SYSTEM AND METHOD FOR COMMUNICATION OF SENSOR DATA AND / OR USER CONTROL DATA - Patent application

Abstract

The present disclosure relates to a system (100) for communicating sensor data and / or control data within a predefined space. The system comprises a base unit arranged for wireless communication using an open network, the base unit storing therein a configuration for network communication using the open network, the configuration including a first encryption key and a predefined scheme for network communication between devices having the first encryption key. At least one node stores therein the configuration for network communication and a unit ID identifying the node. The base unit (101) and at least one node (102; 103, 104) are arranged to communicate over an entry network. The base unit (101) is arranged to initiate a pairing procedure with at least one of the nodes of the entry network, the pairing procedure including sending additional configuration for communication over a secure network to at least one of the nodes (102; 103, 104).

Description

[Technical field]

[0001] Technical Field The present invention relates to a system for communication of sensor data and / or user controlled data.

[0002] The invention further relates to a method implemented in said system. [Background technology]

[0003] background Air handling units such as evaporative humidifiers and chillers are used to humidify and cool various types of spaces within buildings. Other types of air handling units are dryer dehumidifiers, heat exchangers, or filter arrangements.

[0004] The air handling unit may be controlled to improve building performance and / or occupant comfort and / or energy optimization. The control of the air handling unit may be based on input data from sensors. Additionally, the air handling unit may have a user interface for input of user preferences and / or control settings for control of the air handling unit. Summary of the Invention [Problem to be solved by the invention]

[0005] overview It is an object of the present invention to provide an improved handling of sensor data and / or user control data, which may be provided, for example, in a monitoring system or in a system for controlling a process. [Means for solving the problem]

[0006] The present disclosure relates to a system for communicating sensor data and / or user control data within a predetermined space. The predetermined space may be within a building or may be otherwise a confined or controlled space. The system comprises a base unit arranged to communicate wirelessly using an open network, the base unit having stored therein a configuration for network communication using the open network, the configuration including a first encryption key and a predetermined scheme for network communication between devices having the first encryption key. The system further comprises at least one node comprising a sensor unit and / or a user control unit, each of the nodes having stored therein the configuration for network communication and a unit ID that uniquely identifies the node.

[0007] The base unit and at least one node are arranged to find each other based on the settings for network communication, and to communicate over the entry network using the first encryption key and according to the predetermined scheme for network communication.

[0008] The base unit is arranged to initiate a pairing procedure with at least one of the discovered nodes of the entry network, the pairing procedure including transmitting additional configuration for communication over the secure network to at least one of the discovered nodes, the additional configuration including at least one second unique encryption key for use in secure communication over the secure network. Each paired node is added to the secure network for communication between the base unit and the paired node upon completion of the pairing procedure.

[0009] Thus, the system disclosed herein provides various levels of secure communications using an open network, such as a mesh network.

[0010] The base unit and the nodes, which have stored settings for network communication, can communicate with each other using a first low degree of security enabled by a first encryption key for encrypting all communications and a predetermined scheme for defining the timing of communications. In this specification, communication over an open network using a first encryption key for encrypting all communications and a predetermined scheme for defining the timing of communications is referred to as an entry network. In this manner, both the encryption and the predetermined scheme for defining the timing of communications contribute to making it difficult for an intruder to access the entry network and / or eavesdrop on communications between the base unit and the nodes.

[0011] Additionally, a second degree of security is provided between the base unit and the paired node, referred to herein as a secure network, where communication occurs using a second encryption key that is unique to the particular network. This has the added benefit that multiple secure networks can be built in the same space without interfering with each other.

[0012] According to the solution defined in this document, the base unit has a gatekeeper function: it is the base unit that initiates the pairing procedure with at least one of the discovered nodes of the entry network, and therefore it is the base unit that controls which nodes to pair with.

[0013] Sensor data and / or user control data may be communicated over both the entry network and the secure network. However, there may be a difference in the level of trust between data communicated over the entry network and data communicated over the secure network. For example, the base unit may be arranged to provide only sensor data and / or control data received over the secure network to a controller for process control. The controller may be implemented within the base unit or may be implemented in an external unit. The sensor data and / or control data received over the entry network may be used for display and / or monitoring and / or logged.

[0014] In one embodiment, the base unit is arranged to send a request message encrypted with a first encryption key, and each node is arranged to receive and decrypt the request message encoded with the first encryption key, whereby the base unit and each node (102; 103, 104) have found each other, and each discovered node is arranged to send an ID message encrypted with the first encryption key, said ID message including a unit ID, and the base station is arranged to receive and decrypt each ID message.

[0015] The base unit may further comprise a display and user interaction means. In that case, the base unit display may be arranged to present a list of discovered nodes based on the received and decrypted unit ID. The user interaction means may enable the user to select a node to be paired from the list of discovered nodes, so that the node selected by the user is registered with the based unit and a pairing procedure is initiated for the node selected by the user. The formation of the secure network is thereby user controlled from the base unit.

[0016] The base unit display may be arranged to present the nodes connected to the secure network, and user interaction means of the base unit may provide management of the nodes connected to the secure network, said management may include removal of nodes.

[0017] In a different embodiment, the base unit is arranged to transmit to the node being added to the secure network a time to initiate the secure network, at which time communications using a second unique encryption key are initiated at both the base unit and the associated node, thereby adding the node to the secure network.

[0018] In a different embodiment, at least one of the nodes comprises at least one user control unit with an input interface for setting parameters related to the process control, the user control unit being arranged to transmit information about the parameter settings to the base unit, which can then transmit the parameter settings for the process control.

[0019] The system may be a monitoring system for monitoring one or more sensors.

[0020] The system may be a system for controlling a process such as: Injection molding and printing, Dry milk and other food production processes; Manufacturing of battery cells, medical substances, or other chemical processes; Preservation of buildings, bridges, wind turbines, equipment, and historical artifacts in museums; · Repairing buildings and other structures damaged by moisture; or Controlling the hardening process of concrete or adhesives, cheese ripening, fruit and dairy ripening.

[0021] In a different embodiment, the system is an indoor climate control system for controlling an air handling unit arranged to influence the air in a building. In that case, the user control unit may comprise an input interface for setting a temperature level and / or a humidity level, and the user control unit may be arranged to transmit information related to the set temperature and / or humidity to the base unit. The air handling control unit may be arranged to be controlled based on sensor data and / or user control data transmitted to the base unit via the secure network.

[0022] The present disclosure further relates to a method for communicating with at least one node, the method being executed in a base unit of a system for communicating sensor data and / or control data, the base unit having stored therein a configuration for network communication using the open network, the configuration including a first encryption key and a predefined scheme for network communication between devices having the first encryption key. The method comprises: transmitting a join request message over an open wireless network, the join request message being transmitted using a predetermined scheme and encoded using the first encryption key; receiving at least one ID message including a unit ID of a participating node via an open wireless network, the received ID message being communicated using a predetermined scheme and encrypted using a first encryption key; Decrypting the received response message; - initiating a pairing procedure with at least one of the participating nodes, the pairing procedure including sending additional configuration for communication over a secure network to at least one of the participating nodes (102; 103, 104), the additional configuration including at least one second unique encryption key for use in the secure communication over the secure network; Initiating a secure communication with a paired node, in which at least one unique second encryption key is used to encrypt / decrypt messages to be communicated; Includes.

[0023] The invention also relates to a method executed in a node for communication with a base unit of a system for communicating sensor data and / or control data, said node having stored therein a configuration for network communication using an open network and a unique unit ID, said configuration including a first encryption key and a predefined scheme for network communication between devices having the first encryption key. The method comprises the steps of: receiving a join request message from a base unit via the open wireless network, the received join request message being communicated using a predetermined scheme for network communication and encoded using a first encryption key; Decoding the received join request message; Upon successful decoding of the join request message, transmitting (403) an ID message including the unit ID of the node over the open wireless network, the ID message being transmitted using a predetermined scheme for network communication and encoded using a first encryption key; receiving, via the open network, additional configuration for communication over the secure network, the additional configuration for communication including at least one unique second encryption key; Initiating a secure communication, in which at least one unique second encryption key is used for encryption / decryption of a communicated message; Includes.

[0024] The present disclosure further relates to a computer program comprising instructions that, when said program is executed by a computer, cause the computer to carry out any of the methods disclosed herein. [Brief description of the drawings]

[0025] BRIEF DESCRIPTION OF THE DRAWINGS [Figure 1] 1 is a signaling scheme illustrating an example of signaling in a system for communicating sensor data and / or user control data. [Diagram 2] 1 is a flow chart illustrating an example of a method for communicating with at least one node, the method being performed in a base unit of a system for communication of sensor data and / or user controlled data. [Diagram 3] 5 is a flow chart illustrating an example of a method performed in a node for communicating with a base unit of a system for communication of sensor data and / or user controlled data. [Figure 4] FIG. 1 is a block diagram illustrating an example of an indoor climate control system for controlling an air handling unit configured to affect the air within a building. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0026] Detailed Description The present disclosure relates to a system for communicating sensor data and / or user control data within a predetermined space. The predetermined space may be within a building or may be otherwise a confined or controlled space. The system includes a base unit arranged to communicate wirelessly using an open network, the base unit storing therein a configuration for network communication using the open network, the configuration including a first encryption key and a predetermined scheme for network communication between devices having the first encryption key. The system further includes at least one node including a sensor unit and / or a user control unit, each of the nodes storing therein the configuration for network communication and a unit ID that uniquely identifies the node. The base unit and the at least one node are arranged to find each other based on the configuration for network communication and to communicate over an entry network using the first encryption key and according to the predetermined scheme for network communication. The base unit is arranged to initiate a pairing procedure with at least one of the discovered nodes of the entry network, the pairing procedure including transmitting additional configuration for communication over the secure network to at least one of the discovered nodes, the additional configuration including at least one second unique encryption key for use in secure communication over the secure network. Each paired node is added to the secure network for communication between the base unit and the paired node upon completion of the pairing procedure.

[0027] In FIG. 1, a signaling scheme illustrates exemplary signaling of the system for communicating sensor data and / or user control data within a given space.

[0028] The system may be a monitoring system for monitoring one or more sensors.

[0029] The system may be a system for controlling a process such as: Injection molding and printing, Dry milk and other food production processes; Manufacturing of battery cells, medical substances, or other chemical processes; Preservation of buildings, bridges, wind turbines, equipment, and historical artifacts in museums; · Repairing buildings and other structures damaged by moisture; or Controlling the hardening process of concrete or adhesives, cheese ripening, fruit and dairy ripening.

[0030] In a different embodiment, the system is an indoor climate control system for controlling an air handling unit configured to affect air within a building.

[0031] A signaling system is a system for communication between a base unit 101 and at least one node 102 .

[0032] The base unit 101 may be a base unit connected to or integrated with an air handling unit configured to influence the air in a building, in which case the base unit 101 is part of an indoor climate control system for controlling the air handling unit.

[0033] The base unit has stored therein a configuration for wireless network communication using an open network, the configuration including a first encryption key and a predetermined scheme for network communication between devices having the first encryption key. The configuration may further include an entry network ID or a PAN ID for the entry network. The entry network ID is used to uniquely identify the entry network. Devices on the same network must share the network ID.

[0034] The settings are common for the units intended to be connected to the system. In practice, the settings are specific to one or more manufacturers of the units of the system for the communication of sensor data and / or user controlled data and / or intended for use with the system for the communication of sensor data and / or user controlled data. Characteristically, the settings are stored in the respective units at the time of their manufacture. The settings are kept secret to prevent unauthorized use. The units having the settings are arranged to communicate with each other according to a predefined scheme in the entry network. At least one node 102 comprises for example a user controlled unit and / or a sensor unit.

[0035] To find nodes intending to communicate with the base unit 101 in the entry network, the base unit transmits a join request message M1 encrypted with a first encryption key over the open wireless network using a predefined communication scheme. The node is arranged to receive and decode the join request message if it is within communication range over the open wireless network. If the node is able to receive and decode the join request message, it has joined the entry network. Once joined, the node transmits a response message M2. The response message M2 is transmitted according to a predefined scheme and is encrypted with the first encryption key. The response message includes the unit ID of the node.

[0036] It is assumed that the base unit and the nodes are synchronized to enable communication of messages according to a predetermined scheme. Such synchronization is known in the art and will not be described in detail herein. For example, each node may include a crystal that is calibrated by the network.

[0037] Upon receiving and decoding reply message M2, base unit 101 determines that a joining node has been found.

[0038] The base unit 101 and the node 102 are arranged to communicate with each other according to a predetermined scheme, using a first encryption key to encrypt messages, which is shown in Figure 1 as two-way message M3.

[0039] After the base unit determines to perform pairing with one or more of the participating nodes to enable secure communication, the base unit sends a message M4 to the selected nodes containing additional settings for communication over the secure network. The settings may further include a timing for initiation of secure communication between the node 102 and the base unit 101.

[0040] The base unit 101 and the node 102 are then connected for secure communication and are thus arranged to communicate securely using the second unique encryption key. The secure communication is preferably performed according to a predefined scheme. Alternatively, the secure communication may be performed according to another scheme for secure communication, which scheme for secure communication may be pre-stored in the base unit and the node. The secure communication is shown in FIG. 1 as a two-way message M5.

[0041] In Fig. 2, an exemplary method 200 for communicating with at least one determined node is shown, the method 200 being executed in a base unit of a system for communication of sensor data and / or user controlled data, the base unit having stored therein a configuration for network communication using the open network, the configuration including a first encryption key and a predefined scheme for network communication between devices having the first encryption key.

[0042] The method 200 includes the step 201 of transmitting a join request message over an open wireless network, the join request message being transmitted using a predefined scheme and encoded using the first encryption key.

[0043] The method 200 further includes receiving 202 at least one response message over the open wireless network, the response message including the unit ID of the participating node, the received response message being communicated using a predetermined scheme and encrypted using a first encryption key.

[0044] The method further comprises a step 203 of decoding the received response message.

[0045] The pairing procedure can then be initiated (205), either automatically or manually.

[0046] In a user-initiated example, the participating nodes are presented (203) in a user interface for the user to select nodes to be paired with, and a user selection of at least one node for pairing is detected. The at least one user-selected node is then registered with the base unit, and a pairing procedure is initiated for the user-selected nodes.

[0047] The pairing procedure includes transmitting (206) additional configuration for communication over the secure network to at least one of the participating nodes (102; 103, 104), said additional configuration including at least one second unique encryption key for use in the secure communication over the secure network.

[0048] The method further includes a step 207 of initiating secure communication with the paired node, in which at least one unique second encryption key is used to encrypt / decrypt messages to be communicated. Initiating secure communication (207) may include transmitting a time to initiate the secure network to the node to be added to the secure network. Then, at the transmitted time, communication using the second unique encryption key is initiated with both the base unit and the involved node.

[0049] In FIG. 3, an exemplary method 300 is shown executed in a node for communicating with a base unit of a system for communication of sensor data and / or control data, the node having stored therein a configuration for network communication using an open network and a unique unit ID, the configuration including a first encryption key and a predefined scheme for network communication between devices having the first encryption key.

[0050] A node may for example comprise at least one sensor unit, which may be arranged to detect at least one of the following: Relative humidity, ·Dew point, ·Normal atmospheric gases such as oxygen, nitrogen and carbon dioxide, Volatile organic compounds (VOCs), ·temperature, Gaseous chemicals such as radon, Air pressure, Sound pressure level, ·Electromagnetic field, Light conditions, Aerosols, and ·particle.

[0051] In one example, the node comprises at least one user control unit, which may comprise an input interface for setting parameters relating to the process control.

[0052] The method includes receiving (301) a join request message from a base unit over an open wireless network, the received join request message being communicated using a predetermined scheme for network communication and encoded using a first encryption key.

[0053] The method further comprises a step of decoding the received join request message 302. Upon successful decoding of the join request message, the node is considered joined.

[0054] The method further comprises a step 303 of transmitting a response message over the open wireless network in the form of an ID message containing the unit ID of the node upon successful decoding of the join request message. The ID message is transmitted using a predefined scheme for network communication and is encoded using a first encryption key. This procedure may be repeated at predefined intervals until a configuration for secure communication is received.

[0055] The method further comprises a step 304 of receiving, via the open network, additional configuration for communication over the secure network, said additional configuration for communication including at least one unique second encryption key.

[0056] The method further includes initiating (305) a secure communication in which at least one unique second encryption key is used to encrypt / decrypt messages to be communicated. Initiating (305) the secure communication includes receiving from the base unit a time to initiate the secure network. Then, at the transmitted time, communication using the second unique encryption key is initiated at both the base unit and the node.

[0057] If the node comprises a user control unit, the user control unit may transmit information related to parameters set in the user control unit to the base unit. These transmissions may be performed in the entry network and / or the secure network.

[0058] If a node comprises a sensor unit, the sensor unit may transmit sensor data to the base unit. These transmissions may be performed in the entry network and / or in the secure network.

[0059] The methods described herein may be implemented in a computer program comprising instructions which, when executed by a computer, cause the computer to perform the method.

[0060] In FIG. 4, the system disclosed herein is shown in the context of an indoor climate control system 400 for controlling an air handling unit 105 configured to affect the air within a building.

[0061] The air handling unit 105 is arranged to cool and / or heat and / or dry and / or dehumidify and / or purify the air in the building. The air handling unit 105 forms for example an evaporative humidifier and / or a cooler. The air handling unit 105 is then used to humidify and / or cool different types of spaces in the building. Other types of air handling units are dryer dehumidifiers, heat exchangers, or filter arrangements.

[0062] System 400, in one example, includes a base unit 101 connected to an air handling unit 105. In one example, base unit 101 is a stand-alone base unit 101. Alternatively, the base unit is integrated with the air handling unit 105.

[0063] The functionality of the base unit 101 is arranged to provide data to the air handling unit for use in controlling the air handling unit. The base unit 101 acts as an interface between the air handling unit 105 and remote units such as a sensor unit 103 and / or a user control unit 104.

[0064] The base unit 101 may comprise a memory 106 for storing data, and a processor. The base unit 101 may comprise a display 107 and user interaction means 108 for inputting user data.

[0065] The base unit 101 has stored therein a configuration including a first encryption key and a predefined scheme for network communications between devices having the first encryption key. The configuration identifies the origin of the communication system and, optionally, the air handling unit 105 to which it is connected or integrated. The configuration is coded as a feature in the hardware or software of the base unit at the time of manufacture. At least a portion of the configuration is preferably hidden in the hardware or software, thereby preventing unauthorized access. The configuration may be stored in memory 106.

[0066] The base unit 101 is arranged to communicate wirelessly using a wireless open network and the configuration described herein. A network using the wireless open network and the configuration described herein is called an entry network. The open network may be a mesh network.

[0067] At least one node 103, 104 intended to communicate with the base unit may be within communication range in the wireless open network to the base unit 101. The node 103, 104 may comprise a memory 111 for storing data and a processor. The node 103, 104 may comprise a display 109 and / or user interaction means 110 for inputting user data.

[0068] Each node has stored therein the same settings as are stored in the base unit. As mentioned above, the settings identify the origin of the system for communication of sensor data and / or user controlled data and, optionally, the air handling unit for which the system is intended for communication of sensor data and / or user controlled data. As mentioned above, the settings are coded as features in the hardware or software of the node at the time of manufacture. At least a portion of the settings is preferably hidden in the hardware or software, which may prevent unauthorized access. Each node further has stored therein a unit ID that identifies the node. The settings and unit ID may be stored in memory 111.

[0069] As is evident from the above, each at least one node comprises a sensor unit 103 and / or a user control unit 104 .

[0070] The user input means 110 of the user control unit 104 may comprise an input interface for setting the temperature and / or humidity levels.

[0071] In this application, the at least one sensor unit 103 may include at least one sensor for sensing at least one of the following: Relative humidity, Dew point, and ·temperature.

[0072] The base unit 101 and at least one node 103, 104 are arranged to find each other based on the settings for network communication and to communicate via the entry network using the first encryption key and according to a predetermined scheme for network communication.

[0073] In particular, the base unit 101 is arranged to send a request message encrypted with a first encryption key, and each node is arranged to receive and decrypt the request message encoded with the first encryption key, whereby the base unit 101 and each node (102; 103, 104) join. Each joining node is then arranged to send a response message in the form of an ID message encrypted with the first encryption key, said ID message including the unit ID. The base station is then arranged to receive and decrypt each ID message.

[0074] Communications are available on the entry network according to a predefined scheme for communication between units having a configuration as described herein. The predefined scheme characteristically defines time slots for communication. The communication may be based, for example, on Time Synchronized Channel Hopping (TSCH). This means that the time slots for communication are small and thus the system is very energy efficient. The communications over the entry network are encrypted with a first encryption key.

[0075] As mentioned above, the base unit 101 and the at least one node 103, 104 are arranged to communicate with each other via the entry network. For example, the user control unit 104 may be arranged to transmit information related to the set temperature and / or humidity to the base unit 101 via the entry network. The base unit 101 may then be arranged to receive the transmitted information. The base unit 101 may be arranged to display at least a portion of the received information related to the set temperature and / or humidity.

[0076] For example, the sensor unit 103 may be arranged to transmit sensor data over the entry network to the base unit 101, which is then arranged to receive the transmitted sensor data. The base unit may be arranged to display at least a portion of the received sensor data.

[0077] In one option, data transmitted from the user control unit 104 and / or the sensor unit 103 over the entry network is not used to control the air handling unit.

[0078] Further, the base unit 101 is arranged to initiate a pairing procedure with at least one of the nodes of the entry network. The pairing procedure includes transmitting additional settings for communication over the secure network to at least one of the joining nodes. The additional settings may also be referred to as credentials for secure communication. The additional settings include at least one second unique encryption key for the secure network and for use in secure communication over the secure network. Preferably, at least one sensor unit 103 and at least one user control unit 104 are connected to the secure network.

[0079] In one example, the display 107 of the base unit is arranged to present a list of participating nodes that are not paired, and the user interaction means 108 of the base unit 102 allows the user to select the nodes to be paired from the list, the nodes selected by the user are registered with the based unit 102, and a pairing procedure is performed with the nodes selected by the user.

[0080] Pairing is a process used in computer networking that serves to set up a linkage between computing devices to enable communication between them. In the context of the present invention, the linkage between the computing devices already exists by means of a configuration as described above. In the context of the present invention, pairing is performed to set up a linkage for communication in a secure network.

[0081] In one example, the additional configuration includes a secure network ID or a PAN ID for the secure network, in addition to the second unique encryption key. In one example, the unique network ID is used to uniquely identify the secure network. As mentioned in relation to the entry network, devices on the same network must share a network ID.

[0082] In the pairing process, a second unique encryption key is communicated to the node for use in secure communications over the secure network. The transmitted second unique encryption key is then stored in the respective node 103, 104 for use in subsequent secure communications. Additionally, the secure network ID or the PAN ID for the secure network, if present, is also communicated to and stored therein.

[0083] As is apparent from the above, the second unique encryption key for communication over the secure network is transmitted over the entry network using a predefined scheme for communication, even if a secure network ID or a PAN ID for the secure network is present.

[0084] The encryption used for secure communication is typically a symmetric block cipher. For example, the Advanced Encryption Standard (AES) is used for encryption (and subsequent decryption). The block length of the block cipher used in AES is, for example, 128 bits, 192 bits or 256 bits.

[0085] In one example, the second unique encryption key, or block, is generated at the base unit in conjunction with pairing. According to this example, the second unique encryption key is not stored in either unit until it is used. This increases security. The risk of unauthorized access to the second encryption key is minimized. The secure network ID, or the PAN ID for the secure network, may also be generated at the base unit in conjunction with pairing, as may the second unique encryption key.

[0086] Secure communication is initiated upon completion of the pairing procedure. The display of the base unit is in one example arranged to present the nodes connected to the secure network. The user interaction means may provide management of the nodes connected to the secure network, said management may include deleting a node. This means that one can choose not to pair a presented paired node and can choose to pair a presented non-paired node. Deleting a node, i.e. unpairing a node, may include the base unit informing the node that it has been unpaired and in response the node deleting or compromising the second unique encryption key to render it unusable.

[0087] The base unit may be arranged to transmit a time to initiate the secure network to the node being added to the secure network, at which time communication using the second unique encryption key is initiated at both the base unit and the associated node, thereby adding the node to the secure network.

[0088] At least a portion of the data communicated from the sensor units and / or user control units to the base unit over the secure network is provided to the air handling unit for control of the air handling unit. Thus, characteristically, the base unit is arranged to use data received from the nodes over the entry network for display and other possible uses that do not affect the air handling unit. The base unit is further arranged to use data received from the nodes over the secure network for transfer for control of the air handling unit. Additionally, software updates sent from the base unit to the nodes may only be permitted over the secure network.

[0089] Characteristically, the open network used is a mesh network, thus allowing the solution provided herein to communicate with participating nodes in the entry network and secure communication in the secure network, even if the base unit and the sensor unit / user control unit are not in direct communication.

Claims

1. A system (100) for communicating sensor data and / or control data within a given space, said system comprising: a base unit (101) arranged for wireless communication using an open network, said base unit having stored therein settings for network communication with units intended to be connected to said system using said open network, said settings being specific to one or more manufacturers of units of said system for communicating sensor data and / or user controlled data and / or intended for use with said system for communicating sensor data and / or user controlled data, said settings including a first encryption key and a predefined scheme for network communication between devices having said first encryption key, said predefined scheme defining time slots for network communication; at least one node (102; 103, 104) equipped with a sensor unit and / or a user control unit intended to be connected to the system, said node storing therein said settings for network communication and a unit ID identifying said node; Equipped with the base unit (101) and the at least one node (102; 103, 104) are arranged to find each other based on the settings for network communication and to communicate over an entry network using the first encryption key and according to the predetermined scheme for network communication; whereby the communications over the entry network using the first encryption key and the predetermined scheme for defining time slots for network communications together contribute to making it difficult for an intruder to access the entry network and / or eavesdrop on the communications between the base unit and the node; the base unit (101) is arranged to initiate a pairing procedure with at least one of the found nodes of the entry network, the pairing procedure including transmitting additional configuration for communication over a secure network to at least one of the found nodes (102; 103, 104), the additional configuration including at least one second unique encryption key for use in secure communication over the secure network; A system, wherein each paired node (102; 103, 104) is added to the secure network upon completion of the pairing procedure.

2. the base unit (101) is arranged to send a request message encrypted with the first encryption key, and the at least one node is arranged to receive and decrypt the request message encoded with the first encryption key, whereby the base unit (101) and the at least one node (102; 103, 104) have found each other; the at least one discovered node is arranged to transmit an ID message encrypted with the first encryption key, the ID message including a unit ID; 2. A system for communicating sensor data and / or control data as claimed in claim 1, wherein the base unit is arranged to receive and decode the respective ID messages.

3. A system for communicating sensor data and / or control data according to claim 1 or 2, wherein the base unit further comprises a display and user interaction means.

4. 4. The system for communicating sensor data and / or control data as described in claim 3, wherein the base unit display is arranged to present a list of the discovered nodes based on the received and decrypted unit ID, and the user interaction means enables a user to select a node to be paired from the list of discovered nodes, the node selected by the user being registered with the based unit, and the pairing procedure being initiated with the node selected by the user.

5. 5. A system for communicating sensor data and / or control data as described in claim 3 or 4, wherein the base unit display is arranged to present the nodes connected to the secure network, and the user interaction means of the base unit provide management of the nodes connected to the secure network, said management may include removal of nodes.

6. A system for communicating sensor data and / or control data as described in any one of claims 1 to 5, wherein the base unit is arranged to transmit to the node being added to the secure network a time to start the secure network, and at the transmitted time, communication using the second unique encryption key is initiated in both the base unit and the node being added to the secure network, whereby the node is added to the secure network.

7. A system for communicating sensor data and / or control data according to any one of claims 1 to 6, wherein at least one sensor unit and at least one user control unit are connected to said secure network.

8. A system for communicating sensor data and / or control data as described in any one of claims 1 to 7, wherein at least one of the nodes comprises at least one user control unit having an input interface for setting parameters related to process control, the user control unit being arranged to transmit information regarding the parameter settings to the base unit.

9. At least one of the nodes Relative humidity, dew point, Normal atmospheric gases, Volatile organic compounds, VOCs, temperature, Gaseous chemicals, Air pressure, Sound pressure level, electromagnetic field, Light conditions, Aerosols, and particle A system for communicating sensor data and / or control data according to any one of claims 1 to 8, comprising at least one sensor unit arranged to detect at least one of:

10. A system for communicating sensor data and / or control data as described in any one of claims 1 to 9, wherein the base unit is arranged to provide only sensor data and / or control data received via the secure network to a controller for process control.

11. The system for communicating sensor data and / or control data according to any one of claims 1 to 10, wherein the open network is a mesh network.

12. The system according to any one of claims 1 to 11, wherein the system is an indoor climate control system (100) for controlling an air handling unit (105) configured to influence the air inside a building.

13. 13. The indoor climate control system of claim 12, wherein the user control unit comprises an input interface for setting a temperature level and / or a humidity level, and the user control unit is arranged to transmit information related to the set temperature and / or humidity to the base unit.

14. 1. A method (200) for communicating with at least one node, the method being executed on a base unit of a system for communicating sensor data and / or control data, the base unit having stored therein settings for network communication with units intended to be connected to the system using an open wireless network, the settings being specific to one or more manufacturers of units of the system for communicating sensor data and / or user controlled data and / or intended for use with the system for communicating sensor data and / or user controlled data, comprising a first encryption key and a predefined scheme for network communication between devices having the first encryption key, the method comprising: transmitting (201) a join request message over the open wireless network, the join request message being transmitted using the predefined scheme and encoded using the first encryption key, the predefined scheme defining a time slot for entry network communication, whereby the communications over the entry network using the first encryption key and the predefined scheme defining a time slot for network communication together contribute to making it difficult for an intruder to access the entry network and / or eavesdrop on the communications between the base unit and the node; receiving (202) at least one ID message including a unit ID of a participating node via the open wireless network, the received ID message being communicated using the predetermined scheme and encrypted using the first encryption key; Decoding (203) the received response message; and initiating (205) a pairing procedure with at least one of the participating nodes, the pairing procedure including transmitting (206) additional configuration for communication over a secure network to the at least one of the participating nodes (102; 103, 104), the additional configuration including at least one second unique encryption key for use in secure communication over the secure network; Initiating (207) a secure communication with a paired node, in which the at least one second unique encryption key is used to encrypt / decrypt messages to be communicated; A method comprising:

15. Presenting the participating nodes via a user interface for a user to select nodes to be paired (204); Detecting a user selection of at least one node for pairing; Including, At least one user selected node is registered with the based unit and the pairing procedure is initiated with the user selected nodes (205). The method (200) of claim 14, further comprising the step of selecting nodes to pair.

16. A method (300) executed in a node for communication with a base unit of a system for communicating sensor data and / or control data, said node having stored therein a configuration for network communication with units intended to be connected to said system using an open wireless network and a unique unit ID, said configuration being specific to one or more manufacturers of units of said system for communicating sensor data and / or user controlled data and / or intended for use with said system for communicating sensor data and / or user controlled data, comprising a first encryption key and a predefined scheme for network communication between devices having said first encryption key, said method comprising: receiving (401) a join request message from the base unit via the open wireless network, the received join request message being communicated using the predefined scheme for network communication and encoded using the first encryption key, the predefined scheme defining a time slot for network communication, whereby the communication over the entry network using the first encryption key and the predefined scheme defining a time slot for network communication together contribute to making it difficult for an intruder to access the entry network and / or eavesdrop on the communication between the base unit and the node; Decoding the received join request message; Upon successful decoding of the join request message, transmitting (403) an ID message including the unit ID of the node over the open wireless network, the ID message being transmitted using the predetermined scheme for network communication and encoded using the first encryption key; receiving (404) additional configuration for communication over a secure network via the open wireless network, the additional configuration for communication including at least one unique second encryption key; Initiating (405) a secure communication, in which the at least one unique second encryption key is used for encryption / decryption of a communicated message; A method comprising:

17. A computer program for operating on a base unit comprising instructions which, when said program is executed by a computer, cause said computer to carry out a method according to any one of claims 14 to 15.

18. A computer program for operating on a node, comprising instructions that, when executed by a computer, cause the computer to perform the method of claim 16.

Images