Gateway System for Legacy Building Control Panel Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Many building management system control panels, especially older legacy and third-party panels, lack network connectivity and use different communication protocols, making them incompatible with newer connected services systems, and introducing security risks when retrofitted with internet access.
Innovation Solution
A gateway system with a panel port for connecting to control panels, an external port for remote servers, and a controller for establishing encrypted communication, including a physical presence button for secure access and storage of encryption keys in WORM memory, ensuring secure and compatible connectivity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If network connectivity is added to legacy control panels to enable connected services, then adaptability and remote monitoring capability are improved, but security vulnerability increases due to potential cyber attacks and unauthorized remote access
Solution Approach 1:
A gateway device is introduced as an intermediary between the legacy control panel and the connected services system. The gateway provides network connectivity and communication protocol translation while maintaining security isolation, allowing the legacy panel to communicate with modern systems without direct internet exposure.
Solution Approach 2:
The system is segmented into separate security zones: the legacy control panel remains in an isolated secure zone, the gateway operates in an intermediate zone with controlled access, and the connected services system exists in an external network zone. This segmentation prevents direct attack paths between components.
2Adaptability or versatility
If gateway devices are installed on legacy control panels to provide network connectivity, then compatibility with connected services systems is improved, but device complexity increases due to additional hardware and installation requirements
Solution Approach 1:
The gateway device is designed with universal compatibility to work with multiple legacy control panel types and protocols. It provides multiple functions including protocol translation, security management, and network communication through a single device, reducing the need for multiple specialized components.
3Adaptability or versatility
If third-party control panels are integrated into connected services systems, then system versatility is improved, but compatibility issues arise due to different communication protocols and lack of network connectivity
Solution Approach 1:
The gateway acts as a protocol mediator that translates between various legacy control panel communication protocols and the standardized protocols used by the connected services system, enabling seamless integration of third-party panels without requiring changes to the panels themselves.
Solution Approach 2:
The gateway is designed with universal protocol support to handle multiple communication standards and panel types, making the connected services system capable of monitoring diverse manufacturers' equipment through a single integration point.
Data Source
AI summary
A gateway system is used to establish secure connections between building management system control panels and connected services system servers. This enables status monitoring of the panels and maintenance of the panels and the building management systems.