Method for securely transmitting lighting scenes over a computer network with cloud setup and authentication

Patent metadata

Field	Value
Publication number	US-2023198742-A1
Application number	US-202318109377-A
Country	US
Kind code	A1
Filing date	Feb 14, 2023
Priority date	Dec 13, 2018
Publication date	Jun 22, 2023
Grant date	—

Abstract

Techniques for securely controlling multiple lighting devices simultaneously with a lighting control device are disclosed. Command messages may be transmitted from the lighting control device to multiple lighting devices over a computer network without routing through a remote cloud service. The messages may be encrypted and may include an incremented sequence number. Lighting devices that receive a command message may compare the incremented sequence number to a previously stored sequence number corresponding to the lighting control device. If the incremented sequence number is greater than the stored sequence number, then a lighting device may determine the message was transmitted by an authorized lighting control device and may implement any command instruction included therein. If the incremented sequence number is equal to or less than the stored sequence number, then the lighting device may determine the command message was transmitted by a malicious source and may ignore the command message.

First claim

We claim:

1 . A lighting control device, comprising:
a user interaction component; a memory component; logic, at least a portion of the logic implemented in circuitry coupled to the memory component and the user interaction component, the logic to:
process a setup message assigning a first lighting device and a second lighting device and a corresponding lighting action to the user interaction component;
receive an input from a user through the user interaction component;
retrieve a first sequence number stored in the memory component;
increment the first sequence number to generate an incremented sequence number;
generate a command message in response to the received input from the user, the command message to include a command instruction corresponding to the lighting action, the command message to further include the incremented sequence number; and
cause transmission of the command message to the first and second lighting devices over a wireless local area network (LAN).

2 . The lighting control device of claim 1 , the setup message received from a remote cloud service.

3 . The lighting control device of claim 1 , the user interaction component to comprise a push button of a keypad and the input received from the user to comprise the user pressing the push button.

4 . The lighting control device of claim 1 , the first sequence number to comprise a randomly generated integer; the logic to increment the first sequence number by a fixed amount to generate the incremented sequence number or to increment the first sequence number by a random amount to generate the incremented sequence number.

5 . The lighting control device of claim 1 , the logic to encrypt the command message prior to causing transmission of the command message to the first and second lighting devices over the wireless LAN; the logic to encrypt the command message based on an Advanced Encryption Standard (AES) key; the logic to store the AES key received from a remote cloud service.

6 . The lighting control device of claim 1 , the logic further to:
receive a synchronization request message, the synchronization request message to include a first challenge number; process the synchronization request message to determine that the synchronization request message is associated with the first lighting device and to determine the first challenge number; generate the first sequence number; store the first sequence number in the memory component; generate a synchronization response message, the synchronization response message comprising the first sequence number and the first challenge number; and cause transmission of the synchronization response message to the first lighting device.

7 . The lighting control device of claim 6 , the first challenge number to comprise a randomly generated integer.

8 . The lighting control device of claim 6 , wherein one or more of the command message and the synchronization request message comprise a multicast message to a multicast group.

9 . The lighting control device of claim 6 , the synchronization response message to further comprise a unique identifier for the lighting control device.

10 . The lighting control device of claim 6 , the synchronization request message encrypted based on an Advanced Encryption Standard (AES) key.

11 . The lighting control device of claim 10 , the logic to decrypt the synchronization request message prior to determining the first challenge number based on the AES key.

12 . A method, comprising:
processing a setup message assigning a first lighting device and a second lighting device and a corresponding lighting action to a user interaction component; receiving an input from a user through the user interaction component; retrieving a sequence number stored in a memory component; incrementing the sequence number to generate an incremented sequence number; generating a command message in response to the received input from the user, the command message to include a command instruction corresponding to the lighting action, the command message to further include the incremented sequence number; and cause transmission of the command message to the first and second lighting devices over a wireless local area network (LAN).

13 . The method of claim 12 , further comprising generating the sequence number and storing the sequence number in the memory component, wherein the sequence number comprises a randomly generated integer.

14 . The method of claim 13 , further comprising incrementing the sequence number by a fixed amount to generate the incremented sequence number or incrementing the sequence by a random amount to generate the incremented sequence number.

15 . The method of claim 12 , further comprising encrypting the command message prior to causing transmission of the command message to the first and second lighting devices over the wireless LAN, wherein the encrypting comprises encrypting the command message based on an Advanced Encryption Standard (AES) key; and further comprising storing the AES key received from a remote cloud service.

16 . The method of claim 12 , further comprising:
receiving a synchronization request message, the synchronization request message to include a first challenge number; processing the synchronization request message to determine that the synchronization request message is associated with the first lighting device and to determine the first challenge number; generating a first sequence number; storing the first sequence number in the memory component; generating a synchronization response message, the synchronization response message comprising the first sequence number and the first challenge number; and causing transmission of the synchronization response message to the first lighting device.

17 . The method of claim 16 , the synchronization request message as a multicast message to a multicast group.

18 . The method of claim 16 , the synchronization response message to further comprise a unique identifier for a lighting control device, the synchronization request message encrypted based on an Advanced Encryption Standard (AES) key.

19 . A system, comprising:
a memory component; logic, at least a portion of the logic implemented in circuitry coupled to the memory component, the logic to:
synchronize a lighting device with a lighting control device, the synchronization based on communication of a first challenge number, a second challenge number, and a first sequence number between the lighting device and the lighting control device, the synchronization to prepare the lighting device to receive command messages from the lighting control device; and
control a lighting load of the lighting device based on user input, the user input received via user interaction with a user interaction component;
the control performed via communication of a command instruction in a command message, the command instruction based on the user input, the command message comprising the command instruction and a second sequence number, the second sequence number being greater than the first sequence number;
the communication between the lighting control device and the lighting device over a wireless local area network (LAN).

20 . The system of claim 19 , further comprising the user interaction component, the user interaction component coupled with the logic to generate the command message with the command instruction and to increment the first sequence number to generate the second sequence number.

Assignees

• Leviton Manufacturing Co

Inventors

• Ard Aaron
• Yokum Brian
• Hebert Jr Frederick J
• Gumina Ronald J
• Shurte James

Classifications

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• H04W12/041

  Key generation or derivation · CPC title

• H04W12/033

  of the user plane, e.g. user's traffic · CPC title

• H04W4/06

  Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services · CPC title

• H05B47/19

  via wireless transmission · CPC title