Network controllers, control systems, methods, and procedures products that grant access permissions

Abstract

A network controller (102) is disclosed for granting access rights to at least one device in a set of devices (110, 130) to a device and / or application (120). The set of devices (110, 130) includes a controllable device (130) and a control device (110), wherein the control device (110) includes a user input element (112) configured to receive user input, and wherein the control device (110) is configured to generate an input signal (114) based on the received user input. The network controller (102) includes: a communication unit (104) configured to receive an access request signal (124) from a device and / or application (120) and an input signal (114) from a control device (110); and a processor (106) configured to switch the network controller (102) from a control mode to a configuration mode upon receiving the access request signal (124), wherein the processor (106) is configured to control the controllable device (130) based on the input signal (114) if the network controller (102) is in the control mode, wherein the processor (106) is configured to grant access permission to the device and / or application (120) upon receiving the input signal (114) if the network controller (102) is in the configuration mode.

Description

Technical Field

[0001] This invention relates to a network controller for granting access rights to at least one device in a set of devices to devices and / or applications. The invention further relates to a control system including the network controller, a control device, and a controllable device.

[0002] The present invention further relates to a method for granting access rights to at least one device in a set of devices to a device and / or a software application; and to a computer program product for performing the method. Background Technology

[0003] Connected home and office systems enable users to control devices such as lights, entertainment systems, and heating systems using one or more controllable devices, such as smartphones, switches, remote controls, and other control devices. In some systems, if a user wants to add a new device to the network or grant an application network access to the device, the user is required to physically press a button on a central network controller. This central network controller can be, for example, a central (home) controller, a bridge, or a router. Upon receiving the user's physical input, network access to the device is granted to the new device or application. As a result, if the user does not provide physical input, the (remote) application or device cannot join the device's network. By ensuring the user is physically present on the device's network, system security is enhanced.

[0004] EP 2665237 A1 discloses a method for granting access rights to a wireless short-range communication network managed by an access point by receiving input from a user via a user interface when the host device is within the coverage area of ​​the wireless short-range communication network. Summary of the Invention

[0005] The inventors have recognized that providing physical user input is cumbersome in many situations. Typically, a central network controller (e.g., a router or bridge) is located in a hard-to-access and invisible location (e.g., in a cabinet / on top of a cabinet, inside an instrument cabinet, in a basement, etc.). Therefore, providing physical user input can be cumbersome. Thus, the object of this invention is to provide an improved and user-friendly way to grant new devices or software applications access to a device's network.

[0006] According to a first aspect of the invention, this objective is achieved by a network controller for granting access rights to at least one of a set of devices to devices and / or applications, wherein the set of devices includes controllable devices and control devices, wherein the control devices include user input elements configured to receive user input, and wherein the control devices are configured to generate input signals based on the received user input.

[0007] The network controller includes:

[0008] - A communication unit configured to receive access request signals from devices and / or applications, and to receive input signals from control devices, and

[0009] - A processor is configured to: switch the network controller from control mode to configuration mode upon receiving an access request signal, wherein the processor is configured to: control controllable devices based on input signals if the network controller is in control mode, wherein the processor is configured to: grant access permissions to devices and / or applications upon receiving input signals if the network controller is in configuration mode.

[0010] A network controller (e.g., a bridge, central home control system, router, gateway, etc.) receives access request signals from devices and / or software applications. The network controller is further configured to receive input signals from control devices (e.g., switches) based on user input received via user input elements (e.g., buttons). The network controller's processor is further configured to switch the network controller from control mode to configuration mode upon receiving an access request signal. When the network controller is in control mode, it controls the controllable device (e.g., a lighting unit) based on the input signal, and when the network controller is in configuration mode, the processor grants access permission to the device and / or application upon receiving the input signal. Thus, the control device has a dual function: it can be used to control controllable devices based on (physical) user input, and it can be used to grant access permission to new devices and / or applications. Therefore, the user does not need to provide physical user input at the network controller. Instead, the user can provide (physical) user input at the control device (e.g., a light switch), thereby granting access permission. Such a control device is typically located in a more accessible location than the network controller. Therefore, an improved and user-friendly way is provided to grant network access rights to new devices or software applications.

[0011] Access permissions provide access to one or more devices in a device set. Access permissions can provide access to control and / or configure at least one device in the device set. For example, access permissions can provide access to control and / or configure that controllable device, or provide access to control and / or configure another controllable device in the device set. This enables devices and / or applications to control and / or configure the controllable devices. Additionally or alternatively, access permissions can, for example, provide access to a control device, or provide access to another control device in the device set. This enables devices and / or applications to, for example, configure the control device.

[0012] The network controller may include a second user interface configured to receive input from a second user, and the network controller may be configured to grant access permissions to a device and / or application upon receiving the second user input. The network controller may include the second user interface (e.g., a button) through which a user can grant access permissions to a new device and / or application.

[0013] The processor can be further configured to send control commands to controllable devices based on input signals when the network controller is in control mode.

[0014] The processor can be configured to switch back to control mode after a predetermined time period. This allows users to provide user input to grant access permissions for the predetermined time period.

[0015] The processor can be further configured to switch the network controller back to control mode after receiving an input signal or after granting access permission. This allows users to use the control device in "normal" mode, where the controllable device is controlled based on user input.

[0016] The processor can be further configured to transmit a response signal to the device and / or application, wherein the response signal includes information indicating that access permission has been granted. The processor can transmit the response signal via a communication unit. This enables the processor to notify a new device that access permission has been granted. Alternatively, no response signal may be transmitted, and access permission may be granted without transmission.

[0017] The processor can be further configured to access memory, which is configured to store access data indicating access permissions for devices and applications, and the processor can be configured to grant access permissions to devices and / or applications by updating the access data in the memory. The memory can be located in the network controller, or it can be located remotely to the network controller and accessible via a network and / or the Internet. Access permissions are granted by updating the access permissions for new devices and / or applications in the memory.

[0018] The control device may include additional user input elements configured to receive additional user input, and the control device may be configured to generate additional input signals based on the received additional user input, and the communication unit may be configured to receive the additional input signals. The processor may be configured to control the controllable device based on the additional input signal if the network controller is in control mode, and the processor may be configured to grant access permissions to the device and / or application when the additional input signal has been received if the network controller is in configuration mode. Therefore, if the control device includes multiple user input elements, it is not important whether the user provides user input to grant access permissions to a new device via a user input element or via another user input element.

[0019] The device set may include multiple control devices, and the processor may be configured to obtain information indicating the location of the multiple control devices relative to the location of a user requesting access rights for the device and / or application. The processor may be configured to switch to configuration mode for input signals received from the first control device based on the location of the first and second control devices relative to the user's location, and remain in operation mode for input signals received from the second control device. The processor may, for example, be configured to select the control device closest to the user from among the multiple control devices. When a user has multiple control devices (e.g., remote control devices, (light) switches, etc.), selecting the nearest control device—for which the network controller switches to configuration mode—can be beneficial. This increases system availability, and it allows another user (who is not attempting to obtain access rights for the control device and / or application) to control that controllable device / another controllable device using another control device.

[0020] The controllable device can be a lighting device, and the application can be a lighting control application. Additionally or alternatively, the control device can be a light switch, and the controllable device can include a light source configured to be controlled based on user input received via a user input element of the control device.

[0021] According to a second aspect of the invention, this objective is achieved by a control system comprising:

[0022] -A network controller according to any of the preceding claims,

[0023] -Including a control device configured to receive user input elements, and

[0024] - It is configured as a controllable device that is controlled based on input signals.

[0025] According to a third aspect of the invention, this objective is achieved by a method for granting access rights to at least one device in a set of devices to a device and / or an application via a network controller, wherein the set of devices includes controllable devices and control devices, wherein the control devices include user input elements configured to receive user input, and wherein the control devices are configured to generate input signals based on the received user input, wherein the method includes:

[0026] - Receive access request signals from devices and / or applications.

[0027] - Receive input signals from the control device, and

[0028] - Upon receiving an access request signal, switch the network controller from control mode to configuration mode.

[0029] - If the network controller is in control mode, it controls the controllable device based on the input signal, and

[0030] - If the network controller is in configuration mode, it grants access permissions to the device and / or application upon receiving an input signal.

[0031] The method may further include presenting a notification via a user interface to indicate that access permissions have been granted to the device and / or application. Notifying the user that access permissions have been granted can be beneficial.

[0032] The method may further include presenting a notification via a user interface to inform the user control device that it is configured to receive user input for granting access permissions. Notifying the user control device that it is ready to receive user input to grant access permissions can be beneficial.

[0033] According to a fourth aspect of the invention, this objective is achieved by a computer program product for a computing device, the computer program product comprising computer program code, which, when the computer program product is run on a processing unit of the computing device, is used to perform any of the methods.

[0034] It should be understood that control systems, methods, and computer program products may have similar and / or the same embodiments and advantages as the control systems described above, and vice versa. Attached Figure Description

[0035] Referring to the accompanying drawings, the above and additional objects, features, and advantages of the disclosed systems, devices, and methods will be better understood through the following illustrative and non-limiting detailed description of embodiments of the apparatus and methods, in which: Figure 1 An embodiment of a system including a network controller is illustrated schematically, the network controller being used to grant access rights to at least one device in a set of devices to devices and / or applications;

[0036] Figure 2 The illustration schematically shows a device including a user interface. Figure 1 Implementation examples of the system;

[0037] Figure 3 An embodiment of a system for determining the position of a device relative to a plurality of control devices is schematically illustrated; and

[0038] Figure 4 A method for granting access rights to at least one device in a set of devices to a device and / or an application via a network controller is illustrated schematically.

[0039] All accompanying drawings are schematic and not necessarily to scale, and generally only show the parts necessary to illustrate the invention, wherein other parts may be omitted or merely suggested. Detailed Implementation

[0040] Figure 1 An embodiment of a control system 100 is schematically illustrated. The control system 100 includes a network controller 102 for granting access rights to at least one device in a set of devices 110, 130 to a device 120 and / or an application (which may be running on device 120). The device sets 110, 130 include a controllable device 130 and a control device 110, wherein the control device 110 includes a user input element 112 configured to receive user input. The control device 110 is configured to generate an input signal 114 based on the received user input. The network controller 102 includes a communication unit 104 configured to receive an access request signal 124 from the device 120 and / or the application, and to receive the input signal 114 from the control device 110. The control device 110 further includes a processor 106 (e.g., a microprocessor, circuitry, microchip, etc.) configured to switch the network controller 102 from a control mode to a configuration mode upon receiving the access request signal 124. Processor 106 is configured to control controllable device 130 based on input signal 114 if network controller 102 is in control mode. Processor 106 is also configured to grant access permissions to device 120 and / or an application when input signal 114 has been received if network controller 102 is in configuration mode. Access permissions can provide access to control and / or configuration of at least one device in the device set.

[0041] Network controller 102 can be any type of device configured to grant access rights to new devices and / or new applications, enabling the new device / software application to control / configure one or more of a set of devices connected via a (wireless) network (e.g., Wi-Fi network, Zigbee network, Bluetooth mesh network, etc.). Network controller 102 can be a central controller (such as a bridge, router, central home controller, gateway, etc.). Network controller 102 can access memory configured to store access data indicating access rights for devices and applications. Processor 106 can be configured to grant access rights to device 110 and / or applications by updating the access data in memory. Memory 108 can be located within network controller 102, or memory can be located remotely from network controller 102 and accessible via a network and / or the Internet.

[0042] The network controller is configured to grant access rights to one or more devices in a set of devices, including device 102 and / or an application. The set of devices includes controllable device 130 and control device 110. These devices are part of a (wireless) network. Controllable device 130 can be any type of networked controllable device (such as lighting equipment, thermostats, HVAC controllers, fans, speakers, video presentation devices, etc.). Controllable device 130 can be a device configured to adjust environmental parameters (such as light, temperature, sound, etc.) in the environment in which it is located.

[0043] The controllable device 130 includes a communication unit (not shown) configured to receive control commands and a processing unit (not shown) configured to control the controllable device based on the received control commands. The controllable device 130 may be configured to receive control commands (e.g., lighting control commands) from a network controller 102, and these control commands may be based on input signals 114 sent by the control device 110 to the network controller 102. Alternatively or additionally, the controllable device 130 may be configured to receive control commands (or input signals indicating control commands) directly from the control device 110.

[0044] The controllable device 130 may be an illumination unit comprising one or more light sources. The illumination unit may be an LED bulb, LED strip, TLED, light tile, etc. The illumination unit may include a control unit (such as a microcontroller (not shown)) to control the light output generated by one or more light sources (e.g., LED light sources) based on received illumination control commands. The illumination control commands may include illumination control instructions for controlling the light output (such as the color, intensity, saturation, beam size, beam shape, etc. of one or more light sources).

[0045] Control device 110 is configured to control controllable device 130. Control device 110 includes a user input element 112 configured to receive user input, and a processing unit (not shown) configured to generate an input signal 114. User input element 112 may be, for example, a press or touch button. User input element 112 may be, for example, a touch-sensitive surface. Alternatively, user input element 112 may be a gesture sensor (e.g., a camera, a distance sensor such as an ultrasonic sensor, an RF sensor, etc.) configured to detect gestures (e.g., a user's waving motion).

[0046] Network controller 102 includes a communication unit 104 configured to receive access request signals from device 130 and / or an application, and to receive input signals from control device 110. Communication unit 104 can be configured to communicate via any wired or wireless communication protocol (e.g., Ethernet, DALI, Bluetooth, Wi-Fi, Li-Fi, Thread, ZigBee, etc.). Communication unit 104 can be configured to communicate directly or indirectly with control device 110, new device 120 (which may be running an application), and controllable device 130. Communication unit 104 can be configured to communicate via multiple communication protocols, such as communicating with device and / or application 120 via Wi-Fi, and communicating with control device 110 and controllable device 130 via Zigbee and / or Bluetooth. This allows network controller 102 to act as a bridge or gateway between device 120 and the device sets 110, 130. Additionally or alternatively, the control device 110 may be configured to communicate with the controllable device via a first protocol (e.g., via Zigbee), and the communication unit of the network controller 102 may be configured to communicate with the controllable device 130 via a second protocol (e.g., via Bluetooth).

[0047] Processor 106 can be configured to set controllable device 130 to configuration mode (when processor 106 is already set to configuration mode). When controllable device 130 is set to configuration mode, it can receive input signals from control device 110 (e.g., via a first communication protocol) and transmit them to network controller 102 (e.g., via a second communication protocol) to notify processor 106 that the user has provided user input at user input element 112 of control device 110.

[0048] Device 120 is configured to transmit a request signal to network controller 102. An application may run on device 120, or it may run on an external device (e.g., via an internet connection), and the application may generate an access request signal, which the device running the application may then transmit to network controller 102. The processor 106 of network controller 102 is configured to switch network controller 102 from control mode to configuration mode upon receiving an access request signal.

[0049] When device and / or application 120 needs to connect to one or more devices in the device set, an access request signal may be transmitted, for example, to network controller 102. A connection may be required to control or configure one or more of the device sets 110, 130. The transmission of the request signal from the device and / or application may be initiated by the application (which may be running on the device) or by a user operating device / software 120. Controllable device 130 may be, for example, a lighting unit, and device and / or application 120 may request control of the lighting unit. The processor 106 of network controller 102 may then grant access permission to device and / or application 120.

[0050] In control mode, processor 106 controls controllable device 130 based on input signal 114. For example, processor 106 can send control command 134 to controllable device 130 based on input signal 114. Alternatively, processor 106 can be configured to instruct control device 110 (e.g., by sending instruction signals to control device 110) to send control commands (not shown) to controllable device 130. When network controller 102 is switched to configuration mode, processor 106 of network controller 102 can instruct control device 110 (e.g., by sending instruction signals to control device 110) to send input signals to network controller 102 (instead of sending control commands to controllable device 130).

[0051] In configuration mode, when input signal 114 has been received, processor 106 grants access permission to the device and / or application. Therefore, a user can provide user input at input element 112 of control device 110 to grant access permission to a new device and / or application 120 via the same input element 112 (typically) used to control controllable device 130. Processor 106 can grant access permission, for example, by updating access data in memory 108. When in configuration mode, processor 106 can refrain from controlling controllable devices based on input signals.

[0052] Alternatively or additionally, processor 106 may grant access permission to a new device and / or application 120 by, for example, transmitting a response signal to the device and / or application 120. The response signal may include information indicating that access permission has been granted to the device and / or application 120. Alternatively or additionally, the response signal may include access key and / or address information for one or more of network device 102 and / or device sets 110, 130. The access key and / or address information enables the new device and / or application 120 to access network controller 102 and / or device sets 110, 130, respectively. The processor may transmit the response signal via communication unit 104.

[0053] The processor 106 can be further configured to switch the network controller 102 back to control mode after receiving the input signal 114 from the control device 110 or after granting access permission to the device 120.

[0054] The network controller may include a second user interface 140 co-located with the network controller, the network controller including a second user input element configured to receive second user input. The processor 106 of the network controller 106 may be further configured to grant access permission to the device and / or application 120 upon receiving the second user input.

[0055] Processor 106 can be configured to switch back to control mode within a predetermined time period. The duration of the predetermined time period can be predefined, user-defined, defined by device and / or application 120, defined by network controller 102, etc. The duration can be selected based on the intended use of the network controller. For example, the duration can be longer in system 100 installed in a larger building compared to system 100 installed in a smaller building. The predetermined time period can have a duration that allows the user to move to control device 110 and provide user input (e.g., 10 seconds, 30 seconds, etc.).

[0056] The control device 110 may include additional user input elements configured to receive additional user input. This has already been... Figure 2 The image is shown in the middle. Figure 2 A system 200 is shown that includes a control device 210, which includes a (first) input element 212 and an additional input element 214. The control device 210 can be configured to generate additional input signals based on the received additional user input. The communication unit 104 of the network controller 102 can be configured to receive the additional input signals, and the processor 106 can be configured to control the controllable device 130 based on the additional input signals if the network controller is in control mode. Figure 2(Not shown in the image). Processor 106 can be configured to grant access to devices and / or applications 120, 220 when the additional input signal has been received, if network controller 102 is in configuration mode. Therefore, a user can provide input at input element 212 or additional input element 214 to grant access to devices and / or applications 120, 220. Alternatively, processor 106 can be configured to grant access to devices and / or applications 120, 220 only when an input signal has been generated (when (first) input element 212 has been actuated); and to control controllable device 130 when additional user input element 214 has been actuated. An example of a user interface has been provided in [the image / document / etc.]. Figure 2 The diagram shows a virtual representation 210' of the control device 210. Figure 2 The illustration further illustrates that user input for providing access permissions should be provided by actuating (first) user input element 212.

[0057] The processor 106 can be further configured to switch to configuration mode when multiple input signals are received within a predetermined time period. For example, a user may be asked to provide two presses on a button on the control device 110. Alternatively, the input signals may indicate that the user has provided multiple inputs at the user input element 112, and the processor 106 can be configured to switch to configuration mode only when the input signals indicate that the user has provided multiple inputs at the user input element 112 (e.g., multiple button presses within a predetermined time period).

[0058] Devices 120 and 220 may include a user interface configured to provide notifications indicating that access permissions have been granted to the device and / or application. Additionally or alternatively, the user interface may be configured to provide notifications informing the user that the device 120 or 220 has been set to receive user input for obtaining access permissions. For example, the notifications may be audio notifications (e.g., sound), haptic notifications (e.g., vibration), visual notifications (e.g., displayed on a monitor), etc.

[0059] The device set may include multiple control devices, and processor 106 may be configured to obtain information indicating the location of the multiple control devices relative to the location of a user requesting access permission for the device and / or application 120. Processor 106 may be further configured to: switch to a configuration mode for an input signal received from the first control device based on the location of the first and second control devices relative to the user's location, and remain in an operating mode for an input signal received from the second control device. (See reference...) Figure 3 The following examples illustrate how the positions of multiple control devices relative to the user can be obtained in different ways. Figure 3The diagram illustrates a system 300, which includes a device 320 requesting access permission, a first control device 310a including a first input element 312a, and a second control device 310b including a second input element 312b. In a first example, the user's position relative to the first and second control devices 310a, 310b can be determined based on location information received from an indoor positioning system. The indoor positioning system can determine the location of the control devices 310a, 310b and device 320 that the user can operate. In another example, the control devices 310a, 310b may have been assigned to corresponding areas 350, 352 in a space (e.g., a living room and a kitchen), and information about the area where device 320 is located can be obtained by a processor 106 (e.g., from an indoor positioning system, from the user, from a home control system, etc.).

[0060] Figure 4 A method 400 for granting access rights to at least one device in a set of devices to a device and / or an application via a network controller is schematically illustrated. The set of devices includes controllable devices and control devices, wherein the control devices include user input elements configured to receive user input, and wherein the control devices are configured to generate input signals based on the received user input. Method 400 includes:

[0061] - Receive 402 input signal from control device,

[0062] - Receive a 404 Access Request signal from the device and / or application.

[0063] - Upon receiving an access request signal, switch the network controller from control mode (406) to configuration mode.

[0064] - If the network controller is in control mode, it controls the 408 controllable devices based on the input signals, and

[0065] - If the network controller is in configuration mode, it grants 410 access permission to the device and / or application upon receiving an input signal.

[0066] Method 400 may further include the following steps: determining whether the 405 network controller is in control mode or configuration mode.

[0067] When the computer program product is running on the processing unit of a computing device (such as the processor 106 of the network controller 102), method 400 can be executed by the computer program code of the computer program product.

[0068] It should be noted that the above embodiments are illustrative and not limiting of the invention, and those skilled in the art will be able to devise many alternative embodiments without departing from the scope of the appended claims.

[0069] In the claims, any reference numerals placed between parentheses should not be construed as limiting the claims. The use of the verb "comprising" and its variations does not exclude the presence of elements or steps other than those stated in the claims. The article "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several different elements, and by means of a suitably programmed computer or processing unit. In an apparatus claim enumerating several means, several of these means may be embodied by the same hardware item. The mere fact that certain measures are referenced in mutually different dependent claims does not indicate that a combination of these measures cannot be used advantageously.

[0070] The various aspects of this invention can be implemented in a computer program product, which may be a collection of computer program instructions stored on a computer-readable storage device and executable by a computer. The instructions of this invention can be any interpretable or executable code mechanism, including but not limited to scripts, interpretable programs, dynamic link libraries (DLLs), or Java classes. The instructions may be provided as a complete executable program, a partial executable program, as a modification (e.g., an update) of an existing program, or as an extension (e.g., a plug-in) of an existing program. Furthermore, portions of the processing of this invention may be distributed across multiple computers or processors or even the “cloud.”

[0071] Storage media suitable for storing computer program instructions include all forms of non-volatile memory, including but not limited to EPROM, EEPROM, and flash memory devices, disks such as internal and external hard disk drives, removable disks, and CD-ROMs. Computer program products can be distributed on such storage media or made available for download via HTTP, FTP, email, or through a server connected to a network (such as the Internet).

Claims

1. A network controller (102) for granting access permission to a device and / or application (120) to at least one device in a set of devices (110, 130), wherein the set of devices (110, 130) includes a controllable device (130) and a control device (110), wherein the control device (110) includes a user input element (112) configured to receive user input, and wherein the control device (110) is configured to generate an input signal (114) based on the received user input. The network controller (102) includes: - A communication unit (104) is configured to receive an access request signal (124) from the device and / or application (120) and to receive the input signal (114) from the control device (110), and - A processor (106) is configured to: upon receiving the access request signal (124), switch the network controller (102) from a control mode to a configuration mode, wherein the processor (106) is configured to: if the network controller (102) is in the control mode, control the controllable device (130) based on the input signal (114), wherein the processor (106) is configured to: if the network controller (102) is in the configuration mode, grant access permissions to the device and / or application (120) upon receiving the input signal (114), wherein the access permissions provide access to control and / or configuration of at least one device in the set of devices (110, 130).

2. The network controller (102) according to claim 1, wherein the network controller (102) includes a second user interface (140) configured to receive second user input, and wherein the network controller (102) is configured to grant access permission to the device and / or application (120) upon receiving the second user input.

3. The network controller (102) according to claim 1 or 2, wherein the processor (106) is further configured to: when the network controller (102) is in the control mode, send a control command to the controllable device (130) based on the input signal (114).

4. The network controller (102) according to claim 1 or 2, wherein the processor (106) is configured to switch back to the control mode after a predetermined time period.

5. The network controller (102) according to claim 1 or 2, wherein the processor (106) is further configured to switch the network controller (102) back to the control mode after receiving the input signal (114) or after granting access permission.

6. The network controller (102) according to claim 1 or 2, wherein the processor (106) is further configured to transmit a response signal to the device and / or application, wherein the response signal includes information indicating that access permission has been granted.

7. The network controller (102) according to claim 1 or 2, wherein the processor (106) is further configured as an access memory (108), the memory (108) being configured to store access data indicating access permissions for devices and applications, and wherein the processor (106) is configured to grant access permissions to the devices and / or applications (120) by updating the access data in the memory (108).

8. The network controller (102) according to claim 1 or 2, wherein the control device (110) includes an additional user input element configured to receive additional user input, and wherein the control device (110) is configured to generate additional input signals based on the received additional user input, and wherein the communication unit (104) is configured to receive the additional input signals. The processor (106) is configured to control the controllable device (130) based on the additional input signal if the network controller (102) is in the control mode, and the processor (106) is configured to grant access permission to the device and / or application (120) when the additional input signal (114) has been received if the network controller (102) is in the configuration mode.

9. The network controller (102) according to claim 1 or 2, wherein the device set (110, 130) includes a plurality of control devices, and wherein the processor (106) is configured to obtain information indicating the location of the plurality of control devices relative to the location of a user requesting access permission for the device and / or application (120), and wherein the processor (106) is configured to: switch to the configuration mode for an input signal received from the first control device based on the location of the first and second control devices relative to the user's location, and remain in the operation mode for an input signal received from the second control device.

10. The network controller (102) according to claim 1 or 2, wherein the controllable device (130) is a lighting device, and wherein the application is a lighting control application.

11. A control system (100), comprising: -The network controller (102) according to any of the preceding claims, - Control device (110), including user input element (112) configured to receive user input, and - A controllable device (130) is configured to be controlled based on an input signal (114).

12. A method (400) for granting access rights to at least one device in a set of devices via a network controller, wherein the set of devices includes controllable devices and control devices, wherein the control devices include user input elements configured to receive user input, and wherein the control devices are configured to generate input signals based on the received user input, wherein the method (400) includes: - Receive the input signal (402) from the control device. - Receive an access request signal (404) from the device and / or application. - Upon receiving the access request signal, the network controller is switched from control mode (406) to configuration mode. - If the network controller is in the control mode, then the controllable device is controlled (408) based on the input signal, and - If the network controller is in the configuration mode, it grants access permissions to the device and / or application upon receiving the input signal, wherein the access permissions provide access to control and / or configuration of at least one device in the set of devices.

13. The method (400) according to claim 12, further comprising: - Provide notifications via the user interface to indicate that access permissions have been granted to the device and / or application.

14. The method (400) according to claim 12, further comprising: - Provide notifications via the user interface to inform the user that the control device is configured to receive user input for obtaining access permissions.

15. A computer program product for a computing device, the computer program product comprising computer program code, wherein when the computer program product is run on a processing unit of the computing device, the computer program code performs the method (400) of claim 12.

Images