This repository is to hold information, analysis and, hopefully, code to access a Philips Hue Secure Flood Light Camera EU and other Philips Hue Secure Cameras.
The Floodlight Camera packaging describes it as a Zigbee Certified Product. It is two Zigbee devices sharing a common base and power supply.
The floodlight part can be recognised as a colour light and can be commissioned into an existing Zigbee network.
The camera part is not recognised. It can be commissioned into a Zigbee network with a Philips Hue Bridge as coordinator using the proprietary Philips Hue App using WiFi and Bluetooth LE (BLE). The BLE advertisements emitted during setup do not conform to the BLE Connectable Advertisement example in Appendix A of Zigbee Direct Specification, Version 1.0. In particular, instead of the 16-bit UUID of the Zigbee Direct Commissioning Service (0xFFF7) it has the 16-bit UUID of Signify Netherlands B.V. (formerly Philips Lighting B.V.) (0xFE0F).
The following hardware is available:
- 1 x Philips Hue Secure Flood Light Camera EU
- 1 x Philips Hue Bridge, v2.1
- 1 x nRF52840 Dongle
- 1 x nRF5340 DK
The nRF52840 Dongle can be used as a Zigbee Sniffer.
It is possible to sniff traffic on a Philips Hue Bridge Zigbee network. However, as the encrypted network key is unknown it is not possible to view the encrypted payload. The clientkey looked promising as it was a 128-bit value in hex but doesn't work.
It might be possible to program the nRF5340 DK as a Zigbee Light Bulb Emulator that could be commissioned into a Philips Hue Bridge Zigbee network to investigate traffic between a Secure Camera and a light. Here is the Zigbee: Light bulb. Not sure if a Philips Hue Bridge would accept this as it may lack the necessary cryptographic information to identifiy it as a Zigbee Certified Product.
It is possible to Root a Philips Hue Bridge, v2.1. This may provide a way to obtaining the Zigbee encrypted network key which would allow sniffed Zigbee traffic to be decrypted.
Philips Hue Secure’s End-to-End Encryption
Home Assistant Forum: Philips Hue Secure Camera without a Hue Bridge?; Zigbee Direct.
Zigbee2MQTT: New device support: Philips Hue Secure Floodlight Camera EU.
ZHA Device Handlers For Home Assistant: Device Support Request: Philips Hue Secure Floodlight Camera EU.
Philips Hue Developer Forum: Adding a Secure Camera to an existing Zigbee network?