The Camio C-Cure Gateway communicates with C-Cure server v2.9 and above using the Victor Web Service.
This Camio User Guide covers:
Overview of Camio with C-Cure
Fast visual verification and tailgating detection
Camio enables fast search and alerts on events like tailgating and entry unlocked. Read more at https://camio.com/tailgating.
(NOTE: temporarily, only tailgating and entry unlocked are supported in this C-Cure integration)
Camio counts the number of people that pass through the door to compare that number to the actual number of C-Cure access granted events. If those counts don't match, then the video is annotated with "tailgating" unauthorized access. This video illustrates tailgating detection as the floor plane tiles turn red when the second person enters after only one access granted event:
Works with existing cameras
Setup takes less than 15 minutes. Each camera is mapped to the C-Cure reader so that events from those readers annotate the video from that camera. You configure the on-premise C-Cure Gateway with the credentials required to subscribe to C-Cure access control events.
Mapping cameras to C-Cure readers
The first step is to associate your C-Cure readers with any cameras that can see the doors controlled by those readers.
- Generate your Camio Authorization token to be used by the C-Cure Gateway to annotate video with incoming access control events.
- Sign-in as the Camio account manager and press the Generate button at https://camio.com/settings/integrations/pacs
- Copy the token immediately after you generate it, since you will not be able to retrieve it again later.
- Paste the token into your camio_config.yaml as camio_auth_token: {{CAMIO_AUTH_TOKEN_HERE}} value.
- Find your C-Cure server, database, and user credentials and place them in the associated fields within the ccure_config.yaml and the ccure_user.yaml files.
- Select the C-Cure Reader from the dropdown list next to each camera that has a view of the people entering the door associated with that reader and press Save.
Camio Setup for C-Cure
The C-Cure Gateway subscribes to C-Cure access control events in order to annotate the video associated with each event.
C-Cure Gateway Installation
The C-Cure Gateway runs as Docker containers on any host machine that can access the C-Cure server. If your firewall restricts the sites contacted, then please see Firewall Rules.
C-Cure Gateway Configuration Files (yaml files)
The C-Cure Gateway's configuration is determined by yaml files. Upon first startup of the C-Cure Gateway, these yaml files are encrypted and deleted so that secret credentials are never stored in the clear. To supply new option values, you must stop the containers, add the yaml files to the res directory, and restart the Docker Containers so that they read and encrypt the yaml files once again. See Updating Configuration Files.
Filename |
Description |
camio_config.yaml |
This contains your secret Camio Authorization token obtained from https://camio.com/settings/integrations/pacs used to annotate video. Example: CAMIO_CONFIG: |
ccure_config.yaml |
This contains the non-secret information required to connect to your C-Cure server. Example: --- |
ccure_user.yaml |
This contains your secret C-Cure username and password required to access the C-Cure server. Example: CCURE__USER: |
advanced_config.yaml |
These default values should be sufficient, but override any desired. Retain the query_filter, so that only recognized C-Cure Events are sent to Camio. Example: --- |
C-Cure Event Filter
Descriptions:
- Entry Unlocked
- CardAdmitted
- Entry Ajar
- (None Currently)
- Entry Forced
- ObjectChangedState
- Unmapped But Still Labeled:
- Doubleswipe
- OperatorLogin
- DeviceError
- CardRejected
- ManualAction
- TemporaryCredential
- IntrusionZoneActivity
- SystemError
- KeypadCommandActivity
- Allowed
- Accessed
- Pre Held
- Access Denied
- Wrong PIN
- Unknown Event
- IP Camera Offline
- IP Camera Online
- Camera Restarted
- Tailgating
Installing on Linux
1. Download and install Docker by following the steps for your Linux distribution from: https://docs.docker.com/engine/install/
2. Download and install docker-compose by following the steps from: https://docs.docker.com/engine/install/
3. Download the C-Cure Gateway package from:
4. Unzip the package
unzip camio_ccure_proxy.zip
cd camio_ccure_proxy
cd res
ls -l
5. Update the configuration files with Camio and C-Cure information
6. Once the config files have been updated, from the dist directory run the Camio container
docker-compose -f docker-compose.yaml up -d
If you want to run the container in foreground, then remove `-d`
docker-compose -f docker-compose.yaml up
7. The C-Cure Gateway containers are now running. You can use Docker commands to watch stats and logs whenever required.
8. Once you have confirmed the C-Cure Gateway is running and connected. move the docker-compose-app.service file to your /etc/systemd/system/ directory and edit the path of the "WorkingDirectory" to be the location of the camio_ccure_proxy.
WorkingDirectory=/home/user/camio_ccure_proxy
9. Then use the following command to enable the C-Cure Gateway on startup:
systemctl enable docker-compose-app
If you run into a permission denied error on the last few steps, try running with sudo
sudo systemctl enable docker-compose-app
Installing on Windows
- Download and install Docker Desktop (which also contains docker-compose) by following the steps from:
https://docs.docker.com/docker-for-windows/install/ - Download the C-Cure Gateway package from:
https://storage.googleapis.com/camio-test-pacs-proxy-dist/camio_ccure_proxy.zip - Unzip the package, and enter into the camio_ccure_proxy directory
- Update the configuration files with Camio and C-Cure information
- Once the config files have been updated, from the dist folder run the Camio container
-
docker-compose -f docker-compose.yaml up -d
- If you want to run the container in foreground, then remove `-d`
-
docker-compose -f docker-compose.yaml up
- The C-Cure Gateway containers are now running. You can use Docker commands to watch stats and logs whenever required.
Updating configuration files
- When you need to update the configuration files, you first need to stop the containers by running
-
cd camio_ccure_proxy/dist
docker-compose down
-
- Wait for the containers to stop, and then add the new configuration files in the res directory.
- Note that due to encryption and security, all of the existing configuration files in clear text will not be present in the res directory, so you will need to add fresh new configuration files in the res directory.
- After adding the new configuration files, restart the containers by running:
-
cd camio_ccure_proxy/dist
docker-compose -f docker-compose.yaml up
-
- The C-Cure Gateway containers are now running with the updated configuration files. You can use Docker commands to watch stats and logs whenever required.
C-Cure Gateway Host Hardware Requirements
The CPU and RAM required of the host machine that runs the C-Cure Gateway Docker containers varies with the maximum throughput of access control events. This guide covers common volumes:
Max Event Rate |
CPU Cores |
RAM |
100 events/second |
1 |
300 MiB |
1,000 events/second |
2 |
400 MiB |
10,000 events/second |
2 |
400 MiB |
Firewall Rules
During the initial docker setup (docker-compose up -d) will need access to these servers:
- gcr.io
- storage.googleapis.com
- dockerhub.io
During operation, the Camio C-Cure Gateway will need access to these servers:
- https://camio.com/api/integrations/pacs/webhooks
- https://camio.com/api/integrations/pacs/devices
- https://camio.com/api/integrations/pacs/stats
- https://camio.com/api/integrations/pacs/logs
- https://us-central1-camio-test.cloudfunctions.net/test_callback_integration
Ports
The Camio C-Cure Gateway uses ports:
- 443 to talk to the Internet servers above
- Whichever port specified in the C-Cure server domain or IP to talk to the C-Cure server
During the initial docker setup (docker-compose up -d) the Camio C-Cure Gateway will retrieve the docker images using port 443.
During operation, the Camio C-Cure Gateway uses two docker containers that talk to each other on a docker bridged network using ports 6379 and 8080. But those ports aren't open on the Local Area Network.
The port used to make requests of the C-Cure server will vary based on your network settings of your C-Cure system, but the default port found in C-Cure_config.yaml is 22.
----
For more information on PACS integrations see https://help.camio.com/hc/en-us/articles/4409969059732-How-do-I-set-up-a-Physical-Access-Control-System-integration-User-s-Guide- and https://help.camio.com/hc/en-us/articles/4409631039892-How-do-I-create-a-Physical-Access-Control-System-integration-Developer-s-Guide-
Comments