Q-Play Integration Server - Security

Q-Play Integration Server - Security

Introduction

This guide provides a comprehensive overview of the architecture and security measures underpinning Q-Play integrations. By combining robust system design with the proper configuration of user accounts utilized for integration between Q-Play and third-party services, we ensure a secure and seamless setup. Following these guidelines will help maintaining the integrity of your integrations while enabling a frictionless experience within Q-Play.

Q-Play Integration Service - Standard

Hosted by: NordicScreen 
Management: NordicScreen 
Support and SLA: According to NordicScreen SLA 
Shared service: Yes
Q-Play Integrations services

This services is standard and default used for alle accounts and integrations. 
 
Q-Play Integration setup 
1. Login, password and resource are encrypted on "QMS - Database" and stored on "Q-Play Integration Server" database.
2. "Q-Play Integration Server" fetches data, decrypt it and start integration which stores image or data as a resource.
3. All data is grouped in customer specific databases on "Q-Play Integration Server"
3. Player fetches resource from "Content Server"
Notes
Disclaimer: 
Multiple customer is running integrations on the same server. Every account have their own database on the "Q-Play Integration Server"
Idea
Possible Security Configurations
* IP whitelisting of "Q-Play Integration Server" 
      Configuration of allowed IP-addresses to access the the 3rd party service. Done in the 3rd party service by the customer. 
* Site-to-Site VPN between customer network and "Q-Play Integration Server" 
      Add-On, paid feature, contact NordicScreen regarding pricing. 

Private Q-Play Integrations Server - Paid Feature

Hosted by: NordicScreen 
Management: NordicScreen 
Support and SLA: Paid feature
Shared service: No (Private for one account) 

This services is private and only used by one account. No other integration is running on this service. 
 
Q-Play Integration setup 
1. Login, password and resource are encrypted on "QMS - Database" and stored on "Private Q-Play Integration Server" database.
2. "Private Q-Play Integration Server" fetches data, decrypt it and start integration which stores image or data as a resource.
3. All data is grouped in customer specific databases on "Private Q-Play Integration Server"
3. Player fetches resource from "Content server".
Notes
Disclaimer: 
Service and SLA are delivered according to customer specific contract. 
Idea
Possible Security configurations
* IP whitelisting of "Q-Play Integration Server" 
      Configuration of allowed IP-addresses to access the the 3rd party service. Done in the 3rd party service by the customer. 
* Site-to-Site VPN between customer network and "Q-Play Integration Server" 
      Add-On, paid feature, contact NordicScreen regarding pricing. 

Private Hosted Q-Play Integrations Server - Paid Feature

Hosted by: Customer
Management: Customer/NordicScreen 
Support and SLA: Paid feature
Shared service: No (Private for one account) 

This service is private and only used by one account. No other integration is running on this service. The service is hosted by the customer in a private network. 
 
Q-Play Integration setup 
1. Login, password and resources are encrypted on "QMS - Database" and stored on "Private Hosted Q-Play Integration Server" database.
2. "Private Hosted Q-Play Integration Server" fetches data, decrypt it and start integration which stores image or data as a resource.
3. All data is grouped in customer specific databases on "Private Hosted Q-Play Integration Server"
3. Player fetches resource from "Content server" or "Private Hosted Q-Play Integration Server".
Notes
Disclaimer: 
*Service and SLA are delivered according to customer specific contract. 
* All players require access to app.q-play.io to operate. 
* Players need to have access to the "Private Hosted Q-Play Integration Server" to show content from the integrations.  
Idea
Possible Security configurations
* IP whitelisting of "Q-Play Integration Server" 
      Configuration of allowed IP-addresses to access the the 3rd party service. Done in the 3rd party service by the customer. 

    • Related Articles

    • Security and Protocols for Q-Play Systems

      Player Configuration 1. Network Connection: Connect Players directly to the company's internal network without the need to open firewalls, either incoming or outgoing. 2. SSL Security: Ensure an encrypted connection by only allowing Players to ...

    • Configuring MFA and Microsoft Users for Secure Integration with Q-Play

      Introduction This guide helps you configure a user in Microsoft services to securely and efficiently integrate reports, data, and other relevant information from Microsoft platforms with Q-Play. The guide covers both a standard setup without ...

    • Installation for Q-Play - Airtame

      Introduction Airtame offers a powerful platform for screen sharing and digital signage, allowing you to engage and inform your audience through visually appealing content. With Airtame, you can easily manage and present your content on any screen ...

    • IOT Security and Data Communication

      NordicScreen IOT devices is a smart and ease to use product. The architecture behind the product is cloud based. This guide describe a technically setup by using one of the IOT products for Q-Play, Q-Cal or both. Ports and Communication The devices i ...

    • NordicScreen hardware policy

      NordicScreen wants to be able to supply a wide range of hardware and players for the Q-Play and Q-Cal with the best service and delivery security. That is why NordicScreen has entered into cooperation with some of the countries' best hardware ...