IP Library Granted Patent US 10,591,883
Granted Patent B2
US 10,591,883 · App. 15/502,700 · Granted Mar 17, 2020

Secure configuration of a home-automation installation

Inventors: Mickaël Mugnier (Bonneville, FR); Stéphane Marmey (Naves Parmelan, FR); Arnaud Desbiolles (Cornier, FR); Florent Grosset (Thyez, FR); Philippe Partakelidis (Viuz en Sallaz, FR); Guillaume Bruneau (Bonneville, FR)
Assignee: SOMFY SAS
G05B19/0426G05B15/02G08C17/02H04L9/088H04L12/2803G05B2219/2642G08C2201/42
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,591,883
App. No.
15/502,700
Granted
Mar 17, 2020
Kind
B2
Abstract

The method for configuring a home-automation apparatus ( 1 ) includes: at least one control point of a first type ( 3 A, 4 A) intended to communicate according to a first mode; and at least one actuator ( 5 A, 6 A) intended to communicate, after performing the configuration method, according to the first mode with at least one control point of the first type ( 3 A, 4 A) during usage mode, and which can communicate according to a second mode, secured by an encryption key, with a configuration device ( 2 ) during configuration mode. The configuration device implements the method which includes determining at least one actuator ( 5 A, 6 A) that can be configured, obtaining a temporary encryption key having a limited period of validity, sending a message containing the temporary encryption key to the at least one actuator, communicating according to the second mode, secured by the temporary encryption key, with the at least one actuator in configuration mode.

Claims (65)

1. A method for configuring a home-automation installation comprising:

at least one control unit of a first type, designed to communicate according to a first mode of communication,

at least one configuration device capable of communicating according to a second mode of communication made secure by means of a temporary encryption key specific to the configuration device, and

at least one actuator:

designed to communicate, at the end of the execution of the configuration method, according to the first mode of communication, with the at least one control unit of the first type, during an operation in utilization mode which is in the first mode of communication, and

capable of communicating according to a second mode of communication, made secure by means of an encryption key, with the configuration device, during an operation in configuration mode which is in the second mode of communication,

the method being implemented by the configuration device and comprising at least:

determining the at least one actuator able to be configured,

obtaining the temporary encryption key having a limited period of validity,

sending a message containing the temporary encryption key to the at least one actuator able to be configured,

communicating according to the second mode of communication, made secure by means of the temporary encryption key, with the at least one actuator operating in the configuration mode, and

terminating the communicating according to the second mode of communication, wherein the temporary encryption key is erased in the at least one actuator upon the expiration of the limited period of validity of the temporary encryption key.

2. The configuration method as claimed in claim 1 , wherein:

according to the second mode of communication made secure by means of the temporary encryption key, the at least one actuator and the configuration device communicate as a transmitter and as a receiver,

and the method furthermore comprises receiving from the at least one actuator a message confirming the end of validity of the temporary encryption key.

3. The configuration method as claimed in claim 1 , wherein the determining of the at least one actuator able to be configured comprises receiving at least one message sent from the at least one actuator.

4. The configuration method as claimed in claim 1 , comprising, prior to the determining of the at least one actuator able to be configured, triggering the operation of the at least one actuator in configuration mode.

5. The configuration method as claimed in claim 4 , wherein the triggering consists in carrying out a predetermined action on the at least one control unit of the first type with which the at least one actuator is designed to communicate.

6. The configuration method as claimed in claim 1 , wherein:

the home-automation installation furthermore comprises at least one control unit of a second type capable of communicating according to the second mode of communication made secure by means of the encryption key specific to the at least one control unit of the second type,

the at least one actuator is furthermore capable of communicating with the at least one control unit of the second type, according to the second mode communication made secure by means of the encryption key specific to the at least one control unit of the second type, during the operation in the utilization mode,

and the method furthermore comprises a second communicating action according to the second mode of communication, made secure by means of the temporary encryption key, with the at least one actuator.

7. The configuration method as claimed in claim 6 , wherein, during the second communicating action, the configuration device transmits data to the at least one actuator for managing the encryption key specific to the control unit of the second type.

8. A method of operation of an actuator, the actuator belonging to a home-automation installation and being:

designed to communicate according to a first mode of communication, with at least one control unit of a first type belonging to the home-automation installation, during an operation in utilization mode, and

capable of communicating according to a second mode of communication, made secure by means of an encryption key, with a configuration device, during an operation in configuration mode,

the method being implemented by the actuator and comprising at least:

receiving a message containing a temporary encryption key having a limited period of validity, coming from the configuration device,

communicating according to the second mode of communication, made secure by means of the temporary encryption key, with the configuration device, and

terminating the communicating according to the second mode of communication, wherein the temporary encryption key is erased in the a least one actuator upon the expiration of the limited period of validity of the temporary encryption key.

9. The method of operation as claimed in claim 8 , wherein:

according to the secure second mode of communication, the actuator and the configuration device communicate as a transmitter and as a receiver, and

the method furthermore comprises sending a message confirming the end of validity of the temporary encryption key, destined for the configuration device.

10. A device for configuring a home-automation installation, the installation comprising:

at least one control unit of a first type, designed to communicate according to a first mode of communication, and

at least one actuator:

designed to communicate according to the first mode of communication with at least one control unit of the first type, during an operation in utilization mode, and

capable of communicating according to a second mode of communication, made secure by means of an encryption key, with a configuration device, during an operation in configuration mode,

the configuration device comprising at least one element for managing at least one temporary encryption key having a limited period of validity, wherein the at least one element for managing the at least one temporary encryption key is arranged so as to determine the at least one actuator able to be configured, to obtain a temporary encryption key, and to send a message containing the temporary encryption key to the at least one actuator able to be configured, and

terminating the communicating according to the second mode of communication, wherein the temporary encryption key is erased in the a least one actuator upon the expiration of the limited period of validity of the temporary encryption key.

11. An actuator for a home-automation installation, the installation comprising at least one control unit of a first type designed to communicate according to a first mode of communication, the actuator being:

designed to communicate according to the first mode of communication with the at least one control unit of the first type, during an operation in utilization mode, and

capable of communicating according to a second mode of communication, made secure by means of an encryption key, with a configuration device, during an operation in configuration mode,

wherein the actuator comprises a communication module comprising a memory adapted for recording an encryption key and arranged so as to receive a message containing a temporary encryption key having a limited period of validity, coming from the configuration device, and to communicate according to the second mode of communication, made secure by means of the temporary encryption key, with the configuration device,

wherein upon termination of the communicating according to the second mode of communication, the temporary encryption key is erased in the a least one actuator upon the expiration of the limited period of validity of the temporary encryption key.

12. The actuator as claimed in claim 11 , wherein the communication module is arranged so as to erase the temporary encryption key upon the expiration of a period of validity of the temporary key.

13. A home-automation installation comprising

at least one control unit of a first type, designed to communicate according to a first mode of communication, and

the at least one actuator as defined in claim 11 designed to communicate according the first mode of communication with the at least one control unit of the first type.

14. A home-automation installation comprising

at least one control unit of a first type, designed to communicate according to a first mode of communication, and

the at least one actuator as defined in claim 12 designed to communicate according to the first mode of communication with the at least one control unit of the first type.

15. The configuration method as claimed in claim 2 , wherein the determining of the at least one actuator able to be configured comprises receiving at least one message sent from the at least one actuator.

16. The configuration method as claimed in claim 2 , comprising, prior to the determining of the at least one actuator able to be configured, triggering operation of the at least one actuator in the configuration mode.

17. The configuration method as claimed in claim 16 , wherein the triggering consists in carrying out a predetermined action on the at least one control unit of the first type with which the at least one actuator is designed to communicate.

18. The configuration method as claimed in claim 3 , comprising, prior to the determining of the at least one actuator able to be configured, triggering operation of the at least one actuator in the configuration mode.

19. The configuration method as claimed in claim 18 , wherein the triggering consists in carrying out a predetermined action on the at least one control unit of the first type with which the at least one actuator is designed to communicate.

20. The configuration method as claimed in claim 15 , comprising, prior to the determining of the at least one actuator able to be configured, triggering operation of the at least one actuator in the configuration mode.

21. The configuration method as claimed in claim 1 , comprising:

counting time passed since a receipt of the temporary encryption key and erasing the temporary encryption key at the expiration of the predetermined limited period of validity.

22. The configuration method as claimed in claim 1 , comprising:

erasing the temporary encryption key upon a receipt of a message from the configuration device indicating an end of validity of the temporary encryption key.

23. The configuration method as claimed in claim 1 , comprising:

verifying whether the temporary encryption key has been erased at the expiration of the limited period of validity.

24. The configuration method as claimed in claim 1 , wherein the first mode of communication is without any encryption key.

Assignments (2)
CHANGE OF NAME Recorded Dec 2, 2020
From: SOMFY SAS
To: SOMFY ACTIVITES SA
Reel/Frame 054571/0027 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 10, 2017
From: MUGNIER, MICKAEL; MARMEY, STEPHANE; DESBIOLLES, ARNAUD; GROSSET, FLORENT; PARTAKELIDIS, PHILIPPE; BRUNEAU, GUILLAUME
To: SOMFY SAS
Reel/Frame 041543/0051 →
Priority Claims (1)
FR 14 57756 · Aug 11, 2014 · national
Continuity (1)
Related Publication 20170242420A1 · Aug 24, 2017