DEVICE AND METHOD FOR CONTROLLING ACCESS TO AN ELECTRICAL DEVICE

Abstract

The invention relates to a device (150) for controlling the access of a user device (120) to an electrical device (110). The device (150) is designed to determine electrical device data relating to data communication of the electrical device (110) and to determine user device data relating to data communication of the user device (120). Furthermore, the device (150) is designed to determine, on the basis of the electrical device data and on the basis of the user device data, whether the electrical device (110) and the user device (120) are in a common local communication network (131) or not. The device (150) is also designed to allow access of the user device (120) to the electrical device (110) if it is determined that the electrical device (110) and the user device (120) are in a common local communication network (131).

Description

[0001] Device and method for controlling access to a

[0002] electrical appliance

[0003] This document describes a device and a corresponding method by which the position and / or the relative local proximity of a mobile user device relative to an electrical device, e.g. a household appliance, can be determined in an efficient and reliable manner, in particular to enable or prevent interaction of the user device with the electrical device.

[0004] A household appliance, such as a washing machine, dishwasher, or oven, typically includes a user interface that allows a user to interact with the appliance, for example, to select an operating program and / or to start the appliance. The user interface can include various interaction components, such as a screen and several (mechanical) controls. These components are associated with costs, both in the manufacture of the appliance and in its maintenance.

[0005] One way to reduce the cost of a household appliance and / or increase its ease of use is to enable a user interface for the appliance via a mobile device (e.g., a smartphone). This may eliminate the need to install a user interface directly in the appliance.

[0006] This document addresses the technical challenge of enabling the safe and reliable operation of an electrical appliance, in particular a household appliance, via a (possibly mobile) user device.

[0007] The problem is solved in each case by the subject matter of the independent patent claim. Advantageous embodiments are defined in particular in the dependent patent claims, described in the following description, or illustrated in the accompanying drawing. According to one aspect of the invention, a device (e.g., a server) for controlling access to an electrical appliance, in particular a household appliance, by a (possibly mobile) user device is described. The household appliance may include a washing machine, a dryer, a dishwasher, an oven, a cooktop, a cleaning robot, a refrigerator, a coffee machine, and / or a food processor. Alternatively or additionally, the electrical appliance may include a home automation device, in particular a lighting and / or ventilation control system, and / or a television.

[0008] The user device can include a smartphone, tablet PC, desktop PC, laptop PC, or other smart device. The device can be configured to communicate with the electrical appliance and the user device via a communication network.

[0009] To communicate with the user device.

[0010] The device may be configured to collect electrical appliance data relating to a

[0011] To determine the data communication of the electrical device. This data communication can occur with the device and / or with one or more other devices. The electrical device data can be sent from the electrical device to the device. Alternatively or additionally, the electrical device data can be retrieved directly from the device.

[0012] Furthermore, the device can be configured to acquire user device data related to data communication from the user device. This data communication can take place with the device and / or with one or more other devices. The user device data can be sent from the user device to the device. Alternatively or additionally, the user device data can be acquired directly by the device.

[0013] The device can also be configured to determine, based on the electrical device data and the user device data, whether the electrical device and the user device are located in a common local communication network or not. This common local communication network can be a Local Area Network (LAN) or a Wireless LAN (WLAN).

[0014] Furthermore, the device can be configured to allow access by the user device to the electrical device (possibly only if) it is determined that the electrical device and the user device are located in a common local communication network. Conversely, the device can be configured to prevent access by the user device to the electrical device if it is determined that the electrical device and the user device are not located in a common local communication network.

[0015] In particular, the device can be configured to allow a user interface of the electrical device (with which the electrical device can be operated by a user) to be provided via the user device if it is determined that the electrical device and the user device are located in a common local communication network. Furthermore, the device can be configured to prevent the user device from being used as a user interface of the electrical device if it is determined that the electrical device and the user device are not located in a common local communication network.

[0016] The device is thus configured to check, via the electrical device data and the user device data, whether the user device is in close proximity to (i.e., within the same local communication network as) the electrical device. Only in this case is the user device allowed to access the electrical device, for example, to control it. This ensures the reliable and safe operation of the electrical device. Furthermore, it may eliminate the need for a user interface in the electrical device.

[0017] The electrical device data can display at least part of a first IP address through which the electrical device is reachable by a communication partner outside the local communication network in which the electrical device is located (in particular, by the device itself). Similarly, the user device data can display at least part of a second IP address through which the user device is reachable by a communication partner outside the local communication network in which the user device is located (in particular, by the device itself). The portion of the first IP address and / or the portion of the second IP address can each comprise a public IPv4 address or a prefix of an IPv6 address.The device can be configured to compare the first IP address with the second IP address in order to determine, in a particularly reliable manner, whether the electrical device and the user device are in a common local communication network or not.

[0018] Alternatively or additionally, the electrical device data can include the initial transit time of a data communication between the electrical device and the device. Similarly, the user device data can include the second transit time of a data communication between the user device and the device. These transit times can be average transit times for a multiple of messages (to compensate for static fluctuations in transit times).

[0019] The device can be configured to compare the first and second transit times to determine whether the electrical device and the user device are on a common local area communication network. For example, it can be determined that the electrical device and the user device are on a common local area communication network if the first and second transit times differ by less than a threshold value. Conversely, it can be determined that the electrical device and the user device are not on a common local area communication network if the first and second transit times differ by more than the threshold value.By taking transit times (especially latencies) into account, it is possible to determine in a particularly reliable way whether the electrical device and the user device are located in a common local communication network.

[0020] The electrical device data can display a primary hostname of a host through which communication with the electrical device is possible. Similarly, the user device data can display a secondary hostname of a host through which communication with the user device is possible. The hostnames can be determined, for example, using a reverse DNS lookup.

[0021] The device can be configured to compare the first hostname and the second hostname to determine (in a particularly reliable manner) whether the electrical device and the user device are in a common local communication network or not.

[0022] The electrical device data may include an initial list of other devices communicating within the local communication network where the electrical device is located. This initial list may have been determined by the electrical device and sent to the device. Similarly, the user device data may include a second list of other devices communicating within the local communication network where the user device is located. This second list may also have been determined by the user device and sent to the device. Both the initial and the second lists may contain MAC addresses of one or more other devices.

[0023] The device can be configured to determine, based on the first list and the second list, whether the electrical device and the user device are located in a common local area communication network (LAN). In particular, the device can be configured to determine the degree of overlap between the first and second lists. It can then be determined with particular precision, based on the degree of overlap, whether the electrical device and the user device are located in a common LAN. For example, it can be determined that the electrical device and the user device are located in a common LAN if the degree of overlap is greater than a certain overlap threshold (e.g., 80%).On the other hand, it can be determined that the electrical device and the user device are not in a common local communication network if the degree of overlap is less than the overlap threshold. This allows for a particularly high degree of accuracy in determining whether the electrical device and the user device are in a common local communication network or not.

[0024] According to a further aspect of the invention, a method for controlling access to an electrical device by a (possibly mobile) user device is described. The method includes determining data from the electrical device relating to its data communication. Furthermore, the method includes determining data from the user device relating to its data communication. The method also includes determining, based on the electrical device data and the user device data, whether the electrical device and the user device are located in a common local communication network. Finally, the method includes enabling access by the user device to the electrical device when it is determined that the electrical device and the user device are located in a common local communication network.

[0025] It should be noted that any aspect of the device and method described in this document can be combined in a variety of ways. In particular, the features of the claims can be combined in a variety of ways.

[0026] The invention will now be described in more detail with reference to exemplary embodiments illustrated in the accompanying drawing.

[0027] Figure 1 shows a block diagram of an exemplary system for remote control of a household appliance (as an example of an electrical appliance);

[0028] Figure 2 shows an example of a local network in a household; and Figure 3 shows a flowchart of an example procedure for controlling access to a household appliance (as an example of an electrical appliance).

[0029] As stated at the outset, this document deals with the safe and reliable control of a household appliance (as an example of an electrical appliance) using a mobile user device. In this context, Fig. 1 shows an exemplary system 100 with a household appliance 110 (as an example of an electrical appliance) and a (possibly mobile) user device 120 (e.g., a smartphone). To enable safe operation of the household appliance 110 via a software application on the user device 120, a condition can be imposed such that operation is only possible when the user device 120 is in close proximity to the household appliance 110. In particular, it can be required that the household appliance 110 and the user device 120 are located within the same local network 131, especially within the same Local Area Network (LAN) or Wireless LAN. Fig.Figure 1 shows an exemplary router 130 configured to connect different devices 110, 120, in particular the home appliance 110 and the user device 120, within a local network 131. In other words, the router 130 enables communication between the home appliance 110 and the user device 120 within a shared local network 131. For this purpose, the home appliance 110 and the user device 120 can each be connected to the router 130 via a local communication link 132. The router 130 can also enable a remote communication link 142 via the internet 140 with a central unit 150 (e.g., with a backend server). The central unit 150 is also referred to in this document as the "device". The home appliance 110 and the user device 120 can be configured to communicate with each other via the central unit 150.In particular, the household appliance 110 can be controlled by the user device 120 via the central unit 150. Alternatively or additionally, data can be transmitted from the household appliance 110 to the user device 120 (indirectly) via the central unit 150.

[0030] The central unit 150 can be configured to check whether the household appliance 110 and the user device 120 are located on the same local network 131. For this purpose, the household appliance 110 and the user device 120 can each establish a communication connection 132, 142 with the central unit 150. One or more parameters of the respective communication connection 132, 142 can be determined to check whether both devices 110, 120 are located on the same local network 131.

[0031] If it is determined that the appliance 110 and the user device 120 are located in the same local network 131, the user device 120 can be granted access to and / or control of the appliance 110. Conversely, if it is detected that the appliance 110 and the user device 120 are not located in the same local network 131, access to the appliance 110 can be blocked. This enables secure control of the appliance 110 by a mobile user device 120. Based on one or more parameters of the communication links 132, 142 between the appliance 110 or the user device 120 and the central unit 150, it can be verified whether both devices 110, 120 are located in the same local network 131 or not.

[0032] Examples of client-determined parameters include data values ​​that the respective clients (i.e., the user device 120 or the home device 110) determine themselves. However, these parameters can potentially be manipulated, so a client-determined parameter can typically only be used as an (additional) indicator to determine whether both devices 110 and 120 are on the same local network 131. Examples of client-determined parameters are:

[0033] • BSSID (Basic Service Set Identification): a 6-byte MAC address of the WLAN access point 130 to which the respective device 110, 120 is connected. This parameter is not available for wired devices and not when using a repeater in a WLAN.

[0034] • SSID (Service Set Identifier): a string of up to 32 bytes that provides a human-readable value for the network name. It should be noted that a repeater may have a different network name, and therefore different SSIDs may be detected even though both devices (110, 120) are on the same local network (131).

[0035] • Visible Wi-Fi SSID.

[0036] • Geolocation: Approximate position of the respective client determined via sensors (“GPS”) or software-based methods (“IP location database”). However, this requires the installation of appropriate sensors in a household appliance.

[0037] On the other hand, one or more server-determined parameters (which can be determined by the central processing unit 150) can be used to reliably verify whether both devices 110 and 120 are located on the same local network 131. Examples of server-determined parameters are:

[0038] • The remote IP address of the connection 142 between the respective device 110, 120 and the central unit 150. The home device 110 and the user device 120 each establish a bidirectional communication connection 132, 142 with the central unit 150. The (external) IP address of the respective device 110, 120 (which typically corresponds to the (external) IP address of the router 130) can then be determined (even if both devices 110, 120 use different IP protocols, i.e., IPv4 and IPv6). This allows for a reliable determination of whether both devices 110, 120 are on the same local network 131.

[0039] • Latency or propagation time of the respective communication link 132, 142 at the application layer level. The central processing unit 150 can be configured to repeatedly, especially periodically, check how long the user device 120 or the home device 110 takes to respond to a request (e.g., a so-called "ping"). If both devices 110, 120 are located in the same local network 131, then the response times (i.e., the propagation times) of both devices 110, 120 should be approximately the same. If necessary, average values, especially moving averages, can be determined and compared over the response times of several requests. This allows statistical fluctuations to be smoothed out.

[0040] • DNS (Domain Name Server) entry and / or hostname. For IP addresses, a so-called reverse DNS lookup can be performed, which determines the hostname(s) associated with a specific IP address. This can be done regardless of the IP version used.

[0041] Within the IP version IPv4, a router 130 typically has a single public IPv4 address, which is used for the communication link 132, 142 of the user device 120 and for the communication link 132, 142 of the home device 110 when both devices 110, 120 are connected to the same router 130.

[0042] In the IPv6 version, a local network 131 is typically assigned a 64-bit prefix, which is then assigned to all clients 110 and 120 on that network. Each client 110 and 120 uses this prefix in their IPv6 addresses, thus uniquely assigning them to the local network 131. Therefore, it can be reliably verified, based on the IP address prefix, whether devices 110 and 120 are on the same local network 131 or not.

[0043] Alternatively or additionally, parameters of the network connections 132, 142 of the household appliance 110 and the user device 120 to the respective access point 130 and to one or more other devices 210 in the vicinity can be determined, as exemplified in Fig. 2. The parameters can be transmitted to the central unit 150, and the central unit 150 can be configured to check, based on the parameters, whether the household appliance 110 and the user device 120 are in the same local network 131 or not.

[0044] Metadata from the data traffic in the local network 131 (especially LAN or WLAN) of the household appliance 110 or the user device 120 can be intercepted with one or more other devices 210. While decoding the user data may not be possible due to (optional) encryption, the communication partners 210 can be identified based on their respective device addresses, especially their MAC addresses.

[0045] The household appliance 110 and the user device 120 can each be configured to monitor data traffic within their respective local network 131 in a so-called monitor mode. In this mode, the sender MAC address and the receiver MAC address can be determined for each data connection. The household appliance 110 and the user device 120 can thus each generate a list of sender MAC addresses and receiver MAC addresses of other devices 210 communicating within their respective local network 131. Based on the Service Set Identifier (SSID), it can be verified whether another device 210 is located within the same local network 131.

[0046] The MAC address lists of the user device 120 and the home appliance 110 can be transmitted to the central unit 150 and compared by the central unit 150. The degree of overlap between the two lists can then be determined. If the degree of overlap of the other devices 210 in both lists is greater than a coverage threshold (e.g., 80% or more), it can be concluded that the user device 120 and the home appliance 110 are on the same local network 131. Furthermore, as an additional criterion, it can be checked whether the home appliance 110 and the user device 120 are connected to the same access point 130 and / or the same SSID. This can be verified based on the Basic Service Set Identifier (BSSID). The degree of overlap between the two lists of devices 210, i.e.,Determining the intersection of both lists of devices 210 provides a secure criterion to verify whether the household appliance 110 and the user device 120 are located on the same local network 131. In particular, this criterion is relatively secure with regard to relay attacks.

[0047] It is possible that another device 210 is indirectly connected to the router 130 via a repeater. The repeater may have a different SSID. Nevertheless, the home device 110 and the user device 120 can each determine a list of MAC addresses of the devices 210 that are visible to them. Other devices 210 that communicate exclusively with each other via the repeater may not be visible to the home device 110 or the user device 120.

[0048] If a repeater is used, an Extended Service Set Identifier (ESSID) can be used to indicate that all access devices (repeater, router 130, etc.) broadcast the same SSID to inform WLAN clients of the network name 131. In this case, the ESSID can be used to reliably determine whether another device 210 is on the same local network 131 as the home device 110 or the user device 120.

[0049] Fig. 3 shows a flowchart of an exemplary (possibly computer-implemented) method 300 for controlling access to an electrical device 110 (in particular a household appliance) by a mobile user device 120. The method 300 comprises determining 301 electrical device data relating to a data communication of the electrical device 110, as well as determining 302 user device data relating to a data communication of the user device 120. The electrical device data or the user device data can include or display one or more of the aforementioned parameters (e.g., public IP address, list of MAC addresses, runtimes or latencies, etc.).

[0050] Furthermore, the procedure 300 includes determining 303, based on the electrical device data and the user device data, whether the electrical device 110 and the user device 120 are located in a common local communication network 131 or not. The procedure 300 also includes authorizing 304 access by the user device 120 to the electrical device 110 (possibly only if) it is determined that the electrical device 110 and the user device 120 are located in a common local communication network 131. The measures described in this document enable reliable and secure control of an electrical device 110 by a mobile user device 120. This reliably ensures that the user of the electrical device 110 is in close proximity to the electrical device 110. Furthermore, the costs for a user interface of the electrical device 110 can be reduced.

[0051] The present invention is not limited to the embodiments shown. In particular, it should be noted that the description and the figures are intended only to illustrate the principle of the proposed method and the proposed apparatus.

Claims

PATENT CLAIMS 1. Device (150) for controlling access to an electrical device (110) by a user device (120); wherein the device (150) is configured, - To determine electrical appliance data relating to data communication of the electrical appliance (110); - To determine user device data relating to data communication of the user device (120); - to determine, based on the electrical device data and the user device data, whether the electrical device (110) and the user device (120) are located in a common local communication network (131) or not; and - to enable the user device (120) to access the electrical device (110) when it is determined that the electrical device (110) and the user device (120) are located in a common local area communication network (131).

2. Device (150) according to claim 1, wherein the device (150) is configured to prevent access by the user device (120) to the electrical device (110) when it is determined that the electrical device (110) and the user device (120) are not in a common local communication network (131).

3. Device (150) according to a preceding claim, wherein - the electrical appliance data includes data relating to data communication between the electrical appliance (110) and the device (150); and - the user device data includes data relating to data communication between the user device (120) and the device (150).

4. Device (150) according to a preceding claim, wherein - the electrical device data should show at least part of a first IP address via which the electrical device (110) is accessed by a Communication partners outside the local communication network (131) in which the electrical appliance (110) is located are reachable; and - the user device data display at least part of a second IP address via which the user device (120) is accessed by a Communication partners outside the local communication network (131) in which the user device (120) is located are reachable; and - the device (150) is set up to compare the first IP address with the second IP address to determine whether the electrical device (110) and the user device (120) are in a common local communication network (131) or not.

5. Device (150) according to claim 4, wherein the part of the first IP address and / or the part of the second IP address each comprise a public IPv4 address or a prefix of an IPv6 address.

6. Device (150) according to one of the preceding claims, wherein - the electrical device data include an initial runtime of data communication between the electrical device (110) and the apparatus (150); - the user device data include a second runtime of data communication between the user device (120) and the device (150); and - the device (150) is set up to compare the first runtime and the second runtime to determine whether the electrical device (110) and the user device (120) are in a common local communication network (131) or not.

7. Device (150) according to one of the preceding claims, wherein - the electrical device data display a first hostname of a host through which communication with the electrical device (110) is possible; - the user device data display a second hostname of a host through which communication with the user device (120) is possible; and - the device (150) is set up to compare the first hostname and the second hostname to determine whether the electrical device (110) and the user device (120) are in a common local communication network (131) or not.

8. Device (150) according to one of the preceding claims, wherein - the electrical appliance data includes an initial list of other devices (210) that communicate within the local communication network (131) in which the electrical appliance (110) is located; - the user device data includes a second list of other devices (210) that communicate within the local communication network (131) in which the user device (120) is located; and - the device (150) is set up, based on the first list and on The basis of the second list is to determine whether the electrical appliance (110) and the user device (120) are located in a common local area. Whether or not they are located in the communication network (131).

9. Device (150) according to claim 8, wherein the device (150) is configured, - to determine a degree of overlap between the first list and the second list; and - to determine, depending on the degree of coverage, whether the electrical device (110) and the user device (120) are in a common local communication network (131) or not.

10. Device (150) according to one of claims 8 to 9, wherein the first list and the second list each comprise MAC addresses of one or more other devices (210).

11. Device (150) according to a preceding claim, wherein the device (150) is configured, - to enable a user interface of the electrical device (110) to be provided via the user device (120) when It is determined that the electrical appliance (110) and the user appliance (120) are located in a common local communication network (131); and / or - to prevent the user device (120) from being used as the user interface of the electrical device (110) when it is determined that the electrical device (110) and the user device (120) are not in a common local communication network (131).

12. Device (150) according to a preceding claim, wherein the common local communication network (131) is a Local Area Network, or LAN, or Wireless LAN, or WLAN.

13. Device (150) according to a preceding claim, wherein - the electrical appliance (110) comprises a household appliance, in particular a washing machine, a dryer, a dishwasher, an oven, a hob and / or a food processor; and / or - the electrical appliance (110) includes a home automation device, in particular a lighting and / or ventilation control device, and / or a television; and / or - the user device (120) includes a smartphone or a tablet PC or a desktop PC or a laptop PC or a smart device.

14. Method (300) for controlling access to an electrical device (110) by a user device (120); wherein the method (300) comprises, - Determining (301) electrical appliance data relating to a Data communication of the electrical device (110); - Determining (302) user device data relating to a User device data communication (120); - Determine (303), based on the electrical appliance data and on the basis of User device data, whether the electrical device (110) and the Whether or not the user device (120) is in a shared local communication network (131); and - To enable (304) access by the user device (120) to the electrical device (110) when it is determined that the electrical device (110) and the user device (120) are in a common local communication network (131).