Secure configuration of a home-automation installation

• US 10,591,883 B2
• Filed: 08/10/2015
• Issued: 03/17/2020
• Est. Priority Date: 08/11/2014
• Status: Active Grant

• Current Assignee: Somfy Activites SA (Somfy SA)
• Original Assignee: Somfy Sas (Somfy SA)
• Inventors: Mugnier, Mickael, Marmey, Stephane, Desbiolles, Arnaud, Grosset, Florent, Partakelidis, Philippe, Bruneau, Guillaume
• Primary Examiner(s): Pearson, David J
• Assistant Examiner(s): Champakesan, Badri Narayanan
• Application Number:
  US15/502,700
• Publication Number:
  US 20170242420A1
• Time in Patent Office: 1,681 Days
• Field of Search: 380255
• CPC Class Codes: G05B 15/02 electric
• CPC Class Codes: G05B 19/0426 Programming the control sequence
• CPC Class Codes: G05B 2219/2642 Domotique, domestic, home control, automation, smart house
• CPC Class Codes: G08C 17/02 using a radio link
• CPC Class Codes: G08C 2201/42 Transmitting or receiving remote control signals via a network
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068

Abstract

The method for configuring a home-automation apparatus (1) includes: at least one control point of a first type (3A, 4A) intended to communicate according to a first mode; and at least one actuator (5A, 6A) intended to communicate, after performing the configuration method, according to the first mode with at least one control point of the first type (3A, 4A) during usage mode, and which can communicate according to a second mode, secured by an encryption key, with a configuration device (2) during configuration mode. The configuration device implements the method which includes determining at least one actuator (5A, 6A) that can be configured, obtaining a temporary encryption key having a limited period of validity, sending a message containing the temporary encryption key to the at least one actuator, communicating according to the second mode, secured by the temporary encryption key, with the at least one actuator in configuration mode.

Claims

1. A method for configuring a home-automation installation comprising:

at least one control unit of a first type, designed to communicate according to a first mode of communication,

at least one configuration device capable of communicating according to a second mode of communication made secure by means of a temporary encryption key specific to the configuration device, and

at least one actuator;

designed to communicate, at the end of the execution of the configuration method, according to the first mode of communication, with the at least one control unit of the first type, during an operation in utilization mode which is in the first mode of communication, and

capable of communicating according to a second mode of communication, made secure by means of an encryption key, with the configuration device, during an operation in configuration mode which is in the second mode of communication,

the method being implemented by the configuration device and comprising at least;

determining the at least one actuator able to be configured,

obtaining the temporary encryption key having a limited period of validity,

sending a message containing the temporary encryption key to the at least one actuator able to be configured,

communicating according to the second mode of communication, made secure by means of the temporary encryption key, with the at least one actuator operating in the configuration mode, and

terminating the communicating according to the second mode of communication, wherein the temporary encryption key is erased in the at least one actuator upon the expiration of the limited period of validity of the temporary encryption key.

2. The configuration method as claimed in claim 1, wherein:

according to the second mode of communication made secure by means of the temporary encryption key, the at least one actuator and the configuration device communicate as a transmitter and as a receiver,

and the method furthermore comprises receiving from the at least one actuator a message confirming the end of validity of the temporary encryption key.

3. The configuration method as claimed in claim 1, wherein the determining of the at least one actuator able to be configured comprises receiving at least one message sent from the at least one actuator.

4. The configuration method as claimed in claim 1, comprising, prior to the determining of the at least one actuator able to be configured, triggering the operation of the at least one actuator in configuration mode.

5. The configuration method as claimed in claim 4, wherein the triggering consists in carrying out a predetermined action on the at least one control unit of the first type with which the at least one actuator is designed to communicate.

6. The configuration method as claimed in claim 1, wherein:

the home-automation installation furthermore comprises at least one control unit of a second type capable of communicating according to the second mode of communication made secure by means of the encryption key specific to the at least one control unit of the second type,

the at least one actuator is furthermore capable of communicating with the at least one control unit of the second type, according to the second mode communication made secure by means of the encryption key specific to the at least one control unit of the second type, during the operation in the utilization mode,

and the method furthermore comprises a second communicating action according to the second mode of communication, made secure by means of the temporary encryption key, with the at least one actuator.

7. The configuration method as claimed in claim 6, wherein, during the second communicating action, the configuration device transmits data to the at least one actuator for managing the encryption key specific to the control unit of the second type.

15. The configuration method as claimed in claim 2, wherein the determining of the at least one actuator able to be configured comprises receiving at least one message sent from the at least one actuator.

16. The configuration method as claimed in claim 2, comprising, prior to the determining of the at least one actuator able to be configured, triggering operation of the at least one actuator in the configuration mode.

17. The configuration method as claimed in claim 16, wherein the triggering consists in carrying out a predetermined action on the at least one control unit of the first type with which the at least one actuator is designed to communicate.

18. The configuration method as claimed in claim 3, comprising, prior to the determining of the at least one actuator able to be configured, triggering operation of the at least one actuator in the configuration mode.

19. The configuration method as claimed in claim 18, wherein the triggering consists in carrying out a predetermined action on the at least one control unit of the first type with which the at least one actuator is designed to communicate.

20. The configuration method as claimed in claim 15, comprising, prior to the determining of the at least one actuator able to be configured, triggering operation of the at least one actuator in the configuration mode.

21. The configuration method as claimed in claim 1, comprising:

counting time passed since a receipt of the temporary encryption key and erasing the temporary encryption key at the expiration of the predetermined limited period of validity.

22. The configuration method as claimed in claim 1, comprising:

erasing the temporary encryption key upon a receipt of a message from the configuration device indicating an end of validity of the temporary encryption key.

23. The configuration method as claimed in claim 1, comprising:

verifying whether the temporary encryption key has been erased at the expiration of the limited period of validity.

24. The configuration method as claimed in claim 1, wherein the first mode of communication is without any encryption key.

8. A method of operation of an actuator, the actuator belonging to a home-automation installation and being:

designed to communicate according to a first mode of communication, with at least one control unit of a first type belonging to the home-automation installation, during an operation in utilization mode, and

capable of communicating according to a second mode of communication, made secure by means of an encryption key, with a configuration device, during an operation in configuration mode,

the method being implemented by the actuator and comprising at least;

receiving a message containing a temporary encryption key having a limited period of validity, coming from the configuration device,

communicating according to the second mode of communication, made secure by means of the temporary encryption key, with the configuration device, and

terminating the communicating according to the second mode of communication, wherein the temporary encryption key is erased in the a least one actuator upon the expiration of the limited period of validity of the temporary encryption key.

9. The method of operation as claimed in claim 8, wherein:

according to the secure second mode of communication, the actuator and the configuration device communicate as a transmitter and as a receiver, and

the method furthermore comprises sending a message confirming the end of validity of the temporary encryption key, destined for the configuration device.

10. A device for configuring a home-automation installation, the installation comprising:

at least one control unit of a first type, designed to communicate according to a first mode of communication, and

at least one actuator;

designed to communicate according to the first mode of communication with at least one control unit of the first type, during an operation in utilization mode, and

capable of communicating according to a second mode of communication, made secure by means of an encryption key, with a configuration device, during an operation in configuration mode,

the configuration device comprising at least one element for managing at least one temporary encryption key having a limited period of validity, wherein the at least one element for managing the at least one temporary encryption key is arranged so as to determine the at least one actuator able to be configured, to obtain a temporary encryption key, and to send a message containing the temporary encryption key to the at least one actuator able to be configured, and

terminating the communicating according to the second mode of communication, wherein the temporary encryption key is erased in the a least one actuator upon the expiration of the limited period of validity of the temporary encryption key.

11. An actuator for a home-automation installation, the installation comprising at least one control unit of a first type designed to communicate according to a first mode of communication, the actuator being:

designed to communicate according to the first mode of communication with the at least one control unit of the first type, during an operation in utilization mode, and

capable of communicating according to a second mode of communication, made secure by means of an encryption key, with a configuration device, during an operation in configuration mode,

wherein the actuator comprises a communication module comprising a memory adapted for recording an encryption key and arranged so as to receive a message containing a temporary encryption key having a limited period of validity, coming from the configuration device, and to communicate according to the second mode of communication, made secure by means of the temporary encryption key, with the configuration device,

wherein upon termination of the communicating according to the second mode of communication, the temporary encryption key is erased in the a least one actuator upon the expiration of the limited period of validity of the temporary encryption key.

12. The actuator as claimed in claim 11, wherein the communication module is arranged so as to erase the temporary encryption key upon the expiration of a period of validity of the temporary key.

13. A home-automation installation comprising

at least one control unit of a first type, designed to communicate according to a first mode of communication, and

the at least one actuator as defined in claim 11 designed to communicate according the first mode of communication with the at least one control unit of the first type.

14. A home-automation installation comprising

at least one control unit of a first type, designed to communicate according to a first mode of communication, and

the at least one actuator as defined in claim 12 designed to communicate according to the first mode of communication with the at least one control unit of the first type.