Security Threats

Image and video files stored on the RICOH THETA Z1 are important information assets, and appropriate security measures are necessary to reduce the risk of information leaks and unauthorized use. To ensure safe use, the operating environment and device must be properly configured in accordance with the user’s information security policy.

Control Measures

The RICOH THETA Z1 (hereinafter “THETA”) can be operated via Wi-Fi, Ethernet, USB, Bluetooth®, and the device’s buttons. The security risks associated with each are as follows.

Specifications

Control Measures	Default Settings	Risk	Startup Procedure
Wireless LAN AP (Access Point) Mode	OFF	Since remote connection and control are possible using the SSID and encryption key, proper management is required.	Enable this feature before connecting from a device.
Wireless LAN CL (Client) Mode	OFF	Even if digest authentication is configured, if the username and password are compromised, the device can be controlled via the Web API; therefore, proper management is required.	Use the API to configure the necessary connection settings before enabling this feature.
Wired LAN	OFF	As with wireless LAN (CL mode), proper management is required.	Connect a wired LAN adapter to the USB port.
USB (MTP)	ON	By connecting to a PC via a USB cable, you can retrieve image and Video files saved on the THETA. You can also control the Camera via MTP. Please be mindful of your operating environment.	A USB cable capable of data transfer is required to connect.
USB (UVC)	OFF	By connecting the THETA to a PC via a USB cable, you can capture video and audio from the THETA. Please be mindful of your operating environment.	You must enable this feature and connect using a USB cable capable of data transfer.
Bluetooth® (Low Energy)	OFF (up to v3.40) ON (v3.50 and later)	Connections via the WebAPI or direct access without authentication are available, and App Information can be retrieved via the BLEAPI; therefore, please be mindful of the usage environment.	Connect from the device.
Bluetooth® (Classic)	OFF	You can connect to devices with specific profiles.	A Plugin is required.
Control Button	No Lock	Use the power button to turn the power on and off, and the wireless button to turn Wi-Fi and Bluetooth® on and off.	Power On

The available settings and procedures for each operation are as follows

.

Wi-Fi

Wi-Fi can be set to OFF, AP mode, or CL mode.
Wi-Fi is turned OFF in Sleep Mode.

• Starting with v3.70, if you transition from a state where the device is registered with RICOH360 Cloud, is being powered via USB, and has Wi-Fi turned on, Wi-Fi will not turn off.
• Starting with v3.70, if the device is registered with RICOH360 Cloud, has remaining uploads, and is connected in CL mode when transitioning, Wi-Fi will not turn off until the following condition is met:
• The battery level has decreased by 3% since before entering Sleep Delay.
• The number of remaining uploads has reached 0.
• The CL mode connection has been lost.

Connecting to a PC via a USB cable will turn Wi-Fi off. (Up to v3.40)

How to Use

Wi-Fi Settings

Pressing the WLAN button cycles through OFF, AP mode, and CL mode in that order. You can also select a mode using the API.
CL mode can only be enabled if router information has been configured.

Settings

Settings	Default	Settings Method		Explanation
Network Type	OFF	Web API	Options._networkType	Type of network to use
		MTPAPI	0xD81D NetworkType
		BLEAPI	Set network type

AP (Access Point) Mode

Specifications

Network Interface	Wireless LAN 1. WPA2-Personal 2. Encryption method: AES 3. Wireless LAN mode: Access Point The default settings are as follows. SSID: “THETA” + “Serial No.” + “.OSC” Encryption key (passphrase): A random 8-character string Encryption key (passphrase): The last 8 digits of the Serial No. You can check the default encryption key by holding down the WLAN button and pressing the shutter button for 2 sec. (v3.50 and later)
Service Protocol	HTTP
Service Protocol Authentication Method	None
Service Protocol Encryption Method	None
Provided Services	The Web API specifications are public at the following URL. https://docs-theta-api.ricoh360.com/web-api/index.html

How to Use

Connect in AP Mode

1. Turn on the THETA and press the WLAN button to switch to AP mode.
2. Search for the THETA’s SSID (by default, the THETA’s Serial No. (2 letters + 8 digits) + .OSC) from your device.
3. Connect to the THETA’s SSID from your device. You will need to enter the encryption key at this time.

Settings

Settings	Default	Settings		Explanation
SSID	Serial No. (2 letters + 8 digits) + .OSC	Web API	Options._ssid Can be set or retrieved in WLAN AP mode for settings	A name used to identify the THETA’s Wi-Fi network
		MTPAPI	N/A
		BLEAPI	N/A
Encryption Key (Passphrase)	Settings per device	WebAPI	Options.wifiPassword Allows you to set the encryption key Options._defaultWifiPassword You can retrieve the factory-default encryption key	The encryption key used when connecting in AP mode You can change this in the RICOH360 smartphone APP. While you can set the password to 8 digits, such as a numeric code, this makes it weak against brute-force attacks. Please take measures such as increasing the length of the password or selecting a combination of different character types.
		MTPAPI	0xD806 Passphrase
		BLEAPI	Get Options You can retrieve the factory-default encryption key Read WLAN password status Retrieves the encryption key update status
Frequency Settings	2.4 GHz	Web API	Options._wlanFrequency Can be set/retrieved in WLAN AP mode for settings Can be retrieved in WLAN CL mode	Frequency settings used in AP mode
		MTPAPI	0xD821 Wlan Frequency
		BLEAPI	N/A

CL (Client) Mode: Control via WebAPI

Specifications

Network Interface	Wireless LAN 1. Authentication Method: WPA/WPA2-PSK 2. Encryption Method: AES 3. Wireless LAN Mode: Client (Station) You must set the SSID and password for the access point you wish to connect to. Wired LAN (USB-LAN adapter)
Service Protocol	HTTP Detect the camera's IP address using mDNS
Service Protocol Authentication Method	HTTP Digest Access Authentication
Service Protocol Encryption Method	None
Provided Services	The Web API specifications are public at the following URL. https://docs-theta-api.ricoh360.com/web-api/index.html

How to Use

Connecting

via

Wi-Fi CL Mode

When controlling the device via the API, you must configure digest authentication. You must also configure settings appropriate for the network you are using.
When using Wi-Fi CL mode, you must register the information for the router you are connecting to. These settings must be configured using Wi-Fi or MTP.

・When configuring via Wi-Fi (AP mode)

1. Connect in AP mode.
2. Set the username and Password for Digest authentication.
3. Set the frequency band to be used.
4. Register the router you want to connect to.

To configure via MTP

1. Turn on the THETA.
2. Connect it to your PC via USB.
3. Set the username and Password for Digest authentication.
4. Register the router you want to connect to.

Settings

Settings	Default	Settings		Explanation
Authentication Method	digest	Web API	N/A	Authentication methods used in CL mode
		MTPAPI	N/A
		BLE API	N/A
Digest Authentication Username	THETA+Serial No. (2 letters + 8 digits)	WebAPI	Options._username Can be configured in WLAN AP mode for settings	Username used for digest authentication
		MTPAPI	0xD815 Username
		BLEAPI	N/A
Digest authentication password	Not Configured or 8 digits of the Serial No. (2 letters + 8 digits)	WebAPI	Options._password Can be configured in WLAN AP mode for settings	Password used for digest authentication Cannot be used if Not Configured. While you can set the password to 8 digits, such as a numeric code, this makes it vulnerable to brute-force attacks. Please take measures such as increasing the length of the password or selecting a combination of different character types.
		MTPAPI	0xD816 Password
		BLEAPI	N/A
Access Point App Information	Not Configured	Web API	camera.setAccessPoint Can be configured in WLAN AP mode for settings	App Information about the access point (router) to which the device connects in Wi-Fi CL mode
		MTPAPI	0x99A5 SetAccessPoint
		BLEAPI	Set Access Point
Proxy App Information	Not Configured	WebAPI	camera.setAccessPoint	Proxy information for connecting in Wi-Fi CL mode
		MTP API	N/A
		BLEAPI	N/A

Wired LAN

Usage

Connecting via Wired LAN

When controlling via the API, you must configure digest authentication. You must also configure settings appropriate for the network you are using.
These settings must be configured using

Wi-Fi

or MTP.
Once configuration is completed, connect the wired LAN adapter and connect it to the router using a wired LAN cable.

・When configuring via Wi-Fi (AP mode)

1. Connect in AP mode.
2. Set the username and Password for Digest authentication.
3. Configure the wired LAN connection settings as needed.

・When setting via MTP

1. Turn on the THETA.
2. Connect it to your PC via USB.
3. Set the username and password for digest authentication.
4. Configure the wired LAN connection settings as needed.

Settings

Settings Value	Default	Settings		Explanation
Authentication Method	digest	Web API	N/A	Authentication methods used in CL mode
		MTPAPI	N/A
		BLE API	N/A
Digest Authentication Username	THETA+Serial No. (2 letters + 8 digits)	WebAPI	Options._username Can be configured in WLAN AP mode for settings	Username used for digest authentication
		MTPAPI	0xD815 Username
		BLEAPI	N/A
Digest authentication password	Not Configured or 8 digits of the Serial No. (2 letters + 8 digits)	WebAPI	Options._password Can be configured in WLAN AP mode for settings	Password used for digest authentication Cannot be used if Not Configured. While you can set the password to 8 digits, such as a numeric code, this makes it vulnerable to brute-force attacks. Please take measures such as increasing the length of the password or selecting a combination of different character types.
		MTPAPI	0xD816 Password
		BLEAPI	N/A

CL (Client) Mode: Controlled by RICOH360 Cloud

Specifications

Network Interface	Wireless LAN 1. Authentication Method: WPA/WPA2-PSK 2. Encryption Method: AES 3. Wireless LAN Mode: Client (Station) You must set the SSID and Password for the access point you wish to connect to. Wired LAN (USB-LAN adapter)
Service Protocol	MQTT
Service Protocol Authentication Method	MQTT connection with mutual TLS (mTLS) authentication
Service Protocol Encryption Method	TLS

Usage

https://support.ricoh360.com/ja/manual/z1-ricoh360-app-upload-02?apps=ricoh360-app

CL (Client) Mode: LIVE Streaming

Specifications

Network Interface	Wireless LAN 1. Authentication Method: WPA2-Personal 2. Encryption Method: AES 3. Wireless LAN Mode: Client (Station) You must configure the SSID and Password for the access point you want to connect to. Wired LAN (USB-LAN adapter) Tethering connection
Service Protocol	WebRTC WebSocket-TLS
Service Protocol Authentication Method	JWT
Service Protocol Encryption Method	DTLS, SRTP, TLS

Usage

Pending

Bluetooth®

Bluetooth® Low Energy (BLE) and Bluetooth® Classic are controlled independently. To control THETA, you must connect via BLE.

Specifications

Interface	Bluetooth® Low Energy 1. Profile: GATT 2. Security: Some models support multiple connections. BLE (standard) - BLE Security Mode 1 BLE (proprietary): Used only by RICOH smartphone apps - BLE Security Mode 1 - RICOH proprietary password 3. BLE mode: Peripheral
Service Protocol	GATT
Service Protocol Authentication Method	BLE (standard) &nbsp &nbsp None BLE (proprietary): Used only by RICOH smartphone apps &nbsp &nbsp RICOH proprietary password
Service Protocol Encryption Method	BLE (standard) &nbsp &nbsp None BLE (proprietary): Used only by RICOH smartphone apps &nbsp &nbsp None
Provided Services	The Bluetooth® API specifications are public at the following link. https://docs-theta-api.ricoh360.com/bluetooth-api/ Camera Control Command v2 Service WLAN Control Command service WLAN Control Command v2 Service Registering with RICOH360 Cloud can only be performed using the RICOH APP.

How to Use

Connect via Bluetooth®: BLE (standard)

BLE is enabled by default. (It is disabled up to version v3.40.) If it is disabled, you must enable it using the API or via the device controls.
Follow the steps below to connect and control the device as a peripheral.

1. Turn on the THETA.
2. Press and hold the WLAN button
3. .
4. Search for the THETA (the last 8 digits of the Serial No.) via Bluetooth® on your device.
5. Connect from your device.

To connect a remote controller, you must connect the device using a Plugin.
Procedure

Connect via Bluetooth®: BLE (proprietary)

This was supported in previous versions of the RICOH smartphone APP.

Settings

Settings	Default	Settings		Explanation
Bluetooth® Status	OFF (up to v3.40) ON (v3.50 and later)	WebAPI	Options._bluetoothPower Can be set or retrieved in WLAN AP/CL mode for settings	Toggle Bluetooth® on/off
		MTPAPI	N/A
		BLEAPI	N/A

USB

Specifications

Interface	Compliant with the following standards: &nbsp &nbsp USB Spec. 3.2 SuperSpeed standard &nbsp &nbsp USB 2.0 High-Speed Standard
Service Protocol	MTP (Media Transfer Protocol) UVC (USB Video Class)
Service Protocol Authentication Method	None
Service Protocol Encryption Method	None
Provided Services	The MTP API specifications are public at the following link. https://docs-theta-api.ricoh360.com/usb-api/

How to Use

Connecting via

USB When controlling the device via USB, you must decide whether to use it as an MTP device or a UVC device.

・To configure settings using the buttons

1. Turn on the THETA.
2. Connect it to your PC using a USB cable.
3. Press the Mode button to cycle through images, Video, and LIVE streaming (UVC).

Control Devices

You cannot disable the power button, WLAN button, shutter button, Mode button, or Fn button on this device.

Device Settings

Location and date/time information are recorded in photos and videos. These settings affect the integrity of this information.

Location Information

You can configure the location information added to photos and videos using an API. The device does not have a built-in GPS.
Direction information obtained using the electronic compass is recorded in Magnetic North.

Settings

Settings	Default	Settings		Explanation
Location	Not Configured	Web API	Options.gpsInfo Can be set or retrieved in WLAN AP/CL mode for settings	Location
		MTPAPI	0xD801 GpsInfo
		BLE API	N/A

Date

and Time

Information

You can set the date and time for this product.
Starting with v3.70, when date and time information is obtained from NTP, the time is corrected, but the time zone is not.

Settings Value

Settings Value	Default	Settings		Explanation
Date, Time, and Time Zone Information	January 1, 2019, 12:00:00 AM	Web API	Options.dateTimeZone Can be set or retrieved in WLAN AP/CL mode for settings	Date, Time, and Time Zone Information
		MTPAPI	0x5011 DateTime
		BLE API	N/A

Power Settings

You can use the API to control the camera’s power. However, you cannot start the camera from the powered-off state.
You can use the camera’s buttons to control power on, Sleep Delay, and power off.

Settings Value

Settings Value	Default	Settings		Explanation
Power Status	OFF	Web API	Options._cameraPower Can be set or retrieved in WLAN AP/CL mode for settings	Power state settings
		MTPAPI	0x1013 Power Down 0xD80E Sleep Mode
		BLEAPI	N/A
Sleep Mode Transition Time (hours)	180 (secs)	WebAPI	Options.sleepDelay Can be set or retrieved in WLAN AP/CL mode for settings	The period of inactivity (in seconds) before entering Sleep Mode
		MTPAPI	0xD803 SleepDelay
		BLEAPI	N/A
Power-off transition time (hours)	64,800 (secs) (up to v3.60) 28,800 (secs) (v3.70–)	Web API	Options.offDelay Can set/retrieve settings in WLAN AP/CL mode	The period of inactivity (in seconds, 60 seconds or more) before the device transitions from Sleep Delay to power off
		MTPAPI	0xD81B AutoPowerOffDelaySec
		BLEAPI	N/A
Reboot		WebAPI	N/A	Restart
		MTPAPI	0x99AF Reboot
		BLE API	N/A

Device Log

This device records at least 1,000 event logs for critical information assets, such as image and Video files.
This log can be accessed via the WebAPI.

How to Get/Retrieval Method

API Name	getEventLog
URL	/log/eventLog
Content-Type	Text/plain;
charset	Charset=UTF-8
method	GET

Vulnerability Mitigation

To address software vulnerabilities, we recommend updating the firmware. Firmware update information will be posted on our website, smartphone apps, and other platforms.
https://support.ricoh360.com/system-information

How to Update the Firmware

Please refer to the Instructions for use for instructions on how to update the firmware.

Update Using the RICOH360 Smartphone APP

https://support.ricoh360.com/manual/z1-ricoh360-app-firm-update-01

Updating Using the Basic PC App

https://support.ricoh360.com/manual/z1-update-01?apps=ricoh-theta

Update via RICOH360

Cloud https://support.ricoh360.com/manual/ricoh360-web-08

Deleting Registration Information and Resetting

You can reset the connection information stored on the THETA device by following the steps below.
To delete the RICOH360 registration from the THETA device, please delete it from the app.
Images and videos saved on the THETA device can also be deleted from a PC via a USB connection.

[THETA Z1]

Registration Information	Reset to Factory Settings	Reset Settings	Reset Connect App Information	Format Storage
	N/A	API	Press and hold the WLAN + Mode button for 6 sec / API	API
Network Type	Initialize (OFF)	Initialize (OFF)	N/A	N/A
SSID	Initialize	Initialize	N/A	N/A
Encryption Key (Passphrase)	Initialize	Initialize	Initialize	N/A
Frequency Settings (AP Mode)	Initialize (2.4 GHz)	Initialize (2.4 GHz)	Initialize (2.4 GHz)	N/A
Digest Authentication Username	Initialize	Initialize	N/A	N/A
Digest Authentication Password	Initialize	Initialize	N/A	N/A
Access Point App Information	Initialize (delete)	Initialize (delete)	N/A	N/A
Proxy App Information	Initialize (delete)	Initialize (delete)	N/A	N/A
Wired LAN Connection Settings	Initialize	Initialize	N/A	N/A
Bluetooth® Status	Initialize (OFF)	Initialize (OFF)	N/A	N/A
App Information for Bluetooth® Peripherals	Initialize (delete)	Initialize (delete)	N/A	N/A
App Information for Bluetooth® Devices	N/A	N/A	N/A	N/A
Location information set via the API	delete	N/A	N/A	N/A
Date, time, and time zone information	Initialize	Initialize	N/A	N/A
Sleep Mode Transition Hour(s)	Initialize	Initialize	N/A	N/A
Time to Power Off (hours)	Initialize	Initialize	N/A	N/A
Images/Video Files	Initialize (delete)	N/A	N/A	Initialize (delete)
Device Log	Initialize (delete)	N/A	N/A	N/A
RICOH360 Register Information	Initialize (delete)	N/A	N/A	N/A

Setpoint

Process Type	How to Use	Settings (API)
Reset to Factory Defaults	N/A	Web API	N/A
		MTPAPI	N/A
		BLE API	N/A
Reset Settings	N/A	WebAPI	camera.reset Can be set or retrieved in WLAN AP/CL mode for settings
		MTPAPI	0x1017 ResetDevicePropValue [*1]
		BLEAPI	N/A
Initialize connection information	While holding down the WLAN button, Press and hold the Mode button for 6 seconds	WebAPI	camera._deleteAccessPoint [*2] Can be set or retrieved in WLAN AP/CL mode for settings
		MTP API	N/A
		BLEAPI	N/A
Format	N/A	Web API	camera.delete Can be set or retrieved in WLAN AP/CL mode for settings
		MTPAPI	0x100B DeleteObject
		BLEAPI	N/A

[*1] Resets the DeviceProperties defined by MTP.
[*2] Deletes the access point information configured via the API.