HikGateway Integration

2025
HikGateway Integration
100%

About This Project

Developed a secure, scalable remote device integration platform allowing Hikvision face recognition devices to connect to cloud infrastructure through ISUP 5.0 outbound communication. Each device establishes an encrypted connection to a HikCentral Professional instance hosted on a Google Cloud Windows Server VM, enabling reliable registration and data transfer without any inbound exposure at client sites. The architecture spans device firmware, network transport (ISUP over TCP with TLS), cloud infrastructure (GCP Compute Engine), and application services (HikCentral ISUP Gateway, Web Client, and OpenAPI). Security controls include TLS encryption, outbound-only device traffic, firewall allowlists, RBAC enforcement, and token-based API authentication. The system exposes a REST-based OpenAPI interface for seamless third-party integration over HTTPS, supporting external applications built with technologies such as Node.js, Python, and .NET.

Technologies Used

Hikvision DevicesISUP 5.0 ProtocolISUP over TCPTCP/IPTLSHTTPSNATFirewallNTPDNSHikvision FirmwareHikGateway (Device Gateway)HikGateway ISUP ServiceHikGateway ISAPI APIREST APIJSONAPI Tokens & AuthenticationTLS EncryptionGoogle Cloud Platform (GCP)Compute EngineLinux Server

Status

Completed
Shaxriyor Jabborov - DevOps Engineer