HVAC device registration in a distributed building management system
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In building management systems (BMS), especially IoT-based systems, there is a challenge in securely registering and integrating new HVAC devices, ensuring proper security measures and seamless operation within the existing network.
Innovation Solution
A method and system for registering HVAC devices in a distributed BMS, involving requesting a token for authorization, receiving a unique ID, registering the device in a document database, and generating a device shadow within the data platform, which enables secure communication and integration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If new HVAC devices are added to the IoT-based BMS over time, then the system's adaptability and functionality are improved, but security risks and integration complexity increase
Solution Approach 1:
The patent implements preliminary action by requiring device pre-registration in a document database before the device can connect to the IoT network. The registration service generates authorization tokens in advance, and device shadows are created beforehand with all necessary communication credentials. This preliminary setup ensures that only pre-approved devices can join the network, maintaining security while allowing dynamic device addition.
Solution Approach 2:
The patent introduces multiple intermediary components: a registration service that mediates between devices and the IoT platform, authorization tokens that mediate authentication, and device shadows that mediate communication between cloud services and physical devices. These intermediaries decouple security management from device operation, allowing secure integration of new devices without compromising system reliability.
2Reliability
If proper registration and verification procedures are implemented for new devices, then system security is improved, but registration time and operational complexity increase
Solution Approach 1:
The patent implements self-service by enabling devices to autonomously complete registration procedures. Devices automatically generate their own unique IDs, request authorization tokens from the registration service, and establish their own device shadows without manual intervention. This automated self-registration process maintains rigorous security verification while dramatically reducing registration time and operational complexity.
Solution Approach 2:
The registration service performs preliminary actions by pre-generating authorization tokens and creating device shadow structures before devices need to connect. This advance preparation allows devices to quickly authenticate and join the network using pre-configured credentials, reducing the actual connection time while maintaining comprehensive security checks.
3Reliability
If device shadows and authorization tokens are generated for each device, then secure communication is improved, but system complexity and computational overhead increase
Solution Approach 1:
The patent uses copying by creating lightweight device shadow representations that replicate essential device information and communication credentials. Instead of managing complex direct authentication between all system components, the device shadow serves as a simplified copy that contains all necessary authorization data. This copying approach maintains security while reducing the complexity of inter-component communication and authentication management.
4Loss of information
If devices are registered in a document database with unique IDs and tokens, then device traceability and management are improved, but data storage requirements and processing overhead increase
Solution Approach 1:
The patent applies local quality by storing different types of device information in optimized formats within the document database. Each device record contains only the specific data needed for that device's identification, authentication, and operation - such as unique IDs, authorization tokens, and shadow configurations - rather than storing comprehensive data for all devices uniformly. This localized data organization improves traceability while minimizing overall storage requirements.
Data Source
AI summary
A method for registering an HVAC device in a distributed building management system (BMS). The method includes requesting a token. The token is configured to authorize a registration of the HVAC device. The method further includes receiving the token at a registration service, and receiving a unique ID associated with the HVAC device at the registration service. The method also includes registering the device into a document database of the registration service and generating a device shadow associated with the HVAC device. The method also includes storing the device shadow in the distributed BMS.