Method for generating network identifier and verification information and related device and system

Abstract

Generating network identifier information and verification information for wireless communication with the controller includes accessing, by the controller, identity information associated with the controller. The controller obfuscates the identity information and generates network identifier information and verification information associated with the controller using the obfuscated identity information. The controller is configured to use the generated network identifier information and the generated verification information for wireless communication.

Description

Technical Field

[0001] The present disclosure relates generally to wireless communication systems, and more particularly to generating network identity and authentication information for wireless communications in a building automation system. Background Art

[0002] Building Automation Systems (BAS) are used to manage and automate the control of various environmental, physical, and electrical building subsystems. In particular, BAS systems are commonly used for the coordination and control of heating, ventilation, and air conditioning (HVAC) and climate control systems, but are also commonly used for security systems, lighting systems, and other connected building subsystems.

[0003] BAS systems typically utilize a series of interconnected controller devices that coordinate the control and automation of such subsystems. Large BAS systems may include hundreds or even thousands of controllers. Modern BAS systems typically use wireless communications for data transmission between controllers and with corresponding subsystem components.

[0004] However, configuration of BAS controllers for wireless communication typically requires a team of service engineers to physically connect to each BAS controller via a laptop or other computer device to initialize each BAS controller with, for example, a service set identifier (SSID) and password for wireless communication and further commissioning of the controller. Thus, conventional techniques for configuring BAS controllers for wireless communication typically require significant expenditure of service engineering resources, thereby increasing the time and expense associated with installation and maintenance of the BAS system. Summary of the invention

[0005] In one example, a method for generating network identifier information and verification information for wireless communication with a controller includes identifying, by the controller, identity information associated with the controller. The method further includes obfuscating the identity information by the controller to produce obfuscated identity information associated with the controller, and generating, by the controller, network identifier information and verification information associated with the controller using the obfuscated identity information. The method further includes configuring the controller for wireless communication using the generated network identifier information and the generated verification information.

[0006] In another example, a method for generating network identifier information and verification information for wireless communication with a controller includes receiving, by a computing device, identity information associated with the controller via wireless communication. The method further includes obfuscating the identity information by the computing device to produce obfuscated identity information associated with the controller, and generating, by the computing device, network identifier information and verification information associated with the controller using the obfuscated identity information. The method further includes transmitting, by the computing device, via wireless communication, a request to initiate a wireless communication session between the computing device and the controller, the request including the generated network identifier information associated with the controller and the generated verification information.

[0007] In another example, a controller device includes a wireless communication interface, one or more processors, and a computer readable memory. The computer readable memory is encoded with instructions that, when executed by the one or more processors, cause the controller device to access identity information associated with the controller device and obfuscate the identity information to generate obfuscated identity information associated with the controller device. The computer readable memory is further encoded with instructions that, when executed by the one or more processors, cause the controller device to generate network identifier information and verification information associated with the controller device using the obfuscated identity information, and configure the wireless communication interface for a wireless communication session using the generated network identifier information and the generated verification information. BRIEF DESCRIPTION OF THE DRAWINGS

[0008] Figure 1 is a block diagram illustrating an example building automation system (BAS) including a controller device and a remote computing device that can wirelessly communicate with the controller device for initial configuration and commissioning of the BAS system.

[0009] Figure 2 It is a graphic Figure 1 A block diagram of the BAS controller device with additional details.

[0010] Figure 3 It is a graphic Figure 1 A block diagram of a computing device with additional details.

[0011] Figure 4 is a flow diagram illustrating example operations for generating a network identifier and authentication information for a controller and initiating a wireless communication session between the controller and a remote computing device.

[0012] Figure 5 is a flow diagram illustrating example operations of a controller for generating network identifier information.

[0013] Figure 6 is a flow diagram illustrating example operations of a controller for generating authentication information.

[0014] Figure 7 is a flow diagram illustrating example operations for generating a network identifier and authentication information and transmitting a request to initiate a wireless communication session with a controller. DETAILED DESCRIPTION

[0015] According to the technology of the present disclosure, a building automation system (BAS) controller is configured to communicate wirelessly using network identifier information such as a service set identifier (SSID) and authentication information (e.g., a password) derived from obfuscated identity information of the corresponding controller. As described herein, the BAS controller accesses identity information associated with the controller, such as a media access control (MAC) address, and obfuscates the identity information using, for example, a cryptographic hash function or other obfuscation technique. The controller generates network identifier information (e.g., SSID) and authentication information (e.g., a password) using the obfuscated identity information, and uses the generated network identifier and authentication information to configure the wireless interface of the controller for wireless communication, initiating wireless communication with a remote computing device, such as, for example, a laptop or smartphone used by a service engineer to debug the controller. The remote computing device executes an application or other software routine that generates the obfuscated identity information of the controller via a corresponding (e.g., the same) obfuscated operation. The remote computing device further determines the network identity information (e.g., SSID) and authentication information (e.g., a password) using the corresponding operation (i.e., corresponding to the operation used by the BAS controller) to generate a network identity and authentication information associated with the BAS controller. Service engineers or other personnel may access applications on remote computing devices via secure login credentials (eg, username and password, or other security credentials) to enhance the security of operations.

[0016] In this way, the remote computing device can initiate a wireless communication session with the BAS controller using the generated network identity information and authentication information without requiring a wired connection (e.g., wired Ethernet or other wired connection) with the BAS controller for initial configuration. The technology of the present disclosure can therefore reduce the time and associated costs of installation and commissioning of the BAS system.

[0017] Figure 1 is a block diagram illustrating a BAS system 10 including BAS controllers 12A-12N. Figure 1 As illustrated in FIG. 1 , the BAS system 10 may further involve a remote computing device 14 that may wirelessly communicate with the BAS controllers 12A- 12N for configuration and commissioning operations.

[0018] exist Figure 1In the example of FIG. 1 , the BAS controller 12A uses a wireless communication adapter 16 that can be plugged into, for example, a universal serial bus (USB) port or other input / output (I / O) port of the controller 12A for wireless communication with a computing device 14 or other components of the BAS system 10 . Figure 1 In the example of FIG. 1 , the BAS controller 12A is illustrated and described as using the wireless communication adapter 16 while the BAS controllers 12B-12N use built-in wireless transceivers, but it should be understood that any one or more of the BAS controllers 12A-12N may use a wireless communication adapter for implementing wireless communication. Similarly, in some examples, each of the BAS controllers 12A-12N may use a built-in wireless transceiver for wireless communication such that no BAS controller 12A-12N uses a wireless communication adapter, such as the wireless communication adapter 16. Additionally, although Figure 1 The example is illustrated as including three independent BAS controllers, namely BAS controllers 12A, 12B and 12N, but it should be understood that the label "N" represents an arbitrary number, such that the BAS system 10 may include any one or more BAS controllers, such as one BAS controller, two BAS controllers, or three or more BAS controllers 12A-12N.

[0019] Each of the BAS controllers 12A-12N may be electrically and / or communicatively coupled to one or more BAS subsystems and / or components (not shown), such as heating, ventilation, and air conditioning (HVAC) components, security system components, lighting system components, or other building subsystems and / or components. Figure 1 As illustrated in FIG, the computing device 14 is remote (i.e., physically remote) from the BAS controllers 12A-12N and communicates wirelessly with the BAS controllers 12A-12N for configuration and commissioning operations. Examples of the computing device 14 may include, but are not limited to, a portable or mobile device such as a laptop computer, a tablet computer, a smart phone, a personal digital assistant (PDA), or a non-portable computing device such as a desktop computer.

[0020] In operation, each of the BAS controllers 12A-12N generates network identifier information and authentication information for wireless communication with a corresponding one of the BAS controllers 12A-12N. For example, as further described below, each of the BAS controllers 12A-12N accesses identity information associated with a corresponding one of the BAS controllers 12A-12N. The identity information may be, for example, a MAC address of the corresponding one of the BAS controllers 12A-12N, a MAC address of a wireless transceiver of the corresponding one of the BAS controllers 12A-12N, a MAC address of a wireless communication adapter associated with the corresponding one of the BAS controllers 12A-12N (e.g., the wireless communication adapter 16 connected to the BAS controller 12A), or other identity information (e.g., identity information that uniquely identifies the corresponding one of the BAS controllers 12A-12N).

[0021] The BAS controllers 12A-12N obfuscate the corresponding identity information using, for example, a cryptographic hash function or other obfuscation technique to produce obfuscated identity information associated with a corresponding one of the BAS controllers 12A-12N. The BAS controllers 12A-12N use the obfuscated identity information to generate network identifier information (e.g., SSID) and authentication information (e.g., password), as further described below. Each of the BAS controllers 12A-12N uses the generated network identifier information and authentication information to configure a wireless interface for wireless communication. For example, each of the BAS controllers 12A-12N can broadcast the generated network identifier information (e.g., SSID) and the identity information used to generate the network identifier information (e.g., MAC address) to initiate a wireless communication session.

[0022] A computing device 14, which may be used by a service engineer or other technician to configure and debug the BAS controllers 12A-12N, may wirelessly receive broadcast network identifier information and identity information corresponding to one or more of the BAS controllers 12A-12N. As further described below, the computing device 14 may execute an application or other software routine that performs corresponding obfuscation and network identifier and authentication information operations to generate network identifiers and authentication information corresponding to (e.g., matching) each respective one of the BAS controllers 12A-12N for wireless communication.

[0023] As an example, the BAS controller 12A may obfuscate identity information associated with the BAS controller 12A (e.g., a MAC address of the BAS controller 12A) using a cryptographic hash function, such as an MD5 message digest algorithm, a SHA-256 secure hash algorithm, a SHA-512 secure hash algorithm, a PBKDF2 cryptographic-based key derivation function 2 algorithm, or other cryptographic algorithms known in the art to generate obfuscated identity information associated with the BAS controller 12A. The BAS controller 12A may generate network identifier information and authentication information based on the obfuscated identity information, as further described below. The BAS controller 12A may use the network identifier information and authentication information to configure a wireless interface for wireless communication.

[0024] The computing device 14 may receive network identifier information (e.g., SSID) and identity information (e.g., MAC address of the BAS controller 12A) broadcasted by the BAS controller 12A. The computing device 14 may execute an application or other software routine that obfuscates the received identity information using a corresponding (e.g., the same) hash function or other cryptographic algorithm used by the BAS controller 12A to produce obfuscated identity information that corresponds to (e.g., matches) the obfuscated identity information generated by the BAS controller 12A. The computing device 14 may further perform corresponding (e.g., the same) network identifier and authentication information operations to produce a network identifier and authentication information that corresponds to (e.g., matches) the network identifier and authentication information generated by the BAS controller 12A.

[0025] The computing device 14 may wirelessly transmit a request to initiate a wireless communication session between the computing device 14 and the BAS controller 12A. The request may include network identifier information (e.g., SSID) and authentication information (e.g., password) generated using obfuscated identity information associated with the BAS controller 12A. The BAS controller 12A may initiate a communication session with the computing device 14 in response to determining that the network identity information and authentication information received in the request match the network identity information and authentication information generated by the BAS controller 12A.

[0026] Thus, the computing device 14 can communicate wirelessly with the BAS controller 12 without requiring a wired connection to initialize and configure the wireless communication. The techniques of the present disclosure can therefore reduce the number of service engineers and technicians (and the corresponding number of man-hours) required to configure and debug the BAS system. As such, the techniques described herein can reduce the overall cost associated with the BAS system, thereby increasing the feasibility of installation and facilitating the use of the BAS system for building subsystem management.

[0027] Figure 2 It is a graphic Figure 11A is a block diagram of the BAS controller 12A for additional details. Figure 2 An example of BAS controller 12A is described below with respect to BAS controller 12A, but it should be understood that the techniques described below can be applied to BAS controllers 12A-12N ( Figure 1 ) in any one or more.

[0028] As in Figure 2 As shown in FIG. 1 , the BAS controller 12A includes one or more processors 18, one or more input / output (I / O) ports 20, a wireless communication interface 22, and a computer readable memory 24. Figure 2 As illustrated in FIG. 1 , the computer readable memory 24 may store an identity information module 26 , a network identifier module 28 , a verification information module 30 , and a word portion 32 .

[0029] The processor 18 may be configured to implement functional and / or process instructions for execution within the BAS controller 12A. For example, the processor 18 may be capable of processing processing instructions stored in the computer-readable memory 24, such as the computer-readable instructions associated herein with the identity information module 26, the network identifier module 28, and the verification information module 30. Examples of the processor 18 may include any one or more of a microprocessor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (ASIC), or other equivalent discrete or integrated logic circuits.

[0030] The BAS controller 12A may use the I / O port 20 for interfacing with one or more peripheral devices. For example, the I / O port 20 may include a USB port, a serial communication port, a high-definition multimedia interface (HDMI), or other analog or digital input / output interface port. The wireless communication interface 22 may include any one or more of software, firmware, or hardware interfaces for wireless communication. Such wireless communications may include, for example, wireless Ethernet communications, Bluetooth communications, cellular communications (such as 3G, 4G, and / or 5G communications), or other wireless communications. In some examples, the wireless communication interface 22 may take the form of a wireless network card or other wireless transceiver that can be configured to communicate wirelessly using the network identity and authentication information determined by the BAS controller 12A, as further described below.

[0031] The computer readable memory 24 may be configured to store information within the BAS controller 12A during operation. In some examples, the computer readable memory 24 may include non-transitory memory. The term "non-transitory" may indicate that the storage medium is not embedded in a carrier or propagating signal. In some examples, non-transitory memory may store data that may change over time (e.g., in RAM or cache).

[0032] In some examples, the computer readable memory 24 may include volatile memory elements that do not maintain stored content when power to the BAS controller 12A is removed. Examples of volatile memory elements may include random access memory (RAM), dynamic random access memory (DRAM), static random access memory (SRAM), and other forms of volatile memory. In certain examples, the computer readable memory 24 may include non-volatile memory elements configured for long-term information storage. Examples of such non-volatile memory elements may include, for example, magnetic hard disks, optical disks, flash memory, or various forms of electrically programmable memory (EPROM) or electrically erasable programmable (EEPROM) memory.

[0033] As in Figure 2 , the computer readable memory 24 may include an identity information module 26, a network identifier module 28, a verification information module 30, and a word portion 32. As further described below, the word portion 32 may store various text or alphanumeric strings that may be used by the BAS controller 12A to generate one or more of network identity information and verification information for wireless communication with the BAS controller 12A.

[0034] The identity information module 26, the network identifier module 28, and the verification information module 30 may take the form of computer-readable instructions that, when executed by the processor 18, cause the BAS controller 12A to implement the functionality specified herein for the identity information module 26, the network identifier module 28, and the verification module 30. Although described with respect to separate modules 26, 28, and 30, Figure 2 , but it should be understood that the techniques described herein with respect to such modules 26, 28, and 30 may be implemented in a single module, two modules, three modules, or more than three modules that distribute the functionality designated herein to the modules 26, 28, and 30 among multiple modules. In general, the computer-readable memory 24 may store computer-readable instructions that, when executed by the processor 18, cause the BAS controller 12A to operate according to the techniques described herein.

[0035] In operation, the BAS controller 12A determines a network identity and authentication information derived from obfuscated identity information associated with the BAS controller 12A. For example, the BAS controller 12A may execute the identity information module 26 to access identity information associated with the BAS controller 12A. Such identity information may include, for example, a MAC address of the BAS controller 12A, a MAC address associated with a wireless transceiver associated with the BAS controller 12A (e.g., a wireless transceiver of the wireless communication interface 22), a MAC address of a wireless adapter associated with the BAS controller 12A (e.g., a wireless communication adapter connected to the BAS controller 12A via the I / O port 20), or other identity information. The identity information module 26 obfuscates the identity information, such as by using a cryptographic hash function or other obfuscation technique.

[0036] As described further below, the BAS controller 12A executes the network identifier module 28 to generate network identifier information using the obfuscated identity information. The BAS controller 12A further executes the authentication information module 30 to generate authentication information using the obfuscated identity information.

[0037] In some examples, as further described below, the BAS controller 12A may determine one or more of the network identifier information and the authentication information as a combination (e.g., concatenation) of the word portion and the numeric portion. In such examples, the BAS controller 12A may access a stored word portion 32, which may take the form of a table, array, matrix, list, linked list, data block, or other data structure configured to store data in an organized manner for later retrieval.

[0038] The BAS controller 12A configures the wireless communication interface 22 for wireless communication using the generated network identifier information and the generated authentication information. In response to receiving a request from a remote computing device to initiate a wireless communication session including the network identifier information and the authentication information, the BAS controller 12A initiates the wireless communication session and wirelessly communicates with the remote computing device via the initiated session.

[0039] Thus, the BAS controller 12A may generate network identifier information and authentication information based on the obfuscated identity information associated with the BAS controller 12A. In this manner, the BAS controller 12A may automatically provide identifier information (such as an SSID), and authentication information (such as a password) that may be used to wirelessly communicate with the BAS controller 12A without requiring a wired connection to initialize or otherwise provide the network identifier and authentication information to the BAS controller 12A.

[0040] Figure 3 It is a graphic Figure 114, which may be a laptop, tablet, smart phone, or other computer capable of generating a network identifier and authentication information for use with the BAS controllers 12A-12N. Figure 1 ) other portable or non-portable computing devices that communicate wirelessly. Figure 3 As illustrated in FIG. 1 , computing device 14 may include one or more processors 34 , a user interface 36 , a wireless transceiver 38 , and computer-readable memory 40 .

[0041] As discussed above with respect to the BAS controller 12A ( Figure 2 ), processor 34 may be configured to implement functional and / or process instructions for execution within computing device 14. Examples of processor 34 may include any one or more of a microprocessor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other equivalent discrete or integrated logic circuits.

[0042] The computing device 14 receives input from a user and outputs information to the user, such as a service engineer or other user, using a user interface 36. The user interface 36 may include physical and / or graphical control elements that enable user input to interact with the computing device 14. For example, the user interface 36 may take the form of a graphical user interface (GUI) that presents graphical control elements on a display device such as the user interface 36. In some examples, the computing device 14 may present the GUI on a touch-sensitive and / or presence-sensitive display screen to receive user input in the form of gestures such as touch gestures, scroll gestures, zoom gestures, or other gesture inputs. In some examples, the user interface 36 may include a physical keyboard, mouse, physical buttons, keys, knobs, or other physical control elements configured to receive user input to interact with the computing device 14.

[0043] The computing device 14 uses the wireless transceiver 38 for communicating with external devices via wireless communications, such as for communicating with the BAS controllers 12A-12N ( Figure 1 ) wirelessly. The computer readable memory 40 of the computing device 14 can communicate with the BAS controller 12A ( Figure 2 ) is substantially similar to the computer readable memory 24 of the computing device 14. That is, the computer readable memory 40 can be configured to store information within the computing device 14 and can include volatile and non-volatile memory elements.

[0044] As in Figure 3, the computer readable memory 40 stores an identity information module 42, a network identifier module 44, a verification information module 46, and a word portion 48. The modules 42, 44, and 46 and the word portion 48 coordinate with the identity information module 26, the network identifier module 28, the verification module 30, and the word portion 32 of the BAS controller 12A to generate network identity and verification information substantially the same as the network identity and verification information generated by the BAS controller 12A to initiate a wireless communication session. That is, although the modules 42, 44, and 46 of the computing device 14 may represent the same computer readable instructions as those represented by the modules 26, 28, and 30 of the BAS controller 12A in some examples, the modules 42, 44, and 46 of the computing device 14 and the modules 26, 28, and 30 do not necessarily represent the same computer readable instructions in all examples. For example, the modules 42, 44, and 46 of the computing device 14 may be implemented using a different software language having different semantics than the software language implemented for generating the modules 26, 28, and 30 of the BAS controller 12A. Additionally, the modules 42, 44, and 46 may be implemented using different software architectures that result in different sequences of instructions and / or different data storage techniques than those represented by the modules 26, 28, and 30 of the BAS controller 12A. Similarly, the word portion 48 may be stored in a different data structure than the word portion 32 of the BAS controller 12A. In general, while the modules 42, 44, and 46 and the word portion 48 of the computing device 14 may be different than the modules 26, 28, and 30 and the word portion 32 of the controller 12A, the operation of the modules 42, 44, and 46 and the data storage techniques of the word portion 48 are coordinated with the modules 26, 28, and 30 and the data storage techniques of the word portion 48 of the BAS controller 12A to generate corresponding (e.g., matching) network identity information and authentication information using the identity information of the BAS controller 12A received by the computing device 14 via the wireless transceiver 38.

[0045] Thus, the computing device 14 can generate network identifier information and authentication information that can be used to initiate a wireless communication session with any one or more of the BAS controllers 12A-12N without requiring a wired connection to initiate or otherwise configure the BAS controllers 12A-12N for wireless communication. A computing device 14 implementing the techniques of the present disclosure can therefore help reduce the amount of time and / or number of service engineers used to debug a BAS system.

[0046] Figure 4 1 is a flow chart illustrating example operations for generating a network identifier and authentication information for a BAS controller and initiating a wireless communication session between the BAS controller and a remote computing device. For clarity and ease of discussion, the example operations are described below in the BAS system ( Figure 1 ) and the BAS controller 12A ( Figure 1 and2 ) and computing devices ( Figure 1 and 3 Although the example operations are described below with respect to the BAS controller 12A, it should be understood that the example operations can be applicable to BAS controllers 12A-12N ( Figure 1 ) in any one or more.

[0047] The BAS controller 12A accesses identity information associated with the BAS controller 12A (step 50). For example, the processor 18 may execute the identity information module 26 to access identity information associated with the BAS controller 12A. The identity information may include, for example, a MAC address of the BAS controller 12A, a MAC address of a wireless transceiver of the BAS controller 12A (e.g., a wireless transceiver of the wireless communication interface 22), a MAC address of a wireless communication adapter associated with the BAS controller 12A (e.g., a wireless communication adapter 16 connected to the BAS controller 12A via the I / O port 20), or other identity information associated with the BAS controller 12A.

[0048] The BAS controller 12A obfuscates the identity information to generate obfuscated identity information associated with the BAS controller 12A (step 52). For example, the processor 18 may execute the identity information module 26 to obfuscate the identity information using a cryptographic hash function or other obfuscation technique. Example cryptographic hash functions may include, but are not limited to, an MD5 message digest algorithm, a SHA-256 secure hash algorithm, a SHA-512 secure hash function, a key derivation function based on the PBKDF2 cryptographic algorithm, or other cryptographic algorithms known in the art.

[0049] The BAS controller 12A generates network identifier information associated with the BAS controller 12A using the obfuscated identity information (step 54). For example, the BAS controller 12A may generate network identifier information (such as an SSID) as a combination (e.g., concatenation or other combination) of an identifier word portion and an identifier numeric portion determined using the obfuscated identity information, as described further below.

[0050] The BAS controller 12A generates authentication information associated with the BAS controller 12A using the obfuscated identity information (step 56). For example, the BAS controller 12A may generate authentication information (such as a password) as a combination (e.g., concatenation or other combination) of an authentication word portion and an authentication number portion, as further described below.

[0051] The BAS controller 12A uses the generated network identity information and the generated authentication information to configure the wireless communication interface 22 for wireless communication (step 58). For example, the BAS controller 12A may use the SSID generated as the network identity information and the corresponding password generated as the network authentication information to configure the wireless communication interface 22 for wireless communication.

[0052] The BAS controller 12A may receive a request to initiate a wireless communication session (step 60). For example, the BAS controller 12A may receive a request from the computing device 14 to initiate a wireless communication session, the request including network identity information (eg, SSID) and authentication information (eg, password).

[0053] The BAS controller 12A may determine whether the network identifier information and verification information received via the request correspond to (e.g., match) the network identifier information and verification information generated by the BAS controller 12A (step 62). In response to determining that the network identifier information and verification information received via the request do not correspond to (e.g., match) the network identifier information and verification information generated by the BAS controller 12A (the "no" branch of step 62), the BAS controller 12A may continue to receive requests for wireless communication sessions (step 60).

[0054] In response to determining that the network identifier information and authentication information received via the request correspond to (e.g., match) the network identifier information and authentication information generated by the BAS controller 12A (the "yes" branch of step 62), the BAS controller 12A may initiate a wireless communication session with a remote computing device (e.g., computing device 14) (step 64). Thus, the BAS controller 12A may initiate a wireless communication session with the remote computing device to configure and debug the BAS controller 12A without requiring a wired connection to initialize wireless communication.

[0055] Figure 5 is a diagram illustrating the use of obfuscated identity information to generate network identifier information Figure 4 Although the example operations are described below with respect to the BAS controller 12, it should be understood that the example operations can be applicable to BAS controllers 12A-12N ( Figure 1 ) in any one or more.

[0056] As in Figure 5, generating the network identifier information may include selecting a subset of the obfuscated identity information of the BAS controller 12A as an identifier word selection index (step 66). As an example, the BAS controller 12A may generate the obfuscated identity information by applying a cryptographic hash function (such as an MD5 message digest algorithm) to identify the identity information associated with the BAS controller 12A to generate, for example, a 128-bit hash number representing the obfuscated identity information associated with the BAS controller 12A. In some examples, such as those in which the applied cryptographic hash function produces a non-decimal (or non-integer) output (e.g., a hexadecimal output or other non-decimal or non-integer output), the BAS controller 12A may convert the generated hash number into a decimal (or integer) format. The BAS controller 12A may select, for example, a subset of the obfuscated identity information in decimal format to use as an identifier word selection index for accessing the word portion 32 to select and assign a word portion of the network identity information.

[0057] For example, the BAS controller 12A can select a subset of the obfuscated identity information by using a modulo operation on the decimal format obfuscated identity information to select a subset of the obfuscated identity information, the subset being the remaining portion of the decimal format obfuscated identity information after dividing by a predefined divisor (i.e., a modulo operation). The BAS controller 12A can use the subset of the obfuscated identity information generated via the modulo operation as an identifier word selection index for selecting and assigning an identifier word portion of the network identity information. In some examples, the divisor can correspond to the number of word portions stored in the word portion 32. For example, in an example in which the word portion 32 stores one hundred independent word portions that can be selected as word portions of the network identity information, the BAS controller 12A can use the divisor one hundred to select a subset of the obfuscated identity information, thereby generating an identifier word selection index ranging between a value of zero and a value of ninety-nine, each possible identifier word selection index thus uniquely corresponding to one of the possible word portions stored in the word portion 32. In other examples, such as when the word portion 32 stores one thousand individual word portions, the BAS controller 12A may use a divisor of one thousand to select a subset of obfuscated identity information, although even or uneven numbers of stored word portions and divisors are contemplated.

[0058] In some examples, the BAS controller 12A may select a subset of the obfuscated identity information by selecting a predefined number and position of the digits of the obfuscated identity information. For example, the BAS controller 12A may select one, two, three, four, or more digits of the obfuscated identity information from predefined positions of the obfuscated identity information, such as the most significant digit (or digits), the least significant digit (or digits), or any one or more other consecutive or non-consecutive digits of the obfuscated identity information.

[0059] In some examples, the BAS controller 12A may reduce the size of the obfuscated identity information before selecting a subset of the obfuscated identity information as the identifier word selection index. Such a size reduction operation may include, for example, an exclusive OR (XOR) operation of the upper half of the obfuscated identity information (i.e., the upper half corresponding to the most significant bits) with the lower half of the obfuscated identity information (i.e., the lower half corresponding to the least significant bits) to halve the size of the obfuscated identity information. In other examples, such a size reduction technique may include selecting a portion of the obfuscated identity information, such as an upper threshold number of bits, a lower threshold number of bits, or other size reduction techniques. In general, the BAS controller 12A may select any subset of the obfuscated identity information to be used as an identifier word selection index for selecting and assigning one of a set of word portions stored in the word portion 32 as the identifier word portion of the network identity information associated with the BAS controller 12A.

[0060] The BAS controller 12A accesses a set of predefined word portions stored in the word portion 32 to identify one of the set of predefined word portions associated with the identifier word selection index (step 68). For example, the BAS controller 12A may access a list, table, or other data structure stored in the word portion 32 to identify one of the predefined word portions associated with the identifier word selection index, such as an index having a value of sixty-six or other value. The predefined word portions stored in the word portion 32 may include only text strings in some examples. In other examples, the predefined word portions stored in the word portion 32 may include alphanumeric strings (i.e., numbers and text characters).

[0061] The BAS controller 12A allocates the identifier word portion for use in generating the network identity information as the identified word portion corresponding to the identifier word selection index (step 70). For example, the BAS controller 12A may identify the word portion corresponding to the identifier word selection index having the numerical value sixty-six as the text string "IceBox", although other text or alphanumeric strings are possible. In such an example, the BAS controller 12A allocates the identifier word portion for use in generating the network identity information as the text string "IceBox".

[0062] The BAS controller 12A selects a subset of the obfuscated identity information as the identifier digital portion for use in generating the network identity information (step 72). For example, the BAS controller 12A may apply a modular operation to the decimal format obfuscated identity information (or the reduced-size decimal format obfuscated identity information) to select the subset of the obfuscated identity information. The divisor used to select the subset via the modular operation may be, for example, a number having a value of ten, one hundred, one thousand, ten thousand, or other even or non-even divisor. For example, the BAS controller 12A may apply a modular operation to the reduced-size obfuscated identity information having a value of 8937362551294595466 using a divisor having a value of ten thousand to produce an identifier digital portion having a value of 5466. In other examples, the BAS controller 12A may select a subset of the digits of the obfuscated identity information (or the reduced-size obfuscated identity information) (i.e., without using a modulo operation) as the identifier digit operation, such as one or more of the most significant digits (or digits), one or more of the least significant digits (or digits), or any one or more other consecutive or non-consecutive digits of the obfuscated identity information (or the reduced-size obfuscated identity information).

[0063] The BAS controller 12A determines network identifier information associated with the BAS controller 12A as a combination of an identifier word portion and an identifier numeric portion (step 74). For example, the BAS controller 12A may concatenate the identifier word portion and the identifier numeric portion to generate the network identifier information. For example, the BAS controller 12A may concatenate the determined identifier word portion of "IceBox" with the determined identifier numeric portion of "5466" to generate the network identifier information as "IceBox5466", but in other examples, the BAS controller 12A may concatenate the identifier word portion and the identifier numeric portion in reverse order (e.g., "5466IceBox").

[0064] As such, the BAS controller 12A may generate network identity information derived from the obfuscated identity information associated with the BAS controller 12A. The BAS controller 12A may use the network identity information to configure the wireless communication interface for wireless communication, such as by specifying the generated network identity information as the SSID associated with the BAS controller 12A.

[0065] Figure 6 This is a diagram of using obfuscated identity information to generate verification information. Figure 4 Although the example operations are described below with respect to the BAS controller 12A, it should be understood that the example operations described below can be applicable to BAS controllers 12A-12N ( Figure 1 ) in any one or more.

[0066] As in Figure 6 , generating the verification information may include selecting a subset of the obfuscated identity information as a verification word selection index (step 76). For example, the BAS controller 12A may select the subset of the obfuscated identity information by applying a modulo operation to the decimal format obfuscated identity information (or the reduced-size obfuscated identity information) to select the subset of the obfuscated identity information. In some examples, the BAS controller 12A may select a subset of the digits of the obfuscated or reduced-size obfuscated identity information (i.e., without using a modulo operation) to determine the verification word selection index, such as one or more of the most significant digits (or digits), one or more of the least significant digits (or digits), or any one or more other consecutive or non-consecutive digits of the obfuscated identity information (or the reduced-size obfuscated identity information).

[0067] In some examples, the BAS controller 12A may further reduce the size of the reduced-size obfuscated identity information to produce the further reduced-size obfuscated identity information from which a subset of digits is selected as the verification word selection index. For example, the BAS controller 12A may perform an exclusive OR (XOR) operation on the upper half of the reduced-size obfuscated identity information and the lower half of the reduced-size obfuscated identity information to further reduce the size of the reduced-size obfuscated identity information by half. In other examples, such further reduction in the size of the reduced-size obfuscated identity information may include selecting a portion of the reduced-size obfuscated identity information, such as an upper threshold number of bits, a lower threshold number of bits, or other size reduction techniques to further reduce the size of the reduced-size obfuscated identity information.

[0068] The BAS controller 12A can access a set of word portions stored in, for example, word portion 32 to identify one of a set of predefined word portions associated with the verification word selection index (step 78), and can assign the verification word portion as the identification word portion corresponding to the selection index (step 80). For example, the BAS controller 12A can store an independent set of predefined word portions in word portion 32 that can be used to determine the verification word portion. In other examples, the BAS controller 12A can utilize the same set of predefined word portions to select both the identifier word portion and the verification word portion. In yet other examples, the BAS controller 12A can use the determined identifier word portion as the verification word portion (e.g., "IceBox" in the example above). That is, in some examples, the BAS controller 12A does not have to perform steps 76 and 78 to generate the verification word portion, but instead can use the identifier word portion as the verification word portion.

[0069] The BAS controller 12A selects a subset of the obfuscated identity information as the verification digital portion for use in generating the network identity information (step 82). For example, the BAS controller 12A may apply a modular operation to the obfuscated identity information in decimal format (or the obfuscated identity information in reduced size or further reduced size) to select the subset of the obfuscated identity information. The divisor used for the modular operation may be, for example, a number having a value of one, ten, one hundred, one thousand, ten thousand, or other even or non-even divisor. In other examples, the BAS controller 12A may select a subset of the digits of the obfuscated identity information (or the obfuscated identity information in reduced size or further reduced size) (i.e., without using a modular operation) as the verification digital portion, such as one or more of the most significant digits (or digits), one or more of the least significant digits (or digits), or any one or more other consecutive or non-consecutive digits of the obfuscated identity information (or the obfuscated identity information in reduced size or further reduced size).

[0070] The BAS controller 12A determines authentication information associated with the BAS controller 12A as a combination of the authentication word portion and the authentication number portion (step 84). For example, the BAS controller 12A may concatenate or otherwise combine the authentication word portion and the authentication number portion to generate the authentication information.

[0071] As such, the BAS controller 12A may generate authentication information derived from the obfuscated identity information associated with the BAS controller 12A. The BAS controller 12A may use the authentication information to configure the wireless communication interface for wireless communication, such as by specifying the generated authentication information as a password associated with the generated network identity information (e.g., SSID).

[0072] Figure 7 is a diagram of generating a network identifier and authentication information and transmitting the initiation communication with the BAS controller 12A ( Figure 1 and 2 ) wireless communication session. Although the example operations are described below with respect to initiating a wireless communication session with the BAS controller 12A, it should be understood that the example operations can be applicable to initiating wireless communication sessions with BAS controllers 12A-12N ( Figure 1 ) in wireless communication with any one or more of the above.

[0073] As in Figure 7 As illustrated in , the computing device 14 may receive identity information associated with the BAS controller 12A via wireless communication (step 86). For example, the BAS controller 12A may wirelessly broadcast identity information associated with the BAS controller 12A (eg, a MAC address associated with the BAS controller 12A).

[0074] The computing device obfuscates the received identity information associated with the BAS controller 12A (step 88). For example, as described above, the computing device 14 may perform obfuscation operations coordinated with obfuscation operations performed by the BAS controller 12A to generate obfuscated identity information associated with the BAS controller 12A. For example, the computing device 14 may be configured (e.g., via an application or other software routine) to apply the same cryptographic hash function or other obfuscation technique to the identity information as the BAS controller 12A applies to the identity information to arrive at the same (e.g., matching) obfuscated identity information associated with the BAS controller 12A.

[0075] The computing device 14 generates network identifier information using the obfuscated identity information (step 90) and generates verification information using the obfuscated identity information (step 92). For example, the computing device 14 may perform the same or equivalent operations as performed by the BAS controller 12A to generate the network identifier information (e.g., Figure 5 66, 68, 70, 72 and 74) and generates authentication information associated with the BAS controller 12A (e.g., Figure 6 76, 78, 80, 82 and 84).

[0076] The computing device 14 transmits a request to initiate a wireless communication session with the BAS controller 12A (step 94). For example, the computing device 14 may transmit a request to initiate a wireless communication session with the BAS controller 12A that includes network identifier information (e.g., SSID) and authentication information (e.g., password) derived from the obfuscated identity information associated with the BAS controller 12A.

[0077] Thus, the computing device 14 may generate corresponding (e.g., matching) network identifier information and authentication information using corresponding (e.g., matching) obfuscated identity information as generated by the BAS controller 12A using identity information associated with the BAS controller 12A. The computing device 14 may thus transmit a request to initiate a wireless communication session with the BAS controller 12A using the generated network identifier information and authentication information that may be verified and authenticated by the BAS controller 12A prior to establishing the wireless communication session.

[0078] The techniques of the present disclosure can thus enable a secure wireless communication session between a remote computing device used by, for example, a service engineer or other technician and any one or more BAS controllers without requiring a wired connection to initialize and configure the wireless communication. The techniques described herein can thus reduce the amount of time a service engineer or other technician spends configuring and debugging a BAS system (and, in some cases, the number of service engineers or other technicians deployed), thereby reducing the overall costs associated with debugging and maintenance operations.

[0079] Discussion of Possible Implementations

[0080] The following is a non-exclusive description of possible embodiments of the invention.

[0081] A method for generating network identifier information and authentication information for wireless communication with a controller includes accessing, by the controller, identity information associated with the controller. The method further includes obfuscating, by the controller, the identity information to produce obfuscated identity information associated with the controller, and generating, by the controller, network identifier information and authentication information associated with the controller using the obfuscated identity information. The method further includes configuring the controller for wireless communication using the generated network identifier information and the generated authentication information.

[0082] Additionally and / or alternatively, the method of the preceding paragraph may optionally include any one or more of the following features, configurations, operations and / or additional components:

[0083] Obfuscating the identity information may include obfuscating the identity information associated with the controller using a cryptographic hash function to produce obfuscated identity information.

[0084] The identity information associated with the controller may include a media access control (MAC) address associated with the controller.

[0085] The MAC address associated with the controller may include the MAC address of the controller.

[0086] The MAC address associated with the controller may include a MAC address of a wireless transceiver of the controller.

[0087] The MAC address associated with the controller may include a MAC address of a removable wireless adapter associated with the controller.

[0088] Generating network identifier information associated with the controller using the obfuscated identity information may include generating the network identifier information as a combination of an identifier word portion assigned based on the obfuscated identity information and an identifier numeric portion derived from the obfuscated identity information.

[0089] Generating the network identifier information as a combination of the identifier word portion and the identifier numeric portion may include selecting a subset of the obfuscated identity information as a word selection index.

[0090] Generating the network identifier information as a combination of the identifier word portion and the identifier numeric portion may include accessing a set of predefined word portions stored by the controller to identify one of the set of predefined word portions associated with the word selection index.

[0091] Generating the network identifier information as a combination of the identifier word portion and the identifier numeric portion may include assigning the identifier word portion of the network identifier information as one identified in the set of predefined word portions associated with the word selection index.

[0092] Generating the network identifier information as a combination of the identifier word portion and the identifier numeric portion may include deriving the identifier numeric portion as a selected subset of the obfuscated identity information.

[0093] Generating verification information associated with the controller using the obfuscated identity information may include generating the verification information as a combination of a verification word portion assigned based on the obfuscated identity information and a verification number portion derived from the obfuscated identity information.

[0094] Generating the verification information as a combination of the verification word portion and the verification number portion may include selecting a subset of the obfuscated identity information as a word selection index.

[0095] Generating the verification information as a combination of the verification word portion and the verification number portion may include accessing a set of predefined word portions stored by the controller to identify one of the set of predefined word portions associated with the word selection index.

[0096] Generating the verification information as a combination of the verification word portion and the verification number portion may include assigning the verification word portion of the network identifier information as one identified in the set of predefined word portions associated with the word selection index.

[0097] Generating the verification information as a combination of the verification word portion and the verification number portion may include deriving the verification number portion as a selected subset of the obfuscated identity information.

[0098] Generating network identifier information and authentication information associated with the controller using the obfuscated identity information may include reducing a size of the obfuscated identity information to produce reduced obfuscated identity information.

[0099] Generating network identifier information and authentication information associated with the controller using the obfuscated identity information may include generating network identifier information and authentication information associated with the controller based on reduced obfuscated identity information.

[0100] The method may further include receiving, by the controller from the remote computing device, a request to initiate a wireless communication session between the controller and the remote computing device.

[0101] The method may further include initiating, by the controller, a wireless communication session between the controller and the remote computing device in response to determining that the network identifier information and the authentication information included in the request match the generated network identifier information and the generated authentication information of the controller.

[0102] The network identifier information may include a service set identifier (SSID).

[0103] The authentication information may include a password.

[0104] A method for generating network identifier information and verification information for wireless communication with a controller includes receiving, by a computing device, identity information associated with the controller via wireless communication. The method further includes obfuscating, by the computing device, the identity information to produce obfuscated identity information associated with the controller, and generating, by the computing device, network identifier information and verification information associated with the controller using the obfuscated identity information. The method further includes transmitting, by the computing device, via wireless communication, a request to initiate a wireless communication session between the computing device and the controller, the request including the generated network identifier information associated with the controller and the generated verification information.

[0105] Additionally or alternatively, the method of the preceding paragraphs may optionally include any one or more of the following features, configurations, operations and / or additional components.

[0106] The identity information associated with the controller may include a media access control (MAC) address associated with the controller.

[0107] Generating network identifier information associated with the controller using the obfuscated identity information may include generating the network identifier information as a combination of an identifier word portion assigned based on the obfuscated identity information and an identifier numeric portion derived from the obfuscated identity information.

[0108] The controller device includes a wireless communication interface, one or more processors, and a computer readable memory. The computer readable memory is encoded with instructions that, when executed by the one or more processors, cause the controller device to access identity information associated with the controller device and obfuscate the identity information to generate obfuscated identity information associated with the controller device. The computer readable memory is further encoded with instructions that, when executed by the one or more processors, cause the controller device to generate network identifier information and verification information associated with the controller device using the obfuscated identity information, and configure the wireless communication interface for a wireless communication session using the generated network identifier information and the generated verification information.

[0109] Additionally and / or alternatively, the controller device of the preceding paragraph may optionally include any one or more of the following features, configurations, operations and / or additional components:

[0110] The wireless communication interface may be configured to interface with a wireless transceiver of the controller device.

[0111] The wireless communication interface may be configured to interface with a removable wireless adapter connected to the controller device.

[0112] The computer readable memory may be further encoded with instructions that, when executed by the one or more processors, cause the controller device to obfuscate identity information associated with the controller device using a cryptographic hash function to produce obfuscated identity information.

[0113] The identity information associated with the controller device may include a media access control (MAC) address associated with the controller.

[0114] The generated network identifier information may include a service set identifier (SSID).

[0115] The authentication information may include a password.

[0116] The computer readable memory may be further encoded with instructions that, when executed by the one or more processors, cause the controller device to generate an SSID using an obfuscated MAC address associated with the controller device as a combination of an identifier word portion assigned based on the obfuscated MAC address and an identifier numeric portion derived from the obfuscated MAC address.

[0117] The computer readable memory may be further encoded with instructions that, when executed by one or more processors, cause the controller device to generate a password using an obfuscated MAC address associated with the controller device as a combination of a verification word portion assigned based on the obfuscated MAC address and a verification number portion derived from the obfuscated MAC address.

[0118] The system may include a controller device and a computing device remote from the controller device. The computing device may include a wireless transceiver, one or more processors, and a computer-readable memory. The computer-readable memory may be encoded with instructions that, when executed by the one or more processors, cause the computing device to receive identity information associated with the controller device via the wireless transceiver, and obfuscate the identity information to generate obfuscated identity information associated with the controller device. The computer-readable memory may further be encoded with instructions that, when executed by the one or more processors, cause the computing device to generate network identifier information and verification information associated with the controller device using the obfuscated identity information, and transmit a request to initiate a wireless communication session via the wireless transceiver. The request may include the generated network identifier information and the generated verification information associated with the controller device.

[0119] Although the present invention has been described with reference to exemplary embodiments, it will be appreciated by those skilled in the art that various changes may be made and equivalents may be substituted for its elements without departing from the scope of the present invention. In addition, many modifications may be made to adapt special circumstances or materials to the teachings of the present invention without departing from its essential scope. Therefore, it is provided that the present invention is not limited to the disclosed (one or more) specific embodiments, but the present invention will include all embodiments falling within the scope of the appended claims.

Claims

1. A method for generating network identifier information and authentication information for wireless communication with a controller, the method comprising: accessing, by the controller, identity information associated with the controller; obfuscating the identity information by the controller to produce obfuscated identity information associated with the controller; generating, by the controller, the network identifier information and the authentication information associated with the controller using the obfuscated identity information; configuring, by the controller, a wireless communication interface for a wireless communication session using the generated network identifier information and the generated authentication information, so that a remote computing device can request initiation of the wireless communication session with the controller without requiring a wired connection to the controller to initialize and configure wireless communication; receiving, by the controller from a remote computing device, a request to initiate a wireless communication session between the controller and the remote computing device; as well as The wireless communication session between the controller and the remote computing device is initiated by the controller in response to determining that the network identifier information and authentication information included in the request match the generated network identifier information and the generated authentication information of the controller.

2. The method according to claim 1, Wherein obfuscating the identity information comprises obfuscating the identity information associated with the controller using a cryptographic hash function to produce the obfuscated identity information.

3. The method according to claim 1, The identity information associated with the controller includes a media access control (MAC) address associated with the controller.

4. The method according to claim 3, The MAC address associated with the controller includes one of a MAC address of the controller, a MAC address of a wireless transceiver of the controller, and a MAC address of a removable wireless adapter associated with the controller.

5. The method according to claim 1, Wherein generating the network identifier information associated with the controller using the obfuscated identity information comprises generating the network identifier information as a combination of an identifier word portion assigned based on the obfuscated identity information and an identifier numeric portion derived from the obfuscated identity information.

6. The method according to claim 5, Wherein generating the network identifier information as a combination of the identifier word portion and the identifier numeric portion comprises: selecting a subset of the obfuscated identity information as a word selection index; accessing a set of predefined word portions stored by the controller to identify one of the set of predefined word portions associated with the word selection index; as well as The identifier word portion of the network identifier information is assigned as an identified one of the set of predefined word portions associated with the word selection index.

7. The method according to claim 5, Wherein generating the network identifier information as a combination of the identifier word portion and the identifier numeric portion comprises: A subset of the obfuscated identity information is selected as the identifier digital portion.

8. The method according to claim 1, Wherein generating the verification information associated with the controller using the obfuscated identity information includes generating the verification information as a combination of a verification word portion assigned based on the obfuscated identity information and a verification number portion derived from the obfuscated identity information.

9. The method according to claim 8, The generating of the verification information as a combination of the verification word part and the verification digital part comprises: selecting a subset of the obfuscated identity information as a word selection index; accessing a set of predefined word portions stored by the controller to identify one of the set of predefined word portions associated with the word selection index; as well as The verification word portion of the verification information is assigned as an identified one of the set of predefined word portions associated with the word selection index.

10. The method according to claim 8, The generating of the verification information as a combination of the verification word part and the verification digital part comprises: A subset of the obfuscated identity information is selected as the verification digital portion.

11. The method according to claim 1, Wherein generating the network identifier information and the verification information associated with the controller using the obfuscated identity information comprises: reducing the size of the obfuscated identity information to produce reduced obfuscated identity information; as well as The network identifier information and the authentication information associated with the controller are generated based on the reduced obfuscated identity information.

12. The method of claim 1, wherein the network identifier information includes a service set identifier (SSID); and The verification information includes a password.

13. A method for generating network identifier information and authentication information for wireless communication with a controller, the method comprising: receiving, by a computing device via wireless communication, identity information associated with the controller; obfuscating, by the computing device, the identity information to produce obfuscated identity information associated with the controller; generating, by the computing device, the network identifier information and the authentication information associated with the controller using the obfuscated identity information; as well as A request to initiate a wireless communication session between the computing device and the controller is transmitted by the computing device via the wireless communication without requiring a wired connection to the controller to initialize and configure the wireless communication, the request including generated network identifier information associated with the controller and generated authentication information.

14. The method according to claim 13, wherein the identity information associated with the controller includes a media access control (MAC) address associated with the controller; and Wherein generating the network identifier information associated with the controller using the obfuscated identity information comprises generating the network identifier information as a combination of an identifier word portion assigned based on the obfuscated identity information and an identifier numeric portion derived from the obfuscated identity information.

15. A controller device comprising: Wireless communication interface; one or more processors; as well as a computer readable memory encoded with instructions that, when executed by the one or more processors, cause the controller device to: accessing identity information associated with the controller device; obfuscating the identity information to produce obfuscated identity information associated with the controller device; generating network identifier information and authentication information associated with the controller device using the obfuscated identity information; configuring the wireless communication interface for a wireless communication session using the generated network identifier information and the generated authentication information so that a remote computing device can request initiation of the wireless communication session with the controller device without requiring a wired connection with the controller device to initialize and configure wireless communication; receiving, from a remote computing device, a request to initiate a wireless communication session between the controller device and the remote computing device; as well as The wireless communication session between the controller device and the remote computing device is initiated in response to determining that the network identifier information and the authentication information included in the request match the generated network identifier information and the generated authentication information of the controller device.

16. The controller device of claim 15, Wherein the wireless communication interface is configured to interface with one or more of a wireless transceiver of the controller device and a removable wireless adapter connected to the controller device.

17. The controller device of claim 15, wherein the computer readable memory is further encoded with instructions that, when executed by the one or more processors, cause the controller device to: The identity information associated with the controller device is obfuscated using a cryptographic hash function to produce the obfuscated identity information.

18. The controller device of claim 15, wherein the identity information associated with the controller device includes a media access control (MAC) address associated with the controller device; Wherein the generated network identifier information includes a service set identifier (SSID); The verification information includes a password; and wherein the computer readable memory is further encoded with instructions that, when executed by the one or more processors, cause the controller device to: generating the SSID using an obfuscated MAC address associated with the controller device as a combination of an identifier word portion assigned based on the obfuscated MAC address and an identifier numeric portion derived from the obfuscated MAC address; and The password is generated using the obfuscated MAC address associated with the controller device as a combination of an authentication word portion assigned based on the obfuscated MAC address and an authentication number portion derived from the obfuscated MAC address.

19. A system for wireless communication, comprising: The controller device as claimed in claim 15; as well as A remote computing device remote from the controller device, the remote computing device comprising: Wireless transceiver; one or more processors; and a computer-readable memory encoded with instructions that, when executed by the one or more processors of the remote computing device, cause the remote computing device to: receiving, via the wireless transceiver, identity information associated with the controller device; obfuscating the identity information to produce obfuscated identity information associated with the controller device; generating the network identifier information and the authentication information associated with the controller device using the obfuscated identity information; and A request to initiate a wireless communication session is transmitted via the wireless transceiver, the request including the generated network identifier information associated with the controller device and the generated authentication information.

Images