Building Automation Controller With Global Data Sync and Secure BACnet/SC

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing building automation systems face challenges in secure communication and integration of multiple subsystems, lacking IT friendliness and cybersecurity, which hampers seamless operation and management.

Innovation Solution

Implementing BACnet Secure Connect (BACnet/SC) with TLS 1.3 encryption and certificate-based authentication for secure, encrypted communication, along with an embedded web interface for commissioning and servicing, enhancing firmware upgrade capabilities and supporting various communication protocols.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional building automation communication protocols are used, then device compatibility and integration are achieved, but security and cybersecurity are compromised

Engineering Contradiction:
Improvesecurity and integrityVSAvoidIT compatibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces an embedded web interface as an intermediary layer between traditional building automation devices and modern IT systems. This web interface acts as a mediator that enables secure HTTPS communication while maintaining compatibility with existing automation protocols, thus resolving the contradiction between security requirements and IT compatibility needs

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If multiple subsystems are integrated in building automation systems, then functional capability is enhanced, but system complexity and operational complexity increase

Engineering Contradiction:
Improvesubsystem integrationVSAvoidsystem complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent implements a universal web-based interface that can serve multiple subsystems (HVAC, lighting, security, etc.) through a single standardized access point. This multi-functional interface reduces operational complexity by providing consistent commissioning, monitoring, and control capabilities across all integrated subsystems, thereby managing complexity while maintaining versatility

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If secure communication protocols like BACnet/SC with TLS 1.3 are implemented, then cybersecurity is improved, but device complexity and implementation difficulty increase

Engineering Contradiction:
ImprovecybersecurityVSAvoidimplementation complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements automatic certificate management and encryption/decryption functions within the automation controller itself. The device performs self-service security operations including TLS 1.3 handshakes, certificate validation, and encrypted data processing without requiring external security infrastructure, thereby reducing implementation complexity while maintaining high cybersecurity standards

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS12526168B2Control device for a building automation system having global data management
Publication Date: 2026.01.13 SIEMENS INDUSTRY INC
  • US12526168B2 patent drawing
  • US12526168B2 patent drawing
  • US12526168B2 patent drawing

AI summary

A controller of a building automation system, and a method thereof, comprising a communication component and a processor. The communication component communicates with one or more other controllers of multiple automation level devices. The automation level devices are associated with an automation level network of the building automation system. The automation level devices include the controller and the other controller(s). The processor designates a particular controller of the automation level devices as a global data server. The global data server provides synchronized images of a predefined set of objects across all controllers of the automation level network.