Electronic access control device for controlling data access to HVAC devices of an HVAC system
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing HVAC systems face challenges in secure and reliable data access control, particularly in environments with unstable network availability or elevated data privacy requirements, as current solutions either rely on untrusted devices, are complex and energy-intensive, or insufficient for systems with numerous devices.
Innovation Solution
An electronic access control device with multiple communication circuits and a processor that establishes separate communication links with external computing devices and HVAC devices, enabling secure authorization and data transfer while maintaining data access control locally, using cryptography and access rights management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data access control is delegated to a remote server, then centralized management is achieved, but reliance on stable network connectivity and remote server availability increases
Solution Approach 1:
The patent introduces an electronic access control device as an intermediary component deployed locally at the HVAC system or building level. This device receives data requests from external computing devices, verifies authorization credentials locally, and forwards validated requests to HVAC devices. This intermediary approach maintains centralized management capabilities while eliminating dependence on continuous remote server connectivity, as the local device can autonomously process authorization decisions.
Solution Approach 2:
The system performs preliminary authorization verification by the electronic access control device before data requests are fulfilled. The device pre-validates access credentials and maintains local authorization records, enabling it to make immediate authorization decisions without requiring real-time communication with a remote server. This preliminary action ensures data access reliability even when network connectivity to remote servers is unavailable.
2Reliability
If distributed data access control is implemented in each HVAC device, then local autonomy is achieved, but device complexity and energy consumption increase
Solution Approach 1:
The patent segments the data access control functionality into a separate electronic access control device that is independent of individual HVAC devices. Instead of embedding complex access control logic in each HVAC device, the system divides responsibilities: HVAC devices retain simple communication capabilities, while the electronic access control device handles all authorization logic, credential verification, and access policy enforcement. This segmentation reduces HVAC device complexity while maintaining local control autonomy.
Solution Approach 2:
The electronic access control device serves as an intermediary that external computing devices interact with for data access requests. This intermediary handles all complex authorization operations, including credential verification and access policy evaluation, thereby preventing these complex functions from being incorporated into HVAC devices themselves. The result is simplified HVAC devices that can still participate in secure data access operations through the intermediary.
3Loss of information
If direct connection between external devices and HVAC devices is allowed, then data availability is improved, but security risks increase
Solution Approach 1:
The patent introduces an electronic access control device as a mandatory intermediary between external computing devices and HVAC devices. All data requests from external devices must pass through this intermediary, which verifies authorization credentials and enforces access policies before allowing communication with HVAC devices. This intermediary architecture maintains data availability by permitting legitimate access requests while preventing unauthorized access attempts, thereby addressing security risks without sacrificing data availability.
Solution Approach 2:
The system implements feedback mechanisms where the electronic access control device continuously monitors data access requests, validates credentials, and logs access attempts. This feedback loop enables real-time security enforcement, where unauthorized access attempts are immediately rejected and can trigger additional security measures. The feedback mechanism ensures that data availability is maintained for authorized users while security risks are actively managed through continuous verification and monitoring.
Data Source
AI summary
An electronic access control device for controlling data access to Heating, Ventilating and Air Conditioning (HVAC) devices of an HVAC system includes electronic communication circuits and a processor connected to the electronic communication circuits. An electronic communication circuit communicates via a first communication link with an external computing device, separate from the HVAC system. An electronic communication circuit communicates with one or more of the HVAC devices via a second communication link. The processor receives via the first communication link a data request directed to a particular device of the HVAC devices, checks authorization of the data request, upon authorization, forwards the data request via the second communication link to the particular device, receives via the second communication link a data content from the particular device, generates a data response, using the data content, and transmits the data response via the first communication link to the external computing device.