Communication between a domestic appliance and a backend

Abstract

The invention relates to a method for communication between a domestic appliance and a backend according to a communication protocol, wherein a gateway is disposed between the domestic appliance and the backend, and wherein the messages exchanged between the domestic appliance and the backend according to the communication protocol pass via the gateway, the method comprising the following steps: - sending a request message, provided for the backend, from the domestic appliance to the gateway and / or sending a request message from the backend to the domestic appliance via the gateway, - filtering the request message by means of a filter in the gateway, wherein, depending on the filter setting of the filter in the gateway, the gateway forwards the request message from the domestic appliance or forwards part of the request message from the domestic appliance to the backend or blocks the request message.

Description

[0001] Communication of a household appliance with a backend

[0002] The present invention relates to a method for communication between a household appliance and a backend. The present invention further relates to a data processing device with means for implementing the method. The invention further relates to a computer program with instructions for executing the method. The invention further relates to a computer-readable medium with commands for executing the method.

[0003] A household appliance, particularly one that is remotely controllable and, for example, internet-enabled, is connected to a backend for communication. During normal operation, the household appliance can communicate fully with the backend. However, it can happen that the household appliance consumes excessive amounts of resources and / or communicates with the backend in an insecure and / or unstable manner. In such a case, communication from the household appliance to the backend must be partially or completely prevented. According to the state of the art, communication is denied to the household appliance based on client certificates or IP addresses, or access to certain server routes, especially URLs, is blocked, or the rate of requests from the household appliance to the backend is limited. The disadvantage of this is that communication is denied or limited in an inflexible and undynamic manner.

[0004] One object underlying the present invention is to eliminate the disadvantages known from the prior art. In particular, the invention is based on the object of flexibly and dynamically permitting and / or limiting communication between a household appliance and a backend. The invention solves this problem by means of the subject matter of the independent claims. Subordinate claims specify preferred embodiments.

[0005] The present invention relates to a method, in particular a computer-implemented method, for communication between a household appliance, in particular a remote-controllable, in particular internet-enabled, and a backend according to a communication protocol, in particular according to an application protocol, wherein a gateway is arranged between the household appliance and the backend, and wherein the messages exchanged between the household appliance and the backend according to the communication protocol run via the gateway. The method comprises sending a request message intended for the backend from the household appliance to the gateway and / or sending a request message from the backend via the gateway to the household appliance, and filtering the request message using a filter in the gateway, wherein, depending on the filter setting of the filter in the gateway, the gateway forwards the request message from the household appliance to the backend, or partially forwards it, or blocks it.Blocking can, for example, be understood as not forwarding. This allows for flexible and dynamic communication between the household appliance and the backend.

[0006] Advantageously, the method comprises sending a message intended for the household appliance from the gateway to the household appliance, and filtering the message through a filter in the gateway, wherein, depending on the filter setting of the filter in the gateway, the gateway forwards the message to the household appliance, or partially forwards it, or blocks it.

[0007] Advantageously, the filter settings in the gateway are at least partially, in particular completely, set or configured by the backend. The filter settings can, in particular, be made only partially by the backend and partially by, for example, defined rules. Advantageously, the filter settings in the gateway are at least partially, in particular completely, configured and / or controlled in real time by the backend.

[0008] This makes it possible to control and configure in real time via the backend whether the household appliance is placed in quarantine mode, in which messages are partially or completely blocked. This advantageously enables fine-grained filtering of messages. In particular, the filter settings enable more refined filtering of messages, especially in quarantine mode, compared to prior art methods such as denying communication based on route, IP address, or the like.

[0009] Filtering, particularly the filter settings, is advantageously performed based on the content of the message and / or messages. Filtering, particularly the filter settings, is advantageously performed based on the message direction, i.e., upstream or downstream. Upstream messages can also be referred to as request messages, and downstream messages as input messages.

[0010] The proposed solution allows for configuring quarantine mode with the filter settings to protect the backend from excessive load and / or interaction with the unexpectedly behaving household appliance. At the same time, the proposed solution enables maintenance processes and / or troubleshooting.

[0011] Preferably, the filter in the gateway operates automatically and in real time. This way, the data stream is filtered automatically and in real time.

[0012] In some embodiments, the filter is configured to filter based on the security features of the household appliance. Based on the identified security features, predetermined service subsystems of the backend can control that the household appliances with these security features can only connect to these service subsystems and not to any other service subsystems.

[0013] For example, filtering can be carried out according to predetermined properties of certificates, such as expiration dates. In this way, a restricted communication channel can be used for household appliances with expiring or expired certificates, allowing certificate renewal but otherwise denying access to critical resources. In this way, service use cases (such as certificate renewal) can be carried out without regular device communication interfering with the service case or, conversely, the service case causing unexpected behavior in regular communication. In some embodiments, the result of the filtering can be used to upload certificates with appropriately encoded information to the household appliances, allowing more efficient filtering when the connection is re-established.

[0014] In one embodiment, the detected security feature indicates that the affected household appliance uses a firmware version with security vulnerabilities. In this case, communication can be restricted until the update is implemented and the security vulnerability is closed. This can protect household appliances from attacks that would be possible through regular communication with the old firmware, but can be prevented by the update.

[0015] In some embodiments, the filter is configured to filter based on the account status of the user of the affected household appliance. The account status can, for example, determine the general sending capability or the volume of messages. For example, it is conceivable that the account status indicates that a subscription has not been paid or that a payment has been delayed. In such a case, device status and control communication could be restricted, while service communication, for example, for necessary updates, continues unabated.

[0016] In some embodiments, the filter can be set to filter based on the existence of a subscription or a payment status for functionalities of the household appliance. The existence of a subscription or the payment status for functionalities can be derived from the customer account associated with the household appliance. In this way, functions of the household appliance can be disabled or enabled at less frequent intervals if the payment status indicates a payment arrears. In some embodiments, the filter is set to filter based on a legal requirement relating to a predetermined geographically definable region. In this way, certain functionalities of the household appliances can be centrally restricted in order to comply with legal requirements.

[0017] In some embodiments, the filter is configured to filter for power-on commands (e.g., in response to a call for assistance from a local power provider) to prevent remote powering on of too many household appliances at the same time, which would potentially overload parts of the power grid.

[0018] The aforementioned filter settings can, of course, be configured not only individually but also in any combination. This allows different filtering reasons to be combined in one central location, namely the gateway.

[0019] The filter in the gateway can therefore be set to filter the request message based on at least one of the following circumstances:

[0020] - at least one safety feature of the household appliance,

[0021] - at least one characteristic of a certificate of the household appliance,

[0022] - a firmware version of the household appliance,

[0023] - Status of an account of a user of the household appliance,

[0024] - existence of a subscription by the user of the household appliance,

[0025] - Payment status of the user of the household appliance,

[0026] - At least one legal requirement relating to a predetermined geographically definable region,

[0027] - Switch-on commands for household appliances that are supplied with electrical energy from a specific part of a power grid. The backend preferably comprises an application interface, in particular an API, for connecting the backend to an administrative user interface, wherein the filter setting is configured at least partially, in particular completely, via the administrative user interface. This allows the filter setting to be adjusted by an administrator as needed and / or manually.

[0028] The filter settings are preferably set, at least partially, but especially completely, using a rule algorithm. The rule algorithm is preferably predefined and / or adapted using machine learning. This allows a large number of messages to be filtered automatically.

[0029] Advantageously, the filter filters the request message according to a resource path. In particular, the resource path includes parts of the message header, in particular the request message, and / or other parts of the message, in particular the request message, for example, the parts relating to the actual payload. The filtered messages, in particular filtered request messages, are expediently blocked between the communication partners; in particular, the filtered request messages are blocked from the household appliance to the backend.

[0030] It may be useful to store the filtered messages, especially filtered request messages, in a log file, especially in a gateway log file. This can facilitate troubleshooting, for example.

[0031] Preferably, a terminal device, in particular a terminal device of an end user, in particular a smartphone, a smart watch, a computer, or similar device, is coupled to the gateway so that consumer messages are exchanged between the terminal device and the household appliance via the gateway. This enables communication between a terminal device and the household appliance via the gateway. Preferably, the messages can be filtered between the terminal device and the gateway and / or between the gateway and the household appliance.

[0032] Expediently, at least approximately 1,000, in particular at least approximately 10,000, in particular at least approximately 100,000, in particular at least approximately 1,000,000, in particular at least approximately 10,000,000 household appliances communicate with the backend. Expediently, the filter in the gateway filters the request messages from the at least approximately 1,000, in particular at least approximately 10,000, in particular at least approximately 100,000, in particular at least approximately 1,000,000, in particular at least approximately 10,000,000 household appliances. By controlling the filter settings in the filter, a very large number of household appliances can communicate with the backend. A very large number of household appliances can be individually controlled, in particular dynamically. In particular, the proposed method is also scalable for very large numbers of household appliances. In particular, the backend can be customized. Adequate performance and reliability can be enabled.

[0033] Advantageously, the filter only filters household appliances selected according to a household appliance filter list. The household appliance filter list advantageously includes, for example, the household appliance model, the firmware version, the installed certificates (especially the type of them), and / or the serial number of the household appliance. This allows household appliances to be filtered in bulk according to filter criteria.

[0034] If necessary, filter criteria that do not relate exclusively to a single household appliance and its connection can also be used. In some embodiments, master data of the household appliances, user account properties, and / or transmitted data of the household appliance are used jointly for filtering. This filtering can be supplemented with an overall context, such as the number of household appliances connected in a region and their control channels. If this number exceeds a certain limit, requests to start the household appliances must be delayed or rejected in borderline cases to protect critical infrastructure such as power grids.

[0035] In some embodiments, filtering (and / or control) is performed at the data stream level and not exclusively at the household appliance level. This can ensure, for example, that within a certain geographical proximity, only a certain number of start commands are sent in close temporal proximity. This can be used to implement protective measures for local power grids, which could collapse if there is an excessive concentration of simultaneously switching on loads with high startup power.

[0036] Preferably, input messages are sent to the household appliance from the backend, in particular regardless of the filter settings. This allows the backend to send input messages to the household appliance at any time, in particular regardless of whether the household appliance is quarantined. This allows, for example, the household appliance, in particular the software of the household appliance, for example the firmware of the household appliance, in particular one or more certificates of the household appliance, in particular one or more configurations of the household appliance, to be updated from the backend. The input messages can advantageously be filtered in the filter.

[0037] A data processing device comprises means for carrying out the method described herein.

[0038] A computer program comprises instructions which, when executed by a computer, cause the computer to perform the method described therein.

[0039] A computer-readable medium comprises instructions which, when executed by a computer, cause the computer to carry out the method described herein. The processing device, in particular the data processing apparatus, the computer program, and / or the computer-readable medium can be configured to partially or completely carry out a method described herein. For this purpose, the processing device can be implemented electronically and, for example, comprise a programmable microcomputer or microcontroller. The method can be in the form of a computer program product with program code means. The computer program product can also be stored on a computer-readable data carrier. Features or advantages of the method can be transferred to the device and vice versa.

[0040] The invention will now be described in more detail with reference to the accompanying figures, in which:

[0041] Figure 1 is a schematic view of a communication of household appliances with a backend using a gateway, and

[0042] Figure 2 shows a flowchart of the communication process.

[0043] The backend 100 shown in Figure 1 is connected to a first household appliance 110 and a second household appliance 115 via a gateway 105. The connection via two household appliances 110, 115 is merely exemplary. In further embodiments, only one household appliance 110, or at least 1,000, or at least 10,000, or at least 100,000, or at least 1,000,000 household appliances can be connected to the backend 100 via the gateway 105.

[0044] "Being connected" or "connection" refers to a data connection, for example, a wireless connection, preferably a connection via the internet. A household appliance includes, for example, a washing machine, a dryer, a refrigerator, a freezer, a freezer chest, a stove, a cooktop, a dishwasher, a vacuum cleaner, a robot vacuum cleaner, and similar household appliances.

[0045] In the embodiment shown in Figure 1, the first household appliance 110 communicates at least partially in a defective manner with the backend 110 via the gateway 105. In the embodiment shown in Figure 1, the second household appliance 115 communicates normally, in particular not in a defective manner, with the backend 110 via the gateway 105. This is only intended to illustrate how the communication works as an example. In further embodiments, the first household appliance 105 can communicate normally, and another, for example the second household appliance 110, can communicate in a defective manner, and / or many other household appliances can be connected, some of which can communicate in a defective manner.

[0046] The invention will be described below using the example of the first household appliance 110, which communicates defectively in the exemplary embodiment. To simplify the description of the exemplary embodiment, unless explicitly stated as "first" and / or "second" household appliance, "household appliance" will symbolically refer to all household appliances that communicate with the backend 100 via the gateway 105.

[0047] Communication between the household appliance 110 and the backend 100 via the gateway 105 takes place via a communication protocol. The communication protocol specifies the formats and guidelines for messages exchanged between the household appliance 110 and the backend 100.

[0048] In the exemplary embodiment, the messages are categorized into resources. In the exemplary embodiment, the first household appliance 110 communicates messages in two resources via a resource path A 120 and a resource path B 125. In the exemplary embodiment, the second household appliance 115 communicates messages in three resources via a resource path A 145, a resource path B 150, and a resource path C 145. Each of the resource paths 120, 125, 145, 150, 155 from a household appliance 110, 115 represents a connection between the household appliance 110, 115 and the gateway 105. A resource path 120, 125, 145, 150, 155 can in particular be a resource and / or a path. Advantageously, a resource path 120, 125, 145, 150, 155 comprises one, in particular exactly one, in particular a single, connection between the household appliance 110, 115 and the gateway 105. In particular, the connection is a websocket connection.For example, messages are exchanged from and / or to resource paths 120, 125, 145, 150, and 155 within the connection. Preferably, the connection remains active, especially when filtering messages, especially in quarantine mode.

[0049] The gateway 105 communicates with the backend 110 via a resource path A 130, a resource path B 135, and a resource path C 140. In the exemplary embodiment, resources A and B are therefore used by both household appliances 110, 115, whereas resource C is used only by the second household appliance 115. This is intended merely as an example and, in particular, does not constitute any limitation.

[0050] If the household appliance 110 wishes to communicate a message of the category Resource A with the backend 100, the household appliance 110 sends the request message to the gateway 105 via the resource path A 120. The gateway 105 includes a filter 160. The filter 160 filters the request message, as described in detail below. In the case of positive filtering, the gateway forwards the request message completely and / or partially to the backend 100 via the resource path A 130. In the case of negative filtering, the gateway 105 blocks the request message, as described in detail below. Such "blocking" is symbolically shown in the embodiment according to Fig. 1 using the request message that was requested via the resource path B.

[0051] If the backend 100 wants to send an input message to the household appliance 110 of the category resource A, the backend 100 sends the input message via the resource path A 130 to the gateway 105. The gateway 105 forwards the input message, preferably without filtering, in a further embodiment with filtering, via the resource path A 120 to the household appliance 110.

[0052] In the exemplary embodiment, request messages from the household appliance 110 to the backend 100 are filtered, whereas input messages from the backend 100 to the household appliance 110 pass through the gateway 105 unfiltered. In a further exemplary embodiment, request messages can be sent from the backend 100 to the household appliance 110 via the gateway 105. The backend 100 can therefore always send input messages, which is shown in Figure 1 using the example of the message resource B, in particular on resource path B 125. In the exemplary embodiment according to Figure 1, it is also clearly visible that the second household appliance 115 is functioning normally and can therefore send request messages and receive input messages.

[0053] The filter setting of the filter 160 in the gateway 105 is preset in a first embodiment. The filter settings of the filter 160 can be set via a filter list 165, in particular an adaptive, in particular customizable filter list 165. The filter list 165 comprises, for example, a household appliance filter list. The household appliance filter list comprises, for example, the household appliance model, the firmware version, the type of certificates installed, the serial number, and / or the serial number of the household appliance. The filter 160 can be set via the backend 100. In this case, the backend 100 directly controls the filter 160 in the gateway 105 and / or the backend 100 modifies the filter list 165, which in turn adapts the filter 160. In the embodiment, an administrator accesses the backend 100 via an application interface 170, in particular an API, which comprises an administrative user interface.The settings of filter 160 can be changed from the application interface 170 via the backend 100. This allows the filter settings of filter 160 to be customized in a variety of ways, via presets, real-time settings, and / or via control algorithms, possibly self-learning control algorithms, and / or a control algorithm adaptable via machine learning, and / or the like. In particular, the filter settings can be configured and / or controlled in real time.

[0054] Criteria for filtering are, for example, protection of the backend 100, protection of the resources of the backend 100, protection of the backend 100 under stability or security aspects, isolation of resources of the backend 100, in particular during maintenance processes, for example until the completion of a firmware update, restriction of access of the household appliance 110 to certain resources for testing or evaluation purposes, and / or similar criteria.

[0055] The gateway 105 optionally stores whether messages, in particular request messages, were filtered in a log file. The gateway 105 optionally stores the filtered messages, in particular the filtered request messages, in the log file. The log file can be used, for example, for troubleshooting to determine why the household appliance 110 is communicating incorrectly, in particular via the resource path B 125. The backend 100 then corrects the error.

[0056] A terminal device 175 can be coupled to the gateway 105. The terminal device 175 can communicate with the household appliance 110 via the gateway 105. In a further embodiment, the terminal device 175 can communicate with the backend 100.

[0057] A terminal device 175 is, for example, a smartphone, a smartwatch, a computer, a tablet, or similar terminal device 175.

[0058] Fig. 2 shows a flowchart of the method 200 for communication between the household appliance 110 and the backend 105 according to the communication protocol, wherein the gateway 105 is arranged between the household appliance 110 and the backend 100, and wherein the messages exchanged between the household appliance 110 and the backend 100 according to the communication protocol run via the gateway 105. The following method steps are included in the method 200:

[0059] - Sending 205 a request message intended for the backend 100 from the household appliance 110 to the gateway 105,

[0060] - Filtering 210 the request message through a filter 160 in the gateway 105,

[0061] - Depending on the filter setting of the filter 160 in the gateway 105, the gateway 105 forwards the request message of the household appliance 110 to the backend 100 or partially forwards it or blocks it 215.

[0062] In one embodiment, a data processing device with means for carrying out the method described herein is provided.

[0063] In one embodiment, a computer program is provided with instructions that, when executed by a computer, cause the computer to perform the method described herein.

[0064] In one embodiment, a computer-readable medium is provided with instructions that, when executed by a computer, cause the computer to perform the method described herein.

[0065] Reference symbol

[0066] 100 backend

[0067] 105 Gateway

[0068] 110 (First) household appliance

[0069] 115 (Second) household appliance

[0070] 120 Resource path A of the first household appliance

[0071] 125 Resource path B of the first household appliance

[0072] 130 Backend resource path A

[0073] 135 Backend resource path B

[0074] 140 Backend resource path C

[0075] 145 Resource path A of the second household appliance

[0076] 150 Resource path B of the second household appliance

[0077] 155 Resource path C of the second household appliance

[0078] 160 filters

[0079] 165 filter list

[0080] 170 Application interface

[0081] 175 end devices

[0082] 200 procedures

[0083] 205 Send

[0084] 210 filters

[0085] 215 Forward or partially forward or block

Claims

PATENT CLAIMS 1. A method for communication of a household appliance (110) with a backend (100) according to a communication protocol, wherein a gateway (105) is arranged between the household appliance (110) and the backend (100), and wherein the messages exchanged between the household appliance (110) and the backend (100) according to the communication protocol run via the gateway (105), comprising the following steps: - sending a request message intended for the backend (100) from the household appliance (110) to the gateway (105) and / or sending a request message from the backend (100) via the gateway (105) to the household appliance (110), - filtering the request message through a filter (160) in the gateway (105), - depending on the filter setting of the filter (160) in the gateway (105), the gateway (105) forwards the request message of the household appliance (110) to the backend (100) or partially forwards it or blocks it.

2. The method according to claim 1, wherein the filter setting of the filter (160) in the gateway (105) is set at least partially, in particular completely, by the backend (100).

3. The method according to claim 2, wherein the filter setting of the filter (160) in the gateway (105) is configured and / or controlled at least partially, in particular completely, in real time by the backend (100).

4. The method according to any one of the preceding claims, wherein the filter (160) in the gateway (105) is set to filter the request message on the basis of - at least one security feature of the household appliance (110); - of at least one property of a certificate of the household appliance (110); - a firmware version of the household appliance (110); - a status of an account of a user of the household appliance (110); - the existence of a subscription by the user of the household appliance (110); - a payment status of the user of the household appliance (110); - a legal requirement relating to a predetermined geographically definable region, and / or - to filter switching commands from household appliances that are supplied with electrical energy from a specific part of a power grid.

5. The method according to any one of the preceding claims, wherein the backend (100) comprises an application interface (170) for connecting the backend (100) to an administrative user interface, wherein the filter setting is set at least partially, in particular completely, via the administrative user interface.

6. Method according to one of the preceding claims, wherein the filter setting is set, at least partially, in particular completely, via a control algorithm, wherein the control algorithm is preferably predefined and / or adapted by machine learning.

7. The method according to any one of the preceding claims, wherein the filter (160) filters the request message for a resource path.

8. Method according to one of the preceding claims, wherein whether the request message was filtered is stored in a log file of the gateway (105).

9. The method according to any one of the preceding claims, wherein a terminal (175) is coupled to the gateway (105) so that consumer messages are exchanged between the terminal (175) and the household appliance (110) via the gateway (105).

10. The method according to any one of the preceding claims, wherein at least 1,000, in particular at least 10,000, in particular at least 100,000, in particular at least 1,000,000, in particular at least 10,000,000 household appliances (110, 115) communicate with the backend, and wherein the filter (160) in the gateway (105) filters the request messages of the at least 1,000, in particular at least 10,000, in particular at least 100,000, in particular at least 1,000,000, in particular at least 10,000,000 household appliances (110, 115).

11. The method according to claim 10, wherein the filter (160) filters only the household appliances (110, 115) selected according to a household appliance filter list, and wherein the household appliance filter list includes, for example, the household appliance model, the firmware version, the type of certificates installed, in particular the type of certificates, and / or the serial number of the household appliance.

12. Method according to one of the preceding claims, wherein input messages are sent from the backend (100) to the household appliance (110).

13. Data processing device with means for carrying out the method according to one of claims 1 to 12.

14. A computer program comprising instructions which, when executed by a computer, cause the computer to carry out the method according to any one of claims 1 to 12.

15. A computer-readable medium containing instructions which, when executed by a computer, cause the computer to perform the method of any one of claims 1 to 12.

Images