Security & IT
Security and IT, in plain words.
How SoudCoh TV is built, who can do what, what it needs from your network, and what isn't built yet.
How it fits together
Your phone, your office's hub, your Pis.
The app talks to your office's hub on Cloudflare. Each Pi keeps a connection open to the same hub and runs one full-screen browser per TV. A shared screen goes straight from your browser to each TV; the hub only passes the signalling.
People
Admins and members, enforced by the hub.
Everyone signs in with their own email and password. The hub refuses what a role can't do, so it doesn't matter what an app sends.
| What | Members | Admins |
|---|---|---|
| Show things on TVs, the Remote, the Library, share a screen, TVs on and off | Yes | Yes |
| Book meetings, announce, play scenes, show boards | Yes | Yes |
| Pair, rename and remove TVs; walls, TV hours, the screensaver | No– | Yes |
| Restart, update or change the Wi-Fi of Pis | No– | Yes |
| People, tokens, making and changing boards and scenes | No– | Yes |
Nobody can demote, disable or remove themselves, and an office always keeps at least one admin.
Signing in
Your own login, and a code on new devices.
Customer offices have no shared password: everyone has their own. Admins add people with a one-time invite link.
- Passwords
- Kept only as PBKDF2-SHA256 hashes (100,000 rounds). Invite and reset links are stored as hashes too, and work once.
- Sign-in codes
- On a device that isn't trusted, a 6-digit code by email after the right password: for admins by default, or everyone. Codes last 10 minutes, and five wrong tries end that sign-in.
- Trusted devices
- “Trust this device for 30 days”, until the person changes their password or an admin signs them out everywhere.
- Forgot password
- Always gives the same answer, so it can't be used to find out who works somewhere. Sign-in tries are limited per network address.
- Sessions end
- When a person changes or resets their password, is disabled or removed, or is signed out everywhere.
Data and access
Small keys, each with one job.
One hub per office
Each office's TVs, people, photos, walls, settings and Pixel's history live in its own hub, at its own address, with its own keys.
A TV token for Home Assistant
It can show a link, start the wall camera, switch TVs on and off, reload and identify, and play a scene. Everything else is refused.
Pixel acts as you
Its tools go through the app's own routes with your session. Voice assistants and Alexa act as members.
Board links show one board
A board's id is 24 random characters, and its link shows that board and nothing else of the office.
Calendar links you can replace
Each person's phone link has its own 32-character key. Making a new link stops the old one.
A health check that says little
The public health answer gives counts, versions and times only: no names, addresses, people or settings.
Looked after
Backed up, checked and updated while you sleep.
- Backups
- Every office's hub, every night, kept for 40 days. A backup can be loaded into a new, empty office.
- Health
- Every office is checked every 2 hours, and a failure is emailed.
- Updates
- One release updates every office. Pis on older software update themselves between 2 and 5 am office time, one at a time, and TVs reload at their next quiet moment.
- Restarts
- Every Pi restarts once between 5 and 6 am, one at a time, the next once the last is back.
Your network
What the Pis need.
- Hardware
- A Raspberry Pi 5 for every two TVs, with the Active Cooler and the official 27 W supply, on Raspberry Pi OS (64-bit, desktop).
- Connection
- Wi-Fi or Ethernet. Screen share needs outbound WebRTC; for strict networks, a TURN relay can be added.
- TV power
- On and off over HDMI-CEC, for TVs that support it.
- Alexa
- The Echo must be on the same network as the Pis: no guest Wi-Fi, no client isolation.
- Offline
- Photos, videos and Drive slideshows are kept on every Pi and checked, so they keep playing if the internet drops.
Honest limits
Not built yet.
So nobody is surprised.
- Authenticator-app codes. Sign-in codes come by email, which is weaker.
- Your own domain (tv.yourcompany.com). Offices live at yourname-tv.soudcoh.io.
- Two-way sync with Google or Microsoft 365 calendars. Invites go into them; bookings are made in SoudCoh TV.
- Booking from a room's own screen, or by voice.
Put every TV in your office to work.
We look at your TVs and network, set up your office at its own address, and go through it with your team on the first call.