Operating electrical system with damaged master controller

Abstract

An electrical device of an electrical system may include a communication module and a controller, where the controller is configured to receive a first communication from a master controller over a default communication network via the communication module, and where the first communication includes a first instruction. The controller may also be configured to determine that the first instruction falls outside of the acceptable operating parameter, and generate a second instruction to replace the first instruction, where the second instruction falls within the acceptable operating parameter. The controller may be further configured to use the communication module to send a second instruction to the additional electrical device over the alternative communication network, wherein the second instruction controls operation of the additional electrical device through subsequent communication from the main controller.

Description

Technical Field

[0001] The present disclosure relates generally to electrical systems and, more particularly, to systems, methods, and apparatus for operating an electrical system with a damaged primary controller. Background Art

[0002] Certain types of electrical systems are controlled by a master controller. For example, some lighting systems include multiple light fixtures that are controlled by a master controller. In this case, the master controller controls the operation of multiple light fixtures (or a subset thereof) within the lighting system. Sometimes, the master controller may be compromised (e.g., hacked, sending erratic commands). When the master controller is compromised, the master controller may control one or more light fixtures in the lighting system in such a way that reduces the effectiveness of the lighting system and / or reduces the reliability of one or more light fixtures within the lighting system. Summary of the invention

[0003] In general, in one aspect, the present disclosure relates to an electrical device of an electrical system. The electrical device may include a communication module configured to receive instructions from a main controller of the electrical system through a default communication network, and wherein the communication module is further configured to communicate with an additional electrical device of the electrical system through an alternative communication network. The electrical device may also include a device controller communicatively coupled to the communication module. The device controller may be configured to receive a first communication from the communication module, wherein the first communication is received by the communication module from the main controller through the default communication network, and wherein the first communication includes a first instruction. The device controller may also be configured to determine that the first instruction of the first communication falls outside a plurality of acceptable operating parameters. The device controller may further be configured to generate a second instruction to replace the first instruction, wherein the second instruction falls within a plurality of acceptable operating parameters. The device controller may also be configured to send a second instruction to the additional electrical device through an alternative communication network using the communication module, wherein the second instruction controls the operation of the additional electrical device through subsequent communications from the main controller.

[0004] In other aspects, the present disclosure relates to a method for operating an electrical system with a damaged master controller. The method may include receiving a first communication from the master controller by a first electrical device of the electrical system via a default communication network, wherein the first communication includes a first instruction. The method may also include determining that the first instruction of the first communication falls outside of a plurality of acceptable operating parameters. The method may further include generating a second instruction to replace the first instruction. The method may also include sending a second instruction to a second electrical device of the electrical system via an alternative communication network, wherein the second instruction controls the operation of the second electrical device via a subsequent communication from the master controller.

[0005] These and other aspects, objects, features and embodiments will be apparent from the following description and appended claims. BRIEF DESCRIPTION OF THE DRAWINGS

[0006] The accompanying drawings illustrate only example embodiments and therefore should not be considered to limit the scope, as the example embodiments may allow other equally effective embodiments. The elements and features shown in the drawings are not necessarily to scale, instead emphasis is placed on clearly illustrating the principles of the example embodiments. Additionally, some dimensions or positions may be exaggerated to help convey these principles visually. In the accompanying drawings, reference numerals represent similar or corresponding, but not necessarily identical, elements.

[0007] Figure 1 A block diagram of an electrical system is shown, in accordance with certain example embodiments.

[0008] Figure 2 According to some example embodiments, Figure 1 Block diagram of the electrical equipment of the electrical system.

[0009] Figure 3 A computing device is shown in accordance with certain example embodiments.

[0010] Figure 4 A flow chart of a method for operating an electrical system with a damaged primary controller is shown, in accordance with certain example embodiments.

[0011] Figure 5 A flow chart is shown of another method for operating an electrical system with a damaged primary controller, in accordance with certain example embodiments.

[0012] Figure 6 A system for operating a plurality of electrical devices of an electrical system with a damaged primary controller is shown in accordance with certain example embodiments. DETAILED DESCRIPTION

[0013] In general, example embodiments provide systems, methods, and devices for operating an electrical system with a damaged master controller. Example embodiments may provide several benefits. Such benefits may include, but are not limited to, increased safety, ease of installation, increased reliability, longevity of electrical equipment, user control, and simple configurability. Example embodiments may be used with any electrical system including any of several different electrical devices controlled by one or more master controllers. Examples of such electrical systems may include, but are not limited to, a lighting system with multiple lamps, a sensor system with multiple sensor devices, a communication system with multiple communication devices, and a security system with multiple security devices (e.g., cameras, spotlights, microphones, speakers).

[0014] The electrical system that example embodiments can be used together can be located in one or more of any one of several environments. The example of such environment can include but is not limited to indoor, outdoor, parking garage, stadium, corridor, recreation room, office space, manufacturing plant, warehouse and storage facility, any of which can be climate controlled or non-climate controlled. In some cases, the example embodiments discussed herein can be used in any type of hazardous environment, including but not limited to hangar, drilling rig (for oil, gas or water), production rig (for oil or gas), refinery, chemical plant, power plant, mining operation, wastewater treatment facility and steel mill.

[0015] In the foregoing figures showing example embodiments of operating an electrical system with a damaged master controller, one or more of the components shown may be omitted, repeated, and / or replaced. Therefore, the example embodiments of operating an electrical system with a damaged master controller should not be considered limited to the specific arrangements of components shown in any of the figures. For example, features shown in one or more figures or described with respect to one embodiment may be applied to another embodiment associated with a different figure or description.

[0016] In certain example embodiments, an electrical system operated with a compromised master controller is subject to meeting certain standards and / or requirements. For example, the National Electrical Code (NEC), the National Electrical Manufacturers Association (NEMA), the International Electrotechnical Commission (IEC), the Federal Communications Commission (FCC), Underwriters Laboratories (UL), and the Institute of Electrical and Electronics Engineers (IEEE) have established standards for electrical enclosures, wiring, and electrical connections. The use of the example embodiments described herein satisfies (and / or allows the electrical system (including its components) to meet) such standards where applicable.

[0017] If a component in a figure is described but not explicitly shown or labeled in the figure, the label used for the corresponding component in another figure can be inferred to be the component. Conversely, if a component in a figure is labeled but not described with respect to the figure, the description of such component can be substantially the same as the description of the corresponding component in another figure. The numbering scheme for various components in the figures herein is such that each component is a three-digit number and the corresponding components in the other figures have the same last two digits.

[0018] Furthermore, unless explicitly stated, a statement that a particular embodiment (e.g., as shown in the figures herein) does not have a particular feature or component does not mean that such embodiment cannot have such feature or component. For example, for the purposes of current or future claims herein, a feature or component described as not included in the example embodiments shown in one or more specific figures can be included in one or more claims corresponding to the one or more specific figures herein.

[0019] Example embodiments of operating an electrical system with a damaged main controller will be described more fully below with reference to the accompanying drawings, in which example embodiments of operating an electrical system with a damaged main controller are shown. However, operating an electrical system with a damaged main controller can be implemented in many different forms and should not be construed as limited to the example embodiments set forth herein. Rather, these example embodiments are provided so that this disclosure will be thorough and complete and will fully convey the scope of operating an electrical system with a damaged main controller to those of ordinary skill in the art. For consistency, similar, but not necessarily identical, elements (sometimes also referred to as components) are represented by similar reference numerals in the various figures.

[0020] Terms such as "first," "second," "above," "below," "inside," "outside," "distal," "proximal," "end," "top," "bottom," "upper," "lower," "side," "left," "right," "front," "rear," and "inside," when present, are used only to distinguish one component (or a portion of a component or a state of a component) from another component. Such terms are not meant to express a preference or a particular orientation. Such terms are not meant to limit embodiments of operating an electrical system with a compromised main controller. In the following detailed description of example embodiments, numerous specific details are set forth in order to provide a more thorough understanding of the invention. However, it will be apparent to one of ordinary skill in the art that the invention may be practiced without these specific details. In other instances, well-known features are not described in detail to avoid unnecessarily complicating the description.

[0021] Figure 1 A block diagram of an electrical system 100 is shown, in accordance with certain example embodiments. Figure 2 According to some example embodiments, Figure 1 1 is a block diagram of an electrical device 102-1 of an electrical system 100. The electrical system 100 includes multiple components. For example, in this case, the electrical system 100 includes one or more users 150 (the one or more users 150 can each include one or more user systems 155), a gateway 180, one or more main controllers 185 (e.g., main controller 185-1, main controller 185-X), and one or more electrical devices 102 (e.g., electrical device 102-1, electrical device 102-N, electrical device 102-Y, electrical device 102-Z).

[0022] The master controllers 185 in this example are substantially identical to one another in terms of the functionality of the example embodiments. Thus, references to one master controller 185 (e.g., master controller 185-1) may similarly refer to each other master controller 185 (e.g., master controller 185-X) individually or to all other master controllers 185 collectively. Furthermore, the electrical devices 102 in this example are substantially identical to one another in terms of the functionality of the example embodiments. Thus, references to one electrical device 102 (e.g., electrical device 102-1) may similarly refer to each other electrical device 102 individually or to all other electrical devices 102 collectively.

[0023] The electrical device 102 is at least partially located in the spatial volume 199. The spatial volume 199 can be any indoor and / or outdoor area in which multiple electrical devices 102 operate. Examples of the spatial volume 199 can include, but are not limited to, office buildings, stores, conference centers, parking lots, parks, entertainment venues, and medical facilities. When the electrical system 100 includes multiple main controllers 185, there can be multiple areas of interest within the spatial volume 199, wherein the electrical devices 102 within a specific area of ​​interest are controlled by one of the main controllers 185. For example, if the spatial volume 199 is a multi-story office building, each floor can be an area of ​​interest. In this case, electrical devices 102-1 to electrical devices 102-N are controlled by the main controller 185-1, and electrical devices 102-Y to electrical devices 102-Z are controlled by the main controller 185-X.

[0024] Figure 1 and Figure 2 The components shown in are not exhaustive, and in some embodiments, Figure 1 and Figure 2 One or more components shown in the drawings may not be included in the electrical system 100 or a portion thereof (e.g., the electrical device 102). For example, any component of the electrical device 102 (e.g., the electrical device 102-1) may be separate or combined with one or more other components of the electrical device 102. Figure 2 As shown in FIG. 1 , each electrical device 102 in the electrical system 100 may have its own device controller 204. Alternatively, one device controller 204 may be used to control multiple electrical devices 102 in the electrical system 100. As another example, the electrical device 102 may include Figure 2 One or more additional components shown in (e.g., optional antenna 275, optional switch 245).

[0025] An electrical device 102 is any device that operates at least in part using electricity. As described above, the electrical system 100 generally includes a plurality of electrical devices 102. In addition, the plurality of electrical devices 102 are organized into a single group controlled by a master controller 185. In this case, a group of electrical devices 102 controlled by the master controller 185-1 includes electrical devices 102-1 to electrical devices 102-N. Another group of electrical devices 102 controlled by the master controller 185-X includes electrical devices 102-Y to electrical devices 102-Z. Each electrical device 102 in the electrical system 100 may be initialized before being put into use. Examples of electrical devices 102 may include, but are not limited to, luminaires (also referred to as other names, such as lamps and lighting devices), light switches, automatic ventilation dampers, automatic curtains, ceiling fans, projectors, computers, telephones, control panels, thermostats, wall outlets, sensor devices (e.g., smoke detectors, CO 2 monitors, motion detectors, broken glass sensors) and cameras.

[0026] Each electrical device 102 may include multiple components. For example, in this case, Figure 2 As shown for electrical device 102-1, each electrical device 102 includes a device controller 204, a power supply 240, one or more optional sensor devices 265, one or more optional antennas 275, one or more optional switches 245, and one or more electrical device components 242. The device controller 204 may include one or more of several components. For example, Figure 2 As shown in , device controller 204 may include control engine 206 , communication module 208 , timer 210 , power module 212 , hardware processor 220 , memory 222 , transceiver 224 , application interface 226 , repository 230 , and optional security module 228 .

[0027] The electrical device components 242 of the electrical device 102 are devices and / or components typically found in the electrical device 102 that allow the electrical device 102 to operate. The electrical device components 242 can be electrical, electronic, mechanical, or any combination thereof. The electrical device 102 can have one or more of any number and / or type of electrical device components 242. For example, when the electrical device 102 is a light fixture, examples of such electrical device components 242 can include, but are not limited to, light sources, light engines, heat sinks, electrical conductors or cables, wiring boards, lenses, diffusers, reflectors, air moving devices, baffles, dimmers, antennas, switches, and circuit boards.

[0028] Each electrical device 102 may be configured to perform network initialization after the electrical device 102 is installed and before the electrical device 102 is put into operation. As part of the network initialization process, each electrical device 102 is configured to send and receive various communication signals. For example, each electrical device 102 located within the communication range of a network initialization device (e.g., an independent network initialization device, a main controller 185) may be configured to receive and interpret the content of an inquiry signal (a type of communication signal indicating that the electrical device 102 notifies the main controller 185 that the electrical device 102 has received the inquiry signal) broadcast by the network initialization device. In response to receiving the inquiry signal, the electrical device 102 may be further configured to generate and send an identification signal (another type of communication signal notifying the main controller 185 that the electrical device 102 has received the inquiry signal) to the main controller 185, which is within the communication range of the electrical device 102 and is assigned to control the electrical device 102.

[0029] User 150 may be any person who interacts with gateway 180, electrical device 102, local controller 185, and / or another component of electrical system 100. Specifically, user 150 may program, operate, and / or interact with one or more components (e.g., electrical device 102-1, gateway 180) or portions thereof (e.g., device controller 204) associated with electrical system 100. Examples of user 150 may include, but are not limited to, hackers, employees, engineers, electricians, technicians, property managers, tenants, business owners, operators, consultants, contractors, assets, and manufacturer representatives.

[0030] The user 150 may use a user system 155, which may include a display (e.g., a GUI). The user 150 (including the associated user system 155) interacts with (e.g., sends data to, receives data from) the gateway 180 and / or another component of the electrical system 100 via an application interface, which may be substantially the same as the application interface 226 described below with respect to the device controller 204. The communication link 105 may be used to facilitate interaction (including transmission of radio frequency (RF) signals and / or other types of communication signals) between the user 150 (including the associated user system 155), the electrical device 102, the gateway 180, and the main controller 185.

[0031] Each communication link 105 may include one or more wired (e.g., Category 1 cable, Category 2 cable, power line carrier, RS485, DALI, electrical connector) and / or wireless (e.g., Wi-Fi, visible light communication, cellular network, Bluetooth, BLE, Zigbee, LoRa, ultra-wideband (UWB), WirelessHART, ISA100) technologies. For example, the communication link 105 may be (or include) one or more electrical conductors coupled to various components of the electrical system 100. The communication link 105 may transmit signals (e.g., power signals, communication signals (e.g., RF signals), control signals, data) between the electrical device 102, the user 150 (including the associated user system 155), the main controller 185 and / or the gateway 180.

[0032] In certain example embodiments, there are multiple communication networks that utilize communication link 105. One communication network 195 (in this example, communication network 195-1, also referred to as default communication network 195-1) is used for regular communications between users 150 (including associated user systems 155), gateway 180, master controller 185, and electrical devices 102. One or more other (alternative) communication networks 197 (in this example, communication network 197-1 for electrical devices 102-1 to electrical devices 102-N and communication network 197-2 for electrical devices 102-Y to electrical devices 102-Z) are used between electrical devices 102 during times when master controller 185 is suspected of being compromised.

[0033] In certain example embodiments, the alternative communication network 197 (also sometimes referred to herein as the backhaul network 197 or backhaul communication network 197) is designed to allow electrical devices 102 within a group (and in some cases, between groups) to communicate with each other and determine whether the main controller 185 has been compromised without the main controller 185 being aware of these communications. In this way, if the main controller 185 has been hacked, the electrical devices 102 in the group controlled by the main controller 185 can determine that the electrical devices 102 are compromised and effectively override or ignore instructions received from the compromised main controller 185 until the problem with the main controller 185 is effectively resolved so that the main controller 185 is no longer compromised.

[0034] One or more of the alternative communication networks 197 may be established when the electrical device 102 is manufactured. Alternatively, one or more of the alternative communication networks 197 may be established when the electrical device 102 is initialized for networking. As yet another alternative, one or more of the alternative communication networks 197 may be established by the device controllers 204 of one or more electrical devices 102 when the device controllers 204 of the one or more electrical devices 102 determine that the associated main controller 185 may be damaged.

[0035] Even though all communication networks use communication link 105, alternative communication network 197 may differ from communication network 195 in one or more of several ways. Ways in which alternative communication network 197 may be distinguished from communication network 195 may include, but are not limited to, using different frequencies that are not used by communication network 195 and / or master controller 185 when sending and receiving communication signals, using different channels (e.g., channels of communication module 208 of device controller 204) that are not used by communication network 195 and / or master controller 185, and using identification codes that are not recognized in communication network 195 and / or master controller 185. In this way, when electrical devices 102 send communication signals on alternative communication network 197, master controller 185 is unaware of those communication signals.

[0036] The gateway 180 is a device or component that controls all or a portion of the electrical system 100, which includes the main controller 185 and, in some cases, the device controller 204 of at least one electrical device 102. The gateway 180 can be substantially similar to the device controller 204 of the electrical device 102 (e.g., in terms of its components, in terms of its capabilities). Alternatively, the gateway 180 can include one or more of several features in addition to or altered from the features of the device controller 204.

[0037] In some cases, gateway 180 may be referred to by other names, including but not limited to insight manager, enterprise manager, network manager, network coordinator, and network controller. Figure 1 In the embodiment shown in , the gateway 180 receives data from the master controller 185 and processes the data (e.g., using an algorithm (e.g., algorithm 233) and / or a protocol (e.g., protocol 232)) to control the master controller 185, which in turn controls their respective groups of electrical devices 102. The gateway 180 can be located in the spatial volume 199 or remote from the spatial volume 199.

[0038] Each master controller 185 (sometimes referred to by other names, including but not limited to wireless access controller and access controller) performs several different functions. For example, the master controller 185 can help communicate with and control the device controllers 204 of one or more electrical devices 102 within its group to help control the operation of those electrical devices 102. For network initialization, the master controller 185 can be responsible for pairing the device controllers 204 of the electrical devices 102, providing configuration data to the device controllers 204 and / or other components of the electrical devices 102, synchronizing the timing of the device controllers 204 and / or other components of the electrical devices 102, supporting the firmware of the device controllers 204 and / or other components of the electrical devices 102, upgrading the software used by the device controllers 204 and / or other components of the electrical devices 102, and / or performing any other functions with respect to the electrical devices 102 (including their components) to support operational activities.

[0039] Each master controller 185 may also be configured to communicate with the gateway 180. Such communications between the master controller 185 and the gateway 180 may include, for example, instructions for operating the electrical devices 102 within the group controlled by the master controller 185, the status of one or more electrical devices 102, and data collected by the sensor devices 265 of the electrical devices 102.

[0040] Each master controller 185 may have at least some features and / or components similar to the device controller 204 of the electrical device 102. The controller of the master controller 185 may create and maintain tables containing information about the electrical devices 102 controlled by the master controller 185 after the network entry initialization process has been completed. Communication between the master controller 185 and the electrical devices 102 under its control may be used to help populate and update these tables. For example, the master controller 185 may receive a degrouping signal from the gateway 180 to instruct the master controller 185 to remove the electrical device 102 from the table maintained by the master controller 185.

[0041] When the master controller 185 receives data from the electrical device 102 or the gateway 180 (e.g., an acknowledgement of receiving an RF signal and / or other type of communication signal), the master controller 185 can convert the data into a different format (e.g., ECAPI). The master controller 185 can then send the newly formatted data to another component of the electrical system 100 (e.g., the gateway 180, one or more electrical devices 102). To help diagnose problems, the master controller 185 can maintain counters for each paired electrical device 102 and include, for example, the number of packet data messages received from a particular electrical device 102, the number of formatted messages related to packet data from a particular electrical device 102 that were successfully transmitted to the gateway 180, and the number of formatted messages related to packet data from a particular electrical device 102 that failed to be transmitted to the gateway 180.

[0042] In some cases, the master controller 185 maintains an average and maximum latency introduced between receiving communications from one component of the electrical system 100 (e.g., the electrical device 102) and transmitting a formatted message to another component of the electrical system 100 (e.g., the gateway 180). The master controller 185 may also notify the gateway 180 when the average or maximum latency exceeds a threshold. In addition, the master controller 185 may communicate with the gateway 180 when there is a significant difference (e.g., as determined by the master controller 185) between the ingress packet and the egress packet with respect to the electrical device 102.

[0043] When there are multiple master controllers 185, they can all be time-synchronized with each other. In addition, for multiple master controllers 185, one master controller 185 may or may not be configured to communicate directly with at least one other master controller 185 in the electrical system 100. In some cases, the functionality of the master controller 185 may be the same as the functionality of the device controller 204 of the electrical device 102, or at least partially combined with the functionality of the device controller 204 of the electrical device 102. In other words, some or all of the following descriptions of the local controller 204 of the electrical device 102-1 may also apply to the master controller 185. The master controller 185 may be located in the spatial volume 199 or away from the spatial volume 199.

[0044] In certain example embodiments, the master controller 185 may be compromised. For example, if the user 150 is a hacker, the user system 155 of the user 150 may use one or more of the communication links 105 to gain unauthorized access and attack the master controller 185. When this occurs, the user 150 may directly control the master controller 185, or otherwise cause the master controller 185 to operate in a manner contrary to the normal operation of the master controller 185. When the master controller 185 is hacked, any instructions received by the master controller 185 from the gateway 180 are ignored, overridden, or modified.

[0045] As another example, if a component (e.g., a hardware processor) of the master controller 185 fails, any instructions sent by the master controller 185 to one or more of the electrical devices 102 in its group may be different from instructions received by the master controller 185 from the gateway 180. When the master controller 185 becomes impaired (e.g., behaves erratically), the electrical devices 102 in its group may receive instructions that fall outside of acceptable operating parameters and / or fail to receive instructions that would otherwise fall within acceptable operating parameters. As defined herein, an impaired master controller 185 does not include a loss of power to the master controller 185.

[0046] According to one or more example embodiments, a user 150 (including an associated user system 155), a gateway 180, a device controller 204 of another electrical device 102, and / or one or more master controllers 185 may interact with a device controller 204 of an electrical device 102 using an application interface 226. Specifically, the application interface 226 of the device controller 204 of the electrical device 102 receives data (e.g., information, communications, instructions) from and sends data (e.g., information, communications, instructions) to: the user 150 (including an associated user system 155), the gateway 180, one or more master controllers 185, and / or one or more other electrical devices 102. In certain example embodiments, the user 150 (including an associated user system 155), the gateway 180, one or more master controllers 185, and / or the device controller 204 of one or more other electrical devices 102 (e.g., within the same group, outside the group) may include an interface to receive data from and send data to the device controller 204 of the electrical device 102. Examples of such an interface may include, but are not limited to, a graphical user interface, a touch screen, an application programming interface, a keyboard, a monitor, a mouse, a network service, a data protocol adapter, some other hardware and / or software, or any suitable combination thereof.

[0047] In certain example embodiments, the device controller 204 of the electrical device 102, the user 150 (including the associated user system 155), the gateway 180, one or more master controllers 185 and / or the device controllers 204 of one or more other electrical devices 102 may use their own systems or share a system. Such a system may be in the form of or include an Internet-based or intranet-based computer system capable of communicating with various software. The computer system includes any type of computing device and / or communication device, including but not limited to the device controller 204. Examples of such a system may include but are not limited to a desktop computer with a local area network (LAN), a wide area network (WAN), the Internet or an intranet access, a laptop computer with a LAN, a WAN, the Internet or an intranet access, a smart phone, a server, a server cluster, an android device (or equivalent), a tablet computer, a smart phone, and a personal digital assistant (PDA). Such a system may correspond to the following reference Figure 3 Describe the computer system.

[0048] In addition, as described above, such a system may have corresponding software (e.g., user software, controller software, network manager software). According to some example embodiments, the software may be executed on the same or separate devices (e.g., servers, mainframes, desktop personal computers (PCs), laptops, PDAs, televisions, cable boxes, satellite boxes, kiosks, phones, mobile phones, or other computing devices) and may be coupled to wired and / or wireless segments via communication networks (e.g., the Internet, intranets, extranets, LANs, WANs, or other network communication methods) and / or communication channels. The software of one system may be part of, or operate separately but in conjunction with, the software of another system within the electrical system 100.

[0049] Electrical device 102 (e.g., electrical device 102-1) may include housing 203. Housing 203 of electrical device 102 may include at least one wall forming cavity 201. In some cases, housing 203 of electrical device 102 may be designed to comply with any applicable standards so that electrical device 102 may be located in a specific environment (e.g., hazardous environment, outdoors).

[0050] The housing 203 of the electrical device 102 may be used to house one or more components of the electrical device 102, including one or more components of the device controller 204. For example, the device controller 204 (which in this case includes a control engine 206, a communication module 208, a timer 210, a power module 212, a repository 230, a hardware processor 220, a memory 222, a transceiver 224, an application interface 226, and an optional security module 228), one or more optional sensor devices 265, one or more optional antennas 275, one or more optional switches 245, and a power source 240 may be disposed in the cavity 201 formed by the housing 203. In alternative embodiments, any one or more of these or other components of the electrical device 102 may be disposed on the housing 203, integrated with the housing 203, and / or disposed remotely from the housing 203.

[0051] The repository 230 of the device controller 204 may be a persistent storage device (or collection of devices) that stores software and data for assisting the device controller 204 of the electrical device 102 in communicating with the user 150 (including the associated user system 155), the gateway 180, one or more master controllers 185, and / or one or more other electrical devices 102 within the electrical system 100. In one or more example embodiments, the repository 230 stores acceptable operating parameters 231, one or more protocols 232, one or more algorithms 233, and stored data 234.

[0052] Acceptable operating parameters 231 may be any parameters that fall within normal operation of the electrical device 102. Examples of parameters of acceptable operating parameters 231 may include, but are not limited to, time (e.g., on time, off time, on / off days), operating mode (e.g., full output when on, full output level, dimmed output, dimmed level, flashing / intermittent), output type (e.g., specific color output, specific temperature output, specific lumen output), and / or any other type of factor that defines the operation of the electrical device 102.

[0053] Acceptable operating parameters 231 have values ​​that fall within the expected range for each of the one or more parameters that define the operation of electrical device 102. For example, if the parameter is the duration that electrical device 102 can operate continuously, the value can range from a minimum of 20 minutes to a maximum of 12 hours. As another example, if the parameter is the start time that electrical device 102 can begin operation, the value can be 6:00 a.m. to 9:00 a.m. Monday through Friday (excluding holidays), and 8:00 a.m. to 10:30 a.m. on Saturdays, Sundays, and holidays.

[0054] The values ​​of the acceptable operating parameters 231 stored in the repository 230 can be obtained in one or more of several ways. For example, the user 150 can specify some or all of the values. As another example, the gateway 180 and / or the main controller 185 that controls the electrical device 102 can use these values ​​as default settings and push these values ​​to the electrical device 102 (e.g., at network initialization, when updates become available). As yet another example, the device controller 204 can generate some or all of the values ​​based on the operating experience of the electrical device 102. In certain example embodiments, the device controller 204 of the electrical device 102 establishes and maintains the values ​​of the acceptable operating parameters 231 in at least one table.

[0055] In certain example embodiments, not every electrical device 102 in the group has acceptable operating parameters 231 in its memory bank 230. In this case, the electrical device 102 that lacks acceptable operating parameters 231 and receives instructions in the communication signal from the master controller 185 can forward the communication signal to another electrical device 102 in the group that has acceptable operating parameters 231, or generate a new communication signal using the instructions received from the master controller 185. The latter electrical device 102 can then assess whether the master controller 185 is impaired based on the instructions. If the master controller 185 is impaired, the electrical device 102 can generate and send a communication signal to the originating electrical device 102, the communication signal having an override operation instruction and / or an instruction to ignore subsequent instructions from the master controller 185.

[0056] The protocol 232 may be any procedure (e.g., a series of method steps) followed by the control engine 206 of the device controller 204 based on certain conditions at a point in time and / or other similar operating procedures. The protocol 232 may also include a process for determining whether instructions received from the master controller 185 fall within acceptable operating parameters 231. The protocol 232 may further include any of a number of communication protocols for sending and / or receiving data between the device controller 204 and the user 150 (including associated user systems 155), the gateway 180, one or more other electrical devices 102, and / or one or more master controllers 185.

[0057] Such protocols 232 for communication can instruct the control engine 206 of the device controller 204 as to when to send communications using the communication network 195-1 or the communication network 195-2. One or more of the protocols 232 for communication can be a time synchronization protocol. Examples of such time synchronization protocols can include, but are not limited to, the Highway Addressable Remote Transducer (HART) protocol, the WirelessHART protocol, and the International Society of Automation (ISA) 100 protocol. In this way, one or more of the protocols 232 for communication can provide a security layer to the data transmitted within the electrical system 100.

[0058] The algorithm 233 can be any formula, mathematical model, prediction, simulation, and / or other similar tool used by the control engine 206 of the device controller 204 to draw a calculation conclusion. The algorithm 233 can be used to analyze past data, analyze current data, and / or perform predictions. One or more specific algorithms 233 can be used in conjunction with one or more specific protocols 232. For example, one or more protocols 232 and one or more algorithms 233 can be used in conjunction with each other to determine whether a value associated with a specific instruction received from the main controller 185 falls within a range of values ​​for one or more corresponding acceptable operating parameters 231.

[0059] The stored data 234 may be any data associated with the electrical device 102, any data associated with one or more of the other electrical devices 102 (including any components thereof), any data associated with the master controller 185, any data associated with the gateway 180, any measurements made by the sensor device 265, thresholds, user preferences, results of previously run or calculated algorithms, and / or any other suitable data. Such stored data 234 may be any type of data, including historical data, current data, and predictions. The stored data 234 may be associated with some time measurements derived, for example, from the timer 210.

[0060] Examples of repository 230 may include, but are not limited to, a database (or databases), a file system, a hard drive, flash memory, cloud-based storage, some other form of solid-state data storage, or any suitable combination thereof. According to some example embodiments, repository 230 may be located on multiple physical machines, each storing all or a portion of acceptable operating parameters 231, protocols 232, algorithms 233, and / or stored data 234. Each storage unit or device may be physically located in the same or different geographic locations.

[0061] The repository 230 may be operably connected to the control engine 206. In one or more example embodiments, the control engine 206 includes functionality to communicate with the user 150 (including associated user systems 155), the gateway 180, one or more master controllers 185, and / or other electrical devices 102 in the electrical system 100. More specifically, the control engine 206 sends information to and / or receives information from the repository 230 in order to communicate with the user 150 (including associated user systems 155), the gateway 180, one or more master controllers 185, and / or one or more other electrical devices 102. As described below, in certain example embodiments, the repository 230 may also be operably connected to the communication module 208.

[0062] In certain example embodiments, the control engine 206 of the device controller 204 controls the operation of one or more other components of the device controller 204 (e.g., the communication module 208, the timer 210, the transceiver 224). For example, when there is no communication between the device controller 204 and another component in the electrical system 100 (e.g., one of the other electrical devices 102, the sensor device 265, the main controller 185, the user system 155), or when the communication between the device controller 204 and another component in the electrical system 100 follows a regular pattern, the control engine 206 can put the communication module 208 in a "sleep" mode. In this case, power consumed by the device controller 204 is saved by enabling the communication module 208 only when it is needed.

[0063] As another example, the control engine 206 can direct the timer 210 when to provide the current time, begin tracking a time period, and / or perform another function within the capabilities of the timer 210. As yet another example, the control engine 206 can direct the communication module 208 to send communication signals and / or stop sending communication signals to one or more other electrical devices 102 in the electrical system 100 (e.g., using the alternative communication network 197), the gateway 180 (e.g., using the alternative communication network 197), one or more user systems 155, and / or one or more master controllers 185 (e.g., using the default communication network 195).

[0064] The control engine 206 may determine when to broadcast or otherwise send one or more communication signals, and which communication network (e.g., default communication network 195, alternative communication network 197) to use when broadcasting these communication signals. In order to save energy, the control engine 206 may not broadcast or otherwise send communication signals continuously, but may do so only at discrete times. The control engine 206 may broadcast or otherwise send communication signals based on one or more of several factors, including but not limited to the passage of time, the occurrence of an event (e.g., receiving a communication signal from the main controller 185 that appears to indicate that the main controller 185 is damaged), instructions from the user 150 (including the associated user system 155), confirmation signals received from the local controller 185, communication signals received from another electrical device 102, and commands received from the gateway 180. The control engine 206 may coordinate with the device controller 204 and / or the main controller 185 of one or more other electrical devices 102 to broadcast or otherwise send multiple communication signals.

[0065] The control engine 206 of the device controller 204 may use one or more protocols 232 and / or one or more algorithms 233 to receive and interpret communication signals from the main controller 185 using the default communication network 195. The control engine 206 of the device controller 204 may use one or more protocols 232 and / or one or more algorithms 233 to compare the content of the instructions received from the main controller 185 with the acceptable operating parameters 231 (including their values). The control engine 206 of the device controller 204 may also use one or more protocols 232 and / or one or more algorithms 233 to determine whether the main controller 185 is damaged based on the comparison of the content of the instructions from the main controller 185 with the acceptable operating parameters 231.

[0066] The control engine 206 of the device controller 204 may further use one or more protocols 232 and / or one or more algorithms 233 to follow instructions when determining that the instructions received from the master controller 185 received on the default communication network 195 fall within the acceptable operating parameters 231. The control engine 206 of the device controller 204 may also use the protocol 232 and / or the algorithm 233 to establish an alternative communication network 197 with one or more other electrical devices 102 in the group. The control engine 206 of the device controller 204 may further use the protocol 232 and / or the algorithm 233 to generate one or more communication signals and send the one or more communication signals to one or more other electrical devices 102 using the alternative communication network 197 to confirm whether the master controller 185 has been compromised and / or notify the other electrical devices 102 that the master controller 185 has been compromised.

[0067] The control engine 206 of the device controller 204 may also use the protocol 232 and / or the algorithm 233 to generate one or more communication signals and send one or more communication signals using the alternative communication network 197 to instruct one or more other electrical devices 102 to ignore the communication signals received from the main controller 185 that has been damaged and / or to instruct other electrical devices 102 how to operate when the main controller 185 is damaged. The control engine 206 of the device controller 204 may further use the protocol 232 and / or the algorithm 233 to receive one or more communication signals using the default communication network 195 and / or the alternative communication network 197 to notify the electrical device 102 that the main controller 185 that was previously identified as damaged is no longer damaged, and / or to instruct the electrical device 102 to resume following instructions received from the main controller 185 that was previously identified as damaged.

[0068] The control engine 206 of the device controller 204 may further use the protocol 232 and / or the algorithm 233 to generate one or more communication signals and send one or more communication signals using the alternative communication network 197 to notify one or more other electrical devices 102 that the main controller 185 previously identified as damaged is no longer damaged, and / or to instruct the other electrical devices 102 to resume following instructions received from the main controller 185 previously identified as damaged.

[0069] In certain example embodiments, the device controller 204 of the electrical device 102 may receive communication signals from the main controller 185 via the default communication network 195 and may receive communication signals from one or more other electrical devices 102 via the alternate communication network 197. In this case, the control engine 206 of the device controller 204 may use the protocol 232 and / or the algorithm 233 to receive such communication signals and interpret the content of these communication signals.

[0070] The control engine 206 can provide communication signals (e.g., control, data) to the user 150 (including the associated user system 155), the gateway 180, other electrical devices 102, and / or the main controller 185. Similarly, the control engine 206 can receive communication signals from the user 150 (including the associated user system 155), the gateway 180, other electrical devices 102, and / or the main controller 185.

[0071] The control engine 206 can communicate with each of the other electrical devices 102, the gateway 180, the user 150 (including the associated user system 155), and / or the one or more master controllers 185 automatically (e.g., based on one or more algorithms 233 stored in the repository 230) and / or based on a communication signal received from another device (e.g., the user system 155, the local controller 185) using one of the communication networks. The control engine 206 can include a printed circuit board on which one or more discrete components of the hardware processor 220, and / or the device controller 204 are located.

[0072] In certain embodiments, the control engine 206 of the device controller 204 can communicate with one or more components of a system external to the electrical system 100. For example, the control engine 206 can interact with an inventory management system by ordering a replacement for one of the electrical device components 242 that the control engine 206 has determined to have failed or is failing. As another example, when the control engine 206 determines that the electrical device component 242 requires maintenance or replacement, the control engine 206 can interact with a labor scheduling system by scheduling a maintenance person to repair or replace the electrical device component 242. In this manner, the device controller 204 is able to perform several functions beyond what can reasonably be considered routine tasks.

[0073] In certain example embodiments, the control engine 206 may include a dedicated interface that enables the control engine 206 to communicate with the master controller 185. For example, if the master controller 185 operates under IEC standard 62386, then the master controller 185 may include a digital addressable lighting interface (DALI). In this case, the control engine 206 may also include DALI to enable communication with the master controller 185. Such an interface may operate in conjunction with or independently of the protocol 232 used to communicate between the device controller 204 and the user 150 (including the associated user system 155), the gateway 180, other electrical devices 102, and the master controller 185.

[0074] The control engine 206 (or other components of the device controller 204) may also include one or more hardware and / or software architecture components to perform its functions. Such components may include, but are not limited to, universal asynchronous receiver / transmitter (UART), serial peripheral interface (SPI), direct connected capacitor (DAC) storage device, analog-to-digital converter, internal integrated circuit (I 2 C) and pulse width modulator (PWM).

[0075] The default communication network 195 of the electrical system 100 and each alternative communication network 197 (using the communication link 105) can have any type of network architecture. For example, the alternative communication network 197-1 of the electrical system 100 can be a mesh network. As another example, the default communication network 195 of the electrical system 100 can be a star network. When the device controller 204 includes an energy storage device (e.g., a battery as part of the power module 212), even more power can be saved in the operation of the electrical system 100. In addition, using the time-synchronized communication protocol 232, data transmitted between the device controller 204 and the user 150 (including the associated user system 155), the gateway 180, the master controller 185 and / or other electrical devices 102 can be secure.

[0076] The communication module 208 of the device controller 204 determines and implements the communication protocol (e.g., the protocol 232 from the repository 230) used when the control engine 206 communicates with (e.g., sends signals to, receives signals from) the following: the user 150 (including the associated user system 155), the gateway 180, other electrical devices 102, and / or the main controller 185. In some cases, the communication module 208 accesses the stored data 234 to determine which communication protocol is within the capabilities of the electrical device 102, the user system 155, the main controller 185, and / or the gateway 180 for the communication signal sent by the control engine 206. In addition, the communication module 208 can interpret the communication protocol of the communication signal received by the device controller 204 (e.g., from the main controller 185, from another electrical device 102) so that the control engine 206 can interpret the content of the communication signal.

[0077] The communication module 208 can send and receive data between the gateway 180, other electrical devices 102, the main controller 185 and / or the user 150 (including the associated user system 155), and the device controller 204. The communication module 208 can send and / or receive data in a given format that complies with a specific protocol 232. The control engine 206 can interpret the data packets received from the communication module 208 using the protocol 232 stored in the repository 230. For example, the communication module 208 can be configured to receive instructions from the main controller 185 of the electrical system 100 through the default communication network 195. As another example, the communication module 208 can be configured to communicate with additional electrical devices 102 of the electrical system 100 through the alternative communication network 197.

[0078] The communication module 208 may send data (e.g., acceptable operating parameters 231, protocols 232, stored data 234) directly to the repository 230 and / or retrieve data directly from the repository 230. Alternatively, the control engine 206 may facilitate the transfer of data between the communication module 208 and the repository 230. The communication module 208 may also provide encryption for data sent by the device controller 204 and decryption for data received by the device controller 204. The communication module 208 may also provide one or more of a number of other services related to data sent from and received by the device controller 204. Such services may include, but are not limited to, data packet routing information and procedures to follow in the event of data interruptions.

[0079] The timer 210 of the device controller 204 can track clock time, time interval, amount of time, and / or any other time measurement. The timer 210 can also count the number of times an event occurs, whether or not it is time-related. Alternatively, the control engine 206 can perform the counting function. The timer 210 is capable of tracking multiple time measurements at the same time. The timer 210 can be used to help measure one or more features (e.g., time of flight (ToF) of one or more communication signals (e.g., RF signals), signal strength of communication signals (e.g., RSSI values), frequency of communication signals), even at the same time. The timer 210 can track time periods based on instructions received from the control engine 206, based on instructions received from another component (e.g., user 150 (including associated user system 155), gateway 180), based on instructions programmed in software for the device controller 204, based on some other condition or according to some other component, or according to any combination thereof.

[0080] The timer 210 may be configured to track the time when no power is delivered to the device controller 204 (e.g., the power module 212 fails) using, for example, a supercapacitor or a backup battery. In this case, the timer 210 may communicate any aspect of the time to the device controller 204 when power is restarted to the device controller 204. In this case, the timer 210 may include one or more of several components (e.g., supercapacitor, integrated circuit) to perform these functions.

[0081] The power module 212 of the device controller 204 provides power to one or more other components of the device controller 204 (e.g., timer 210, control engine 206). The power module 212 may include one or more of a number of single or multiple discrete components (e.g., transistors, diodes, resistors), and / or a microprocessor. The power module 212 may include a printed circuit board on which the microprocessor and / or one or more discrete components are located. In some cases, the power module 212 may include one or more components that allow the power module 212 to measure one or more power elements (e.g., voltage, current) delivered to and / or sent from the power module 212.

[0082] The power module 212 may include one or more components (e.g., a transformer, a diode bridge, an inverter, a converter) that receive power from the power source 240 (e.g., via a cable). The power module 212 may then generate power of a type (e.g., AC, DC) and level (e.g., 12V, 24V, 120V) that may be used by other components of the device controller 204. In addition, or as an alternative, the power module 212 itself may be or include a source of power. For example, the power module 212 may be or include an energy storage device (e.g., a battery). As another example, the power module 212 may be or include a local photovoltaic power system.

[0083] The power module 212 can use closed-loop control to maintain a preconfigured voltage or current with tight tolerances at the output. The power module 212 can also protect the remaining electronics in the electrical device 102 (e.g., hardware processor 220, transceiver 224) from surges generated in the line. The power module 212 can also have sufficient isolation in the associated components of the power module 212 (e.g., transformers, optocouplers, current and voltage limiting devices) so that the power module 212 is certified to provide power to intrinsically safe circuits.

[0084] According to one or more example embodiments, the hardware processor 220 of the device controller 204 executes software. Specifically, the hardware processor 220 can execute software on the control engine 206 or any other part of the device controller 204, as well as software used by the user 150 (including the associated user system 155), the gateway 180, one or more main controllers 185, and / or one or more other electrical devices 102. In one or more example embodiments, the hardware processor 220 can be or include an integrated circuit (IC), a central processing unit, a multi-core processing chip, a multi-chip module including multiple multi-core processing chips, or other hardware processors. The hardware processor 220 may be referred to by other names, including but not limited to a computer processor, a microprocessor, and a multi-core processor.

[0085] In one or more example embodiments, the hardware processor 220 executes software instructions stored in the memory 222. The memory 222 includes one or more cache memories, main memory, and / or any other suitable type of memory. According to some example embodiments, the memory 222 is located within the device controller 204 separately from the hardware processor 220. In some configurations, the memory 222 can be integrated with the hardware processor 220.

[0086] In certain example embodiments, the device controller 204 does not include a hardware processor 220. In this case, the device controller 204 may include, for example, one or more field programmable gate arrays (FPGAs), one or more insulated gate bipolar transistors (IGBTs), and / or one or more ICs. The use of FPGAs, IGBTs, ICs, and / or other similar devices known in the art allows the device controller 204 (or portions thereof) to be programmable and to function according to certain logic rules and thresholds without the use of a hardware processor 220. Alternatively, FPGAs, IGBTs, ICs, and / or similar devices may be used in conjunction with one or more hardware processors 220.

[0087] The transceiver 224 of the device controller 204 can send (using a transmitter) and / or receive (using a receiver) communication signals, including RF signals. Specifically, the transceiver 224 can be used to transmit data between the device controller 204 and the user 150 (including the associated user system 155), the gateway 180, other electrical devices 102 and / or one or more main controllers 185. The transceiver 224 can use wired and / or wireless technology. The transceiver 224 can send and / or receive communication signals on the default communication network 195 and / or any alternative communication network 197. The transceiver 224 can be configured in such a way that the communication signal sent and / or received by the transceiver 224 can be received and / or sent by another transceiver as part of the user 150 (including the associated user system 155), the gateway 180, other electrical devices 102 and / or the main controller 185.

[0088] When the transceiver 224 uses wireless technology, the transceiver 224 can use any type of wireless technology to send and receive communication signals (e.g., RF signals). Such wireless technologies may include, but are not limited to, Wi-Fi, visible light communication, infrared, cellular networks, 802.15.4 wireless, 5G cellular wireless, Zigbee, BLE, UWB, and Bluetooth. For example, the transceiver 224 may include a Zigbee transmitter, a Zigbee receiver, a BLE receiver, a BLE transmitter, an active IR transmitter, and / or an active IR receiver. The transceiver 224 may use one or more of any number of suitable communication protocols (e.g., ISA100, HART) when sending and / or receiving communication signals including RF signals. Such communication protocols may be stored in the protocol 232 of the repository 230. In addition, any transceiver information for the user 150 (including the associated user system 155), the gateway 180, other electrical devices 102, and / or the main controller 185 may be part of the stored data 234 (or similar area) of the repository 230.

[0089] Optionally, in one or more example embodiments, the security module 228 protects interactions between the device controller 204, the user 150 (including the associated user system 155), the gateway 180, other electrical devices 102, and / or the main controller 185. More specifically, the security module 228 authenticates communications from software based on a security key that verifies the identity of the source of the communication. For example, user software can be associated with a security key so that software of the user system 155 of the user 150 can interact with the device controller 204 of the electrical device 102. In addition, in some example embodiments, the security module 228 can limit the receipt of information, requests for information, and / or access to information.

[0090] As described above, in addition to the electrical device components 242 and the device controller 204, the electrical device 102 may include a power supply 240, one or more optional sensor devices 265, one or more optional antennas 275, and one or more switches 245. The power supply 240 of the electrical device 102 provides power to one or more other components of the electrical device 102 (e.g., the device controller 204). The power supply 240 may be substantially the same as the power module 212 of the device controller 204, or different from the power module 212 of the device controller 204. The power supply 240 may include one or more of a number of single or multiple discrete components (e.g., transistors, diodes, resistors), and / or a microprocessor. The power supply 240 may include a printed circuit board on which the microprocessor and / or one or more discrete components are located.

[0091] The power supply 240 may include one or more components (e.g., a transformer, a diode bridge, an inverter, a converter) that receive power from the power module 212 of the device controller 204 (e.g., via a cable) or send power to the power module 212 of the device controller 204. The power supply 240 may generate power of a type (e.g., AC, DC) and level (e.g., 12V, 24V, 120V) that can be used by a recipient of such power (e.g., a sensor device 265, a device controller 204). In addition, or as an alternative, the power supply 240 may receive power from a source external to the electrical device 102. In addition, or as an alternative, the power supply 240 itself may be or include a power source. For example, the power supply 240 may be or include an energy storage device (e.g., a battery), a local photovoltaic power system, or some other independent power source.

[0092] Each of the one or more optional sensor devices 265 of the electrical device 102 may include any type of sensing device that measures one or more parameters. Examples of types of sensor devices 265 may include, but are not limited to, cameras, passive infrared sensors, photocells, pressure sensors, airflow monitors, gas detectors, and resistance temperature detectors. Examples of parameters measured by the sensor devices 265 may include, but are not limited to, characteristics of communication signals (e.g., AoA, RSSI values), identification of the electrical device 102 or the master controller 185, occupancy in the spatial volume 199, motion in the spatial volume 199, temperature, gas levels, humidity levels, the amount of ambient light in the spatial volume 199, and pressure waves. In some cases, one or more parameters measured by the sensor devices 265 may be used to trigger when one or more communication signals are broadcast or otherwise sent by the device controller 204.

[0093] The sensor device 265 may be an integrated sensor (sometimes also referred to as an integrated sensor device 265). An integrated sensor has both the ability to sense and measure at least one parameter and the ability to communicate with another component (e.g., one or more electrical devices 102, local controller 185). The communication capabilities of the sensor device 265 as an integrated sensor may include one or more communication devices configured to communicate with, for example, a device controller 204 of an electrical device 102, a main controller 185, a user system 155, and / or a gateway 180. For example, the integrated sensor device 265 may include a camera, a transceiver (a combination of a transmitter and a receiver) that sends and receives communication signals using Zigbee (e.g., relative to the main controller 185), and a transmitter that transmits communication signals using BLE (e.g., to one or more electrical devices 102).

[0094] Whether integrated or not, each sensor device 265 can use one or more of several communication protocols. This allows the sensor device 265 to communicate with one or more components of the electrical system 100 (e.g., the control engine 206 of the device controller 204, the electrical device 102, the main controller 185). The communication capabilities of the sensor device 265 as an integrated sensor can be dedicated to the sensor device 265 and / or shared with the device controller 204 of the electrical device 102. When the electrical system 100 includes multiple integrated sensor devices 265, one integrated sensor device 265 can communicate directly or indirectly with one or more of the other integrated sensor devices 265 in the electrical system 100.

[0095] If the communication capabilities of the sensor device 265 as an integrated sensor are specific to the sensor device 265, the sensor device 265 may include one or more components (e.g., transceiver 224, communication module 208), or portions thereof, that are substantially similar to the corresponding components described above with respect to the device controller 204. The sensor device 265 may be integrated with the electrical device 102, may be a stand-alone device, and / or may be integrated with another component in the electrical system 100.

[0096] In certain example embodiments, the sensor device 265 may include an energy storage device (e.g., a battery) that is used to at least partially provide power to some or all of the sensor devices 265. In this case, the energy storage device may be the same as the energy storage device or other power source 240 of the electrical device 102, or independent of the energy storage device or other power source 240 of the electrical device 102. The optional energy storage device of the sensor device 265 may operate at all times, or when the power source 240 of the electrical device 102 is interrupted. In addition, the sensor device 265 may utilize or include one or more components found in the device controller 204 (e.g., memory 222, storage repository 230, transceiver 224). In this case, the device controller 204 may provide the functionality of these components used by the sensor device 265. Alternatively, the sensor device 265 may include one or more components of the device controller 204 independently or in common with the device controller 204. In this case, the sensor device 265 may correspond to the following with respect to Figure 3 The computer system.

[0097] Each of the one or more optional antennas 275 is an electronic device that converts electrical power into an RF signal (for transmission) and converts RF signals into electrical power (for reception). In transmission, a radio transmitter (e.g., transceiver 224) provides a current oscillating at a radio frequency (i.e., a high frequency alternating current (AC)) to the terminals of antenna 275 through an optional switch 245, and antenna 275 radiates energy from the current as an RF signal. In reception, antenna 275 intercepts some of the power of the RF signal to generate a tiny voltage at its terminals, where the voltage is applied to a receiver (e.g., transceiver 224) through switch 245 to be amplified.

[0098] The antenna 275 may generally consist of an arrangement of electrical conductors electrically connected to each other (usually by a transmission line) to create the body of the antenna 275. The body of the antenna 275 is electrically coupled to the transceiver 224. The oscillating current of the electrons forced through the body of the antenna 275 by the transceiver 224 will create an oscillating magnetic field around the body, while the charge of the electrons also creates an oscillating electric field along the body of the antenna 275. These time-varying fields radiate away from the antenna 275 into space as a moving transverse RF signal (usually an electromagnetic field wave). Conversely, during reception, the oscillating electric and magnetic fields of the incoming RF signal exert a force on the electrons in the body of the antenna 275, causing portions of the body of the antenna 275 to move back and forth, creating an oscillating current in the antenna 275.

[0099] In certain example embodiments, the antenna 275 may be disposed at, within, or on any portion of the electrical device 102. For example, the antenna 275 may be disposed on the housing 203 of the electrical device 102 and extend away from the electrical device 102. As another example, the antenna 275 may be overmolded into the housing 203 of the electrical device 102. As yet another example, the antenna 275 may be adhesively mounted to the housing 203 of the electrical device 102. As yet another example, the antenna 275 may be a wire antenna.

[0100] Each antenna 275 can be electrically coupled to an optional switch 245, which in turn is electrically coupled to the transceiver 224. The switch 245 can be a single switching device or a number of switching devices arranged in series and / or parallel with each other. The switch 245 determines which antenna 275 is coupled to the transceiver 224 at any particular point in time. The switch 245 can have one or more contacts, each of which has an open state and a closed state (position). In the open state, the contacts of the switch 245 create an open circuit, which prevents the transceiver 224 from transmitting RF signals to the antenna 275 electrically coupled to the contact of the switch 245 or receiving RF signals from the antenna 275 electrically coupled to the contact of the switch 245. In the closed state, the contacts of the switch 245 create a closed circuit, which allows the transceiver 224 to transmit RF signals to the antenna 275 electrically coupled to the contact of the switch 245 or receive RF signals from the antenna 275 electrically coupled to the contact of the switch 245. In certain example embodiments, the position of each contact of switch 245 is controlled by control engine 206 of device controller 204. If switch 245 is a single device, switch 245 may have multiple contacts.

[0101] Figure 3 One embodiment of a computing device 318 is shown that implements one or more of the various techniques described herein and that represents, in whole or in part, elements described herein according to certain exemplary embodiments. For example, the device controller 204 of the electrical device 102 (including its components, such as the control engine 206, the hardware processor 220, the repository 230, and the transceiver 224) can be considered to be the computing device 318. The computing device 318 is an example of a computing device and is not intended to suggest any limitation on the scope of use or functionality of the computing device and / or its possible architecture. The computing device 318 should also not be interpreted as having any dependency or requirement on any one component or combination of components shown in the example computing device 318.

[0102] The computing device 318 includes one or more processors or processing units 314, one or more memory / storage components 315, one or more input / output (I / O) devices 316, and a bus 317 that allows the various components and devices to communicate with each other. The bus 317 represents any one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, and a processor or local bus using any of a variety of bus architectures. The bus 317 includes wired and / or wireless buses.

[0103] The memory / storage component 315 represents one or more computer storage media. The memory / storage component 315 includes volatile media (such as random access memory (RAM)) and / or non-volatile media (such as read-only memory (ROM), flash memory, optical disks, magnetic disks, etc.). The memory / storage component 315 includes fixed media (e.g., RAM, ROM, fixed hard drive, etc.) and removable media (e.g., flash memory drive, removable hard drive, optical disk, etc.).

[0104] One or more I / O devices 316 allow a customer, utility, or other user to input commands and information to computing device 318, and also allow information to be presented to the customer, utility, or other user and / or other components or devices. Examples of input devices include, but are not limited to, keyboards, cursor control devices (e.g., mice), microphones, touch screens, and scanners. Examples of output devices include, but are not limited to, display devices (e.g., monitors or projectors), speakers, outputs to lighting networks (e.g., DMX cards), printers, and network cards.

[0105] Various techniques are described herein in the general context of software or program modules. Generally, software includes routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. Implementations of these modules and techniques are stored on or transmitted across some form of computer-readable media. Computer-readable media is any available one or more non-transitory media that can be accessed by a computing device. By way of example and not limitation, computer-readable media includes "computer storage media."

[0106] "Computer storage media" and "computer-readable media" include volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer-readable instructions, data structures, program modules or other data. Computer storage media include, but are not limited to, computer-recordable media such as RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical storage, cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium for storing the desired information and accessible by a computer.

[0107] According to some exemplary embodiments, the computer device 318 is connected to a network (not shown) (e.g., a LAN, a WAN such as the Internet, a cloud, or any other similar type of network) via a network interface connection (not shown). Those skilled in the art will appreciate that there are many different types of computer systems (e.g., desktop computers, laptop computers, personal media devices, mobile devices (such as cellular phones or personal digital assistants), or any other computing system capable of executing computer-readable instructions), and in other exemplary embodiments, the aforementioned input and output devices take other forms now known or later developed. In general, the computer device 318 includes at least the minimum processing, input, and / or output devices necessary to practice one or more embodiments.

[0108] In addition, it will be appreciated by those skilled in the art that in certain exemplary embodiments, one or more elements of the aforementioned computer device 318 are located at a remote location and are connected to other elements via a network. In addition, one or more embodiments are implemented on a distributed system with one or more nodes, wherein each part of the implementation (e.g., control engine 206) is located on a different node within the distributed system. In one or more embodiments, the node corresponds to a computer system. Alternatively, in some exemplary embodiments, the node corresponds to a processor with an associated physical memory. In some exemplary embodiments, the node corresponds to a processor with a shared memory and / or resource instead.

[0109] Figure 4 A flowchart 458 of a method for operating an electrical system with a damaged primary controller is shown according to certain example embodiments. Although the various steps in the flowchart 458 are presented sequentially, one of ordinary skill in the art will appreciate that some or all of these steps may be performed in a different order, may be combined or omitted, and some or all of these steps may be performed in parallel. Additionally, in one or more example embodiments, one or more steps shown in the example method may be omitted, repeated, and / or performed in a different order.

[0110] In addition, those skilled in the art will appreciate that the method may include Figure 4 Therefore, the specific arrangement of the steps should not be interpreted as limiting the scope. In addition, in some example embodiments, a specific computing device (such as the above reference Figure 3 The computing device 318 discussed above may be used to perform Figure 4Any of the functions performed by device controller 204 below may involve using acceptable operating parameters 231, one or more protocols 232, one or more algorithms 233, and / or stored data 234 stored in repository 230. Additionally, or alternatively, any of the functions in the method may be performed by a user (e.g., user 150).

[0111] Figure 4 The methods shown in are merely examples of what can be performed using the example systems described herein. Figure 4 In addition to the methods shown in Figure 4 In addition to the methods shown in , the system for operating an electrical system with a damaged primary controller may use other methods to perform other functions. Figures 1 to 4 , Figure 4 The method shown in flowchart 458 of begins at a start step and proceeds to step 481, in which a communication signal is received from a master controller 185 via a default communication network 195. The communication signal may be received by a device controller 204 (including components thereof, such as a communication module 208 and a transceiver 224) of an electrical device 102 within a group of electrical devices 102 controlled by the master controller 185 in the electrical system 100 using one or more communication links 105. The communication signal may include one or more instructions to operate the electrical device 102.

[0112] In step 482, a determination is made as to whether one or more instructions in the communication signal received from the master controller 185 fall outside of the acceptable operating parameters 231. This determination may be made by the control engine 206 of the device controller 204 of the electrical device 102. This determination may be made using the acceptable operating parameters 231, one or more protocols 232, and / or one or more algorithms 233 stored in the repository 230. When one or more instructions fall outside of the acceptable operating parameters 231, the master controller 185 may be compromised (e.g., hacked). If one or more instructions in the communication signal received from the master controller 185 fall outside of the acceptable operating parameters 231, the process proceeds to step 484. If the instructions in the communication signal received from the master controller 185 do not fall outside of the acceptable operating parameters 231, the process proceeds to step 483.

[0113] In step 483, the instructions from the master controller 185 are followed. In other words, since the master controller 185 is not damaged based on the consistency of the instructions in the communication signal with respect to the acceptable operating parameters 231, the electrical device 102 operates according to these instructions. The control engine 206 of the device controller 204 of the electrical device 102 can follow these instructions. The instructions can be followed using one or more protocols 232, one or more algorithms 233, and / or stored data 234 stored in the repository 230. When step 483 is completed, the process proceeds to an end step.

[0114] In some cases, as part of step 483, a communication signal may be generated by the electrical device 102 and sent to one or more other electrical devices 102 in the electrical system 100 to notify / instruct the one or more other electrical devices 102 to follow subsequent communication signals received from the master controller 185. For example, if the one or more other electrical devices 102 had previously received a communication signal instructing them to ignore instructions from the master controller 185 because the master controller 185 was compromised, then when the master controller 185 is no longer compromised, it is necessary to notify / instruct the one or more other electrical devices 102 to resume following instructions from the master controller 185.

[0115] In the event that the situation that caused the master controller 185 to be classified as impaired is successfully resolved such that the master controller 185 is no longer considered impaired, returning the master controller 185 to its designed purpose of controlling a group of electrical devices 102 can be achieved in one or more of several ways. For example, the device controller 204 of the electrical device 102 can receive a communication signal from the gateway 180 and / or the user system 155 of the user 150, which notifies the device controller 204 that the master controller 185 is no longer impaired and / or that any subsequent instructions received from the master controller 185 should be followed.

[0116] As another example, an electrical device 102 having the ability to compare instructions received from a master controller 185 to acceptable operating parameters 231 may continue to receive communication signals (with instructions) from the master controller 185, evaluating each communication signal according to the acceptable operating parameters 231, rather than ignoring subsequent communication signals received from a compromised master controller 185. Using one or more protocols 232 and / or algorithms 233, a device controller 204 of the electrical device 102 may determine if and when subsequent communication signals received from the master controller 185 are no longer compromised.

[0117] In step 484, substitute instructions are generated to replace the instructions received from the master controller 185. The substitute instructions may be completely within the acceptable operating parameters 231. The substitute instructions may be generated by the control engine 206 of the device controller 204 of the electrical device 102. The substitute instructions may be generated using the acceptable operating parameters 231, one or more protocols 232, and / or one or more algorithms 233 stored in the repository 230. In certain example embodiments, the substitute instructions will cause the electrical device to operate in such a manner that an observer (e.g., user 150) within the spatial volume 199 may notice that the master controller 185 may be damaged. For example, if the electrical device 102 is a luminaire with dimming capabilities that is regularly used by the master controller 185, the substitute instructions may instruct the electrical device 102 to give full light output without any dimming during all daytime hours.

[0118] In step 486, the substitute instruction is sent to another electrical device 102 (e.g., electrical device 102-N) using the substitute communication network 197 (e.g., substitute communication network 197-1). By using the substitute communication network 197, the master controller 185 determined to be impaired is unaware of the substitute instruction because the master controller 185 does not have access to the substitute communication network 197. The substitute instruction may be included in a communication signal sent from the electrical device 102 to another electrical device 102. The sending and receiving electrical devices 102 may be part of the same group of electrical devices 102 controlled by the master controller 185 determined to be impaired. The substitute instruction may be sent by the device controller 204 of the electrical device 102 (including its components, such as the communication module 208 and the transceiver 224).

[0119] In certain example embodiments, if the device controller 204 of the electrical device 102 is a type of supernode within the electrical system 100, the electrical device 102 may be able to communicate directly with the gateway 180 via the alternative communication network 197. In this case, step 486 may alternatively or additionally include sending an alternative instruction (or a notification that an alternative instruction has been generated and sent) to the gateway 180. This would allow the gateway 180 (e.g., using the user system 155) to notify the user 150 about potential damage to the main controller 185, rather than relying on the user 150 to visually notice the problem based on the output of the electrical device 102 to the spatial volume 199.

[0120] In step 487, the substitute instruction is followed. In other words, the electrical device 102 that generated the substitute instruction performs an operation based on the substitute instruction. To the extent that the substitute instruction contradicts the instruction in the communication signal received from the main controller 185, the instruction from the main controller 185 that is considered to be damaged is ignored by the electrical device 102. The control engine 206 of the device controller 204 of the electrical device 102 can follow the substitute instruction. The substitute instruction can be followed using one or more protocols 232 stored in the repository 230, the stored data 234, and / or one or more algorithms 233.

[0121] In step 488, a determination is made as to whether a subsequent communication signal is received from the master controller 185. In certain example embodiments, the subsequent communication signal is received over the default communication network 195. The subsequent communication signal may be received by a device controller 204 (including its components, such as the communication module 208 and the transceiver 224) of an electrical device 102 controlled by the master controller 185 in the electrical system 100 using one or more communication links 105. The subsequent communication signal may include one or more instructions to operate the electrical device 102. If a subsequent communication signal has been received from the master controller 185, the process returns to step 482. If a subsequent communication signal has not been received from the master controller 185, the process returns to step 487. In an alternative case, if a subsequent communication signal has not been received from the master controller 185, the process may return to step 484 instead of returning to step 487 so that a different alternative instruction may be generated.

[0122] Figure 5 A flowchart 558 of a method for operating an electrical system with a damaged primary controller according to certain example embodiments is shown. Although the various steps in the flowchart 558 are presented sequentially, one of ordinary skill in the art will appreciate that some or all of the steps may be performed in a different order, may be combined or omitted, and some or all of the steps may be performed in parallel. Additionally, in one or more example embodiments, one or more of the steps shown in the example method may be omitted, repeated, and / or performed in a different order.

[0123] In addition, those skilled in the art will appreciate that the method may include Figure 5 Therefore, the specific arrangement of the steps should not be interpreted as limiting the scope. In addition, in some example embodiments, a specific computing device (such as the above reference Figure 3 The computing device 318 discussed above may be used to perform Figure 5. Any of the functions performed by device controller 204 below may involve using acceptable operating parameters 231, one or more protocols 232, one or more algorithms 233, and / or stored data 234 stored in repository 230. Additionally, or alternatively, any of the functions in the method may be performed by a user (e.g., user 150).

[0124] Figure 5 The method shown in is merely an example of what can be performed using the example system described herein. In other words, a system for operating an electrical system with a damaged primary controller can be used with an additional Figure 5 In addition to the methods shown in Figure 5 Other methods other than those shown in . Figures 1 to 5 ,exist Figure 5 The method shown in the flowchart 558 of begins at a start step and proceeds to step 571, where instructions received from the master controller 185 via the default communication network 195 are followed. In other words, the electrical device 102 that receives the communication signal from the master controller 185 performs operations based on the instructions in the communication signal. The control engine 206 of the device controller 204 of the electrical device 102 can follow these instructions. The instructions can be followed using one or more protocols 232, stored data 234, and / or one or more algorithms 233 stored in the repository 230.

[0125] In some cases, at step 571, the electrical device 102 does not have acceptable operating parameters 231 stored in its repository 230. In this case, the control engine 206 of the device controller 204 of the electrical device 102 is unable to determine whether the instructions in the communication signal received from the master controller 185 over the default communication network indicate that the master controller 185 is compromised. In other cases, at step 571, the electrical device 102 does have acceptable operating parameters 231 stored in its repository 230. In this case, the control engine 206 of the device controller 204 of the electrical device 102 can determine that the instructions within the communication signal fall within the acceptable operating parameters 231 when receiving the communication signal from the master controller 185. This indicates that, at step 571, the master controller 185 is not compromised.

[0126] In step 572, a communication signal with substitute instructions is received from another electrical device 102 (e.g., electrical device 102-N) via an alternative communication network 197 (e.g., alternative communication network 197-1). By using the alternative communication network 197, the communication signal (and the substitute instructions contained therein) is not known to the master controller 185 when it is determined to be impaired in step 572 because the master controller 185 does not have access to the alternative communication network 197. The sending and receiving electrical devices 102 may be part of the same group of electrical devices 102 controlled by the master controller 185 that is determined to be impaired. The substitute instructions may be sent by the device controller 204 (including its components, such as the communication module 208 and the transceiver 224) of the electrical device 102.

[0127] In step 573, a determination is made as to whether the electrical device 102 that received the communication signal in step 572 has access to the acceptable operating parameters 231. The determination may be made by the control engine 206 of the device controller 204 of the electrical device 102. The electrical device 102 may have access to the acceptable operating parameters 231 when the acceptable operating parameters 231 are stored in the repository 230 of the electrical device 102. If the electrical device 102 has access to the acceptable operating parameters 231, the process proceeds to step 574. If the electrical device 102 does not have access to the acceptable operating parameters 231, the process proceeds to step 576.

[0128] In step 574, the content of the communication signal from step 572 is compared to the acceptable operating parameters 231. The comparison may be performed by the control engine 206 of the device controller 204 of the electrical device 102. The comparison may include determining whether the alternative instructions fall outside of the acceptable operating parameters 231. The comparison may be performed using the acceptable operating parameters 231, one or more protocols 232, and / or one or more algorithms 233 stored in the repository 230. When one or more instructions fall outside of the acceptable operating parameters 231, the main controller 185 may be compromised (e.g., hacked).

[0129] In step 575, the result of the comparison in step 574 is sent to the electrical device that sent the substitute instruction in step 572. The result may be consistent with the main controller 185 being impaired. Alternatively, the result may be inconsistent with the substitute instruction because there is no evidence or insufficient evidence to indicate that the main controller 185 is impaired in the comparison. As yet another alternative, the result may conclude that the substitute instruction is inconsistent with the acceptable operating parameters 231 regardless of whether the main controller 185 is impaired. The result may be sent using an alternative communication network.

[0130] In certain example embodiments, the communication signal for sending the comparison result to another electrical device 102 may include or be in the form of a query. For example, one or more protocols 232 may require at least two electrical devices 102 in a group to agree that a command received by the master controller 185 of the group falls outside of acceptable operating parameters 231. In this case, after the device controller 204 of the electrical device determines that the most recent command falls outside of the acceptable operating parameters 231, the query may seek to evaluate the most recent command received from the master controller 185 by another electrical device 102 in the group.

[0131] In step 568, a determination is made as to whether the result of the comparison in step 574 is consistent with the substitute instruction received from another electrical device 102. In other words, a determination is made as to whether the electrical device 102 has evidence to conclude that the primary controller 185 is impaired, or whether the other electrical device 102 incorrectly identifies the primary controller 185 as impaired for some reason (e.g., sensor failure, malfunction of the device controller 204). This determination may be made by the control engine 206 of the device controller 204 of the electrical device 102 using the acceptable operating parameters 231, one or more protocols 232, and / or one or more algorithms 233 stored in the repository 230 of the electrical device 102. If the result of the comparison in step 574 is consistent with the substitute instruction received from another electrical device 102, the process proceeds to step 576. If the result of the comparison in step 574 is inconsistent with the substitute instruction received from another electrical device 102, the process proceeds to step 579.

[0132] In some cases, if the comparison result in step 574 is inconsistent with the replacement instructions received from the other electrical devices 102, the device controller 204 of the electrical device can generate a communication signal using the communication module 208 and the transceiver 224 and send the communication signal to the main controller 185, the network manager 180 and / or the user system 155 of the user 150, which indicates that the other electrical device 102 may have a faulty component that needs to be inspected and repaired. Such a communication signal may include detailed information about the exchange that the electrical device 102 has with the other electrical device 102 (e.g., replacement instructions). Such a communication signal can be sent via the default communication network 195.

[0133] In step 576, the substitute instructions in the communication signal from step 572 are followed. In other words, the electrical device 102 receiving the substitute instructions performs operations based on the substitute instructions. To the extent that the substitute instructions contradict the instructions in the communication signal received from the main controller 185, the instructions from the main controller 185 that are considered to be damaged are ignored by the electrical device 102. The control engine 206 of the device controller 204 of the electrical device 102 can follow the substitute instructions. The substitute instructions can be followed using one or more protocols 232, stored data 234, and / or one or more algorithms 233 stored in the repository 230.

[0134] In step 577, a determination is made as to whether a subsequent communication signal has been received from the master controller 185 via the default communication network 195. The determination that a subsequent communication signal has been received may be made by the device controller 204 of the electrical device 102 (including its components, such as the communication module 208 and the transceiver 224) using one or more communication links 105. The subsequent communication signal may include one or more instructions to operate the electrical device 102. The instructions in the subsequent communication signal may be the same as or different from the instructions in the communication signal of step 571. If a subsequent communication signal has been received from the master controller 185, the process proceeds to step 578. If a subsequent communication signal has not been received from the master controller 185, the process proceeds to step 569.

[0135] In step 578, a determination is made as to whether a communication signal has been received to restore the master controller 185 via the alternate communication network 197. The communication signal to restore the master controller 185 may state that the master controller 185 is no longer impaired. The communication signal to restore the master controller 185 may be received by the device controller 204 of the electrical device 102 (including its components, such as the communication module 208 and the transceiver 224) using one or more communication links 105 to determine. The communication signal to restore the master controller 185 may be sent by the gateway 180, the user system 155 of the user 150, and / or another electrical device 102 in the group of electrical devices 102 controlled by the master controller 185. If the communication signal to restore the master controller 185 has been received, the process proceeds to step 579. If the communication signal to restore the master controller 185 has not been received, the process proceeds to step 569.

[0136] In step 579, the instructions received from the master controller 185 via the default communication network 195 from step 577 are followed. In other words, the electrical device 102 receiving the communication signal from the master controller 185 performs operations based on the instructions in the communication signal. The control engine 206 of the device controller 204 of the electrical device 102 can follow these instructions. The instructions can be followed using one or more protocols 232, stored data 234, and / or one or more algorithms 233 stored in the repository 230. Resuming following the instructions from the master controller 185 indicates that the master controller 185 is no longer impaired. When step 579 is completed, the process proceeds to the end step.

[0137] In step 569, the alternate instructions are continued to be followed. In other words, the electrical device 102 performs operations based on the alternate instructions. To the extent that the alternate instructions contradict the instructions in the communication signal received from the master controller 185, the instructions from the master controller 185 that are considered to be damaged are ignored by the electrical device 102. The control engine 206 of the device controller 204 of the electrical device 102 can follow the alternate instructions. The alternate instructions can be followed using one or more protocols 232, stored data 234, and / or one or more algorithms 233 stored in the repository 230. When step 569 is completed, the process returns to step 577.

[0138] Figure 6 An electrical system 600 is shown of a plurality of electrical devices 602 operating with a damaged primary controller 685 in accordance with certain exemplary embodiments. Figures 1 to 6 , Figure 6 The electrical system 600 includes twelve electrical devices 602, where each electrical device 602 is a type of light fixture. Specifically, the electrical system 600 includes electrical device 602-1, electrical device 602-2, electrical device 602-3, electrical device 602-4, electrical device 602-5, electrical device 602-6, electrical device 602-7, electrical device 602-8, electrical device 602-9, electrical device 602-10, electrical device 602-11, and electrical device 602-12. In this case, electrical device 602-4 is an illuminated exit sign, and Figure 6 The other 11 electrical devices 602 are recessed lights. The electrical system 600 further includes a main controller 685 that controls the 12 electrical devices 602. Figure 6 The main controller 685 and the electrical device 602 can be the same as above Figure 1 and Figure 2 The main controller 185 and the electrical device 102 discussed are substantially identical.

[0139] Figure 6Each electrical device 602 in the electrical system 600 includes a device controller 604. Specifically, in this example, electrical device 602-1 includes device controller 604-1. Electrical device 602-2 includes device controller 604-2. Electrical device 602-3 includes device controller 604-3. Electrical device 602-4 includes device controller 604-4. Electrical device 602-5 includes device controller 604-5. Electrical device 602-6 includes device controller 604-6. Electrical device 602-7 includes device controller 604-7. Electrical device 602-8 includes device controller 604-8. Electrical device 602-9 includes device controller 604-9. Electrical device 602-10 includes device controller 604-10. Electrical device 602-11 includes device controller 604-11. Electrical device 602-12 includes device controller 604-12.

[0140] Figure 6 All 12 electrical devices 602 in the electrical system 600 are part of the same group controlled by the main controller 685. Each electrical device 602 in the electrical system 600 communicates directly or indirectly with the main controller 685 through a default communication network (e.g., the default communication network 195). In addition, each electrical device 602 in the electrical system 600 is configured to communicate directly with at least one other electrical device 602 through an alternative communication network (e.g., the alternative communication network 197), and excludes the main controller 685. Each device controller 604 includes a transceiver (e.g., the transceiver 224) that uses a communication link 605 that is substantially similar to the communication link 105 described above to send and receive communication signals through both the default communication network and the alternative communication network. In this case, the communication link 605 uses wireless technology.

[0141] The transceiver of the device controller 604 of each electrical device 602 has a range 619 (e.g., 10 meters) that defines the maximum volume within the spatial volume 699 within which the transceiver can send and receive communication signals. Each range 619 is a portion of the spatial volume 699 in which the electrical device 602 is at least partially located. The range of the transceiver of the master controller 685 covers at least the entire spatial volume 699. In addition to the electrical devices 602, the master controller 685 can communicate with Figure 6 Communicates with a gateway (e.g., gateway 180) not shown.

[0142] Specifically, the transceiver of the device controller 604-1 of the electrical device 602-1 has a range 619-1, the transceiver of the device controller 604-2 of the electrical device 602-2 has a range 619-2, the transceiver of the device controller 604-3 of the electrical device 602-3 has a range 619-3, the transceiver of the device controller 604-4 of the electrical device 602-4 has a range 619-4, the transceiver of the device controller 604-5 of the electrical device 602-5 has a range 619-5, the transceiver of the device controller 604-6 of the electrical device 602-6 has a range 619-6, and the transceiver of the device controller 604-7 of the electrical device 602-8 has a range 619-8. The transceiver of the device controller 604-7 of the electrical device 602-7 has a range 619-7, the transceiver of the device controller 604-8 of the electrical device 602-8 has a range 619-8, the transceiver of the device controller 604-9 of the electrical device 602-9 has a range 619-9, the transceiver of the device controller 604-10 of the electrical device 602-10 has a range 619-10, the transceiver of the device controller 604-11 of the electrical device 602-11 has a range 619-11, and the transceiver of the device controller 604-12 of the electrical device 602-12 has a range 619-12.

[0143] In this example, range 619-1 intersects with range 619-2, range 619-2 intersects with range 619-3, range 619-3 intersects with range 619-4, range 619-4 intersects with range 619-5, range 619-5 intersects with range 619-6, range 619-6 intersects with range 619-7, range 619-7 intersects with range 619-8, range 619-8 intersects with range 619-9, range 619-9 intersects with range 619-10, range 619-10 intersects with range 619-11, and range 619-11 intersects with range 619-12. Figure 6 As shown in , there is a slight overlap between adjacent ranges 619 so that all electrical devices 602 can communicate with each other directly or indirectly (e.g., via an alternative communication network) without involving the main controller 685.

[0144] In this case, the spatial volume 699 is a portion of an office space defined by an outer wall 696 forming the perimeter of the spatial volume 699. In this case, the spatial volume 699 is divided into several areas within the outer wall 696. For example, the wall 691 and the door 692 separate the corridor (in which the electrical equipment 602-1, the electrical equipment 602-2, and the electrical equipment 602-3 are located) from the workspace (in which the rest of the electrical equipment 602 is located). A small office defined by a wall 694 and a door 698, in which the electrical equipment 602-12 and the main controller 685 are located, subdivides the workspace within the spatial volume 699. The electrical equipment 602-4 (exit sign) is located above and adjacent to the door 692 within the workspace. Several partition walls 693 are located within the workspace. As in the case of using radio frequency waves, the communication link 605 may be able to have a range (not shown) extending beyond a wall, door, or other boundary within the spatial volume 699.

[0145] When the main controller 685 is compromised (e.g., hacked), one or more of the electrical devices 602 may determine that instructions in the communication signals received from the main controller 685 via the default communication network fall outside of acceptable operating parameters. At this point, the electrical devices 602 may coordinate among themselves using the alternative communication network to operate using different instructions relative to the instructions sent by the main controller 685, and ignore subsequent communication signals from the main controller 685 until confirmation is received that the main controller 685 is no longer compromised.

[0146] Example embodiments may be used to operate an electrical system with a compromised (e.g., hacked, malfunctioning) master controller. Example embodiments may be used for any type of electrical system, including lighting systems. Example embodiments may be used for new installations of electrical systems (including their electrical devices) and for the modification of existing electrical systems (including their electrical devices). Example embodiments also provide several other benefits. Such other benefits may include, but are not limited to, increased ease of maintenance, easier use, increased reliability, modularity, easy installation, and compliance with industry standards applicable to electrical devices and electrical systems.

[0147] Although the embodiments described herein are made with reference to the example embodiments, it will be appreciated by those skilled in the art that various modifications are fully within the scope and spirit of the present disclosure. It will be appreciated by those skilled in the art that the example embodiments described herein are not limited to any specific discussed applications, and that the embodiments described herein are illustrative and not restrictive. Based on the description of the example embodiments, those skilled in the art will remind themselves of the equivalents of the elements shown therein, and those skilled in the art will remind themselves of the ways in which other embodiments are constructed using the present disclosure. Therefore, the scope of the example embodiments is not limited herein.

Claims

1. An electrical device (102) of an electrical system (100), the electrical device comprising: a communication module (208) configured to receive instructions from a master controller (185) of the electrical system via a default communication network (195), and wherein the communication module is further configured to communicate with a second electrical device (102) of the electrical system via an alternative communication network (197); and a device controller (204) communicatively coupled to the communication module, wherein the device controller is configured to: receiving a first communication from the communication module, wherein the first communication is received by the communication module from the host controller via the default communication network, and wherein the first communication includes a first instruction; determining that the first instruction of the first communication falls outside of a plurality of acceptable operating parameters (231); sending a query to a second electrical device via the communication module over an alternative communication network (197), wherein the second electrical device also communicates with the master controller via the default communication network, and wherein the query requests a reply from the second electrical device, the reply indicating that the second electrical device received the same first instruction from the master controller; receiving, via the communication module, a response from the second electrical device confirming that the second electrical device also received the first instruction from the main controller; generating a second instruction to replace the first instruction, wherein the second instruction falls within the plurality of acceptable operating parameters; as well as The second instruction is sent to a third electrical device via the alternative communication network using the communication module, wherein the second instruction controls operation of the third electrical device, and wherein at least one subsequent instruction received by the electrical device or the second electrical device from the main controller is not affected by the electrical device or the second electrical device.

2. The electrical device of claim 1, wherein the primary controller is inaccessible to the alternative communication network.

3. The electrical device of claim 1, wherein the device controller is further configured to operate an electrical device component (242) in accordance with the second instructions.

4. The electrical device of claim 1, wherein the response from the second electrical device confirming that the second electrical device also received the first instruction from the master controller confirms that the first instruction sent by the master controller falls outside of the plurality of acceptable operating parameters. 5 . The electrical device of claim 1 , wherein determining that the first instruction of the first communication falls outside of the plurality of acceptable operating parameters indicates that the master controller has been compromised.

6. The electrical device of claim 1, wherein the default communication network transmits a first communication signal at a first frequency compared to a second frequency used by the alternative communication network to transmit a second communication signal.

7. The electrical device according to claim 1, wherein the second communication signal includes an identification code that is not recognized by the main controller.

8. The electrical device of claim 1, wherein the device controller is further configured to send the second instruction to a gateway controlling the main controller using the communication module.

9. A method for operating an electrical system (100) with a damaged primary controller (185), the method comprising: Receiving, by a first electrical device (102) of the electrical system, a first communication from the master controller via a default communication network (195), wherein the first communication includes a first instruction; determining that the first instruction of the first communication falls outside of a plurality of acceptable operating parameters (231); sending a query to a second electrical device via an alternative communication network (197), wherein the second electrical device also communicates with the master controller via the default communication network, and wherein the query requests a reply from the second electrical device indicating that the second electrical device received the same first instruction from the master controller; receiving a response from the second electrical device confirming that the second electrical device also received the first instruction from the master controller; generating a second instruction to replace the first instruction; and The second instruction is sent to a third electrical device (102) of the electrical system via the alternative communication network (197), wherein the second instruction controls the operation of the third electrical device, and wherein at least one subsequent instruction received by the first electrical device or the second electrical device from the main controller is not affected by the first electrical device or the second electrical device.

10. The method according to claim 9, further comprising: The second instruction is sent to a gateway (180) via the alternative communication network, wherein the gateway controls the master controller.

11. The method according to claim 9, further comprising: receiving a third communication from the master controller via the default communication network, wherein the first communication includes a third instruction; determining that the third instruction of the third communication falls outside of the plurality of acceptable operating parameters; and The third instruction is ignored.

12. The method according to claim 9, further comprising: receiving a third communication from the master controller via the default communication network, wherein the third communication includes a third instruction; determining that the third instruction of the third communication falls within the plurality of acceptable operating parameters; generating a fourth instruction; and The fourth instruction is sent to the second electrical device over the alternative communication network, wherein the fourth instruction instructs the second electrical device to comply with subsequent communications received from the primary controller.

13. The method according to claim 9, further comprising: receiving a query including a third instruction from the second electrical device via the alternative communication network, wherein the third instruction is received by the second electrical device from the master controller in a third communication via the default communication network; determining whether the third instruction falls outside of the plurality of acceptable operating parameters; after determining whether the third instruction falls outside of the plurality of acceptable operating parameters, generating a response including a determination as to whether the third instruction falls outside of the plurality of acceptable operating parameters; and The response is sent to the second electrical device via the alternative communication network.

14. The method according to claim 9, further comprising: The first electrical device is operated according to the second instruction.

Images