Installer Credential Exchange for Secure Energy Network Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The installation of smart energy devices is hindered by the need for manual sharing of sensitive network access information, which is undesirable due to security risks and inefficiencies, and requires a system to manage credentials securely and remotely based on role and duration.
Innovation Solution
A credentials management system that securely provides Wi-Fi network access to authorized installers through a cloud-based server, using Bluetooth or LoRaWAN for alternate interfaces, ensuring access is limited by role and duration, and updates credentials automatically upon router changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If manual sharing of network access information is used, then installers can access the local Wi-Fi network, but security vulnerabilities and unauthorized access risks increase
Solution Approach 1:
A credentials management system acts as an intermediary between the network and installer devices. The system automatically provides time-limited network credentials to authorized installers through a controlled interface, eliminating the need for manual password sharing while maintaining security through automated authentication and expiration mechanisms
Solution Approach 2:
The credentials management system automatically manages its own operations by detecting installer devices, validating authentication credentials, distributing network access information, and automatically revoking access after a predetermined time period without requiring manual intervention, thereby reducing human error and enhancing security
2Productivity
If credentials are shared manually, then installers can configure devices, but time is lost due to tracking down information and reconfiguration needs
Solution Approach 1:
The system pre-establishes and maintains a database of authorized installer devices and their authentication credentials before installation events. When an installer arrives on-site, the system automatically provides the necessary network credentials without requiring time-consuming tracking down of information or verification with facility personnel
Solution Approach 2:
The credentials management system continuously monitors and updates the status of installer devices, automatically providing current credentials when needed and revoking access when the predetermined time period expires or the installer device is no longer authorized, thereby eliminating delays from manual credential updates
3Object-affected harmful factors
If network access is restricted to authorized personnel only, then security is improved, but ease of operation for installers is reduced
Solution Approach 1:
The credentials management system serves as a secure intermediary that automatically handles authentication and credential distribution. Authorized installers simply need to connect to the controlled interface, and the system automatically validates their authentication credentials and provides network access without requiring manual password entry or facility personnel intervention
Solution Approach 2:
The system automatically manages the entire access control process by detecting authorized installer devices, validating authentication credentials, distributing time-limited network credentials, and revoking access after the predetermined period without requiring manual intervention, thereby maintaining security while simplifying the installer experience
Data Source
AI summary
A system for managing and sharing credentials for network access in a secure manner for energy management equipment whereby the installer is granted access automatically through secure credentials exchange with a cloud-based server. The technician does not have to enter and does not have visibility to said credentials throughout the process adding an element of security to the granting of temporary access to systems for repairs or maintenance. Further elements built into the network devices as to how they advertise their presence over Bluetooth and disable this function once configured are also presented.