Secure Lighting Transceiver Commissioning via Database Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing lighting network systems lack secure control mechanisms, allowing unauthorized devices to potentially control lighting networks, and existing solutions do not provide sufficient security for secure commissioning and installation processes.
Innovation Solution
A controller system with separate interfaces for communication with transceivers and a remote database, enabling secure identification and authorization through identification and security information management, allowing secure commissioning and installation of lighting devices using installer and commissioner devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a centralized lighting network uses a portable commissioning device to install and commission lighting devices, then the ease of operation and installation process is improved, but the security of the network is compromised allowing unauthorized devices to control the lighting network
Solution Approach 1:
The patent applies preliminary action by pre-provisioning each transceiver with unique identification information and security information (such as cryptographic keys or certificates) before deployment. This allows the transceiver to be automatically identified and authorized when joining the network, eliminating the need for manual commissioning while ensuring security. The controller automatically retrieves and verifies this information from a database, preventing unauthorized devices from joining.
Solution Approach 2:
The patent introduces a database as an intermediary between the transceivers and the controller. The database stores identification information and security information for each transceiver and provides this information to the controller during the joining process. This intermediary enables automatic authorization and security verification without requiring manual intervention, resolving the contradiction between ease of operation and network security.
2Reliability
If manual commissioning processes are used for lighting network devices, then security control can be maintained, but the installation time and preparation time increase significantly
Solution Approach 1:
The patent implements self-service by enabling transceivers to automatically present their identification information and security information to the controller upon joining the network. The controller automatically retrieves this information from the database, verifies it, and establishes secure communication without requiring manual commissioning. This self-service mechanism maintains security control while dramatically reducing installation time and preparation time.
3Extent of automation
If transceivers are pre-provisioned with identification and security information, then automatic authorization and secure communication are enabled, but the device complexity and information management requirements increase
Solution Approach 1:
The patent extracts the complex information management burden from the transceivers and concentrates it in the centralized database. Each transceiver only needs to store its own identification information and security information (such as a unique ID and cryptographic key), while the database manages the complete information for all transceivers. This extraction enables automatic authorization through simple presentation and verification processes, reducing device complexity while maintaining high automation.
Data Source
AI summary
The invention provides a lighting system which includes a lighting device, a remote database and a controller. The lighting device includes at least a transceiver which includes at least one identification information and at least one security information. The remote database contains the identification information and an associated security information for each lighting device. The controller is adapted to retrieve the identification information of the transceiver, to retrieve the associated security information from the remote database, and to then use the associated security information to enable secure communication between the controller and the lighting device.