Smart Building Access and Device Management via Cloud Identity Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The building management system (BMS) industry has not fully leveraged technological advancements, relying on outdated control technologies and data exchange standards, leading to a need for a more robust and flexible system design.
Innovation Solution
A software-defined, cloud-based computing platform with plug-and-play functionality and robust APIs is implemented, enabling frictionless access control through identity verification using devices like iris recognition, facial recognition, and card readers, and providing device management services by registering devices on a blockchain for unified authorization and compliance reporting.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If traditional building management systems are used, then device compatibility and integration are limited, but system complexity and setup time increase
Solution Approach 1:
The patent implements a universal blockchain-based platform that can register and manage devices from multiple manufacturers with different protocols. The system uses a common data model and standardized APIs to enable diverse devices (HVAC, lighting, security) to be managed through a single interface, eliminating the need for separate integration systems for each device type.
Solution Approach 2:
The blockchain platform serves as an intermediary layer between legacy building management systems and modern cloud-based control systems. It provides protocol translation and data normalization capabilities, allowing old devices to communicate through standardized interfaces without requiring complete system replacement.
2Reliability
If manual device registration and authorization processes are used, then security control is simplified, but maintenance time and operational costs increase
Solution Approach 1:
The system implements self-service device registration where devices automatically generate cryptographic key pairs and register themselves with the blockchain network. Device credentials are issued automatically through smart contracts that verify device identity and grant appropriate access rights without human intervention, eliminating manual registration processes.
Solution Approach 2:
The blockchain network provides real-time feedback on device authorization status and access rights. The system continuously monitors device credentials and automatically revokes or updates access permissions based on changing security requirements, maintaining high security while reducing manual oversight.
3Productivity
If legacy data exchange standards are used, then system integration is simpler, but scalability and flexibility are reduced
Solution Approach 1:
The patent segments the data exchange architecture into modular layers: device-specific protocols at the edge, standardized intermediate representations in the blockchain layer, and application-level data models at the cloud layer. This segmentation allows each layer to operate independently, enabling easy addition of new devices and protocols without affecting the entire system.
Solution Approach 2:
The system uses dynamic data models where device schemas and data structures can be registered and updated on the blockchain without system reconfiguration. New device types and protocols can be integrated by simply registering their data models with the network, allowing the system to adapt dynamically to new requirements.
Data Source
AI summary
A building campus with an integrated smart environment can provide frictionless access control and device management services among other benefits. A method for providing frictionless access control includes maintaining a directory of individuals associated with the building, receiving identity information related to an individual seeking authorization to enter an access point in the building from at least one access control device, identifying the individual by comparing the identity information to the directory, identifying a user device associated with the individual using the directory, sending an authorization request to the user device, and authorizing the individual to enter the access point upon completion of the authorization request. A system for providing device management services includes registering devices from different manufacturers to a directory and authorizing one or more users to access and monitor parameters associated with each device.