Secure network commissioning for lighting systems

Abstract

A lighting system comprises at least one network-capable infrastructure device and a commissioning device. The infrastructure device, such as a ballast or a luminaire, includes a first communication unit configured to communicate with at least one other infrastructure device, and a second communication unit. The commissioning device comprises a commissioning communication unit configured to communicate with the second communication unit of the infrastructure device. The infrastructure device receives a key information via the second communication unit and communicates via the first communication unit with the at least one other infrastructure device using the received key information.

Claims

1. A commissioning device for commissioning a network-capable infrastructure device (2) having a first communication unit and a second communication unit that is physically separate from the first communication unit, the second communication unit communicating wirelessly by visual light communication or acoustic communication, the commissioning device including: a commissioning communication unit (6) configured to communicate with a second communication unit (4) of the infrastructure device (2) by at least one of visual light communication and acoustic communication, a display unit (7) configured to display an icon representing the infrastructure device (2), and an input unit (8) configured to accept an input operation to select the displayed infrastructure device (2), and wherein the commissioning device is configured to transmit a command to the selected infrastructure device (2) through the second communication unit upon accepting the input operation, and the command makes the selected infrastructure device (2) emit a visual or acoustical signal that identifies itself, and wherein the commissioning device is further configured to transmit a key information to the infrastructure device (2) through the second communication unit upon the input unit (8) receiving a second input operation in the form of a commissioning request for the identified infrastructure device through the input unit.

2. The commissioning device according to claim 1, wherein the commissioning device (5) is a mobile device or a commissioning application running on a mobile computing device.

3. A The method according to claim 1, wherein the display unit (7) indicates the displayed icon as a trusted infrastructure device (2) when successfully transmitting the key information to the infrastructure device (2)(S6).

4. A method for commissioning at least one network-capable infrastructure device (2) using a commissioning device (5), the method comprising steps of: providing at least one network-capable infrastructure device (2) having a first communication unit for communicating with at least one other infrastructure device (10) over a network and a second communication unit that is physically separate from the first communication unit, the second communication unit communicating wirelessly by at least one of visual light communication or acoustic communication; providing a commissioning communication unit (6) that is configured to communicate with the second communication unit (4) by at least one of visual light communication and acoustic communication; displaying an icon representing the at least one infrastructure device (2) on a display unit (7) of the commissioning device (5)(S1); selecting the displayed infrastructure device (2)(S2) by entering a first input into the commissioning device; transmitting by the commissioning communication unit (6) of the commissioning device (5) automatically in response to the selection operation and entry of the first input, a command to the selected infrastructure device (2) through the second communication unit to identify itself by emitting a visual or acoustic signal upon receiving the command; receiving the visual or acoustic signal from the second communication unit of the selected infrastructure device that identifies the infrastructure device; requesting that the identified infrastructure device be commissioned by entering a second input into the commissioning device; transmitting a key information from the commissioning communication unit (6) of the commissioning device by at least one of visual light communication and acoustic communication to second communication unit of the selected infrastructure device (2) upon entry of the second input into the commissioning device; receiving the key information in the infrastructure device via the second communication unit (4); communicating via the first communication unit (3) with the at least one other infrastructure device (10) on the network using the received key information.

5. The method according to claim 4, wherein the display unit (7) indicates the displayed icon as a trusted infrastructure device (2) when successfully transmitting the key information to the infrastructure device (2)(S6).

6. The method according to claim 4, wherein the key information is a private key of the infrastructure device (2), and the infrastructure device (2) is configured to receive the key information in a commissioning process of the infrastructure device (2).

Description

BRIEF DESCRIPTION OF THE DRAWINGS

(1) FIG. 1 shows an overview of a lighting system and a commissioning device of an embodiment,

(2) FIG. 2 provides a block diagram of a network-capable infrastructure device according to an embodiment,

(3) FIG. 3 shows an exemplary screen display of user interface of a method for commissioning a secure lighting system according to an embodiment,

(4) FIG. 4 provides a flowchart of a method for commissioning a network-capable infrastructure device according to an embodiment, and

(5) FIG. 5 shows steps of a method for commissioning a network-capable infrastructure device according to an embodiment.

DETAILED DESCRIPTION

(6) FIG. 1 shows an overview of a lighting system 1 and a commissioning device 5 of an embodiment of the invention.

(7) In FIG. 1 a lighting system 1 according to an embodiment is shown in a simplified manner which regards in particular the communication means and the interaction of the respective communication means. The depicted infrastructure device 2 and the depicted other infrastructure device 10 represent individual elements of the lighting system 1, which is of course not limited to including only two infrastructure devices 2, 10. The lighting system 1 can comprise a large number of infrastructure devices 2, 10.

(8) An infrastructure device 2 and the other infrastructure device 10 is for example a luminaire, a lighting device, a ballast device for driving light emitting means, an input means such as an On/Off switch, a dimming switch, any sensor such as a presence sensor, a fire alarm, any control means such as a central light control server or the like.

(9) The infrastructure device 2 and the other infrastructure device 10 each include a first communication unit 3 and a second communication unit 4. Further aspects of the infrastructure device 2 beyond the first communication unit 3 and second communication unit 4 will be discussed with reference to FIG. 2 below.

(10) The first communication unit 3 enables the infrastructure device 2 to communicate with at least one other infrastructure devices, 10 of the lighting system 1. The first communication unit 3 is preferably a wireless communication unit which is configured to operate based on at least one communication standard suitable for a home automation network such as Bluetooth, Bluetooth LE, Bluetooth Smart, ZigBee, xAP, DSI, DALI, . . . .

(11) The second communication unit 4 is a communication unit which enables communication according to another communication standard than the first communication unit 3. Particularly the second communication unit 4 is configured to enable communication with a communication counterpart such as a commissioning device 5 via a physically different communication channel or a physically different communication medium than the first communication unit 1. The second communication unit preferably communicates by means of optical signals or acoustical signals. The second communication unit 4 of a preferred embodiment uses visible light communication (VLC) for communication.

(12) In FIG. 1 the second communication unit 4 is shown to receive second communication signals 12.1, 12.2 only. However the second communication unit 4 can be adapted to transmit and to receive communication signals 12.1, 12.2.

(13) In FIG. 1 a commissioning device 5 is shown. The depicted commissioning device 5 includes a commissioning communication unit 6, a display unit 7 and an input unit 8.

(14) The commissioning communication unit 6 is configured to communicate according to another communication standard than the first communication unit 3 of the infrastructure device 2. Particularly the commissioning communication unit 6 is configured to enable communication with the second communication unit 4 of an infrastructure device 2 as communication counterpart via a physically different communication channel or a physically different communication medium than the first communication unit 3. The commissioning communication unit 6 preferably communicates by means of optical signals or acoustical signals. In a preferred embodiment, the commissioning communication unit 6 is adapted to use VLC. In FIG. 1 the commissioning communication unit 6 is shown to transmit second communication signals 12.1, 12.2 only. However the second communication unit 4 can be adapted to transmit and to receive communication signals 12.1, 12.2, thus working in a bidirectional manner.

(15) The display unit 7 of the commissioning device 5 may be the display of a mobile computing unit. The display unit 7 may also integrate the function of the input unit 8 when being implemented by the touch sensitive display of a mobile computing device. The commissioning device 5 is advantageously a mobile computing device, a smart phone or a tablet computer with a particular commissioning software program running on a processing unit the mobile computing device. The commissioning software program is adapted to implement the functionalities required for commissioning the lighting system 1.

(16) FIG. 2 shows a block diagram of a network-capable infrastructure device 2 according to an embodiment.

(17) The network capable infrastructure device 2 is adapted to operate in lighting system 1. For communicating by communication signals 11 with at least one other infrastructure device 10 in lighting system 1 (lighting network), the infrastructure device 2 comprises the first communication unit 3 which is already discussed above with reference to FIG. 1. The network capable infrastructure device 2 includes further the second communication unit 4 which performs communication using a different communication standard than the first communication unit 3.

(18) The infrastructure device 2 of a preferred embodiment further includes a signaling unit 14. The signaling unit 14 is adapted to emit an acoustically or optically perceivable signal 15. The signaling unit 14 of an embodiment controls a status LED of the infrastructure device 2 to emit a signal 15 in the shape of a light signal, for example an intermittent light signal or light flash.

(19) The signaling unit 14 of an embodiment emits a signal 15 as an identification signal unambiguously identifying the infrastructure device 2, for example be emitting a signal 15 carrying a modulated identification information of the infrastructure device 2.

(20) The signaling unit 14 of an embodiment controls a buzzer or beeper to emit an acoustic signal, for example a short beep.

(21) The signaling unit 14 according to an embodiment controls a ballast unit 16 of the infrastructure device 2 to change a light intensity of a light emitting unit 17 to vary at least one light parameter of emitted light, for example a light intensity or a light color, in a distinguishable manner.

(22) The exemplary infrastructure device 2 shown in FIG. 2 is a ballast for driving lighting devices 17. The infrastructure device 2 includes a ballast unit 16 which provides a driving signal for driving the at least one light emitting unit 17. The at least one light emitting unit 17 preferably includes one or more light emitting diodes (LED, OLED) or gas discharge lamps for emitting light.

(23) The first communication unit 3, the second communication unit 4, the signalling unit 14 and the ballast unit 16 a connected via internal communication means, for example an internal bus system 18. The internal bus system 18 connects a control unit 13 of the infrastructure device 2 with the other units of the infrastructure device 2. The control unit 12 performs controlling of an operation of the infrastructure device 2, the operation including the standard function of driving the light emitting unit 17 as well as the process of commissioning the infrastructure device 2.

(24) In particular the control unit 13 may be implemented in form of a microcontroller which performs the method steps for performing commissioning of the infrastructure device 2 according to the invention.

(25) Furthermore, the control unit 13 can be adapted to control at least one of the first communication unit 3 and the second communication unit 4 to transmit at least for predetermined time an identification signal. The identification signal is adapted to unambiguously identify the infrastructure device 2. The identification signal can be transmitted in response to a received request, regularly for a time interval at the predetermined time or even continuously.

(26) FIG. 3 shows an example for a screen display of a user interface of a method for commissioning a secure lighting system 1 according to an embodiment.

(27) A commissioning method according to an embodiment of the invention is advantageously performed using an application software program running on a processor of an electronic device, for example a mobile computing device. The computing device further includes internally or externally connected at least the commissioning communication unit 6.

(28) The screen display on display unit 7 is divided in multiple display areas. A first display area 20 displays a number of icons 20.1, 20.2, each icon representing a detected infrastructure device 2. For example, the first icon 20.1 represents a detected luminaire, the second icon 20.2 represents a detected presence sensor. A user may use the touch sensitive display unit to browse through the detected icons 20.1, 20.2 by a first input operation 21.

(29) The icons 20.1, 20.2 which can be displayed in the first area 20 each represent a detected infrastructure device 2, however a key information is not yet shared with the corresponding infrastructure devices 2. The infrastructure devices 2 represented in the first area 20 are thus not trusted devices as secure communication with them via the respective first communication means 3 is not yet possible. As the infrastructure devices 2 share no key information with the lighting network, they are thus only allowed restricted device functionalities in the lighting system 1. In particular, the infrastructure devices 2 represented in the first area 20 are thus denied any authority towards the lighting network. The infrastructure devices 2 represented in the first area 20 may be considered as being blind to the lighting network.

(30) The user browses through the icons 20.1, 20.3, 20.3 using a first operation input 21 shifting the icons 20.1, 20.3, 20.3 in a horizontal direction. When, for example, placing the icon 20.3 at the centermost position in the first area 20, the corresponding infrastructure device 2 is controlled to emit a visually or acoustically perceivable signal. Thus a user is enabled to identify the corresponding infrastructure device 2 out of a plurality of infrastructure devices 2 positioned within the user's view.

(31) The user can select an icon 20.1, 20.2, 20.3 with a second input 25 and move the icon 20.1, 20.2, 20.3 from the first area 20 into a second area 22 on the displayed screen.

(32) The first input 21 and the second input 25 can be a drag and drop type operation performed on the touch-sensitive display of the display unit 7 of the commissioning device 5.

(33) In FIG. 3 the second input 25 is performed on icon 20.3 on the centermost position in the first area 20. By selecting icon 20.3 and shifting it to the second area 22, infrastructure device 2 corresponding to the icon 20.3 is selected to be subject to a commissioning process. The commissioning process will be run advantageously in the background of the commissioning software program. The commissioning process running in the background of the commissioning software program includes providing the key information to the infrastructure device 2 via the communication signal 11.1, 11.2 between the commissioning communication unit 6 and the second communication unit 4.

(34) When the commissioning process has been successfully finished, the infrastructure device 2 shares the key information with the lighting system 1. Thus the infrastructure device 2 is a confirmed and now a trusted resource in the lighting system 1 and may perform its assigned functions to a full extent.

(35) The commissioning process as discussed with reference to FIG. 3 enables a user to control commissioning in comfortable and effective manner by browsing with a first input 21 through infrastructure devices 2 represented in the first area 20. The infrastructure devices 2 in the first area 20 may be termed grey-listed infrastructure devices 2, as only restricted functionalities are allowed for the infrastructure devices 2 represented in the first area 20. The infrastructure devices 2 in the second area 22 may be termed white-listed infrastructure devices 2, as full and unrestricted functionalities are allowed for the infrastructure devices 2 represented in the second area 22.

(36) FIG. 4 provides a flowchart of a method for commissioning a network-capable infrastructure device 2 according to an embodiment.

(37) The method for commissioning at least one network-capable infrastructure device 2 using a commissioning device 5 starts with a step of displaying an icon 20.1, 20.2, 20.3 representing the at least one infrastructure device 2 on a display unit 7 of the commissioning device 5.

(38) In succeeding step S2 the displayed infrastructure device 2 is selected with a first input 21. After selecting the infrastructure device 2 in the step S2, the method proceeds to step S3. In step S3, the commissioning communication unit 6 of the commissioning device 5 automatically and in response to the selection operation transmits a command to the infrastructure device 2 to identify itself visually or acoustically

(39) In step S4 succeeding to the step S3 it is determined, if a second input 25 is performed by the input unit 8. If the input unit 8 determines a respective second input 25 with respect to the infrastructure device 2, the method proceeds to step S5.

(40) In step S5 the commissioning communication unit 6 transmits key information to the selected infrastructure device 2 after having receiving a respective second input 25 in step S4.

(41) In step S6 succeeding to the step S5, the display unit 7 proceeds to displaying a screen in which the displayed icon is marked as a trusted infrastructure device 2 due to successfully transmitting the key information to the infrastructure device 2.

(42) If in step S2 no first input 21 to the displayed icon 20.1, 20.2, 20.3 is detected, the method returns to step S1 of displaying an icon 20.1, 20.2, 20.3 without further action.

(43) If in step S4 no second input 25 meaning a commissioning request operation on the displayed icon 20.1, 20.2, 20.3 is detected, the method returns to step S1 of displaying the icon 20.1, 20.2, 20.3 without further action.

(44) In FIG. 5, the step S5 of transmitting key information in a method for commissioning a network-capable infrastructure device 2 according to an embodiment is shown in more detail.

(45) In a step S5.1, the commissioning device 5 transmits via a commissioning communication unit 6 the key information to the infrastructure device 2. In particular the commissioning communication unit 6 transmits a commissioning signal 12.1, 12.2 comprising the key information to the second communication unit 4 of the infrastructure device to be commissioned.

(46) The infrastructure device 2 receives by the second communication unit 4 the key information in the step S5.2.

(47) After receiving the key information in step S5.2, the infrastructure device 2 communicates via the first communication unit 3 with at least one other infrastructure device 10 and its first communication unit 3 using the key information key information received in the step S5.2.

(48) The invention is discussed with reference to a lighting system 1 and an infrastructure device 2 being a ballast. However, the claimed invention is also applicable for other infrastructure devices forming part of a lighting system 1 or general infrastructure system, such as a fire warning system.