HEMS Controller Device Registration Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Home energy management systems (HEMS) face security challenges when continuously receiving registration requests from devices with varying reliability levels, as they cannot differentiate between high and low reliability devices during the registration process.
Innovation Solution
A communication device with a reception unit to receive electronic certificates from multiple devices and an authentication unit that determines registration based on the reliability attributes indicated by these certificates, allowing secure continuous registration of high-reliability devices while rejecting low-reliability devices, and optionally involving user confirmation for low-reliability devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If continuous registration mode is used to accept multiple device registration requests, then device registration efficiency is improved, but security risk increases due to inability to differentiate between high and low reliability devices
Solution Approach 1:
The patent applies local quality by differentiating the registration process based on device reliability attributes. High-reliability devices (e.g., manufacturer-issued certificates) receive automatic registration, while low-reliability devices (e.g., user-issued certificates) require additional user confirmation. This selective application of registration strictness at different stages resolves the contradiction by maintaining efficiency for trusted devices while enhancing security for untrusted devices.
Solution Approach 2:
The patent changes the registration parameter from a uniform process to a variable process based on certificate attributes. The authentication unit evaluates certificate attributes (issuer, validity period, device type) and dynamically adjusts the registration flow - either proceeding directly to registration or requiring user confirmation. This parameter-based differentiation allows the system to maintain high registration efficiency for reliable devices while imposing additional security checks for less reliable devices.
2Ease of operation
If all registration requests are handled equally without differentiation, then ease of operation is improved, but security is compromised
Solution Approach 1:
The patent segments the registration process into two distinct paths based on device reliability: an automatic registration path for high-reliability devices and a confirmation-required path for low-reliability devices. This segmentation allows the system to provide simple, fast registration for trusted devices while maintaining security through additional verification for untrusted devices, thus resolving the contradiction between ease of operation and security.
Solution Approach 2:
The patent introduces dynamic behavior to the registration process by making the required authentication steps dependent on the evaluated reliability of each device. The system adapts its operation in real-time based on certificate attributes, automatically simplifying the process for reliable devices and adding security layers for less reliable ones. This dynamic adjustment resolves the contradiction by making the system both simple and secure as needed.
Data Source
AI summary
A HEMS controller receives, from each of a plurality of devices requesting registration in a HEMS, an electronic certificate of the device in a continuous registration mode in which a plurality of devices can be continuously registered in the HEMS. The HEMS controller 14 determines whether or not to permit registration in the HEMS for each device based on an attribute indicated by the electronic certificate of each of the plurality of devices.