IP Library Granted Patent US 10,743,392
Granted Patent B2
US 10,743,392 · App. 16/094,298 · Granted Aug 11, 2020

Systems and methods for verifying credentials

Inventors: Sahil Sharma (Eindhoven, NL); Sandeep Shankaran Kumar (Waalre, NL); Mark Henricus Verberkt (Eindhoven, NL)
Assignee: SIGNIFY HOLDING B.V.
H05B47/19G06F21/33G06F21/43G06F21/44H04L9/3215H04L63/0876H04W12/06H05B47/00H05B47/105
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,743,392
App. No.
16/094,298
Granted
Aug 11, 2020
Kind
B2
Abstract

Disclosed are systems and methods for cloud-based monitoring and control of physical environments. In various embodiments, a computing device ( 1350, 1450, 1550 ) seeking to verify credentials of a lighting system controller ( 1352, 1452, 1552 ) may obtain unverified credentials of the lighting system controller. The computing device may transmit, to a first remote device via a first network communication channel, a request to verify the unverified credentials. The computing device may receive verification from the first remote device or a second remote device via a second network communication channel. The second network communication channel may be different than the first network communication channel. The computing device may compare the unverified credentials to the verification data and verify, based on the comparing, that the unverified credentials are legitimate. Based on the verification, the computing device may establish a lighting information communication channel between the computing device and the lighting system controller.

Claims (36)

1. A method comprising:

obtaining, at a computing device seeking to verify credentials of a lighting system controller, unverified credentials of the lighting system controller;

transmitting, by the computing device to the lighting system controller via a first network communication channel, a request to verify the unverified credentials;

transmitting, by the lighting system controller, credential-based data;

receiving, by a first remote device, credential-based data;

receiving verification data at the computing device from the first remote device via a second network communication channel, wherein the second network communication channel is different than the first network communication channel;

comparing, by the computing device, the unverified credentials to the verification data;

verifying, by the computing device based on the comparing, that the unverified credentials are legitimate;

based on the verifying, establishing, by the computing device, a lighting information communication channel between the computing device and the lighting system controller; and

exchanging, by the computing device with the lighting system controller via the lighting information communication channel, data related to operation of one or more light sources or data from one or more sensors.

2. The method of claim 1 , wherein the second network communication channel comprises an optical wireless communication channel, and the receiving comprises detecting a modulated optical wireless signal at a light sensor of the computing device.

3. The method of claim 2 , wherein the optical wireless communication channel comprises a visible light communication channel.

4. The method of claim 2 , wherein the verification data is received from the first remote device, and the first remote device comprises a networked luminaire.

5. The method of claim 2 , wherein the optical wireless communication channel is implemented by the lighting system controller or the first remote device via a digital display device or via one or more LED-based indicator lights.

6. The method of claim 2 , wherein the first network communication channel comprises a radio frequency-based communication channel.

7. The method of claim 6 , wherein the radio frequency-based communication channel is implemented using Wi-Fi, ZigBee, or Z-Wave.

8. The method of claim 1 , wherein the verification data comprises a first hash of the unverified credentials generated by the lighting system controller or the first remote device, and the comparing comprises comparing the first hash to a second hash of the unverified credentials generated by the computing device.

9. The method of claim 1 , further comprising:

setting, by the computing device, a timer; and

rejecting, by the computing device, any verification data received after expiration of the timer.

10. The method of claim 1 , wherein the verification data is received from the first remote device, and the request to verify the unverified credentials includes an identifier associated with the first remote device.

11. The method of claim 1 , further comprising:

generating, by the computing device, a secret key based on information obtained from indicia provided on a surface of the lighting system controller;

performing, by the computing device based on the secret key, a crypographic hash function to generate a first cryptographic hash function output;

transmitting, by the computing device to the lighting system controller, the first cryptographic hash function output;

receiving, by the computing device from the lighting system controller, a second cryptographic hash function output; and

verifying, by the computing device, the second cryptographic hash function output;

wherein receiving via a second network communication channel, by the computing device, verification data from the first remote device is selectively performed based on an outcome of the verification of the second cryptographic hash function output.

12. A lighting system comprising a lighting system controller, a computing device which is remote from the lighting system controller, and a first remote device; the lighting system controller comprising: one or more processors and memory operably coupled with the one or more processors, wherein the memory stores instructions that, in response to execution of the instructions by one or more processors, cause the one or more processors to:

receive, from a remote computing device via a first network communication channel, a request to verify credentials of the lighting system controller; and

transmit, to the first remote device, credential-based data, wherein the credential-based data is based on the credentials of the lighting system controller;

wherein receipt of the credential-based data at the first remote device causes the first remote device to transmit the verification data to the remote computing device via a second network communication channel that is different than the first network communication channel, wherein the verification data is based on the credential-based data.

13. The lighting system of claim 12 , wherein the credential-based data comprises a hash computed using the credentials of the lighting system controller.

14. The lighting system of claim 12 , wherein the first network communication channel comprises a radio frequency-based communication channel, and the second network communication channel comprises an optical wireless communication channel.

15. The lighting system of claim 12 , wherein the radio frequency-based communication channel is implemented using Wi-Fi, ZigBee, or Z-Wave.

16. The lighting system of claim 12 , wherein the first remote device is a networked luminaire.

Assignments (2)
CHANGE OF NAME Recorded Jun 29, 2020
From: PHILIPS LIGHTING HOLDING B.V.
To: SIGNIFY HOLDING B.V.
Reel/Frame 053080/0516 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 17, 2018
From: SHARMA, SAHIL; KUMAR, SANDEEP SHANKARAN; VERBERKT, MARK HENRICUS
To: PHILIPS LIGHTING HOLDING B.V.
Reel/Frame 047197/0414 →
Priority Claims (1)
WO PCT/EP2017/054317 · Feb 24, 2017 · international
Continuity (1)
Related Publication 20190132931A1 · May 2, 2019