Public terminals (PCs, Macs, other) are being almost as accessible as payphones used to be back in the day.

DS systems now often come with a component which is web app or cloud-based. Many manufacturers are completely moving over to the cloud. End-users no longer have to worry when their computer crashes. They won't lose the content, schedules and programs as it's all saved to the cloud (data storage centers in various locations which are usually backed-up frequently). Once the end-user has access to another computer, the programs, schedules, content and such are there waiting for them to get back to work with. The systems themselves are no longer reliant on a single server or computer to run them. In the past when a server went down, the player were nearly useless. Modern independent controllers/players can "check-in" with the cloud systems and update content, handle schedules and information without relying on a server which may or may not be available.

There are some disadvantages to the cloud (i.e. the network goes down, the customer forgets their login information, a display can't communicate for some reason) but these same problems exist with software on a computer. The biggest difference, when the network is down the players will still run, the customer can request a new password which will often automatically be emailed to them, many cloud-based systems have auto-reporting so they'll alert you to a device not communicating or playing. The advantages far outweight any  concerns raised when making the move.

When you look to the cloud, what do you see? Is your DS solution shaping out up there or is it all a jumble? Feel free to write-in with requests/questions/desire for more detail. We're happy to dig as deep as you need to go to understand the new technologies out there and how to take advantage of them. These days it's a good idea to firmly plant your feet on the ground with your head in the cloud.

-DH
*I invite you to comment here and/or email me directly with requests at deacon@vantageled.com. Vantage LED has white paper resources and more educational material on the website (http://www.vantageled.com), please check it out when you have a moment. Note all posts/thoughts/writings are strictly the viewpoint of me and me alone and do not reflect nor speak for Vantage LED’s beliefs, attitudes, thoughts, etc. unless specifically noted.

Thursday, April 25, 2013

Digital Signage Need to Know: System monitoring obstacles and options

-Deacon Wardlow
My first car was a 1981 Ford Escort. The car was far from new and I learned about auto maintenance the hard way (one car component and paycheck at a time). The saving grace was the warning light on the dash. When I saw something light up, it was time for another repair. For the longest time, I wished my DS (Digital Signage) systems had a similar simple warning/alert on the dash BEFORE something happened...

Diagnostics on DS solutions have gotten better over the years. Third party software has helped a lot with this. Many companies build diagnostics into their systems where the system will alert a client if something isn't playing and make sure there's a place-holder bit of content in the interim. Some systems even go so far as to report what the problem is and what's failed. Here are a few techniques people use for System monitoring:

Eyes on the Prize:
Many systems use a digital camera which is often on a network. This requires someone to physically be checking-in on the system periodically. So long as the camera and network connection are functioning, this is a fairly reliable way to check-in on systems, but they require someone to take a look. The person viewing the system may not be aware of what content is running and a system may be stuck on a single piece/frame of content when it's supposed to be running multiple frames/sequences. The system is only as good as the operator.

Third Party Applications:
On the IT (Information Technology End) there are loads of software to monitor networks and various systems running on the network itself (my favorite software is Nagios for this). On the localized-end of things (for single computers or simple networks) people have relied on LogMeIn, TeamViewer, AMMY Admin and other systems which allow you to put a host monitor on a computer/player which will tell you if the player is active or inactive and often has features which allow you to power-cycle a system remotely or remote-in to the system to find out what's going on. While this is great for general monitoring, these primarily only notify you when something has occured, they're not very pro-active and don't typically have options to dig deeper into secondary components for reporting (i.e. telling you if the display itself is on/off and if the network is mapped/running). Again, the system here is only as good as the operator as it requires someone to check the list of active players/systems and verify things are working as they should. Just because the player is running, doesn't mean the display is up and working...

Hardware/firmware Diagnostics:
These are reportables built into the system itself. Often this is available on the higher-end DS systems though many component manufacturers are stepping up and creating reportables for their systems which kick back to a main server or source to tell if everything is okay or not. This is the most ideal solution as these systems not only report on active status, but often keep a running log of performance so a person can get history on an issue; has power gone out repeatedly at a particular location? Is the issue with a single component periodically failing or several components? When did the system go down and how long has it been inactive? Newer systems are also giving pro-active reports which show when a critical component (i.e. an AC-to-DC converter/power supply is drawing too much or pushing too little power to the system which indicates the component requires a check or replacement BEFORE failure.

When you're checking with manufacturers of systems, see what they've put into the dash for a warning system. The dash warning system on my old car saved me from a lot of long walks to a garage or from being stranded in the badlands (before the days of cell phones). Similarly, a solid reporting/monitoring system can save end-users and your company A LOT of headaches and often avoid problems before they arise. Make sure the manufacturer you're dealing with has some sort of system monitoring to light the way when problems arise (or before they happen) so you're not left in the dark.

-DH
*I invite you to comment here and/or email me directly with requests at deacon@vantageled.com. Vantage LED has white paper resources and more educational material on the website (http://www.vantageled.com), please check it out when you have a moment. Note all posts/thoughts/writings are strictly the viewpoint of me and me alone and do not reflect nor speak for Vantage LED’s beliefs, attitudes, thoughts, etc. unless specifically noted.

Tuesday, January 29, 2013

Digital Signage "How To": Securing Wireless ( WiFi ) Communications for LED Signs



- Scott Hofheins


An increasing number of  businesses, organizations, and public entities are seeing the value in LED and Digital Signage. The number of LED Signs on the streets has increased quite a bit over the last 10 years. With this growth, comes a greater need for manufacturers, dealers, and end users to make sure these signs are secure from outside parties who would use the sign in a manner not consistent with the owners intentions or local laws.

An overview of many of the communications options available can be found in my previous post. However, I would like to focus on Wireless communication because it is the most common option currently in use. I have purposely written this post using general terms to avoid anyone using it as guide on how to cause trouble.

There are three basic concepts to remember: Wireless Security, Software Security, Network Security.

Wireless Basics
Most signs are supplied with 2 wireless devices. One unit connects and resides at the sign, the other at the building connected to the users network or computer directly. (In some applications, only one radio is used)


These radios communicate to each other and create a “wireless cable” from the building to the sign, allowing end users to manage their sign without having to run an actual cable out to the sign. These radios can use a variety of frequencies and security methods to connect the sign to the end user.

Frequencies
  • 900 MHz: This has been used for many years in wireless communications between devices. Many traffic devices and networks use this frequency because of its range. However, it has a much smaller bandwidth capacity than the other options so most new LED signs do not use this anymore.
  • 2.4 GHz: This is the most common wireless frequency in use today. Most home networks use this frequency for their “WiFi” connections. Most laptops have a 2.4 Ghz WiFi card built in.
  • 5 GHz: This is gaining popularity, but is still much less common than 2.4 Ghz. This uses some of the same “WiFi” standards as 2.4 Ghz, but is inherently more secure because it is less common. In my opinion, this is the best frequency to use because it mixes the speed of 2.4 Ghz with the security of 900 Mhz.
Wireless Security
WiFi security has greatly improved over the years. Encryption and password based security is much better and easier to set up than ever before...but only if you actually use it. Here are some things to remember:

  • Factory Settings: A good manufacturer will change the factory settings on the wireless devices to it’s own secure settings. These should not be published in any public documentation, but only available to the end user and/or sign dealer supporting the signs. Part of the reason we saw those “Zombies Ahead” signs a couple of years ago was due to unchanged factory settings (See Deacons Post). As an extra precaution you can always set your own security settings for the radios, but remember to document these changes. You could get in a bad situation if your computer crashes and you have to re-enter the settings.
  • Quality Devices: Make sure your manufacturer uses established, well tested wireless products. You do not want your sign using a sub-par device with weak encryption and security options.

Software Security
A well designed LED sign system will also incorporate direct and indirect software security as an additional firewall to intruders.
  • Not Publicly Available: Avoid software that is available for public download. The only people who should have access to the sign software is the dealers and the end-users.
  • Secured Installations: Installations should be secured with an “Activation Code” or other security system to prohibit unauthorized parties from installing copies of the software. Avoid unsecured or generic software.
  • Cloud Based Options: This is a new concept in the LED Sign market, but there are options currently available. Internet based sign management can be another way to secure all your content because you can rely on enterprise level security and off-site hosting. This makes it much harder for anyone to do any real damage to the sign with local access.
Network Security
This is another key point to ensure protection. Your network should be reasonably secure and access restricted to your own personnel only.  
  • Secure your Computers: All of your computers should be password secured. Most windows based systems allow you to require a password to log into the system after the computer goes into the “Screen Saver” or “Sleep” mode.
  • Physical Access: Make sure you install the sign software only on the computers you have direct control over, and who’s users you trust. An extra security measure can be to have a dedicated laptop that is on it’s own network, connected directly to the sign using the wireless radios.
Wireless security is important for LED signs. Make sure your manufacturer is using quality hardware and unique wireless settings to avoid a “Zombie Warning” situation. Your own network should be secured with common sense security practices like passwords and restricted access. Your manufacturer or dealer should be well versed enough in the unique security needs for LED signs to help guide you in the best options for your specific installation. An LED sign is a large investment, make sure the security, options, and hardware quality reflect this.

-SH




I hope this post has been informative and helpful. As usual, I welcome ALL constructive comments. Please feel free to comment and add anything I’ve missed, or additional tips you may have regarding this topic. Please visit www.vantageled.com for many other resources, white papers, and of course: Great looking LED Signs!

**All posts/thoughts/writings are strictly the viewpoint of me and me alone and do not reflect nor speak for Vantage LED’s beliefs, attitudes, thoughts, etc. unless specifically stated.