HVAC Field Device NFC Access Control for Commissioning Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional HVAC systems face vulnerabilities to unauthorized access during construction, renovation, shipment, and installation phases due to the simplicity of near field communication (NFC) interfaces, lacking effective protection against unintended access by third parties.

Innovation Solution

The field device incorporates a microcontroller and near field communication system with features to enable or disable NFC based on control signals, utilizing power supply monitoring, geographical position detection, and switching elements like electronic fuses to manage access, ensuring secure communication only when authorized.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If NFC interface is enabled for simple commissioning, then ease of operation is improved, but security against unauthorized access deteriorates

Engineering Contradiction:

Improvecommissioning simplicityVSAvoidunauthorized access vulnerability

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The NFC interface dynamically changes its operational state between enabled and disabled based on commissioning status. During commissioning, NFC is enabled to allow simple configuration. After commissioning completes, NFC is automatically disabled to prevent unauthorized access. This dynamic state change resolves the contradiction by providing ease of operation when needed while ensuring security when commissioning is complete.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system performs preliminary commissioning actions through NFC interface before disabling it. The commissioning process includes configuration, validation, and sealing steps that must be completed before the NFC interface is deactivated. This preliminary action ensures that all necessary setup is done while the interface is accessible, then secures the system by disabling further access.

Inventive Principle:

Principle #10Preliminary action

2Adaptability or versatility

If NFC remains enabled for ongoing access, then adaptability is improved, but reliability against attacks deteriorates

Engineering Contradiction:

Improveaccess flexibilityVSAvoidsystem security

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The access rights are segmented into different phases: commissioning phase with full NFC access, and operational phase with restricted access. The system divides the commissioning process into discrete steps (configuration, validation, sealing) where NFC access is progressively restricted. This segmentation allows adaptability during commissioning while ensuring reliability in the operational phase.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system takes preliminary anti-action by disabling the NFC interface after commissioning is complete. This preventive measure stops potential unauthorized access before it can occur during the operational phase. The commissioning process includes a sealing step that permanently restricts NFC access, providing preliminary protection against future attacks.

Inventive Principle:

Principle #9Preliminary anti-action

3Object-affected harmful factors

If NFC is disabled during commissioning, then security is improved, but ease of operation deteriorates

Engineering Contradiction:

Improveunauthorized access protectionVSAvoidcommissioning simplicity

Core Design Contradiction:

Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The NFC interface is dynamically enabled during the commissioning phase and then disabled afterward. This dynamic control allows simple commissioning operations when the interface is enabled, while providing security protection when disabled. The microcontroller manages the state transitions based on commissioning progress, resolving the contradiction between operational ease and security.

Inventive Principle:

Principle #15Dynamics

4Reliability

If switching elements are added to control NFC, then reliability is improved, but device complexity increases

Engineering Contradiction:

Improveaccess control securityVSAvoidNFC system structure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The microcontroller acts as an intermediary between the commissioning process and the NFC interface control. It receives commissioning status information and automatically controls the switching element to enable or disable NFC access. This intermediary approach provides reliable access control through a centralized control logic, managing the complexity by consolidating control functions in the existing microcontroller rather than adding independent control systems.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS20250294074A1Field device and method for controlling a near field communication via a near field communication system of a field device

Publication Date: 2025.09.18 BELIMO HOLDING AG

AI summary

A field device of a heating, ventilation and air conditioning system including a microcontroller that controls the field device, and a near field communication system which is connected to the microcontroller and which includes a near field communication chip and an antenna, the near field communication system for a near field communication with a near field communication device. The near field communication system controls the near field communication in response to receiving a control signal from the microcontroller or the near field communication device, and the near field communication system disables the near field communication in response to discerning in the control signal a disablement signal, or enables the near field communication in response to discerning in the control signal an enablement signal.