Configuration method, configuration device, computer program product and control system
According to an aspect of the invention a configuration method for configuring a host device in a control system is conceived, in particular a building control system, wherein an authorized configuration device exchanges confidential configuration data with a radio frequency identification tag coupled to the host device, wherein, after the confidential configuration data have been exchanged and a corresponding configuration operation has been performed, access to the confidential configuration data by an unauthorized configuration device is precluded. According to further aspects of the invention a corresponding configuration device, a corresponding computer program product and a corresponding control system are conceived.
1. A configuration method for configuring a host device in a control system comprising:
exchanging, with an authorized configuration device, which is authorized to exchange confidential configuration data with a radio frequency identification tag coupled to the host device, said confidential configuration data with said radio frequency identification tag coupled to the host device;
precluding after the confidential configuration data have been exchanged and a corresponding configuration operation has been performed, access to the confidential configuration data by an unauthorized configuration device, which is not authorized to exchange said confidential configuration data with said radio frequency identification tag, by locking said radio frequency identification tag, wherein said locking occurs by encrypting the confidential configuration data;
enabling, with the confidential configuration data, the host device to join a network, wherein the confidential configuration data comprises network parameters required for joining the network; and
locking, with the authorized configuration device, the radio frequency identification tag by deleting the confidential configuration data from the radio frequency identification tag and by storing a back-up copy of the confidential configuration data in a non-volatile memory of the authorized configuration device.
2. The configuration method as claimed in claim 1 , further comprising:
encrypting, with the authorized configuration device, the confidential configuration data; and
overwriting the confidential configuration data in the radio frequency identification tag with the encrypted confidential configuration data.
3. The configuration method as claimed in claim 1 , further comprising:
sending, with the authorized configuration device, an encryption key to the radio frequency identification tag; and
encrypting, with the radio frequency identification tag, the confidential configuration data.
4. The configuration method as claimed in claim 1 , further comprising:
sending, with the authorized configuration device, an encryption key to the host controller;
encrypting, with the host controller, the confidential configuration data; and
overwriting the confidential configuration data in the radio frequency identification tag with the encrypted confidential configuration data.
5. The configuration method as claimed in claim 1 , further comprising:
restoring, with the authorized configuration device, the confidential configuration data in the radio frequency identification tag.
6. The configuration method as claimed in claim 1 , wherein exchanging the confidential configuration data and performing the corresponding configuration operation is only possible when the host device is not in a configured state.
7. The configuration method as claimed in claim 1 , wherein exchanging the confidential configuration data and performing the corresponding configuration operation is only possible when the authorized configuration device has successfully authenticated itself to the host device.
8. The configuration method as claimed in claim 1 , wherein the authorized configuration device locks said radio frequency identification tag by locking a memory unit of the radio frequency identification tag, and wherein said locking of the memory unit comprises:
setting an authentication key for accessing the memory unit.
9. The configuration method as claimed in claim 1 , further comprising:
locking said radio frequency identification tag by disabling the radio frequency identification tag.
10. The configuration method as claimed in claim 9 , further comprising:
disabling the radio frequency identification tag by switching off the radio frequency identification tag.
11. The configuration method as claimed in claim 9 , further comprising:
disabling the radio frequency identification tag by decoupling the radio frequency identification tag from its antenna.
12. The configuration method as claimed in claim 1 , further comprising:
unlocking a backdoor to reset the host device to its “virgin” state.
13. The configuration method as claimed in claim 12 , wherein a condition for unlocking the backdoor comprises at least one of the following group: pushing a hidden button on the host device, cutting power to the host device, a network being unreachable by the host device, the host device having been removed from its socket, the host device having received a disjoin message, and the host device having been provided with a manufacturer-defined unlock code.
14. A non-transitory computer readable medium encoded with a computer program product comprising program elements executable by the authorized configuration device or the host device, wherein each program element comprises program instructions which, when being executed by the authorized configuration device or the host device, cause said authorized configuration device and the host device to carry out or control respective steps of the configuration method as claimed in claim 1 .
15. A control system comprising:
a host device and
an authorized configuration device which is configured to exchange confidential configuration data with a radio frequency identification tag coupled to the host device, wherein the control system is configured to preclude access to the confidential configuration data by an unauthorized configuration device, which is not authorized to exchange said confidential configuration data with said radio frequency identification tag, by locking said radio frequency identification tag after the confidential configuration data have been exchanged and a corresponding configuration operation has been performed, wherein configuring the host device comprises enabling the host device to join a network, and the confidential configuration data comprises network parameters required for joining the network, wherein the authorized configuration device is configured to lock the radio frequency identification tag by deleting the confidential configuration data from the radio frequency identification tag and storing a back-up copy of the confidential configuration data in a non-volatile memory of the authorized configuration device.