How your Q-Play integrations are secured
Introduction
When you use integrations in Q-Play, for example to show data from a third-party service on your screens, the Q-Play Integration Server fetches the data for you. This guide explains how the integration server works, how your login details are protected, and which security options you can add.
There are three types of integration server. Most accounts use the standard server, while the private options are paid features for organisations that need their own server.
1. How an integration works
All three server types handle your data the same way:
- Your details are encrypted. Login, password and resource are encrypted in the QMS - Database and stored in the integration server's database.
- The integration server fetches the data. The server decrypts the details and runs the integration, which stores the image or data as a resource.
- Data is kept per customer. All data is grouped in customer-specific databases on the integration server.
- The player shows the content. The player fetches the resource from the Content Server (or, with Private Hosted, from your own integration server).
2. The three types of integration server
Q-Play Integration Service – Standard
The standard service used by default for all accounts and integrations. It is hosted and managed by NordicScreen, and support follows the NordicScreen SLA. The server is shared: several customers run integrations on the same server, but every account has its own database.
Private Q-Play Integration Server – paid feature
A private server used by one account only, so no other integrations run on it. It is hosted and managed by NordicScreen, and service and SLA are delivered according to your customer-specific contract.
Private Hosted Q-Play Integration Server – paid feature
A private server used by one account only and hosted by you in your own private network. It is managed by you and NordicScreen together, and service and SLA are delivered according to your customer-specific contract.
3. Security options you can add
IP whitelisting of the Q-Play Integration Server
Only allow the integration server's IP addresses to access your third-party service. You set this up yourself in the third-party service. Available for all three server types.
Site-to-Site VPN
A VPN connection between your network and the Q-Play Integration Server. This is a paid add-on for the Standard and Private servers – contact NordicScreen for pricing.
4. Network requirements for Private Hosted
If you host the integration server yourself, make sure your network allows the following:
Access to app.q-play.io
All players need access to app.q-play.io to operate.
Access to your integration server
Players need access to the Private Hosted Q-Play Integration Server to show content from the integrations.
5. Next steps
If we need a password or API key to set up your integration, you send it to us through our secure form. See How to send us a password securely.
6. Frequently asked questions
Do we share a server with other customers?
On the Standard server, yes – several customers run integrations on the same server, but every account has its own database. The Private and Private Hosted servers are used by your account only.
How are our login details protected?
Login, password and resource are encrypted in the QMS - Database and only decrypted by the integration server when it runs the integration.
Can we limit access to our third-party service?
Yes. Set up IP whitelisting of the Q-Play Integration Server in your third-party service. A Site-to-Site VPN is also available as a paid add-on.
What does a private server or VPN cost?
Both private servers and the Site-to-Site VPN are paid features. Contact NordicScreen for pricing.
What do our players need with Private Hosted?
Access to app.q-play.io and to your Private Hosted Q-Play Integration Server.