Configuration of components of a lighting system by means of a blockable transponder

Abstract

The present invention relates to a controller (1) for a component of a lighting system, which controller has a transponder (9), a control device (10), and at least one mechanical element (11...14). The transponder (9) receives data from a transmitter by means of an antenna (8), at least when the controller (1) is switched off, and stores said data. The mechanical element (11...14) is designed to disrupt or damage the antenna (8) when the controller (1) is connected to the component. The control device (10) reads the data stored in the transponder (9) at least after the controller (1) is switched on in order to use it for controlling the component to be controlled by the controller (1).

Description

[0001] The present invention relates to a control device for a component of a lighting system and a method for protecting the information stored in a transponder of the control device.

[0002] Lighting systems can include components beyond the luminaires themselves, such as sensors or actuators, switches, and dimmers. Control gear, which generates the appropriate operating voltage or current for the luminaires' light sources, allows for monitoring the light source's function and enables the luminaires to be switched on, dimmed, and / or switched off. Sensors that detect, for example, the movement of objects and / or the ambient light level, allow the luminaires to be automatically switched on or off based on the presence or absence of a person, or the dimming of the luminaires to be automatically adjusted to the ambient light level.

[0003] In particular, control gear for luminaires with light-emitting diodes (LEDs) often contains control devices which can receive control data from the outside for setting operating parameters, such as the maximum output current to the LEDs or the color temperature.

[0004] A control device according to the preamble of appended claim 1 is described in EP 3 570 203 A1. EP 3 570 203 A1 discloses a control device for a component of a lighting system, which includes a transponder by means of which control data can be received from a transmitter when the control device is switched off and stored in the control device. Such a control device allows configuration before the control device is installed at its place of use or connected to the component to be controlled. The configuration can be carried out on-site at the construction site or by the manufacturer and can be performed separately for each device.

[0005] EP 3 799 358 A1 discloses a device by which a plurality of devices contained in a carton can be configured in a single operation. The devices are arranged or packaged in such a way that data transmission between a stationary transmitter and the transponders is possible. After the devices (control devices) are connected to the power supply or switched on, the data stored in the transponder is read out and used for control.

[0006] In some applications, device configuration is performed only before installation, making further configuration after installation or commissioning unnecessary or even undesirable for security reasons. Data encoding or the use of access codes can make unauthorized reading or manipulation of stored data more difficult. However, this requires special transponders or a complex implementation of encoding in the control device.

[0007] The invention is based on the objective of providing a device and a method with which unauthorized access to the stored data or the writing of new data can be prevented in a simple manner.

[0008] This problem is solved according to the features of the independent claims. The invention is further developed by the features of the dependent claims.

[0009] According to the present invention, a control device for a component of a lighting system comprises a transponder, a control unit, and at least one mechanical element for access protection. The transponder is configured to receive and store data from a transmitter by means of an antenna, at least when the control device is switched off. The control unit reads the data stored in the transponder, at least after the control device is switched on, and uses this data to control the component. The at least one mechanical element is configured to disrupt or damage the antenna after the control device is connected to the component, wherein the at least one mechanical element can be moved from a first position, in which the antenna is not disrupted or damaged by the mechanical element, for a necessary installation step of the control device.without being damaged, it must be moved to a second position in which the antenna is disturbed or damaged by the mechanical element.

[0010] Due to the malfunction or damage of the antenna, radio transmission between the transponder and an external reader / transmitter is no longer possible, thus preventing the reader / transmitter from accessing the transponder's memory. The transponder therefore no longer represents a potential security vulnerability. The malfunction or damage can occur after data transmission by the transmitter and before the control device is put into operation. Preferably, the malfunction or damage occurs automatically (unavoidably) during the installation of the control device, or when the mechanical element must be moved into the second position for a necessary installation step, at which point the antenna is malfunctioned or damaged by the mechanical element.

[0011] Since only the antenna is disrupted or damaged, the data stored in the transponder's memory can be read by the control unit if the control unit is connected to the component and switched on.

[0012] The interference can be caused by shielding that prevents the emission or reception of electromagnetic waves, and / or by a detuning of the antenna's resonant frequency. Damage to the antenna from the mechanical element can result in bending, short-circuiting, and / or severing. The antenna can be the transponder's antenna or an antenna coupled to the transponder's antenna, which, for example, as described in EP 3 570 203 A1, enables signal transmission to the transponder (NFC chip) located deep inside the housing.

[0013] For portable electrical equipment, strain relief is required as a mechanical protective device to prevent flexible electrical conductors (connecting cables) from being pulled out. At least one mechanical element of such strain relief can be a component that includes a metallic shield for the antenna or is at least partially made of metal (e.g., screws, clamps) which interferes with the antenna. The strain relief can be positioned close to and / or in the transmit / receive direction to minimize interference.

[0014] The strain relief can be pivotable or movable with respect to the antenna, whereby the strain relief is pivotable or movable into the second position, in which the electrical lines can be fixed by the strain relief and / or connected to the control device and in which the metallic shielding or the metallic screws and / or clamp interferes with the antenna of the transponder.

[0015] Alternatively, the strain relief can be mounted to the control device, for example by means of screws or a snap connection, whereby the metallic shielding or the screws and / or clamp interferes with the antenna of the transponder when the strain relief is mounted on the control device.

[0016] The control device can have a connection terminal for electrical lines, wherein the at least one mechanical element is a cover for the connection terminal and the cover has a metallic shield for the antenna.

[0017] Alternatively or additionally, at least one mechanical element can be an electrical connector for connection to the control device, which has a metallic shield for the antenna and interferes with it when plugged in or causes a detuning of the antenna's resonant frequency when plugged in.

[0018] Alternatively or additionally, a mechanical element can be a housing part of the component that has a metallic shield for the antenna. In particular, the component can be a luminaire and the control device a part of a control gear for lamps, wherein the antenna is arranged on a side of the control gear that rests against the housing part or at least faces the housing part when the control gear is mounted in the luminaire, so that the metallic luminaire housing shields / blocks the antenna.

[0019] Alternatively or additionally, at least one mechanical element may be a screw for attaching the control device to the component or other support element, for attaching a cover to the control device or for attaching a strain relief to the control device, wherein the screw is made of metal and / or is designed to destroy the antenna.

[0020] The antenna may have a predetermined breaking point, wherein at least one mechanical element is designed to act on the predetermined breaking point in order to damage the antenna.

[0021] The mechanical element can be designed as a control element (e.g., push button, rotary or slide switch). The sole function of this control element is to prevent data transmission. When activated by a user, the control element acts on the predetermined breaking point and damages the antenna. Thus, even before installation, for example by the seller, the possibility of data transmission can be permanently blocked without having to perform any installation steps.

[0022] Alternatively, the mechanical element can be a cover for electrical connections of the control device, the cover being designed to act on the predetermined breaking point in order to damage the antenna when the cover is opened.

[0023] According to one embodiment of the present invention, the at least one mechanical element is part of a mounting device to which the control device can be attached. For this purpose, the control device comprises, in addition to the transponder and the control unit, at least one fastening element for attaching the control device to the mounting device. The at least one fastening element is configured to position the control unit relative to the mechanical element such that the at least one mechanical element interferes with or damages the antenna when the control device is attached to the mounting device.

[0024] The mounting device can be a mounting rail, in particular of a linear lighting system, or the housing of a device, in particular a component. The mounting rail or housing can be made at least partially of metal, so that the antenna is shielded by the metallic mounting rail or housing when the control device is attached to the mounting rail or to / in the metallic housing. The control device can have a housing in which the antenna is arranged on a surface on the inside or outside of the housing that, in the mounted state, rests against or at least faces the metallic mounting rail or housing.

[0025] Alternatively or additionally, at least one mechanical element can be a protrusion (bolt, pin or edge) located on the mounting rail or housing, which acts directly or indirectly on the antenna during the attachment of the control device in order to damage the antenna.

[0026] At least one mechanical fastening element can be a hole / opening for a screw or a snap hook for attaching the control device.

[0027] The data may contain at least information on the configuration of the control device itself and / or information on the configuration of the component to be controlled by the control device, wherein the control device is designed to configure the control device and / or the component to be controlled by the control device according to the information.

[0028] The transponder can be an NFC transponder (Near Field Communication) or an NFC transponder based on RFID (radio-frequency identification) technology.

[0029] According to the present invention, a method for preventing data transmission between a transmitter and the described control device, which includes a transponder and a mechanical element, comprises the step of activating the mechanical element to disrupt or damage the antenna of the transponder before or while the control device is connected to the component, wherein the at least one mechanical element must be moved from a first position, in which the antenna is not disrupted or damaged by the mechanical element, to a second position, in which the antenna is disrupted or damaged by the mechanical element, for a necessary installation step of the control device.

[0030] The data transmitted by the transmitter can be received and stored by the transponder before the mechanical element is activated, with the data stored in the transponder being read by the control device after the mechanical element is activated.

[0031] The invention will now be explained in more detail with reference to the accompanying drawings. These show: Fig. 1 in a schematic representation a first embodiment of a control device in the configurable state according to the present invention, Fig. 2 the control device of the first embodiment in the locked state, and Fig. 3a und 3b a second embodiment of a control device according to the present invention, Fig. 4 the control device of the second embodiment in the locked state, and Fig. 5 a simplified flowchart to illustrate the method according to the present invention.

[0032] Components with identical functions are marked with the same reference symbols in the figures. To avoid unnecessary repetition, a repeating description is omitted where it is superfluous.

[0033] Fig. 1 Figure 1 shows a simplified schematic representation of a control device 1 and a mobile transmitter 2 according to the present invention. The control device 1 is, in particular, an operating device for operating several light sources (not shown). The transmitter 2 is not part of the control device 1 and serves to configure / parameterize the control device 1 or the operating device via a wireless connection 3. The transmitter 2 has a transmit and receive unit (not shown) for sending and receiving data via the wireless connection 3, a display unit 4 for displaying the data to be sent and / or received, and a processor (not shown) on which software (microprogram or application software, app) can be executed, which controls the read and write process as well as the selection of the data to be transmitted.

[0034] The control device 1, i.e., in the illustrated example the operating device, has a first connection terminal 5 with terminals L, N for a mains voltage line and terminals D1, D2 for a data bus line, a DC-DC converter 6 which generates the currents / voltages required for the light sources, a power factor correction circuit 7 which converts the mains voltage into an operating voltage for the DC-DC converter 6 and corrects the power factor, a transponder 9 having an antenna 8 which can wirelessly receive the data from the transmitter 2, and a control unit 10 which controls the DC-DC converter 6 and the power factor correction circuit 7.The control unit 10 can be designed as a processor, a microprocessor, a controller, a microcontroller or an application-specific special circuit (ASIC) or a combination of the aforementioned units and can receive control commands for switching on / off and / or dimming via the data bus line.

[0035] At the in Fig. 1 No cables are yet connected to the control device 1 shown in a top view. Although the control device 1 is not yet operational or connected to a power supply, information for configuration / parameterization, such as the maximum current to be supplied to the light sources, the color temperature to be set and / or a network or bus address, can be transmitted from the transmitter 2 to the control device 1 via the wireless connection 3.

[0036] For such coupling / connection, the transmitter 2 generates short-range alternating magnetic fields or high-frequency radio waves, which power the (passive) transponder 8 and store the information received from the transmitter 2 in a non-volatile, optionally rewritable memory (not shown). The transponder 8 can store information / data (e.g., identification / authentication information) that can only be read (R / O) via the wireless connection, as well as data (e.g., preset parameters) that can both be read and overwritten / modified (R / W).

[0037] The transponder 9 can be an NFC chip or an RFID transponder, in particular an NFC transponder based on RFID technology that uses a special coupling method standardized for separate frequency ranges and short-range communication.

[0038] When the control device 1 is supplied with power, for example during commissioning, the control unit 10 reads the stored data from the memory of the transponder 9 and parameterizes / configures the operating device according to the read data.

[0039] The control device 1 has a second connection terminal (not shown) for connecting the light source, a cover 11 (touch protection) for the second connection terminal that is movable towards the antenna 8 of the transponder 9, and a metallic shield 12 for the antenna 8 that is movable away from the cover. The cover 11 and the metallic shield 12 form a mechanical element that serves both as touch protection and as protection against unauthorized access to the stored data or unauthorized writing of new data.

[0040] Fig. 1 Figure 1 shows the control device 1 in a state where it can be configured by means of the transmitter 2, because the metallic shield 12 is in a position where it does not interfere with the antenna 8, and where the lamps cannot be connected to the control device 1 or the control gear because the second connection terminal is covered by the cover 11. The cover 11 has a handle 13 by means of which the installer can slide the cover 11 in the direction of the arrow F1 shown in order to expose the second connection terminal for connecting the lamps or their connecting leads.

[0041] Fig. 2 The control device 1 is shown in a state in which light sources can be connected to the control device 1 or the second connection terminal 14 because the cover 11 has been moved, and in which the data stored in the transponder 9 can no longer be read or manipulated by the transmitter 2 or another transmitter / reader because the metallic shield 12 has been pushed in front of the antenna 8 by the movement of the cover 11 and now interferes with it. Additionally, the cover 11 can be designed such that it cannot be moved, or can only be moved partially, in the direction of arrow F1 when lines are connected to the second connection terminal 14, in order to prevent unauthorized data access.

[0042] The metallic shield 12 can be attached to the cover 11, so that the metallic shield 12 can move the antenna 8 by shifting the cover 11 in the direction of the Fig. 2 The arrow F2 shown is released again. In this way, for example, data could be read from and / or new data saved to transmitter 2 during a repair of control device 1 at the manufacturer.

[0043] Alternatively, the metallic shield 12 can only be moved from the cover 11 in the direction of arrow F1, so that the interference with the antenna 8 caused by the metallic shield 12 cannot be reversed. In this way, the manufacturer or seller can move the cover 11 in the direction of arrow F1 to ensure that no access (even by the installer) to the stored data by the transmitter 2 is possible. The antenna 8 and / or the area surrounding the antenna 8 is designed such that the radio signal from the transmitter 2 can only be received through the opening that can be closed by the metallic shield.

[0044] Cover 11 only covers the second connection terminal 14 or, if antenna 2 is disturbed, exposes it. Alternatively, the first connection terminal 4, which has the mains connections L and N, can be covered by cover 11 to ensure that data access via the wireless connection 3 is not possible after the control device 1 is connected to the mains power supply.

[0045] The interference of the antenna 8 by the metallic shielding 12 can be a shielding that prevents the emission or ingress of electromagnetic waves or merely a detuning of the resonant frequency of the antenna 8.

[0046] Alternatively, the mechanical element and the antenna 8 can be designed such that when the cover 11 is moved in the direction of arrow F1, the antenna 8 is damaged (e.g., bent, short-circuited, and / or severed). This has the advantage that the mechanical element does not need to contain any metallic parts.

[0047] Alternatively or additionally, the control device 1 may have at least one bore for a screw for fastening the control device 1 to the mounting location or to a component (e.g. strain relief, cover) of the control device 1, which passes through the antenna or is located close to the antenna, so that when fastening the screw damages or interferes with the antenna.

[0048] The described mechanical element (bore and screw or cover 11 and metallic shield 12) has at least two functions: mounting / covering on the one hand, and concealed data access protection, which is activated during mounting or movement of the cover, on the other. Alternatively, the mechanical element can serve solely the function of data access protection.

[0049] If the control device 1 is intended to be mounted on a metallic plate (e.g., a mounting rail or a metallic housing of a luminaire), this plate can be used as a metallic shield. For this purpose, the antenna 8 in the control device 1 is arranged such that, after the control device 1 is mounted on the metallic plate, the antenna 8 is interfered with by the metallic plate, or the metallic plate takes over the function of the metallic shield 12.

[0050] Fig. 3a und 3b Figure 1 shows such a control device in its unmounted and therefore configurable state. The in Fig. 3a The control device 1 shown in a top view has a housing 15 in which the first connection terminal 5, the second connection terminal 14, the DC voltage converter 6, the power factor correction circuit 7, the DC voltage converter 6, the transponder 9 and the control unit 10 are arranged, and a fastening element 16 for fastening the control device 1 to a holding device or the metallic plate.

[0051] The fastening element 16 is a U-shaped metal plate to the inside of which the plastic housing 15 is attached and which has two recesses 17, 18 (openings) for screws for mounting the control device 1 to the metal plate. The first connection terminal 5 and the second connection terminal 14 are each accessible via a removable cover 19, 20.

[0052] The one marked with a dotted line in Fig. 3a The antenna 8 shown is arranged on an inner side of the housing 15 facing the mounting element 16. Alternatively, the antenna 8 can be arranged on an outer side of the housing 15 facing the mounting element 16.

[0053] Fig. 3b Figure 1 shows the underside of the control device 1, or the side of the control device 1 that, after the control device 1 has been mounted, rests against the metallic plate or at least faces it. As shown in Figure 1. Fig. 3b As shown, the fastening element 16 has an opening 21 in the area where the antenna 8 is located, for the wireless connection 3 with the transmitter 2. For configuring several control devices 1, these can be arranged side by side on a table or in a box such that the openings 21 face the transmitter 2 or the outside of the box, respectively.

[0054] Fig. 4 Figure 1 shows the control device 1 mounted on a metallic plate 22 by means of two screws 23, 34 and nuts 35, 36. The plate 22, which can be part of a lamp housing or a mounting rail of a light strip, interferes with the antenna 8 or closes the opening 21, so that no wireless connection 3 with the transmitter 2 is possible and the data stored in the memory of the transponder 9 cannot be read or manipulated by the transmitter 2. The antenna 8 and / or the area around the antenna 8 is designed such that the radio signal can only be received by the transmitter 2 via the open opening.

[0055] In the Fig. 4 In the example shown, the wireless communication function of the transponder is only disabled when the control device 1 is attached to the metallic plate 22. Alternatively, the housing 15 can be displaceable relative to the mounting element 16 in the main extension direction of the mounting element 16 between a configuration position and a mounting position. In the configuration position, the opening 21 is located above the antenna 8, but one of the two recesses 17, 18 is covered by the housing 15. In the mounting position, one of the two recesses 17, 18 is not covered by the housing 15, and the opening 21 is not located above the antenna 8, or the antenna 8 is obstructed by the mounting element 16. Thus, the wireless communication function can also be disabled before mounting, if necessary by an irreversible displacement, and the plate 22 does not need to be made of a metallic material to achieve this disabling.

[0056] In Fig. 5 A highly simplified flowchart is shown, illustrating the individual steps in carrying out the procedure described in detail above. Steps S1 and S2 are performed before the control device 1 is mounted / connected at its installation site. In step S1, the information to be transmitted is determined and sent to the transponder 9 via the wireless connection 3. In step S2, the transmitted information is received and stored by the transponder 9. In step S3, the mechanical element 11-14 is activated / actuated before or during mounting or connection, which disrupts or damages the antenna 8. In step S4, the information stored in the transponder 9 is read out for control purposes.

Claims

1. Control device for a component of a lighting system, the control device (1) comprising: ∘ a transponder (9) configured to receive and store, by means of an antenna (8), data from a transmitter (2) at least when the control device (1) is in the switched-off state; and ∘ a control unit (10) configured to read out the data stored in the transponder (9) at least after the control device (1) is switched on and to use said data for controlling the component to be controlled by the control device (1), characterized in that the control device comprises at least one mechanical element (11..14) which is configured to interfere with or to damage the antenna (8) when the control device (1) is connected to the component, wherein said at least one mechanical element (11..14) must be moved, as part of a required installation step of the control device, from a first position in which the antenna (8) is neither interfered with nor damaged by the mechanical element, to a second position in which the antenna (8) is interfered with or damaged by the mechanical element.

2. Control device according to claim 1, characterized in that the at least one mechanical element (11..14) is a strain relief for electrical leads; and the strain relief has a metallic shielding for the antenna (8).

3. Control device according to claim 2, characterized in that the strain relief is pivotable or slidable relative to the antenna (8); and the strain relief is pivotable or slidable into the second position in which the electrical leads can be secured by the strain relief and / or connected to the control device (1), and in which the metallic shielding interferes with the antenna (8) of the transponder (9).

4. Control device according to claim 2, characterized in that the strain relief is mountable on the control device (1); and the metallic shielding interferes with the antenna (8) of the transponder (9) when the strain relief is mounted on the control device (1).

5. Control device according to any one of claims 1 to 4, characterized in that the control device (1) comprises a connection terminal (14) for electrical leads; the at least one mechanical element (11..14) is a cover (11) for the connection terminal (14); and the cover (11) comprises a metallic shielding (12) for the antenna (8).

6. Control device according to any one of claims 1 to 5, characterized in that the at least one mechanical element (11..14) is an electrical plug for connection to the control device (1); and the electrical plug comprises a metallic shielding for the antenna (8).

7. Control device according to any one of claims 1 to 6, characterized in that the at least one mechanical element (11..14) is a housing part of the component; and the housing part comprises a metallic shielding for the antenna (8).

8. Control device according to any one of claims 1 to 7, characterized in that the at least one mechanical element (11..14) is a screw for fastening the control device (1) to the component or to another support element, or for fastening a cover or a strain relief of the control device (1); and the screw is made of metal and / or is configured to destroy the antenna (8).

9. Control device according to any one of claims 1 to 8, characterized in that the antenna (8) has a predetermined breaking point; and the at least one mechanical element (11..14) is configured to act on the predetermined breaking point in order to damage the antenna (8).

10. Control device according to claim 9, characterized in that the at least one mechanical element (11..14) is actuatable by a user.

11. Control device according to claim 9 or 10, characterized in that the at least one mechanical element (11..14) is a cover for electrical connections (4, 5) of the control device (1); and the cover is configured to act on the predetermined breaking point in order to damage the antenna (8) when the cover is opened.

12. Control device according to claim 1, characterized in that the control device (1) comprises at least one fastening element (16) for attaching the control device to a holding device (22); and that the at least one fastening element (16) is configured to position the control unit (10) relative to the at least one mechanical element (11..14) which is part of the holding device (22), such that the at least one mechanical element (11..14) interferes with or damages the antenna (8) when the control device (1) is fastened to the holding device (22).

13. Control device according to any one of claims 1 to 12, characterized in that the data include at least information for configuring the control device (1) itself and / or information for configuring the component to be controlled by the control device (1); and that the control unit (10) is configured to configure the control device (1) and / or the component to be controlled by the control device (1) according to said information.

14. Control device according to any one of claims 1 to 13, characterized in that the transponder (9) is an RFID transponder or an NFC transponder.

15. Method for preventing a data transmission between a transmitter (2) and a control device (1), the control device (1) comprising a transponder (9) and a mechanical element (11..14), the transponder (9) being configured to receive and store, by means of an antenna (8), data from a transmitter (2) at least when the control device (1) is in the switched-off state, and the control unit (10) being configured to read out the data stored in the transponder (8) at least after the control device (1) is switched on and to use said data for controlling the component to be controlled by the control device (1), characterized by activating (S2) the at least one mechanical element (11..14) to interfere with or to damage the antenna (8) of the transponder (9) before or while the control device (1) is connected to the component, wherein the at least one mechanical element (11..14) is moved, as part of a required installation step of the control device, from a first position in which the antenna (8) is neither interfered with nor damaged by the mechanical element, to a second position in which the antenna (8) is interfered with or damaged by the mechanical element.

16. Method according to claim 15, characterized in that the data transmitted by the transmitter (2) are received and stored (S2) by the transponder (9) before the mechanical element (11..14) is activated; and that the data stored in the transponder (9) are read out (S4) by the control device (1) after the mechanical element (11..14) has been activated.

Images