Method, Communication Web Service, And Server For Providing Network Communication Between BACNET Devices

Abstract

The present disclosure relates generally to the technical field of building management systems or building automation systems comprising a plurality of building devices, e.g. BACnet devices. In some embodiments, a method for providing network communication between BACnet devices via the Internet may include: initiating an outbound HTTPS connection to a pre-defined URL locating a communication web service, by a building automation BACnet device (a node of a local building automation network); and initiating an outbound HTTPS connection to the pre-defined URL locating the communication web service, by a BACnet tool. The building automation BACnet device serves as a gateway device for further BACnet devices of said local building automation network.

Claims

1. A method for providing network communication between BACnet devices via the Internet, the method comprising: initiating an outbound HTTPS connection to a pre-defined URL locating a communication web service, by a building automation BACnet device; wherein said building automation BACnet device comprises a node of a local building automation network; and said building automation BACnet device serves as a gateway device for further BACnet devices of said local building automation network; and initiating an outbound HTTPS connection to the pre-defined URL locating the communication web service, by a BACnet tool.

2. The method of claim 1, wherein the communication web service provides communication services for further local building automation networks.

3. The method according to claim 1, wherein the communication web service is hosted on one or more servers outside of the participating components.

4. The method according to claim 1, wherein the communication web service is hosted as a cloud service.

5. The method according to claim 1, wherein the communication between the building automation BACnet device serving as a gateway device and the communication web service, as well as the communication between the communication web service and the BACnet tool is based on BACnet via a BACnet Cloud Link protocol over a WebSocket protocol, forming a BACnet network.

6. The method according to claim 1, further comprising controlling communication between any of the building automation BACnet devices on the local building automation network and the BACnet tool by the communication web service.

7. The method according to claim 1, further comprising maintaining a list of access rights that define which users have access to which building automation network by the communication web service.

8. The method according to claim 7, further comprising managing the list of access rights by a web-based user interface.

9. A communication web system for providing communication service for BACnet devices via Internet, the system comprising: a communication web service configured to be accessed by BACnet devices via a respective outbound HTTPS connection to a pre-defined URL; wherein communication between the communication web service and the BACnet devices is based on BACnet via a BACnet Cloud Link protocol over a WebSocket protocol.

10. The communication web system according to claim 9, wherein the communication web service is hosted on one or more servers outside of the BACnet devices.

11. The communication web system according to claim 9, wherein the communication web service includes in-memory data grid frameworks and persistency frameworks.

12. The communication web system according to claim 9, wherein at least one of the BACnet devices comprises a building automation BACnet device and serves as a node of a local building automation network, and wherein said building automation BACnet device serves as a gateway device for further BACnet devices of the local building automation network.

13. The communication web system according to claim 9, wherein the communication web service provides communication services for further local building automation networks; and in each of the local building automation networks one of the building automation BACnet devices serves as a gateway device for further BACnet devices of the local building automation network.

14. The communication web system according to claim 9, wherein the communication web service is accessed by a BACnet tool via a respective outbound HTTPS connection to the pre-defined URL, and communication between the communication web service and the BACnet tool is based on BACnet via the BACnet Cloud Link protocol over the Websocket protocol.

15. The communication web system according to claim 9, wherein the communication between any of the building automation BACnet devices on the local building automation network and the BACnet tool is provided and controlled by the communication web service, and is based on BACnet via the BACnet Cloud Link protocol over the Websocket protocol.

16. The communication web system according to claim 9, wherein the communication web service maintains a list of access rights that define which users have access to which building automation network.

17. The communication web system according to claim 16, wherein the communication web service provides a web-based user interface to manage the access rights by a user.

18. A server system comprising: a communication web service for providing communication service for BACnet devices via Internet, wherein the communication web service is accessed by BACnet devices via a respective outbound HTTPS connection to a pre-defined URL, and communication between the communication web service and the BACnet devices is based on BACnet via the BACnet Cloud Link protocol over a WebSocket protocol.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

[0032] The above-mentioned and other concepts of the present disclosure will now be addressed with reference to the drawings of some exemplary embodiments. The shown embodiments are intended to illustrate, but not to limit the scope of the teachings. The drawings contain the following figures, in which like numbers refer to like parts throughout the description and drawings and wherein:

[0033] FIG. 1 illustrates a known VPN communication mechanism between BACnet devices located in different networks;

[0034] FIG. 2 illustrates a first exemplary communication scenario between BACnet devices located in different networks using a communication web service (CCL) according to teachings of the present disclosure;

[0035] FIG. 3 illustrates a second exemplary communication scenario between BACnet devices located in different networks using a communication web service (CCL) according to teachings of the present disclosure;

[0036] FIG. 4 illustrates an exemplary flow chart for a method for providing network communication between BACnet devices via the Internet according to teachings of the present disclosure; and

[0037] FIG. 5 illustrates an exemplary server, configured to host a communication web service (CCL) for providing communication service for BACnet devices via Internet according to teachings of the present disclosure.

DETAILED DESCRIPTION

[0038] Today building automation objects or field devices of a building automation system may be widely dispersed throughout a facility or even in different facilities. For example, an HVAC system includes temperature sensors and ventilation damper controls as well as other elements located in virtually every area of a facility. Similarly, a security system may have intrusion detection, motion sensors, and alarm actuators dispersed throughout an entire building or campus. Likewise, fire safety systems may include smoke alarms and pull stations dispersed throughout the facility. To achieve efficient and effective building automation system operation, there is a need to monitor the operation of, and often communicate with, the various dispersed building automation objects or field devices of a building automation system.

[0039] Electrical or wireless communication media are used in a building automation system for the exchange of data of individual devices or parts of systems. As a rule, a number of communication networks exist with cables, optical data communication channels, ultrasound connections, electromagnetic near field or radio networks used, including fiber optic networks or cellular networks for example. Examples of technologies or standards able to be used for the said data exchange are BACnet, LON from the company ECHELON, KNX, ZigBee or PROFIBUS defined by German standard DIN 19245. BACnet refers to the ANSI/ASHRAE 135-2016 building communication protocol standard, titled BACnet, A Data Communication Protocol for Building Automation and Control Networks (2016).

[0040] Building automation systems typically have one or more control stations in which data from each of the dispersed building automation objects or field devices in the system may be monitored and in which various aspects of system operation may be controlled and/or monitored. The control station typically includes a computer having processing equipment, data storage equipment, and sometimes a user interface. To allow for monitoring and control of the dispersed building automation objects or field devices, building automation systems often employ multi-level communication networks to communicate operational and/or alarm information between operating elements, such as sensors and actuators, and the control stations.

[0041] One example of a building automation system control station is the APOGEE INSIGHT Workstation, available from Siemens Industry, Inc. of Buffalo Grove, Ill., which may be used with the model APOGEE building automation system, also available from Siemens Industry, Inc. (APOGEE and INSIGHT are U.S federally registered trademarks of Siemens Industry, Inc.) In this system, several control stations, connected via an Ethernet or other type of network, may be distributed throughout one or more building locations, each having the ability to monitor and control system operation. As a consequence, different people in different locations of the facility may monitor and control building operations.

[0042] There is a need that building automation objects or field devices of a building automation system located in different networks can communicate. Furthermore, there is a need that software based tools for e.g. engineering, configuration, maintenance, browsing data, optimizations, or data archiving of building automation objects or field devices have remote access to the respective objects or devices. Remote tool access today is normally accomplished by using a virtual private network (VPN) connection from the engineering office to the site (building).

[0043] FIG. 1 illustrates a known VPN communication mechanism between BACnet devices located in different networks. In FIG. 1 the tools D1 and D2 are nodes of network N1 and realized as BACnet devices, e.g. capable of engineering, configuration, maintenance, browsing data, optimizations, or data archiving of automation devices D3, D4 which may be also realized as BACnet devices. In FIG. 1 the automation devices D3, D4 are nodes of network N2. The networks N1, N2 are realized as IP networks using the Internet Protocol (IP). According the illustration in FIG. 1 the network N1 comprising the tools D1, D2 is located in an engineering office, and the network N2 comprising the automation devices D3, D4 is located in a building (site). Each of the networks N1, N2 has a respective VPN router R1, R2 and a respective firewall FW1, FW2 for a communication via Internet (I).

[0044] The solution with VPN mechanism has at least the following drawbacks: [0045] Special HW Installation on site required for VPN Router. This is increasing HW-costs. [0046] Device configuration required. This means higher installation efforts. [0047] Firewall configuration required to allow inbound traffic on VPN port. [0048] A VPN mechanism provides access to the whole network in a building. This can be a security issue. [0049] Multiple VPN connections must be initiated to access various sites. [0050] Respective firewalls must be configured on either engineering office or building site to enable VPN connection.

[0051] FIG. 2 illustrates a first exemplary communication scenario between BACnet devices located in different networks N3-N5 using a communication web service CCL according to teachings of the present disclosure. The communication web service CCL (Cloud Communication Layer) provides communication service for BACnet devices via the Internet. The communication web service CCL may be implemented using one or more servers S1. In some embodiments, the one or more servers S1 are implemented in a cloud infrastructure C. The communication web service CCL may be configured to be accessed by BACnet devices D5-D9 via a respective outbound HTTPS connection to a pre-defined URL. In some embodiments, the communication between the communication web service CCL and the BACnet devices D5-D9 is based on BACnet via the BACnet Cloud Link (BCL) protocol over the WebSocket protocol. The WebSocket protocol is a communication protocol between computers or computerized devices and provides a bi-directional, even a full-duplex, communication based on a TCP (Transmission Control Protocol) or TLS (Transport Layer Security) connection.

[0052] WebSocket is a computer communications protocol, providing full-duplex communication channels over a single TCP connection. The WebSocket protocol was standardized by the IETF as RFC 6455 in 2011, and the WebSocket API in Web IDL is being standardized by the W3C. WebSocket is designed to be implemented in web browsers and web servers, but it can be used by any client or server application (Wikipedia).

[0053] In some embodiments, the communication web service CCL is hosted on one or more servers S1 outside of the BACnet devices D5-D9. In some embodiments, the one or more servers S1 hosting the communication web service CCL and providing this communication service to BACnet devices are implemented in a cloud computing infrastructure, especially in a distributed system. The BACnet devices D5-D9 can be tools or automation devices. The tools can be used e.g. for engineering or configuring the BACnet automation devices. On building sites BACnet automation devices are used e.g. for controlling HVAC functionality. The BACnet tools can be located in a remote engineering office or a home office. These tools have remote access to the BACnet automation devices via the communication web service CCL.

[0054] The firewalls FW3-FW5 need only to be configured to let outbound connection establishment (out of one of the networks N3-N5) pass. The firewalls FW3-FW5 require no configuration for inbound connection establishment (into one of the networks N3-N5).

[0055] In some embodiments, the communication web service CCL is based on in-memory data grid frameworks and/or on persistency frameworks. An in-memory data base uses primarily the main memory (RAM, random access memory; especially non-volatile RAM) of a computer system for data storage. This allows fast data access times. A data grid framework or a data grid architecture makes it possible to have access to geographically distributed data, even scattered over different networks. An in-memory data grid framework can be used be used for distributed data storage or distributed data processing.

[0056] In computer technology a persistency (or persistence) framework supports and automates storing of data. For example, a persistence framework moves data to and from a permanent data storage. Normally a persistency (or persistence) framework is realized as middleware software.

[0057] In some embodiments, one of the BACnet devices D8, D9 is a building automation BACnet device D8, D9 and is a node of a local building automation network N5, and said building automation BACnet device is configured to be acting as a gateway device for further BACnet devices of the local building automation network N5. In FIG. 2 the network N5 is located on a building site (e.g. a residential building or a campus) and the automation BACnet device D8 is acting as a gateway to the Internet I. Via this gateway further BACnet devices D9 of the network N5 have access to the communication web service CCL. The communication web service CCL is acting as a communication mechanism to provide communication between BACnet devices located in different networks.

[0058] In some embodiments, the communication web service CCL provides communication services for more than one local building automation networks N3-N5, wherein in each of the local building automation networks N3-N5 one of the building automation BACnet devices D5-D9 is configured to be acting as a gateway device for further BACnet devices of the respective local building automation network N3-N5. It is possible that the communication web service CCL provides communication between different network topologies.

[0059] In some embodiments, the communication web service CCL is configured to be accessed by a BACnet tool D5-D7 (e.g. engineering tool) via a respective outbound HTTPS connection to the pre-defined URL locating or hosting the communication web service CCL to be used, wherein the communication between the communication web service CCL and the BACnet tool D5-D7 is based on BACnet via the BACnet Cloud Link (BCL) protocol over the websocket protocol. The BACnet tools D5-D7 can be located in different networks N3, N4.

[0060] In some embodiments, the communication between any of the building automation BACnet devices D8, D9 on the local building automation network N5 and a BACnet tool D5-D7 is provided and controlled by the communication web service CCL, and is based on BACnet via the BACnet Cloud Link (BCL) protocol over the Websocket protocol. This enables that a tool D5-D7 can be connected via the communication web service CCL to BACnet automation devices D8, D9. The communication web service CCL controls this communication, for instance based on lists of access rights. Therefore, the communication web service CCL controls which BACnet tool D5-D7 has access to which local BACnet network and in each case to which BACnet automation device D8, D9.

[0061] In some embodiments, the communication web service CCL is configured to maintain a list of access rights that define which users have access to which building automation network and building automation device. Different levels of access can be assigned to different users or user groups. In some embodiments, the communication web service CCL provides a web-based user interface (UI, see FIG. 5) to manage the access rights by a user. For example an authorized user can manage the access rights via a web browser based UI.

[0062] In some embodiments, the communication web service CCL is realized as a software service that is hosted on one or more servers S1 outside of the participating components. This means that the BACnet devices D5-D9 are not used to implement the communication web service CCL. From both the site and engineering office respectively home office, outbound WebSocket connections are used only. A building automation device D8, D9 in a local building automation network N5 initiates an outbound HTTPS connection to a pre-defined URL that locates or hosts the CCL service. This device then acts as a gateway device to all BACnet devices D8, D9 on the local building automation network N5. No special firewall rules are required since standard firewalls FW3-FW5 are configured to let outbound HTTP(S) traffic pass.

[0063] BACnet tools D5-D7 (e.g. for engineering) initiate an outbound HTTPS connection to the same CCL service. A tool user can operate from any place as long as he has got access to the Internet I and the correct CCL service in it.

[0064] In some embodiments, the communication web service CCL maintains a list of access rights that define what tool users have access to which building automation network. This list of access rights can be managed by a web user interface or by other means of the web service CCL (Cloud Communication Layer). If the user is granted access to the local building automation network the communication web service CCL is establishing a connection between the BACnet tool and the gateway device. If the connection is established, the CCL web service provides access to the whole local building automation network N5. Since all gateway devices initiate the connection to the CCL web service, they are permanently connected and keep up their connection as long as they are connected to the Internet I. There is no need for a special inbound firewall rule that would expose any server ports of the local building automation network N5.

[0065] In some embodiments, the actual communication between a BACnet tool D5-D7 and the web service CCL, and between the web service CCL and the gateway building automation device D8, is based on BACnet via the BACnet Cloud Link (BCL) datalink and underlying WebSocket transport layer (RFC 6455). The web service CCL acts as a hub/switch at the BACnet datalink layer, and does not need BACnet routing as of the BACnet network layer. The BACnet application layer communication for any BACnet device or BACnet tool is equal to the communication as if the tools and the devices were part of the same network or connected over a VPN connection (virtual private network). In some embodiments, the web service CCL (Cloud Communication Layer) especially saves travel costs and reaction time. Furthermore, the web service CCL provides secured and controlled remote access to the sites.

[0066] FIG. 3 illustrates a second exemplary communication scenario between BACnet devices D10-D18 located in different networks N6-N11 using a communication web service CCL according to the teachings of the present disclosure. The CCL web service is a participant in several logically separated BACnet networks for which the BCL datalink (BACnet Cloud Link) implementation in the web service CCL provides hub and switch functionality respectively.

[0067] In the exemplary illustration according to FIG. 3, [0068] the network N6 comprises the BACnet devices D10 and D11; the BACnet device D10 is a simple BACnet router, the BACnet devices D11 is a tool which does not support the BCL datalink directly (e.g. a BACnet tool for engineering or configuring BACnet automation devices); [0069] the network N7 comprises the BACnet device D12 (an exemplary BACnet tool which supports the BCL datalink directly); [0070] the network N8 comprises the BACnet device D13 (an exemplary BACnet tool which supports the BCL datalink directly); [0071] the network N9 comprises the BACnet devices D14 and D15, both exemplary BACnet automation devices, where D15 acts as the BACnet router supporting the BCL datalink and providing the connection to the CCL; [0072] the network N10 comprises the BACnet devices D16 and D17, both exemplary BACnet automation devices, where D16 acts as the BACnet router supporting the BCL datalink and providing the connection to the CCL; [0073] the network N11 comprises the BACnet device D18 (an exemplary BACnet automation device which supports the BCL datalink directly).

[0074] In the communication scenario according to FIG. 3, the BACnet devices D10, D15, and D16 are acting as gateways for the respective networks N6, N9, and N10. Devices D12, D13, and D18 connect directly to the communication web service CCL, and do not act as gateways for other devices on their respective networks N7, N8, and N11. The communication web service CCL which provides hub and switch functionality so that BACnet devices located in different networks can interact is implemented by the one or more server S2. In some embodiments, the one or more server S2 are implemented in a cloud infrastructure so that the communication web service CCL can be provided as SaaS (Software as a Service) or as PaaS (Platform as a Service).

[0075] Further explanations regarding the scenario illustrated in FIG. 3 provide the text boxes TB1-TB3.

[0076] Text Box TB1:

[0077] BACnet Networks: [0078] Tool Router C+Tool D [0079] Tool Router C+CCL+Automation Device B [0080] Automation Device A+Automation Device B

[0081] BACnet Internetwork: [0082] Tool Router C+Tool D+CCL+Automation Device B+Automation Device A

[0083] Text Box TB2:

[0084] CCL can be participant in all BCL based BACnet Networks, as a device, but providing the hub and switch function for all BCL based BACnet networks.

[0085] Text Box TB3:

[0086] BACnet Networks: [0087] Tool E+Tool F+CCL+Automation Device C+Automation Device D [0088] Automation Device C+Automation Device E

[0089] BACnet Internetwork: [0090] Tool E+Tool F+CCL+Automation Device C+Automation Device D+Automation Device E

[0091] In some embodiments, the CCL service software is implemented to make use of distributed in-memory data grid frameworks and persistency frameworks that are used in typical cloud computing environments. This allows scaling of the CCL service solution if the number of connected devices or tool connections exceeds the memory or computing power of a single server respectively node. The CCL service is not limited to interlink tools and building automation devices. It can also be used to establish connections between building automation devices, i.e. enhance an existing network of devices that are geographically disconnected (e.g. building B and building C).

[0092] FIG. 4 illustrates an exemplary flow chart for a method for providing network communication between BACnet devices via the Internet. The method comprises the steps: [0093] (ST1) initiating an outbound HTTPS-connection to a pre-defined URL locating a communication web service (CCL), by a building automation BACnet device; wherein said building automation BACnet device is a node of a local building automation network, and wherein said building automation BACnet device is acting as a gateway device for further BACnet devices of said local building automation network; [0094] (ST2) initiating an outbound HTTPS-connection to the pre-defined URL locating the communication web service (CCL), by a BACnet tool (e.g. engineering tool).

[0095] In some embodiments, the communication web service CCL provides communication services for further local building automation networks. The communication web service (CCL) can provide hub and switch functionality between the participating networks.

[0096] In some embodiments, the communication web service CCL is hosted on one or more servers outside of the participating networks. The communication web service CCL can be implemented independently of the networks and the BACnet devices within the networks.

[0097] In some embodiments, the communication web service CCL is based on in-memory data grid frameworks and persistency frameworks. This allows a scalability of the communication web service (CCL) regarding the number of networks or BACnet devices to be connected and managed by the communication web service (CCL).

[0098] In some embodiments, the communication between the building automation BACnet device acting as a gateway device and the communication web service CCL, as well as the communication between the communication web service CCL and the BACnet tool (e.g. engineering tool) is based on BACnet via the BACnet Cloud Link (BCL) protocol over the secured WebSocket protocol (WebSocket protocol, RFC 6455, IETF Standard). This means that the communication web service CCL is based on a standardized and secure protocol.

[0099] In some embodiments, the communication between any of the building automation BACnet devices on the local building automation network and the BACnet tool is provided and controlled by the communication web service CCL, through its hub and switch functionality. This enables that a BACnet tool (e.g. Engineering-tool) can be connected via the communication web service CCL and Internet connection to BACnet automation devices. The communication web service CCL controls this communication, for instance based on lists of access rights. Therefore the communication web service CCL controls which BACnet tool has access to which local BACnet network and in each case to which BACnet automation device.

[0100] In some embodiments, the communication web service CCL maintains a list of access rights that define which devices and users have access to which building automation network. This allows that different levels of access can be assigned to different users or user groups. In some embodiments, the list of access rights is managed by a web-based user interface. This enables an authorized user to manage the access rights via a commercially available web browser.

[0101] In some embodiments, the communication web service CCL can be realized as a software service hosted on one or more servers outside of the participating components. This means that the BACnet devices to be connected are not required to implement the communication web service CCL.

[0102] FIG. 5 illustrates an exemplary server S3, configured to host a communication web service CCL for providing communication service for BACnet devices D19-D25 via Internet I, wherein the communication web service CCL is configured to be accessed by the BACnet devices D19-D25 via a respective outbound HTTPS connection to a pre-defined URL, and wherein the communication between the communication web service CCL and the BACnet devices is based on BACnet via the BACnet Cloud Link (BCL) protocol over the WebSocket protocol. The exemplary server S3 comprises a processor P, a memory M, communication means CM, and a user interface UI. In some embodiments, the server S3 is implemented in a cloud infrastructure. For providing the communication web service CCL also more than one server S3 can be used.

[0103] In some embodiments, the communication web service CCL provides the URL (Uniform Resource Locator) which locates the service CCL that can be accessed by the BACnet devices D19-D25. The BACnet devices D19-D25 can be BACnet tools (e.g. engineering tools) or

[0104] BACnet automation devices. In some embodiments, the BACnet automation devices are configured to control HVAC and other domain functionality in buildings. The BACnet devices D19-D25 can be located in different networks N12-N14.

[0105] The various embodiments of the present disclosure (method, web service, server) may provide the following advantages: [0106] No additional hardware installation required to allow VPN connection. [0107] No network or firewall configuration required (only outbound connections on standard HTTPS port). [0108] Access is granted based on a user rights scheme (access list maintained in CCL). [0109] Centralized management of user access rights (access list maintained in CCL). [0110] Any BACnet network technology can be used within site networks (no restriction to IP). [0111] Access from tool can be provided from any location, where Internet is available (only outbound connections on standard HTTPS port required). [0112] BACnet tools are not required to support the BCL. Simple BACnet routing to BCL, possible even on the host that also runs the tool application, allows legacy BACnet tools that do not even support the BCL, to connect to the site via the CCL. [0113] Reduced complexity of the setup leads to less training effort for installation and configuration engineers, which are normally no computer network experts. This means cost savings. [0114] Reduced complexity of the setup leads to less errors or wrong configurations. This means less field support tickets. [0115] No firewall rule changes and no additional network hardware imply better customer acceptance and better compliance with IT security policies. This holds also for projects in security sensitive areas. [0116] In case of field issues, it is possible to instantly change the access rights to building automation devices, at a central place in the CCL. This is required if the person that normally maintains the device is not available in the critical moment. This implies faster resolution of problems and a good reputation at the customer.

REFERENCE SIGNS

[0117] N1-N14 Network [0118] D1-D25 BACnet Device [0119] S1-S3 Server [0120] P Processor [0121] M Memory [0122] CM Communication Means [0123] IO Input/Output Means [0124] CCL Cloud Communication Layer C Cloud [0125] I Internet [0126] IP Internet Protocol [0127] TB1-TB3 Text Box [0128] FW1-FW5 Firewall [0129] ST1-ST2 Step