This application claims priority to EP 15167916.4 which was filed with the European Patent Office on May 18, 2015, the contents of which are hereby incorporated in their entirety.
The invention concerns the field of user interfaces used to control electronic appliances. Especially the invention concerns the task of providing a user with intuitive and easily reached controls for controlling aspects of house automation, such as controllable lighting. Aspects of the invention are applicable also to controlling other kinds of electric devices and systems.
Aspects of the invention concern the task of arranging the local delivery of a password or corresponding information that represents a right to access an electronically controlled system.
The ubiquitous user interface for interior lighting is the light switch, which conventionally meant one or two toggle or rocker switches in a panel next to the doorpost. As lighting systems have become more versatile, the simple switches have been replaced with matrices of several switches, turning knobs, sliders, and the like. Classrooms, lecture halls and other larger rooms where a large number of alternative lighting scenes are needed may have a control panel located at the podium or lectern. The control panel may include manually operable keys, switches, knobs, and/or slides, or it may take the form of a touch-sensitive display where the control elements appear as icons. Other house automation systems that must offer a user interface at a relatively easily reachable location include, but are not limited to, HVAC systems (heating, ventilation, air conditioning); burglar alarms; fire, smoke, and gas detectors; and access control systems.
Increasing controllability of all such systems comes with some inherent drawbacks. We may consider lighting as an example. When the sole possibility of controlling the lights meant switching the light on or off, the user of a room seldom needed or wanted to make further changes while staying in the room. Thus it did not matter if the light switch was located some distance away, close to the entrance of the room or even outside in the corridor. If, however, the lighting system offers accurate control of various aspects of lighting, such as intensity, hue, and color temperature, the user may wish to make even relatively frequent changes. In such case the user may consider it inconvenient to walk to the doorpost every time he needs to fine tune the lighting.
Another inherent drawback is complicatedness. A single light switch with two positions was simple and intuitive to use. A lighting system with a number of controllable aspects necessitates either a large number of separate keys, switches, slides, knobs, etc. dedicated to the various aspects, or associating different functions with individual switches or keys depending e.g. on the length of pressing a particular key. Particularly users who only come to the room relatively seldom, or users who are not technically oriented, may experience such a user interface as intimidating or frustrating. The problem is made worse by the fact that the overall look and feel of the control panel must fit the style and furnishings of the room, and there are large differences in what is customary and preferable in different countries or regions, so that even a control panel that in technical sense offers exactly the same control functions may look wildly different depending on where, by whom, and for which environment it was designed.
Electronically controlled systems, such as lighting, HVAC, or other systems used in a constructed environment may require the user to enter a password or otherwise prove that the user has the right to give control commands to the system. In particular a need may arise to ensure that only such users gain access to the system who are physically present in the controlled environment, for example to prevent malevolent outsiders from switching off the lights of an adjacent room or building. A prior art publication GB 2512821 A suggests placing a barcode or QR code in the space to be controlled, so that only a user who can use his or her portable electronic device to actually read the barcode or QR code gains access to the system. Using a code sticker involves the inherent drawback that since replacing already distributed stickers is burdensome, the code is likely to remain the same for a long time, so that a malevolent outsider who has been there once may afterwards pretend to be present, utilizing a stored version of the code. This problem could be solved by using a small electronic display screen to display the code and by changing the codes frequently, as said publication also suggests, but displays are relatively valuable components, which could easily make the system prohibitively expensive to build.
According to an aspect of the present invention there are provided a method and devices for controlling a house automation system so that users find it easy and convenient to control various available functions, even if different functions and different controlling options appear in various locations. According to another aspect of the invention there are provided easy updating and further developing of user interfaces of house automation systems, with minimal additional burden to users. According to a further aspect of the invention it is made easier to take into use house automation systems that are more versatile and involve more controllable aspects than their predecessors. According to yet another aspect of the invention intuitiveness is added to the user interfaces of house automation systems.
According to another aspect of the invention there are provided a method and devices for locally delivering a password or corresponding information that represents a right to access an electronically controlled system so that the delivered password can be easily changed without requiring expensive components.
Advantageous objectives of the invention are reached with a method and apparatus as defined by the respective independent claims.
According to an example embodiment, there is provided a control panel for a house automation system, comprising:
According to another example embodiment, there is provided a method for controlling a house automation system with a portable electronic device, comprising:
According to yet another example embodiment, there is provided a computer program stored on a computer-readable medium comprising machine-executable instructions that, when executed by one or more processors, cause the implementation of a method according to the description above.
According to another example embodiment, there is provided control panel for a house automation system, comprising:
According to another example embodiment there is provided a method for exchanging access control information between a portable electronic device and a control panel, comprising:
The exemplifying embodiments of the invention presented in this patent application are not to be interpreted to pose limitations to the applicability of the appended claims. The verb “to comprise” and its derivatives are used in this patent application as an open limitation that does not exclude the existence of also features that are not recited. The features described hereinafter are mutually freely combinable unless explicitly stated otherwise.
The novel features which are considered as characteristic of the invention are set forth in particular in the appended claims. The invention itself, however, both as to its construction and its method of operation, together with additional objects and advantages thereof, will be best understood from the following detailed description of specific embodiments when read in connection with the accompanying drawings.
The control panel 101 comprises a configurable user interface 102. The word “configurable” signifies that it is possible to change the appearance and functions of the user interface or to easily produce different variants, as opposed to a standardized user interface that could be expected to have the same appearance and same functions in a large number of places and uses. Configurability can be achieved mechanically, for example so that the user interface is composed of interchangeable modules, so that a manufacturing plant selects the modules for each control panel to be assembled. The mechanical appearance of a configurable interface may remain the same, in which case configurability can be achieved by changing the functions that parts of the interface control. An example of an electronically configurable user interface is a touch-sensitive screen, areas of which can be electronically configured to act as touch-sensitive keys or switches, touch-sensitive sliders, touch-sensitive scroll bars, touch-sensitive scales or dials, touch-sensitive turning knobs, and other kinds of touch-sensitive controls. Technologies on which a touch-sensitive screen may be based include, but are not limited to, resistive detection, capacitive detection, surface acoustic wave detection, infrared grid detection, optical imaging, piezoelectric detection, and acoustic pulse recognition. Another form of an electronically configurable user interface is an array of switches that themselves are mechanical but that can be programmed or wired in different ways to control different functions.
The configurable user interface 102 may additionally comprise an interchangeable graphical element for illustrating functions of parts of the touch-sensitive screen. Such an interchangeable element may comprise for example one or more stickers attached to the visible outer surface of the touch-sensitive screen, and/or an interchangeable card held in place between a transparent or translucent first layer and a second layer of the user interface. Silk screen printings or other printable graphical elements on the user interface are interchangeable in the sense that the manufacturer may choose, which elements to print and at which locations. It is also possible that the configurable user interface 102 comprises an electronic display that together with said touch-sensitive screen constitutes a touch-sensitive display. The electronic display could be used to electronically display graphical elements that illustrate functions of co-located parts of the touch-sensitive screen. Technically touch-sensitive displays are more complicated than simple touch-sensitive screens, but making changes in their configuration and operation is more straightforward because the graphical appearance can be changed through programming.
When the portable electronic device 103 is brought into the vicinity of the control panel 101, it can wirelessly receive and store information descriptive of a current configuration of the user interface 102 of the control panel 101. As a simple example the portable electronic device 103 may include a camera, with which it can take a picture of the user interface 102. According to another example the control panel 101 and the portable electronic device 103 may both comprise a suitable wireless transceiver, through which they can exchange information of said kind. The portable electronic device 103 is configured to utilize said information to display, on a touch-sensitive display 104, an image illustrating the control functions that are accessible through the control panel 101.
In
Picking up the identity of the control panel 101 refers to the fact that the commands transmitted by the portable electronic device 103 will be handled in the house automation system in the same way as similar commands would have been handled had they resulted just from a user manipulating the user interface 102 of the control panel 101. In other words, the portable electronic device 103 may temporarily “impersonate” the control panel in the eyes of the house automation system. From the viewpoint of the house automation system it may be unnecessary to even know, whether a particular command originated from the control panel 101 or from the portable electronic device 103.
Picking up the functions of the control panel 101 refers to the fact that the user has at least a representative selection of those functions available through the user interface 104 of the portable electronic device 103 that are available through the user interface 102 of the control panel 101. Later in this description it will be shown that at least in some cases it may be advantageous to offer to the user more functions and/or more versatile functions through the user interface 104 of the portable electronic device 103 than through the user interface 102 of the control panel 101. In some cases it is even desirable that the user interface 104 of the portable electronic device offers to the user fewer functions and/or less versatile functions than the user interface 102 of the control panel 101.
All the associated communications between devices may take place transparently in the background; in other words when the user manipulates an image of the user interface on the touch-sensitive display 104, he or she observes the house automation system executing exactly the same actions as those that would result from manipulating the actual user interface 102 in the same way. Typically the user will have the possibility to keep the portable electronic device 103 within easy reach all the time, and at least closer than the fixedly installed control panel 101, so this makes controlling the house automation system much more convenient than having to walk to the control panel 101 every time.
Also shown in
If the transceiver block 205 includes also receiver functions, the control panel 101 may use it to receive status enquiries; configuration commands like address allocations and the like; software updates; and other transmissions from other devices of the house automation system. A power source block 206 takes care of producing and distributing the operating voltages that the other parts need in the control panel 101; as an example, there may be a connection from a mains AC network to the power source block 206, and one or more power converters in the power source block 206 to convert the mains AC voltage to the required operating voltages. The separate power source and transceiver blocks 205 and 206 in
The portable electronic device 103 of
An example of operation is described next with reference to
Users typically have a strong need to control what their smartphones do and with which external devices they pair for communications. Therefore it may be advisable to somehow ensure that the smartphone does not pick up the identity, user interface, and functions of the control panel without the user wanting it to. Requiring the user to actually place the smartphone close to the control panel, i.e. using near field communications that may necessitate brief contact or at least a distance shorter than some tens of centimeters, may be sufficient for such ensuring—it is unlikely that the smartphone of the user would end up close enough to the control panel by accident, so the mere fulfilment of the conditions for near field communications may be interpreted as an expression of intent from the user. Requiring the user to actually place the smartphone close to the control panel also serves as a very intuitive way of beginning operation. The user gets the feeling that he or she is in control, and it won't come as a surprise that an image of the lighting control panel appears on the display on his or her smartphone. Yet another advantage of using near field communications and consequently requiring very short distance is that in spaces where a number of different control panels are located relatively close to one another it is still unlikely that the smartphone would attempts picking up the identity, user interface, and functions of an incorrect control panel.
Short range wireless communication systems such as Bluetooth or ZigBee may have ranges in the order of tens of meters, so it may be advisable to separately require the user to confirm that pairing and bonding with a particular control panel was indeed what he or she intended. Also in public areas such as office spaces, educational institutions, public service buildings, and the like it may be necessary to ensure that only those portable electronic devices are allowed to pair and bond with those control panels that have the proper authorization. Practices of ensuring only intended and allowable pairing and bonding between devices are widely known, and for the purposes of this description it is not significant, which of them is used, for which reason such practices are not described here in detail. However, a particularly advantageous method that can be used to facilitate such pairing and bonding is explained later in this text.
Irrespective of whether near field communications or short range wireless communications are used, the need for controlled pairing may be limited to only the first time when these two device communicate with each other. When the user has already used the system once, and the identities of the respective devices have been stored in the memories of their peers of communication, later occasions of applying the same method may run through the initial steps of the method with fewer requirements of user interaction.
After the user has briefly placed the smartphone close to the control panel and the information descriptive of the current configuration of the user interface of the control panel has been exchanged, the smartphone stores the information in its configuration memory 213 and displays, on its touch-sensitive display 104, an image illustrating control functions that are accessible through the control panel 101. Now when the user wants to e.g. change the color of the lighting, he or she manipulates a color selector displayed as a part of said image. The smartphone detects the manipulation of its touch-sensitive display and converts the detected user input into a command that tells what was the change that the user wanted to achieve. The smartphone transmits the command through the blocks 214 and 204 to the control panel, which now acts as the controlling entity of the house automation (here: lighting) system. It forwards the command through the transceiver block 205 to that part of the lighting system that drives the light sources of different color, so that the desired change in color of the lighting is achieved.
Taken that the transmission of the command from the smartphone to the control panel should not require returning close enough to the control panel for near field communications, it is logical to assume that even in those cases where the initial exchange of information took place through near-field communications between blocks 204 and 214, the devices are additionally capable of using e.g. Bluetooth, ZigBee, or other short range wireless communications. Thus the blocks 204 and 214 could have dual (NFC and short range) capabilities. If and when that is the case, also a hybrid embodiment can be presented for the initial exchange of information: the exchange of information may begin with a “handshake” through near field communications, while the actual exchange of information descriptive of the current configuration of the user interface may continue using Bluetooth, ZigBee, or other short range communications. Such a hybrid embodiment involves the advantages of intuitiveness of use and possible avoidance of explicit authentication or pairing permission queries from user, while simultaneously requiring the user to keep the smartphone close to the control panel only for a very short period of time: transferring the possibly large amount of information that describes the configuration of the user interface may continue over the short-range wireless communication connection after the user has already proceeded beyond the range of the near field communications.
A configuration handler 301 is a process that maintains information descriptive of the current configuration of the user interface in memory; reads the stored information from the memory as required; transmits the information read from the memory to the device that requested it; and possibly also receives new, updated or changed information descriptive of a new, updated, or changed configuration of the user interface and uses it to overwrite any previous information in the memory. The first configuration of the control panel may have been stored in the configuration memory already at the stage of manufacturing the control panel or at the stage of commissioning for the first time the house automation system in which the control panel forms a part. Later a need may arise to change or update the configuration; this may be achieved through a dedicated programming interface of the control panel (not shown in the drawings) or through the near field and/or short range wireless transceiver 204, but it may also be achieved through the further transceiver block 205 by actions of a controlling device somewhere in the house automation system.
A user interface driver 302 is a process that sets up the various controls in the form of regions of the configurable user interface; maintains the user interface in operating condition for example by forming the suitable voltages for the different parts thereof; performs the detection of user manipulation of particular areas of the user interface; and converts the detected user inputs into electronic signals that can be further used to produce commands for transmission to further devices in the house automation system. During operation the user interface driver 302 utilizes the configuration that is currently stored in the configuration memory of the control panel 101.
A command forwarding section 303 is a process that receives signals representing detected user actions from the user interface driver 302 and from portable electronic devices; and forwards—to other devices of the house automation system—commands that represent user inputs, regardless of whether they originated from a user manipulating the user interface of the control panel or from a user manipulating the image of the user interface on the touch-sensitive display of his or her portable electronic device. The command forwarding section 303 may include command interpreting and protocol conversion functions, in case the form in which the announcements of detected user interaction come from the user interface driver 302 and/or from the wireless transceiver unit 204 in a form that as such is not yet suitable for transmission to the other devices.
A housekeeping functions section 304 is a process that takes care of basic operations of the control panel, for example by monitoring the conversion and distribution of power in the power source block; maintaining the correct status of data stored in memory; responding to status inquiries; and performing those parts of device-to-device authentication procedures that are on the responsibility of the control panel.
The horizontal lines of fields from the one beginning with FUNCTION #1 to the one beginning with FUNCTION #N illustrate records, each of which illustrates one function that is accessible through the user interface of the control panel. The first field gives the number or other identifier of the function. The next field describes an icon or graphical symbol that can be used to represent the corresponding function on a touch-sensitive display. For example, if a function has the nature of on/off switching, the ICON field in the corresponding record may contain a value that is known to be associated with on/off switches. If the icons or graphical symbols are somehow commonly agreed upon or standardized, it suffices to store an identifier of the corresponding standardized symbol in the ICON field. At the other extremity is the use of the ICON field to store a complete image file or other electronic representation that a display driver may use to make the appropriate icon appear without any previous knowledge of how the icons should look like. Intermediate embodiments are possible, in which the ICON field does not need to contain the complete description of an image but only some simpler information on the basis of which an appropriate image can nevertheless be constructed.
The next field describes the location at which the corresponding icon appears in the user interface. For example if the user interface has a rectangular shape, all locations can be expressed in the form of Cartesian coordinate values. Corresponding coordinate representations can be devised for differently formed user interfaces. Codes, or references to some standardized representation, can be used in place of actual coordinates; for example, if the header field 401 revealed that the control panel contains 6 operable elements arranged in two vertical columns of 3 elements each, the location information may be e.g. of the type UL, ML, LL, UR, MR, LR (upper left, middle left, lower left, upper right, middle right, lower right).
At the end of the line on the right is an EXTRA INFO field that can be used to store any kind of the other information related to the function, for example validity restrictions (if a particular function should only be available at certain times of the day, for users of certain authority, etc.), conversion instructions (telling what rules should be obeyed in converting detected manipulation of the appropriate area of the user interface into a control command) or the like. If the lighting system is controlled through standardized commands, like DALI commands, the EXTRA INFO field (or another field particularly designated for commands) may contain the particular standardized command to be used for initiating the corresponding function.
The information descriptive of the current configuration of the user interface may include hidden functions, as illustrated in the lower part of
In
The two records with HIDDEN FUNCTION and EXTRA INFO fields correspond to control options that are not offered by the user interface 102 of the control panel 101. In this example these may include e.g. color temperature sliders of two parts of the lighting. The portable electronic device 103 utilizes the information it received in the corresponding HIDDEN FUNCTION and EXTRA INFO fields by composing corresponding icons (descriptive information of which may have been included in the HIDDEN FUNCTION and/or EXTRA INFO fields, even if not specifically shown as a field of its own) and by displaying these icons at a suitable location of the touch-sensitive display 104. In the example of
In addition to displaying more control options by the portable electronic device than those offered by the control panel, an embodiment may be presented in which the portable electronic device actually displays less control options than the control panel. For example, the control panel may include controls for all luminaries in a room, while a user might only want to (or be allowed to) control the closest luminaire(s) of his or her own desk. In such case the portable electronic device could include an editing program, with which the user could select only those controls for display on the touch-sensitive display that are needed.
In addition to the examples shown in
Step 801 illustrates a possibility, according to which the control panel may make beacon transmissions on a near field communications channel or a short range communications channel, in order to make its presence known to portable electronic devices. Beacon transmissions may be advantageous to make portable electronic devices of users remind their users about the possibility of picking up the user interface, identity, and functions of a control panel. Beacon transmissions may also refer to transmissions that a control panels makes simply in order to detect, whether any portable electronic devices have been brought, and still remain, close enough for successful near field communications or short range communications. Beacon transmissions are not needed at all in those embodiments of the method that rely on the initiative of the portable communications device to begin the near field or short range communications.
Step 802 illustrates the possibility of reacting to a user initiation of some kind. In a simple embodiment the user initiation means that the user brings the portable electronic device close enough to the control panel for successful near field or short range communications to begin. Other possible forms of user initiation involve the user giving some kind of initiation command, for example by touching an icon on the touch-sensitive display on the portable electronic device.
Step 803 illustrates sending a query from the portable electronic device to the control panel. With the query of step 803 the portable electronic device announces to the control panel that it is willing to receive information descriptive of the current configuration of the user interface of the control panel. A separate query is not needed, if the beacon transmissions of step 801 already included the information descriptive of the current configuration of the user interface. In such case (and, additionally, if the command transmissions from the portable electronic device go to a different device of the house automation system than the control panel) it may also be sufficient if the wireless transceiver unit in the control panel is actually only a transmitter unit.
Step 804 illustrates a possible phase of performing authentication between the control panel and the portable electronic device. If an authentication step 804 is included, its aim is to ensure that only those devices can communicate successfully that have the right to do so. The exact way in which authentication is performed is of little significance to the present invention, but some advantageous aspects of authentication are described later in this text.
Step 805 illustrates the actual transmission, from the control panel to the portable electronic device, of information descriptive of the current configuration of the user interface of the control panel. A general characterization of this step is that the transmission of information from the control panel eventually results in a situation where the portable electronic device is in possession of sufficient information for displaying to the user a user interface that allows the user to access at least a significant part of those control functions of the house automation system that are also accessible through the user interface of the control panel. Alternative approaches to fulfil this general aim include at least the following.
Step 806 in
Step 808 represents receiving user input in the form of detected manipulation of the touch-sensitive display, and step 809 represents converting at least some of said user input into one or more commands for controlling the house automation system. As an example, if step 808 involved the detection of a continuous series of consecutive touches along a substantially linear path between a coordinate point X, Y1 and point X, Y2 on the touch-sensitive display during a time period that was shorter than a predetermined limit, step 809 could involve composing a machine-readable form of a command “slider 3 from 80% to 45%”. Step 810 represents wirelessly transmitting said one or more commands to the control panel, which in this case acts as a controlling entity of the house automation system.
Step 811 illustrates the control panel performing a conversion from the format in which the command(s) was/were received from the portable electronic device to a format in which control commands are transmitted between the devices of the house automation system. For example, if the house automation system is a lighting control system and the devices thereof apply the DALI (Digital Addressable Lighting Interface) standard, the conversion at step 811 may result in the control panel producing a DALI command. Step 811 may be unnecessary, if the command transmission from the portable electronic device at step 810 already contained the commands in a form suitable for further transmission. Step 812 illustrates the control panel transmitting the produced command further, for example into the DALI bus, with a value in the appropriate address field that directs the command to the intended recipient device.
Step 813 illustrates a check that can be made in order to ensure that the picked-up user interface of the control panel remains available at the touch-sensitive display of the portable electronic device only as long as it may be actual to the user. In other words, the portable electronic device may autonomously check, whether it is still present within an area, the house automation functions of which it should be able to control.
The presence check at step 813 may be made for example by periodically receiving, from a device coupled to the house automation system, a transmission to ensure that the portable electronic device is still within an area pertinent to functions that are controllable through the control panel. Alternatively or additionally it may be made by periodically checking from a location determination system included in or available to the portable electronic device that its location has not changed more than a predefined amount since said information was received and stored. The location determination system may be for example a built-in receiver of a satellite-based location determination system. Yet another possibility is a simple timeout, so that the picked-up user interface is only valid for a certain period of time. Only a positive finding at step 813 allows the portable electronic device to continue converting detected user input into commands and wirelessly transmitting these to a controlling entity of the house automation system. In
The lighting controller or router of
According to one embodiment, all communications related to making the portable electronic device 103 pick up the identity, user interface, and functions of the control panel 101 take place directly between these two devices. Also the commands resulting from the user manipulating the touch-sensitive display of the portable electronic device 103 go first through the control panel 101, which forwards them to the appropriate devices through the control connection 1002. Embodiments of this kind have been extensively described above.
According to another embodiment, all communications related to making the portable electronic device 103 pick up the identity, user interface, and functions of the control panel 101 take place directly between these two devices, but the commands take a different path. The portable electronic device 103 may transmit the commands resulting from the user manipulating the touch-sensitive display directly to the lighting controller or router 1001, or even directly to the driver 1004.
According to a further embodiment the information that describes the current configuration of the user interface of the control panel 101 may be stored in the lighting controller or router 1001. In this embodiment, when the initial handshake between the control panel 101 and the portable electronic device 103 has been performed, said information is read from its storage in the lighting controller or router 1001 and transmitted to the portable electronic device either through the control panel 101, or directly from the lighting controller or router 1001, or through the driver 1004. If the last-mentioned alternative is chosen, the transmission from the driver 1004 and the portable electronic device 103 may take the form of radio waves or the form of light pulses which the driver 1004 transmits using the light sources of the luminaire 1005. The portable electronic device 103 may receive light pulses with a dedicated light sensor or with a digital imaging sensor that is otherwise used as a camera.
According to a yet further embodiment the information that describes the current configuration of the user interface of the control panel 101 may be stored in the data server 1009. In this embodiment, when the initial handshake between the control panel 101 and the portable electronic device 103 has been performed, said information is read from its storage in the data server 1009 and transmitted to the portable electronic device 103 either through the lighting system or through the wireless data transceiver station 1011.
The execution of the method may begin at any other state, according to state 1101 in
Completing the wireless reception and storing of said information triggers a transition to state 1104, in which the portable electronic device utilizes said information to display, on a touch-sensitive display, an image illustrating control functions that are accessible through the control panel. It may happen that the user doesn't wish to immediately use the displayed image as a user interface, but initiates the execution of some other program in the portable electronic device, so that a transition to state 1105 takes place. However, the image of the user interface and the associated detection functions remain available in the background, so that if the user makes a selection that indicates a wish to utilize the displayed image of the user interface, the execution of the method returns to state 1104.
The portable electronic device may receive user input in the form of detected manipulation of that part of the touch-sensitive display that displays the image in state 1104. Such detected manipulation causes a transition to state 1106, where the portable electronic device converts at least some of said user input into one or more commands for controlling the house automation system. When the conversion into commands is complete, there occurs an immediate transition to state 1107 for wirelessly transmitting said one or more commands to a controlling entity of said house automation system. After the transmission the execution of the method returns to state 1104, essentially to wait for another input from the user.
A number of ending criteria can be defined, for example so that exit from state 1104 occurs if no manipulation of the user interface has been detected for a period of time longer than a predefined limit, or if no transmissions from the house automation system have been received during a predefined time interval, or if the user actively indicates that the user interface is not needed any more, or if the portable electronic device notices that its location has been changed more than a predefined limit. In
The general instructions for executing the method illustrated in
A method and devices are described next for ensuring that only a portable electronic device that is, at least temporarily, in the same space as the control panel is allowed to access a home automation system. The method and devices that are described in the following are advantageously applicable in the framework that has been described above, but they have also wide applicability in all frameworks where secure pairing and bonding of a portable electronic device with a wireless access point is desired. If applied in the framework described above, the method and devices that are described in the following can be used, for example, at the authentication step 804 of
The user interface 102 of the control panel 101 comprises a plurality of touch-, press-, and/or movement-sensitive controls 1201. These can be for example keys or buttons, knobs, slides, switches, or touch-, press-, and/or movement-sensitive areas of a configurable touch-sensitive screen. Additionally the control panel 101 comprises a plurality of visual indicators 1202 for providing visual feedback of detected manipulation of parts of the control panel 101. The visual indicators 1202 may be for example indicator LEDs, used as so-called tell back LEDs that light up or go dark depending on the operational state of the system.
In a simple embodiment the control panel may be a wall panel of a lighting system, and each of the controls 1201 may be a button that the user may press to select one of mutually exclusive lighting options, such as full lighting, 50% dimmed lighting, relaxing warm lighting, effective lighting for meetings, and the like. Pressing one button causes that option to be selected, the corresponding tell back LED to be switched on, and all other tell back LEDs to be switched off. The appearance of such a control panel is intuitive if each indicator LED is adjacent to, or otherwise arranged in a one-to-one spatial relationship with, a corresponding touch- or press-sensitive control. One possible one-to-one spatial relationship is to place each tell back LED actually within the corresponding button, but in that case the finger of the user hides the LED from view at the moment when he or she presses the button. It may be more intuitive to place the tell back LED adjacent to the button so that the user gets the visual feedback already at the exact moment when he or she presses the button.
More elaborate embodiments may be presented, for example so that two or more options can be selected simultaneously, and/or so that the control panel comprises a plurality of externally visible graphical symbols representing functions to be controlled through said control panel. The graphical symbols may be shown elsewhere in the user interface than the actual controls. Also in this case the visual indicators may comprise a plurality of indicator LEDs, at least some of said indicator LEDs being adjacent to, or otherwise arranged in a one-to-one spatial relationship with, a corresponding graphical symbol.
Indicator LEDs are cheaper and simpler components than LCD or LED displays, and only require a very simple driving circuit. They are also very durable against attempted vandalism and abuse, and very reliable in long term use. Therefore they are more advantageous for use in mass produced devices meant for use by everybody, like wall panels of lighting control systems. The term indicator LED covers all kinds of semiconductor light sources that can be used to produce a relatively small dot of light or otherwise discernible visual effect at a desired location of a control panel.
The control panel 101 comprises a control unit, which is not shown in
The user of the portable electronic device 103 sees the visually detectable states of the visual indicators 1202; taken the example above, the user sees which LEDs are lit and which are unlit. The portable electronic device 103 displays, on its touch-sensitive display 104, one or more input fields allowing a user of the portable electronic device to enter selections. The selections that the user makes mimic the visually detectable states of the visual indicators 1202. For example, if the visual indicators are indicator LEDs, the user may select the image of each indicator LED to “light up” or “be dark”. These descriptions are indicative only, because the display of a portable electronic device would just use differently colored areas of the display to mimic “lit” and “unlit” indicator LEDs.
The invention does not limit the way in which the portable electronic device 103 displays the input fields, but if—like in the example of
Earlier in this description it was assumed that the portable electronic device 103 is capable of displaying the image of the user interface 102 of the control panel 101 because it received and stored information descriptive of a current configuration of the user interface. Indeed, the method may comprise:
It should be noted, however, that the mere purpose of locally delivering a password or corresponding information that represents a right to access an electronically controlled system does not require such a preceding step. For example, the configuration of the control panel 101 may be in accordance with some general standard, and the portable electronic device 103 may know such a standardized configuration on the basis of some previous programming step, without having to exchange any information thereof between these two devices. For the purpose of locally delivering a password or corresponding information that represents a right to access an electronically controlled system it is not even necessary to make the portable electronic device 103 display any graphical representation 1204 of the controls 1201; it would be sufficient to display just the images 1203 of the visual indicators 1202.
In addition to the images 1203 of the visual indicators 1202 the portable electronic device 103 may display instructions to the user (not shown in
Step 1304 represents receiving user input in the form of detected manipulation of the touch-sensitive display, and displaying results of the user input by changing states of said one or more input fields. As explained above, this may mean e.g. detecting that the user taps the images of the indicator LEDs on the touch-sensitive display 104, and making said images represent lit LEDs or unlit LEDs depending on the number of detected taps on each of them. Step 1305 represents forming a password message, contents of which reflect the displayed results of the user input. The transition from step 1304 to step 1305 may take place automatically after a certain time, or it may take place automatically when the portable electronic device detects that the user has found the correct pattern, or it may take place as a response to the user hitting an Enter button 1205 or the like.
Step 1306 represents transmitting said password message to a device, access to which is to be gained through the portable electronic device. In
Step 1401 represents arbitrary initial transmissions between the portable electronic device and the other device. At step 1402 the execution of a program at the other device arrives at a point where a password should be required from the portable electronic device before some further steps can be executed, i.e. before access to some further functions of the house automation system can be granted to the portable electronic device. At step 1403 the other device transmits to the control panel a command to display a password using visual indicators that the control panel normally uses to provide visual feedback of detected manipulation of parts of the control panel. At step 1404 the other device transmits to the portable electronic device a request for a password. The order and timing of steps 1403 and 1404 has little significance.
At step 1405 the control panel displays a password as a combination of visually detectable states of the visual indicators mentioned above. The password may be one that was explicitly commanded by the other device at step 1403, or the control panel may decide the password of its own motion. Particularly in the latter case a step 1406 may follow, in which the control panel acknowledges to the other device that it has proceeded by displaying the password; the message sent at step 1406 may make the other device aware of the actual password displayed, if the control panel decided it of its own motion.
Steps 1407, 1408, and 1409 at the portable electronic device may correspond to the steps 1303, 1304, and 1305 of
At step 1408 the portable electronic device detects actions of the user that lead to the images of the visual indicators assuming colors and/or brightness values that make them mimic the current state of the visual indicators on the control panel. At step 1409 the portable electronic device uses the detected used actions to form a corresponding password, which it transmits to the other device at step 1410. At step 1411 the other device checks, whether the password received from the portable electronic device matches the known form of the password. If it does, pairing and other communications between the portable electronic device and the other device may continue according to step 1412.
Another embodiment could combine features from
The execution of the method may begin at any other state, according to state 1501 in
An indication of the acquisition state may be given to the user according to state 1503, for example by showing a “wait” symbol or an information notice on a display. Losing connection with the device from which the configuration information is to be acquired causes a return to the other state 1501.
State 1504 represents displaying, on a touch-sensitive display of the portable electronic device, one or more input fields allowing a user of the portable electronic device to enter selections mimicking visually detectable states of visual indicators that the control panel is configured to use to provide visual feedback of detected manipulation of parts of the control panel.
During state 1504 the portable electronic device also receives user input in the form of detected manipulation of said touch-sensitive display. A detected manipulation (e.g. a simple touch, or sweep, or tapping) causes a temporary transition to state 1505, which represents displaying results of the user input by changing states of said one or more input fields. For example, the displayed input fields may be images of visual indicators of the kind mentioned above, and the step of displaying results of the user input may comprise toggling each image of a particular visual indicator between lit and unlit states depending on how many times the touch-sensitive display was touched at the corresponding location.
Detecting a ready command (which may be explicit, e.g. the user tapping on a “ready” or “enter” button, or implicit, e.g. the user waiting longer than a predetermined time limit without giving further inputs) causes a transition to state 1506, which represents forming a password message, contents of which reflect the displayed results of the user input. A further transition occurs to state 1507, which represents transmitting said password message to a device, access to which is to be gained through the portable electronic device. The device may be e.g. the control panel or some other device of the same system, or even a device of a completely different system that only used the control panel as means for displaying the password. After transmission the portable electronic device may return to any other state, as illustrated by the general other state 1501 in
The general instructions for executing the method illustrated in
The following numbered paragraphs summarize aspects of how one could utilize the displaying of a password using visual indicators that the control panel normally uses to providing visual feedback of detected manipulation of parts of the control panel, irrespective of what other features are or are not included.
1. A control panel for a house automation system, comprising:
The execution of the method begins at a wait state, according to state 1601 in
A factor that triggers a transition to state 1602 is the appearance of a—previously unpaired—portable electronic device within the (possibly relatively short, due to the relatively low transmission power and/or reception readiness) distance at which the portable electronic device may request the control panel to send configuration information. State 1602 involves the use of a wireless transceiver unit of the control panel to transmit information descriptive of the current configuration of the user interface as a response to a query from the external device. It may (but does not need to) involve displaying a password for accessing the house automation system as a combination of visually detectable states of visual indicators of the control panel. It may also involve giving some visual, audible, or other indication to the user that the pairing and bonding process if going on, as illustrated separately with state 1603. If the connection is lost before the pairing and bonding is completed, or if the requesting device is found to be unauthorized for pairing and bonding, a return to the wait state 1601 occurs.
Successfully completing the pairing and bonding process at state 1602 leads to state 1604, which is here called the control state. It is characteristic to the control state that at least one portable electronic device has been paired and bonded with the control panel, so the control panel may expect to receive command transmissions. The control state 1604 may involve a transmission power and/or a reception readiness of the control panel being kept at a relatively high level, so that exchanging wireless transmissions between the control panel and portable electronic devices is possible irrespective of where within the controlled space the portable electronic device is located.
It may happen that while the control panel is in the wait state 1601, within the range of its (possibly relatively low-power, due to the wait state) wireless transmission capability appears a portable electronic device that is “known”, i.e. that has already paired with the control panel within a preceding time frame that was not longer than some predetermined expiration limit for pairing. This may cause a direct transition from state 1601 to state 1604 without any further intermediate transmissions, meaning that a returning user may simply “tap” the control panel with his or her portable electronic device, or bring his or her portable electronic device close enough to the control panel, to continue controlling the house automation system.
The operation of the control panel in the control state 1604 may involve receiving commands from the portable electronic device, possibly converting received commands to some form suitable for forwarding (as in state 1606), and forwarding commands to further devices in the house automation system (as in state 1607).
The behavior of the control panel with respect to further pairing and/or bonding requests while in the control state 1604 may vary depending on e.g. how many portable electronic devices are allowed to simultaneously have an active bond with the control panel, and/or whether a particular portable electronic device (or some particular portable electronic devices) is (are) more privileged for controlling than others. According to one embodiment, the control panel only accepts one portable electronic device at a time for controlling. Thus if a request for pairing and/or bonding comes from a further portable electronic device comes while the control panel is in the control state 1604, the control panel may reject the request according to state 1605. According to another embodiment, the control panel only accepts further pairing requests but not further bonding requests while in the control state 1604, i.e. allows further electronic devices to prepare themselves for the ability of sending commands to the control panel, but tells them to wait until the bond with the currently acknowledged portable electronic device expires. According to yet another embodiment the control panel may accept any number of further portable electronic devices to “join the party”, one possibility of which is illustrated with the dashed arrow in
Assuming that only one portable electronic device at a time is given the permission to bond with and make command transmissions to the control panel, it is advantageous to devise a mechanism for releasing the bond. As an example, the control panel may apply a timeout, which means that if no command transmissions were received from the bonded portable electronic device for a duration of time longer than a predetermined limit, the bond expires. The bonded portable electronic device may also explicitly renounce the bond, by transmitting a so-called goodbye message to the control panel. Yet another criterion for releasing a previously made bond is detecting that the portable electronic device has moved out of range or communications with it have otherwise become impossible. Whenever a bond is released for whatever reason, the control panel may return to the wait state 1601. If there were two or more simultaneous bonds with different portable electronic devices, the control state 1604 continues with respect to that or those portable electronic device(s) with respect to which no ending criterion has been fulfilled.
The exemplary embodiments described above do not constitute an exhaustive or limiting description of the scope of protection defined by the appended claims, but variations and modifications are possible. For example, while the embodiments described above have concentrated on exactly one control panel interacting with exactly one portable electronic device, the system may comprise more control panels and/or more portable electronic device. A user having two portable electronic devices at his or her disposal might use one of them to show an image of the control panel in one format, and the other to show an image of the control panel in another format. According to another example the user could have one portable electronic device, with which he or she could pick up the user interface, identity, and functions of two or more control panels, images of which could be shown in parallel or in an alternating manner on the display of the portable electronic device. In particular in the last-mentioned embodiment, but also in embodiments where exactly one portable electronic device is used to pick up the identity, user interface, and functions or exactly one control panel, it may be advantageous to make the portable electronic device display also an identifier of the control panel (or the space, the conditions of which are controlled through the control panel) in addition to the actual image, so that the user can easily keep track of which control panels are actually available for use through the portable electronic device. Such an identifier could be transferred from the control panel to the portable electronic device for example in the header field of the information that was schematically illustrated in
Number | Date | Country | Kind |
---|---|---|---|
15167916.4 | May 2015 | EP | regional |