A system comprising nodes in a mesh network and a method in such a system

Abstract

A method in a system is disclosed, the system comprising a plurality of nodes, each of the plurality of nodes being preconfigured with first parameters which enable the node to communicate with at least one other node via a first mesh network, the plurality of nodes including at least one first node and a plurality of second nodes, wherein each of the at least one first node is communicatively coupled or couplable with a server in which node identifiers for the respective ones of the plurality of nodes are stored as well as corresponding node secure keys. For each of at least some of the node identifiers, the server encrypts a set of second parameters for the corresponding node using the node secure key thereof, wherein for node, the set of second parameters enable the node to communicate with at least one other node via a second mesh network. The server transmits the sets of encrypted second parameters to the first node(s) together with identifiers identifying the nodes which correspond to the respective ones of the sets of encrypted second parameters. Each of the at least one first node transmits via the first mesh network to the second node(s) to which the first node is communicatively inter-coupled via the first mesh network the corresponding set(s) of encrypted second parameters. Each of the plurality of nodes decrypts its received set of encrypted second parameters using its node secure key.

Description

[0001] A SYSTEM COMPRISING NODES IN A MESH NETWORK AND A METHOD IN

[0002] SUCH A SYSTEM

[0003] TECHNICAL FIELD

[0004] The present invention relates to a method in a system comprising a plurality of nodes, with each of the nodes being able to communicate with at least one other node of the plurality of nodes via a mesh network. The present invention further relates to such a system. By means of one or more embodiments of the present invention, provisioning of a mesh network by which the plurality of nodes may communicate may be facilitated.

[0005] BACKGROUND

[0006] Different entities may be communicatively coupled via a communications network such that communication between the entities is enabled. Such entities, which may be referred to nodes without any loss of generality, may for example be comprised in lighting devices, thereby forming a connected lighting system. Prior to operation of the communications network, the entities or nodes may need to be appropriately configured so as to enable communication between the entities. In other words, the communications network may need to be provisioned prior to operation of the communications network. As known the art, provisioning of a network generally refers to a process of setting up the network so that authorized users, devices, and servers can access it.

[0007] US10887447B2 relates to configuration and / or management of smart nodes with limited user interfaces. It discloses a processing device configured to obtain an identifier of a first node of a set of nodes deployed at a building or other structure, to associate the first node with a user account, to obtain an identifier of a second node of the set of nodes, and to associate the second node with the first node and the user account. Associating the first node with the user account may comprise, for example, establishing an association between the first node and the user account without the processing device having access to a network connection. Additionally or alternatively, the identifier of the first node may be sent to a backend server over a network connection, with configuration information for the first node being received from the backend server in response thereto. SUMMARY

[0008] In a connected lighting system comprising a plurality of nodes, only a limited number of nodes of the lighting system may be provided with a capability to communicate with other entities than the other nodes. This may be referred to as that most of the nodes only have a ‘local’ radio frequency (RF) communication interface, enabling the respective nodes to communicate with other nodes of the connected lighting system, whereas one or more other nodes (e.g., a single node or only a few nodes) have both such a ‘local’ RF communication interface as well as a ‘cellular’ communication interface, enabling the respective ones of these one or more nodes to communicate with other entities than the other nodes. Such other entities may in the following be referred to as a server for ease of description but without any loss of generality. The server may for example be a cloud server. Such a connected lighting system, having what may be referred to as a hybrid lighting network architecture, may significantly reduce the cost of required hardware for the connected lighting system. With such a hybrid lighting network architecture, the node-to- node communication and applications may be via the ‘local’ RF interfaces (e.g., implemented via a mesh network, such as, for example, a Bluetooth mesh network), and the node-to-server communication and application may be via the node(s) having both a ‘local’ RF communication interface as well as a ‘cellular’ communication interface.

[0009] It may be desired or even required that the network by which the plurality of nodes of the connected lighting system may communicate via their ‘local’ RF communication interfaces shall be automatically provisioned from the server. The server may be remotely located in relation to the nodes. Thus, it may be desired or even required that such provisioning shall be carried out with only little or without any on-site operation. The node- to-node communication and applications may be via the ‘local’ RF interfaces and may be implemented via a mesh network. The node(s) in the connected lighting system having both a ‘local’ RF communication interface as well as a ‘cellular’ communication interface may act as so-called ‘embedded provisioner’ to provision the adjacent nodes into the mesh network. In order to do this, the server may select and notify the node(s) in the connected lighting system having both a ‘local’ RF communication interface as well as a ‘cellular’ communication interface to perform a conventional Bluetooth mesh network provisioning procedure, e.g., a conventional Bluetooth mesh network provisioning procedure, with the adjacent nodes. In order to reduce the cost of required hardware, a node having both a ‘local’ RF communication interface as well as a ‘cellular’ communication interface may be ‘managing’ several ones (e.g., as many as possible) of the nodes having a ‘local’ RF communication interface only. However, when the node having both a ‘local’ RF communication interface as well as a ‘cellular’ communication interface acts as a so-called ‘embedded provisioner’ to provision the adjacent nodes into the mesh network, that node may only be able to provision the adjacent nodes that are in a one-hop distance from it in the mesh network. This will limit the number of adjacent, or neighboring, nodes which a node having both a ‘local’ RF communication interface as well as a ‘cellular’ communication interface can manage.

[0010] In view of the above, a concern of the present invention is to provide a method by which provisioning of a mesh network by which a plurality of nodes may communicate is facilitated while at the same time keeping the cost of required hardware relatively low.

[0011] According to a first aspect of the present invention, a method is provided. The method is carried out, or implemented, in a system comprising a plurality of nodes, wherein each of the plurality of nodes is preconfigured with first parameters which enable the node to communicate with at least one other node of the plurality of nodes via a first mesh network. For each of the plurality of nodes, the first parameters include a node identifier and a node secure key for the node, wherein the respective node identifier for each node of the plurality of nodes uniquely identifies that node, and wherein the respective node secure key for each node of the plurality of nodes is unique for that node. The plurality of nodes include at least one first node and a plurality of second nodes. Each of the at least one first node is communicatively coupled or couplable with a server in which the node identifiers for the respective ones of the plurality of nodes are stored as well as the corresponding node secure keys. Each of the second nodes is communicatively inter-coupled with one of the at least one first node via the first mesh network. The method comprises, for each of at least some of the node identifiers, the server encrypting a set of second parameters for the corresponding node using the node secure key thereof, wherein for each of the plurality of nodes, the set of second parameters enable the node to communicate with at least one other node of the plurality of nodes via a second mesh network that is different from the first mesh network. The method comprises the server transmitting the sets of encrypted second parameters to the first node(s) together with identifiers identifying the nodes which correspond to the respective ones of the sets of encrypted second parameters. The method comprises, each of the at least one first node transmitting via the first mesh network to the second node(s) to which the first node is communicatively inter-coupled via the first mesh network the corresponding set(s) of encrypted second parameters. The method comprises each of the plurality of nodes decrypting its received set of encrypted second parameters using its node secure key.

[0012] According to a second aspect of the present invention, a system is provided. The system comprises a plurality of nodes, wherein each of the plurality of nodes is preconfigured with first parameters which enable the node to communicate with at least one other node of the plurality of nodes via a first mesh network. For each of the plurality of nodes, the first parameters include a node identifier and a node secure key for the node, wherein the respective node identifier for each node of the plurality of nodes uniquely identifies that node and wherein the respective node secure key for each node of the plurality of nodes is unique for that node. The system comprises a server. The plurality of nodes include at least one first node and a plurality of second nodes, wherein each of the at least one first node is communicatively coupled or couplable with the server in which the node identifiers for the respective ones of the plurality of nodes are stored as well as the corresponding node secure keys, and wherein each of the second nodes is communicatively inter-coupled with one of the at least one first node via the first mesh network. For each of at least some of the node identifiers, the server is configured to encrypt a set of second parameters for the corresponding node using the node secure key thereof, wherein for each of the plurality of nodes, the set of second parameters enable the node to communicate with at least one other node of the plurality of nodes via a second mesh network. The server is configured to transmit the sets of encrypted second parameters to the first node(s) together with identifiers identifying the nodes which correspond to the respective ones of the sets of encrypted second parameters. Each of the at least one first node is configured to, transmit via the first mesh network to the second node(s) to which the first node is communicatively intercoupled via the first mesh network the corresponding set(s) of encrypted second parameters. Each of the plurality of nodes is configured to decrypt its received set of encrypted second parameters using its node secure key.

[0013] By means of one or more embodiments of the present invention, provisioning of a mesh network by which the plurality of nodes may communicate may be facilitated. In particular, the mesh network by which the plurality of nodes may communicate may be provisioned from a (e.g., remotely located) server, e.g., a cloud server, with only little or no on-site operation being required.

[0014] Only the first node(s) of the plurality of nodes may be communicatively coupled or couplable with the server. The first node(s) may hence be the only node(s) of the plurality of nodes which are able to communicate with at least one other node of the plurality of nodes via a (e.g., the first or the second) mesh network as well as with the server, whereas the second nodes may be able to communicate with at least one other node of the plurality of nodes via a (e.g., the first or the second) mesh network but may not be able to communicate (e.g., directly communicate) with the server. To this end, the first node(s) may be referred to as proxy or intermediary node(s), acting as intermediary between the second nodes and the server. Each of the at least one first node may be communicatively coupled or couplable with the server via a communications network such as the Internet. Each of the at least one first node may be communicatively coupled or couplable with the server by means of one or more secure communication paths, e.g., by means of one or more secure communication paths as known in the art.

[0015] By means of one or more embodiments of the present invention, provisioning of a mesh network by which the plurality of nodes may communicate may be carried out by the server via only a few nodes or even only a single node (i.e., a first node) which is or are able to communicate with at least one other node of the plurality of nodes via a (e.g., the first or the second) mesh network as well as with the server. This is because each of the plurality of nodes is preconfigured with first parameters which enable the node to communicate with at least one other node of the plurality of nodes via a first mesh network, via which first network the sets of second parameters, enabling the nodes to communicate with at least one other node of the plurality of nodes via the second mesh network, can be communicated, or distributed, to the nodes. The distribution of the sets of second parameters can be carried out in a secure manner by means of the node secure keys for the respective nodes, which are included in the first parameters relating to the first mesh network for the respective nodes.

[0016] In the context of the present application, by a (node) secure key of a node, it may be meant in principle any security credential that may be desired or required in order for the node to be able to communicate in a secure way with at least one other node of the plurality of nodes via a mesh network (e.g., the first or second mesh network).

[0017] Each of the plurality of nodes may have been preconfigured with the first parameters during manufacturing of the node. Thus, each of the plurality of nodes may have been preconfigured with the first parameters as a part of the process of manufacturing the node. For each of the plurality of nodes, the first parameters may be stored in a memory of the node.

[0018] As mentioned, for each of at least some of the node identifiers, the server may encrypt a set of second parameters for the corresponding node using the node secure key thereof. In order to determine for which node identifiers this should be done, each of the second nodes may broadcast its node identifier via the first mesh network. Each of the at least one first node may receive the node identifier via the first mesh network of each of the second nodes with which the first node is communicatively inter-coupled via the first mesh network. Each of the least one first node may transmit the received node identifier(s) together with its own node identifier to the server. The mentioned at least some of the node identifiers may include or are constituted by the node identifiers received from the first node(s).

[0019] The step of each of the second nodes broadcasting its node identifier via the first mesh network, the step of each of the at least one first node receiving the node identifier via the first mesh network of each of the second nodes with which the first node is communicatively inter-coupled via the first mesh network, and possibly also the step of each of the least one first node transmitting the received node identifier(s) together with its own node identifier to the server, may be performed (e.g., only once) when the plurality of nodes are brought into operation (e.g., powered on) for the first time.

[0020] As mentioned, each of the at least one first node may transmit via the first mesh network to the second node(s) to which the first node is communicatively inter-coupled via the first mesh network the corresponding set(s) of encrypted second parameters. For example, each of the at least one first node may broadcast via the first mesh network the set(s) of encrypted second parameters together with identifiers identifying the nodes which correspond to the respective ones of the set(s) of encrypted second parameters. Each second node may then, based on the identifiers, determine which set of encrypted second parameters is intended for the second node. Another possibility is that each of the at least one first node based on the identifiers transmits via the first mesh network to the second node(s) to which the first node is communicatively inter-coupled via the first mesh network the corresponding set(s) of encrypted second parameters in one-to-one transmissions, with each one-to-one transmission corresponding to a respective one of the second node(s) to which the first node is communicatively inter-coupled via the first mesh network.

[0021] Each of the second nodes, upon having decrypted its set of encrypted second parameters, may transmit a confirmation thereof via the first mesh network to the first node with which the second node is communicatively inter-coupled via the first mesh network. Each of the at least one first node, upon having decrypted its set of encrypted second communication parameters, may transmit a confirmation thereof and any confirmation received from the second nodes with which the first node is communicatively inter-coupled via the first mesh network to the server. For each of the at least one first node, if the first node has not received the confirmation from a second node with which the first node is communicatively inter-coupled via the first mesh network that the second node has decrypted its set of encrypted second communication parameters within a selected period of time after the first node transmitted the set of encrypted second parameters to the second node, the first node may retransmit the set of encrypted second parameters to the second node via the first mesh network at selected time intervals until the confirmation has been received by the first node.

[0022] The server, upon having received confirmations corresponding to each of the plurality nodes, may transmit a command to each of the at least one first node that each of the plurality of nodes is to thereafter communicate via the second mesh network.

[0023] It is to be noted that the confirmation for each node to the server is an optional step. The server may simply transmit a command to each of the at least one first node that each of the plurality of nodes is to thereafter communicate via the second mesh network after the server transmits the sets of encrypted second parameters to the first node(s) together with identifiers identifying the nodes which correspond to the respective ones of the sets of encrypted second parameters. This is due to as a common knowledge, confirmation / acknowledge of received messages is not an essential feature for information delivery. It is an option to enhance communication robustness / efficiency between two communication parties. E.g., whether the messages have been delivered successfully can be further checked by how receiving party acts / runs.

[0024] Each of the at least one first node may transmit via the first mesh network to the second node(s) to which the first node is communicatively inter-coupled via the first mesh network a command to thereafter communicate via the second mesh network. In alternative or in addition, each of the at least one first node may forward via the first mesh network to the second node(s) to which the first node is communicatively inter-coupled via the first mesh network the command received from the server.

[0025] The encryption of a set of second parameters for the node corresponding to each of at least some of the node identifiers may comprise the server creating a data packet including the encrypted set of second parameters, with the data packet including a header including the identifier of the node corresponding to the encrypted set of second parameters in the data packet.

[0026] The sets of encrypted second parameters transmitted by the server to the first node(s) together with identifiers identifying the nodes which correspond to the respective ones of the sets of encrypted second parameters may be transmitted by the server in one or several messages. For example, for each of the first node(s), the set(s) of encrypted second parameters together with the identifier(s) identifying the node(s) which correspond(s) to the set(s) of encrypted second parameters may be transmitted by the server to the first node separately.

[0027] At least one of the first mesh network and the second mesh network may comprise a Bluetooth mesh network.

[0028] The server may be or comprise a cloud server. The cloud server may be configured to run a cloud application for carrying out one or more of the various operations as described herein. The server may comprise a memory in which the node identifiers for the respective ones of the plurality of nodes are stored, as well as the corresponding node secure keys.

[0029] According to a third aspect of the present invention, a server comprised in a system according to the second aspect of the present invention is provided.

[0030] According to a fourth aspect of the present invention, at least one first node comprised in a system according to the second aspect of the present invention is provided.

[0031] Each or any of the plurality of nodes may comprise or be comprised in a lighting device. Each or any of the plurality of nodes may comprise or be comprised in a light pole, which may be arranged along a road.

[0032] Each or any lighting device or light pole may comprise at least one light source. Each or any light source of the at least one light source may for example comprise a solid state emitter, such as one or more light-emitting diodes (LEDs) and / or one or more lasers. Each or any LED may for example include or be constituted by an inorganic LED and / or an organic LED (OLED). Solid state light emitters are relatively cost-efficient light sources since they in general are relatively inexpensive and have a relatively high optical efficiency and a relatively long lifetime. Examples of LEDs include semiconductor, organic, or polymer / polymeric LEDs, optically pumped phosphor coated LEDs, optically pumped nano-crystal LEDs or any other similar devices as would be readily understood by a person skilled in the art. For example, the term LED can encompass a bare LED die arranged in a housing, which may be referred to as a LED package. According to another example, the term LED can encompass a Chip Scale Package (CSP) LED, which may comprise a LED die directly attached to a substrate such as a printed circuit board (PCB), and not via a submount.

[0033] Further objects and advantages of the present invention are described in the following by means of exemplifying embodiments. It is noted that the present invention relates to all possible combinations of features recited in the claims. Further features of, and advantages with, the present invention will become apparent when studying the appended claims and the description herein. Those skilled in the art realize that different features of the present invention can be combined to create embodiments other than those described herein.

[0034] BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Exemplifying embodiments of the invention will be described below with reference to the accompanying drawings.

[0036] Each of Figures 1-4 is a schematic view of a system according to an embodiment of the present invention, for illustrating principles of one or more embodiments of the present invention.

[0037] Each of Figures 5 and 6 is a schematic flowchart illustrating a method according to an embodiment of the present invention.

[0038] All the figures are schematic, not necessarily to scale, and generally only show parts which are necessary in order to elucidate embodiments of the present invention, wherein other parts may be omitted or merely suggested.

[0039] DESCRIPTION WITH REFERENCE TO THE DRAWINGS

[0040] The present invention will now be described hereinafter with reference to the accompanying drawings, in which exemplifying embodiments of the present invention are shown. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments of the present invention set forth herein; rather, these embodiments of the present invention are provided by way of example so that this disclosure will convey the scope of the invention to those skilled in the art. In the drawings, identical reference numerals denote the same or similar components having a same or similar function, unless specifically stated otherwise.

[0041] Figure 1 is a schematic view of a system 30 according to an embodiment of the present invention, for illustrating principles of one or more embodiments of the present invention. The system 30 comprises a plurality of nodes 1-10 and a server 20. According to the embodiment of the present invention illustrated in Figure 1, the system 30 comprises ten nodes, but it is to be understood that this is according to an example, and that the system 30 could comprise in principle any number of nodes. Thus, the system 30 could comprise fewer or more nodes than illustrated in Figure 1.

[0042] Each of the plurality of nodes 1-10 is preconfigured with first parameters which enable the node to communicate with at least one other node of the plurality of nodes 1-10 via a first mesh network. For each of the plurality of nodes 1-10, the first parameters include a node identifier and a node secure key for the node, wherein the respective node identifier for each node of the plurality of nodes 1-10 uniquely identifies that node and wherein the respective node secure key for each node of the plurality of nodes 1-10 is unique for that node. The first mesh network may be referred to as a ’default’ mesh network. Each of the plurality of nodes 1-10 may for example have been preconfigured with the first parameters during manufacturing of the node. Thus, each of the plurality of nodes 1-10 may have been preconfigured with the first parameters as a part of the process of manufacturing the node. For each of the plurality of nodes, the first parameters may be stored in a memory (not shown in Figure 1) of the node. For each of the plurality of nodes 1-10, the first parameters may include one or more additional parameters. The pre-configuration of each of the plurality of nodes 1-10 with the first parameters may be performed by a mesh network provisioning procedure which as such is known in the art, e.g., a Bluetooth mesh network provisioning procedure which as such known in the art. According to one or more embodiments of the present invention, any one or more additional parameters of the first parameters could for example comprise a common key set, such as NetKey and AppKey as such known in the art. Such a common key set may be common to all nodes and may facilitate or enable the initial node-to-node communications. Any one or more additional parameters of the first parameters could, in alternative or in addition, include another or other types of pre-configured mesh network information for facilitating or enabling the initial node-to-node communications.

[0043] The plurality of nodes 1-10 include at least one first node and a plurality of second nodes, wherein each of the at least one first node is communicatively coupled or couplable with the server 20 in which the node identifiers for the respective ones of the plurality of nodes 1-10 are stored as well as the corresponding node secure keys, wherein each of the second nodes is communicatively inter-coupled with one of the at least one first node via the first mesh network. In accordance with the embodiment of the present invention illustrated in Figure 1, the plurality of nodes 1-10 include two first nodes 1, 10 and eight second nodes 2-9. It is however to be understood that the number of first nodes and the number of second nodes illustrated in Figure 1 are according to examples, and that the number of first nodes and the number of second nodes could be fewer or more than illustrated in Figure 1. However, the number of first nodes is typically less (e.g., much less) than the number of second nodes. There could possibly be a single first node, with the remaining nodes being second nodes. After the pre-configuration of each of the plurality of nodes 1-10 with the first parameters, the node identifiers for the respective ones of the plurality of nodes 1-10 and the corresponding node secure keys (and any other first parameter) may be transmitted (e.g., uploaded) as part of the above-mentioned mesh network provisioning procedure to the server 20.

[0044] For each of at least some of the node identifiers, the server 20 is configured to encrypt a set of second parameters for the corresponding node using the node secure key thereof, wherein for each of the plurality of nodes 1-10, the set of second parameters enable the node to communicate with at least one other node of the plurality of nodes 1-10 via a second mesh network. The second mesh network is different from the first mesh network. As mentioned, the first mesh network may be referred to as a ’default’ mesh network. In such context, the second mesh network may be referred to as a ’new’ mesh network.

[0045] In general, the server 20 is configured to transmit the sets of encrypted second parameters to the first node(s) together with identifiers identifying the nodes which correspond to the respective ones of the sets of encrypted second parameters. Each of the at least one first node is configured to, transmit via the first mesh network to the second node(s) to which the first node is communicatively inter-coupled via the first mesh network the corresponding set(s) of encrypted second parameters. Each of the plurality of nodes 1-10 is configured to decrypt its received set of encrypted second parameters using its node secure key.

[0046] In accordance with the embodiment of the present invention illustrated in Figure 1 and without any loss of generality, the first node 1 is communicatively inter-coupled via the first mesh network with the second nodes 2-5, and the first node 10 is communicatively inter-coupled via the first mesh network with the second nodes 5-9, or with the second nodes 6-9. Further in accordance with the embodiment of the present invention illustrated in Figure 1 and without any loss of generality, the server 20 is configured to transmit the sets of encrypted second parameters to the first nodes 1 and 10 together with identifiers identifying the nodes which correspond to the respective ones of the sets of encrypted second parameters.

[0047] As mentioned, for each of at least some of the node identifiers, the server 20 is configured to encrypt a set of second parameters for the corresponding node using the node secure key thereof. In accordance with the embodiment of the present invention illustrated in Figure 1, the server 20 is configured to, for each of the node identifiers, encrypt a set of second parameters for the corresponding node using the node secure key thereof. Generally, in order to determine for which node identifiers this should be done, each of the second nodes may broadcast its node identifier via the first mesh network. Each of the at least one first node may receive the node identifier via the first mesh network of each of the second nodes with which the first node is communicatively inter-coupled via the first mesh network. Each of the least one first node may transmit the received node identifier(s) together with its own node identifier to the server. The mentioned at least some of the node identifiers may include or are constituted by the node identifiers received from the first node(s).

[0048] In accordance with the embodiment of the present invention illustrated in Figure 1 and as illustrated by the arrows in Figure 1, each of the second nodes 2-9 may broadcast its node identifier via the first mesh network, and each of the first nodes 1, 10 may receive the node identifier via the first mesh network of each of the second nodes 2-9 with which the first node 1, 10 is communicatively inter-coupled via the first mesh network. Each of the first nodes 1 and 10 may transmit the received node identifier(s) together with its own node identifier to the server 20. The mentioned at least some of the node identifiers may include or be constituted by the node identifiers received from the first nodes 1 and 10.

[0049] The step of each of the second nodes 2-9 broadcasting its node identifier via the first mesh network, the step of each of the first nodes 1, 10 receiving the node identifier via the first mesh network of each of the second nodes 2-9 with which the first node 1, 10 is communicatively inter-coupled via the first mesh network, and possibly also the step of each of the first nodes 1, 10 transmitting the received node identifier(s) together with its own node identifier to the server 20, may be performed (e.g., only once) when the plurality of nodes 1- 10 are brought into operation (e.g., powered on) for the first time.

[0050] According to an implementation example, the plurality of nodes 1-10 may comprise or be comprised in a lighting device such as, for example, a light pole, which may be arranged along a road. Prior to installation of the nodes (or lighting devices) at their intended locations, the second parameters for the second mesh network may be created, and the second parameters along with the node identifiers may be transmitted, or uploaded, to the server 20 for example by a person installing the nodes.

[0051] Figure 2 is a schematic view of a system 30 according to an embodiment of the present invention, for illustrating further principles of one or more embodiments of the present invention. The system 30 illustrated in Figure 2 is the same or similar as the system 30 illustrated in Figure 1, and the same reference numerals in Figures 1 and 2 denote the same or similar components, having the same or similar functions. Just as described in the foregoing with reference to Figure 1 and also in accordance with the embodiment of the present invention illustrated in Figure 2, the server 20 is configured to encrypt a set of second parameters for the corresponding node using the node secure key thereof. The encryption of a set of second parameters for the node corresponding to each of at least some of the node identifiers may comprise the server 20 creating a data packet including the encrypted set of second parameters, with the data packet including a header including the identifier of the node corresponding to the encrypted set of second parameters in the data packet. In accordance with the embodiment of the present invention illustrated in Figure 2 and as illustrated by the arrows in Figure 2, the sets of encrypted second parameters may then be transmitted by the server 20 to the first nodes 1, 10 together with identifiers identifying the nodes which correspond to the respective ones of the sets of encrypted second parameters. The sets of encrypted second parameters may be transmitted by the server 20 in one or several messages. For example, for each of the first nodes 1, 10, the sets of encrypted second parameters together with the identifiers identifying the nodes which correspond to the sets of encrypted second parameters may be transmitted by the server 20 to the first node 1, 10 separately.

[0052] According to an implementation example, the server 20 may create a first message for the first node 1, which message may include five data blocks, which may include the sets of encrypted second parameters encrypted using the node secure keys of the respective ones of the first node 1 and the second nodes 2-5. The server 20 may further create a second message for the first node 10, which message may include four data blocks, which may include the sets of encrypted second parameters encrypted using the node secure keys of the respective ones of the first node 10 and the second nodes 6-9. The server 20 may then transmit the first massage to the first node 1 and may transmit the second message to the first node 10. Each of the first nodes 1, 10 may be communicatively coupled or couplable with the server 20 by means of one or more secure communication paths, e.g., by means of one or more secure communication paths as known in the art.

[0053] Figure 3 is a schematic view of a system 30 according to an embodiment of the present invention, for illustrating further principles of one or more embodiments of the present invention. The system 30 illustrated in Figure 3 is the same or similar as the system 30 illustrated in Figures 1 or 2, and the same reference numerals in Figures 4 and in Figure 1 or 2 denote the same or similar components, having the same or similar functions.

[0054] Just as described in the foregoing with reference to Figure 1 and also in accordance with the embodiment of the present invention illustrated in Figure 3, each of the first nodes 1, 10 is configured to, transmit via the first mesh network to the second node 2-9 to which the first node 1, 10 is communicatively inter-coupled via the first mesh network the corresponding set(s) of encrypted second parameters. These transmissions are illustrated in Figure 3 by the arrows between the nodes.

[0055] For example, and in accordance with implementation example described in the foregoing with reference to Figure 2, the first node 1 may transmit the first message to the second nodes 2-5, and the first node 10 may transmit the second message to the second nodes 6-9.

[0056] Figure 4 is a schematic view of a system 30 according to an embodiment of the present invention, for illustrating further principles of one or more embodiments of the present invention. The system 30 illustrated in Figure 4 is the same or similar as the system 30 illustrated in Figures 1, 2 or 3, and the same reference numerals in Figures 4 and in Figure 1, 2 or 3 denote the same or similar components, having the same or similar functions.

[0057] Just as described in the foregoing with reference to Figure 1 and also in accordance with the embodiment of the present invention illustrated in Figure 4, each of the plurality of nodes 1-10 is configured to decrypt its received set of encrypted second parameters using its node secure key.

[0058] In accordance with the embodiment of the present invention illustrated in Figure 3 and as illustrated by the arrows between the nodes going in the direction from the second nodes 2-9 to the first nodes 1, 10, each of the second nodes 2-9, upon having decrypted its set of encrypted second parameters, may transmit a confirmation thereof via the first mesh network to the first node 1, 10 with which the second node is communicatively inter-coupled via the first mesh network. Further, as illustrated by the arrows between the first nodes 1, 10 and the server 20, each of the first nodes 1, 10 may transmit, upon having decrypted its set of encrypted second communication parameters, a confirmation thereof and any confirmation received from the second nodes 2-9 with which the first node is communicatively inter-coupled via the first mesh network to the server 20.

[0059] The server 20, upon having received confirmations corresponding to each of the plurality nodes 1-10, may then transmit a command (not illustrated in Figure 4) to each of the first nodes 1, 10 that each of the plurality of nodes 1-10 is to thereafter communicate via the second mesh network. Further, each of the first nodes 1, 10 may transmit via the first mesh network to the second nodes 2-9 to which the first node 1, 10 is communicatively intercoupled via the first mesh network a command to thereafter communicate via the second mesh network. In alternative or in addition, each of the first nodes 1, 10 may forward via the first mesh network to the second nodes 2-9 to which the first node 1, 10 is communicatively inter-coupled via the first mesh network the command received from the server 20.

[0060] Figure 5 is a schematic flowchart illustrating a method 100 according to an embodiment of the present invention. The method 100 is in a system comprising a plurality of nodes, wherein each of the plurality of nodes is preconfigured with first parameters which enable the node to communicate with at least one other node of the plurality of nodes via a first mesh network. For each of the plurality of nodes, the first parameters include a node identifier and a node secure key for the node, wherein the respective node identifier for each node of the plurality of nodes uniquely identifies that node and wherein the respective node secure key for each node of the plurality of nodes is unique for that node. The plurality of nodes include at least one first node and a plurality of second nodes, wherein each of the at least one first node is communicatively coupled or couplable with a server in which the node identifiers for the respective ones of the plurality of nodes are stored as well as the corresponding node secure keys, wherein each of the second nodes is communicatively intercoupled with one of the at least one first node via the first mesh network.

[0061] In accordance with the embodiment of the present invention illustrated in Figure 5, the method includes seven steps S 101 to S 107. However, each of the steps S101 to SI 03 is optional and may be omitted.

[0062] The method 100 comprises, at S 101 , each of the second nodes broadcasting its node identifier via the first mesh network.

[0063] At, SI 02, each of the at least one first node receives the node identifier via the first mesh network of each of the second nodes with which the first node is communicatively inter-coupled via the first mesh network.

[0064] At SI 03, each of the least one first node transmits the received node identifier(s) together with its own node identifier to the server.

[0065] At SI 04, for each of at least some of the node identifiers, the server encrypts a set of second parameters for the corresponding node using the node secure key thereof, wherein for each of the plurality of nodes, the set of second parameters enable the node to communicate with at least one other node of the plurality of nodes via a second mesh network that is different from the first mesh network. In accordance with the embodiment of the present invention illustrated in Figure 5, the at least some of the node identifiers include or are constituted by the node identifiers received by the server from the first node(s) at SI 03. At SI 05, the server transmits the sets of encrypted second parameters to the first node(s) together with identifiers identifying the nodes which correspond to the respective ones of the sets of encrypted second parameters.

[0066] At SI 06, each of the at least one first node transmits via the first mesh network to the second node(s) to which the first node is communicatively inter-coupled via the first mesh network the corresponding set(s) of encrypted second parameters.

[0067] At SI 07, each of the plurality of nodes decrypts its received set of encrypted second parameters using its node secure key.

[0068] The method 100 may then end.

[0069] Figure 6 is a schematic flowchart illustrating a method 100 according to an embodiment of the present invention. The method 100 illustrated in Figure 6 is similar to the method 100 illustrated in Figure 5 and, just as the method 100 illustrated in Figure 5, includes steps SI 04 to SI 07. Compared to the method 100 illustrated in Figure 5, the method 100 illustrated in Figure 6 does however not include steps S101 to S103, and further includes additional steps S108 to SI 11 and step SI 12 and / or SI 13. However, each of the steps S108 to Si l l and step SI 12 and / or SI 13 is optional and may be omitted.

[0070] The method 100 illustrated in Figure 6 comprises, at SI 08, each of the second nodes, upon having decrypted its set of encrypted second parameters, transmits a confirmation thereof (i.e., a confirmation that is has decrypted its set of encrypted second parameters) via the first mesh network to the first node with which the second node is communicatively inter-coupled via the first mesh network.

[0071] At SI 09, each of the at least one first node transmits, upon having decrypted its set of encrypted second communication parameters, a confirmation thereof and any confirmation received from the second nodes with which the first node is communicatively inter-coupled via the first mesh network to the server.

[0072] At SI 10, for each of the at least one first node, if the first node has not received the confirmation from a second node with which the first node is communicatively inter-coupled via the first mesh network that the second node has decrypted its set of encrypted second communication parameters within a selected period of time after the first node transmitted the set of encrypted second parameters to the second node, the first node retransmits the set of encrypted second parameters to the second node via the first mesh network at selected time intervals until the confirmation has been received by the first node. At SI 11, the server, upon having received confirmations corresponding to each of the plurality nodes, transmits a command to each of the at least one first node that each of the plurality of nodes is to thereafter communicate via the second mesh network.

[0073] At SI 12, each of the at least one first node transmits via the first mesh network to the second node(s) to which the first node is communicatively inter-coupled via the first mesh network a command to thereafter communicate via the second mesh network. In alternative, or in addition, at SI 13, each of the at least one first node forwards via the first mesh network to the second node(s) to which the first node is communicatively inter-coupled via the first mesh network the command received from the server.

[0074] The method 100 may then end.

[0075] While the present invention has been illustrated in the appended drawings and the foregoing description, such illustration is to be considered illustrative or exemplifying and not restrictive; the present invention is not limited to the disclosed embodiments. Other variations to the disclosed embodiments can be understood and effected by those skilled in the art in practicing the claimed invention, from a study of the drawings, the disclosure, and the appended claims. In the appended claims, the word “comprising” does not exclude other elements or steps, and the indefinite article ”a” or “an” does not exclude a plurality. The mere fact that certain measures are recited in mutually different dependent claims does not indicate that a combination of these measures cannot be used to advantage. Any reference signs in the claims should not be construed as limiting the scope.

Claims

CLAIMS:

1. A method (100) in a system comprising a plurality of nodes, each of the plurality of nodes being preconfigured with first parameters which enable the node to communicate with at least one other node of the plurality of nodes via a first mesh network, wherein for each of the plurality of nodes the first parameters include a node identifier and a node secure key for the node, wherein the respective node identifier for each node of the plurality of nodes uniquely identifies that node and wherein the respective node secure key for each node of the plurality of nodes is unique for that node, the plurality of nodes including at least one first node and a plurality of second nodes, wherein each of the at least one first node is communicatively coupled or couplable with a server in which the node identifiers for the respective ones of the plurality of nodes are stored as well as the corresponding node secure keys, wherein each of the second nodes is communicatively intercoupled with one of the at least one first node via the first mesh network, the method comprising: for each of at least some of the node identifiers, the server encrypting (SI 04) a set of second parameters for the corresponding node using the node secure key thereof, wherein for each of the plurality of nodes, the set of second parameters enable the node to communicate with at least one other node of the plurality of nodes via a second mesh network that is different from the first mesh network; the server transmitting (SI 05) the sets of encrypted second parameters to the first node(s) together with identifiers identifying the nodes which correspond to the respective ones of the sets of encrypted second parameters; each of the at least one first node transmitting (SI 06) via the first mesh network to the second node(s) to which the first node is communicatively inter-coupled via the first mesh network the corresponding set(s) of encrypted second parameters; each of the plurality of nodes decrypting (SI 07) its received set of encrypted second parameters using its node secure key; the server transmitting (SI 11) a command to each of the at least one first node that each of the plurality of nodes is to thereafter communicate via the second mesh network.

2. A method according to claim 1, further comprising: each of the second nodes broadcasting (SI 01) its node identifier via the first mesh network; each of the at least one first node receiving (SI 02) the node identifier via the first mesh network of each of the second nodes with which the first node is communicatively inter-coupled via the first mesh network; and each of the least one first node transmitting (SI 03) the received node identifier(s) together with its own node identifier to the server; wherein the said at least some of the node identifiers include or are constituted by the node identifiers received from the first node(s).

3. A method according to claim 2, wherein the step of each of the second nodes broadcasting its node identifier via the first mesh network, the step of each of the at least one first node receiving the node identifier via the first mesh network of each of the second nodes with which the first node is communicatively inter-coupled via the first mesh network, and the step of each of the least one first node transmitting the received node identifier(s) together with its own node identifier to the server, are performed when the plurality of nodes are powered on for the first time.

4. A method according to any one of claims 1-3, further comprising: each of the second nodes, upon having decrypted its set of encrypted second parameters, transmitting (SI 08) a confirmation thereof via the first mesh network to the first node with which the second node is communicatively inter-coupled via the first mesh network; and each of the at least one first node transmitting (SI 09), upon having decrypted its set of encrypted second communication parameters, a confirmation thereof and any confirmation received from the second nodes with which the first node is communicatively inter-coupled via the first mesh network to the server.

5. A method according to claim 4, further comprising: for each of the at least one first node, if the first node has not received the confirmation from a second node with which the first node is communicatively inter-coupled via the first mesh network that the second node has decrypted its set of encrypted second communication parameters within a selected period of time after the first node transmittedthe set of encrypted second parameters to the second node, the first node retransmitting(SI 10) the set of encrypted second parameters to the second node via the first mesh network at selected time intervals until the confirmation has been received by the first node.

6. A method according to claim 4 or 5, the step of the server transmitting (Si l l) a command further comprising: the server, upon having received confirmations corresponding to each of the plurality nodes, transmitting (SI 11) a command to each of the at least one first node that each of the plurality of nodes is to thereafter communicate via the second mesh network.

7. A method according to claim 6, further comprising: each of the at least one first node transmitting (SI 12) via the first mesh network to the second node(s) to which the first node is communicatively inter-coupled via the first mesh network a command to thereafter communicate via the second mesh network; or each of the at least one first node forwarding (SI 13) via the first mesh network to the second node(s) to which the first node is communicatively inter-coupled via the first mesh network the command received from the server.

8. A method according to any one of claims 1-7, wherein the encrypting, by the server, of a set of second parameters for the node corresponding to each of at least some of the node identifiers comprises the server creating a data packet including the encrypted set of second parameters, with the data packet including a header including the identifier of the node corresponding to the encrypted set of second parameters in the data packet.

9. A system (30) comprising: a plurality of nodes (1-10), each of the plurality of nodes being preconfigured with first parameters which enable the node to communicate with at least one other node of the plurality of nodes via a first mesh network, wherein for each of the plurality of nodes the first parameters include a node identifier and a node secure key for the node, wherein the respective node identifier for each node of the plurality of nodes uniquely identifies that node and wherein the respective node secure key for each node of the plurality of nodes is unique for that node; and a server (20);wherein the plurality of nodes include at least one first node (1, 10) and a plurality of second nodes (2-9), wherein each of the at least one first node is communicatively coupled or couplable with the server in which the node identifiers for the respective ones of the plurality of nodes are stored as well as the corresponding node secure keys, wherein each of the second nodes is communicatively inter-coupled with one of the at least one first node via the first mesh network; wherein: for each of at least some of the node identifiers, the server is configured to encrypt a set of second parameters for the corresponding node using the node secure key thereof, wherein for each of the plurality of nodes, the set of second parameters enable the node to communicate with at least one other node of the plurality of nodes via a second mesh network; the server is configured to transmit the sets of encrypted second parameters to the first node(s) together with identifiers identifying the nodes which correspond to the respective ones of the sets of encrypted second parameters; each of the at least one first node is configured to, transmit via the first mesh network to the second node(s) to which the first node is communicatively inter-coupled via the first mesh network the corresponding set(s) of encrypted second parameters; each of the plurality of nodes is configured to decrypt its received set of encrypted second parameters using its node secure key; and the server is configured to transmit a command to each of the at least one first node that each of the plurality of nodes is to thereafter communicate via the second mesh network.

10. A system according to claim 9, wherein only the first node(s) of the plurality of nodes is or are communicatively coupled or couplable with the server.

11. A system according to any one of claims 9-10, wherein: each of the second nodes is configured to broadcast its node identifier via the first mesh network; each of the at least one first node is configured to receive the node identifier via the first mesh network of each of the second nodes with which the first node is communicatively inter-coupled via the first mesh network; andeach of the least one first node is configured to transmit the received node identifier(s) together with its own node identifier to the server, wherein the said at least some of the node identifiers include or are constituted by the node identifiers received from the first node(s).

12. A system according to any one of claims 9-11, wherein at least one of the first mesh network and the second mesh network comprises a Bluetooth mesh network.

13. A system according to any one of claims 9-12, wherein the server comprises a cloud server.

Images