Electronic access control device for controlling data access to HVAC devices of an HVAC system

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing HVAC systems face challenges in secure and reliable data access control, particularly in systems with numerous devices, where relying on remote servers is not feasible due to network instability, data privacy concerns, or logistical issues.

Innovation Solution

An electronic access control device with multiple electronic communication circuits and a processor, capable of establishing secure communication links with both external computing devices and HVAC devices, performs authorization checks on data requests, and manages data access control on a device level without relying solely on remote servers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If data access control is delegated to a remote server, then centralized management is achieved, but network stability and data privacy are compromised

Engineering Contradiction:
Improvecentralized managementVSAvoidnetwork stability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent segments data access control into two parts: centralized policy management (remote server) and local authorization execution (HVAC devices). The HVAC devices store access control policies locally and can independently verify authorization tokens, enabling centralized management while reducing dependency on continuous network connectivity to the remote server.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system performs preliminary action by pre-distributing access control policies and authorization tokens to HVAC devices before actual data access requests occur. This allows devices to autonomously verify authorization without real-time server communication, ensuring reliability even when network connectivity is unstable.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If data access control is distributed to individual HVAC devices, then local autonomy is achieved, but system complexity increases

Engineering Contradiction:
Improvelocal data access controlVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements a universal authorization token format and verification mechanism that can be applied across all HVAC devices uniformly. This standardized approach enables local autonomy without significantly increasing individual device complexity, as each device uses the same verification logic and data structures regardless of its specific function or location in the system.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Ease of operation

If remote server is used for data access control, then centralized management is achieved, but data privacy is compromised

Engineering Contradiction:
Improvecentralized managementVSAvoiddata privacy
Core Design Contradiction:
Ease of operationVSLoss of information

Solution Approach 1:

The patent extracts sensitive operational data from the communication stream between HVAC devices and external systems. By implementing local authorization verification, the system prevents sensitive data from being transmitted to or stored on remote servers, keeping data privacy protection distributed across local devices rather than centralized on external servers.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentEP4208674B1Electronic access control device for controlling data access to HVAC devices of an HVAC system
Publication Date: 2025.06.18 BELIMO HOLDING AG
  • EP4208674B1 patent drawingFigure 1
  • EP4208674B1 patent drawingFigure 2
  • EP4208674B1 patent drawingFigure 3

AI summary

An electronic access control device (50), comprising electronic communication circuits (52) and a processor (54), for controlling data access to HVAC devices (10). An electronic communication circuit (52) is configured to communicate via a first communication link (I) with an external computing device (100) and an electronic communication circuit (52) is configured to communicate with HVAC device(s) (10) via a second communication link (II). The processor (54) is configured to receive from the external computing device (100) a data request directed to a particular HVAC device (10), check its authorization, upon affirmative authorization, forward the data request via the second communication link (II) to the particular HVAC device (10), receive via the second communication link (II) a data content from the particular HVAC device (10), generate a data response, using the data content, and transmit the data response via the first communication link (I) to the external computing device (100).