GB2597897A

GB2597897A - Control device, system and method

Info

Publication number: GB2597897A
Application number: GB1911302.6A
Authority: GB
Inventors: Muir Iain; Mcdermott Jason; Mcdermott William; Mcdermott Darren; Falla David
Original assignee: Chameleon Digitization Ltd
Current assignee: Chameleon Digitization Ltd
Priority date: 2019-08-07
Filing date: 2019-08-07
Publication date: 2022-02-16
Anticipated expiration: 2039-08-07
Also published as: GB2597897B; GB201911302D0

Abstract

A domestic control device 20 has a controller 21 and receivers 22, 26, 28, 86 which receive signals from at least one remote data source 60 storing compliance data. The receivers also receive signals from local sensors 80, 82, 84 (e.g. smoke, heat, CO2 detectors). A communications device 24 (e.g. RFID device) communicates with a mobile computing device. The controller 21 controls a gas shutoff device to shut off a supply of gas to at least one domestic gas appliance based on communications. The controller also controls a water top up device (110, fig 3) to top up water in the domestic water heating system. Other inventions relate to sending messages via the system and turning parts of the communication system off and on.

Description

Control device, system and method

Field

The present invention relates to a control device, system and method to monitor and control mechanical and/or electrical systems installed within domestic properties, for example a control device, system and method for controlling the supply of gas to one or more domestic gas appliances.

Background

In the UK, domestic landlords are required to inspect all gas appliances (for example, gas cookers, gas fires and gas boilers) every 12 months. This is done by completing a Landlord Gas Safety Record (LGSR). Failure to do so can result in action being taken against the landlord.

It may be difficult to arrange access to a property for gas appliances to be inspected. In some circumstances, in order to ensure compliance with the legal requirement for gas inspection, landlords may have no option but to force access into a property. Obtaining forced access to a property is typically a very time consuming and costly exercise.

The need to obtain access for gas inspection may be a particular burden for large housing providers, for example providers of social housing.

Properties may be abandoned, resulting in lack of access. A large housing provider may be unaware of whether a property is abandoned or not. The housing provider may only be aware that rent arrears are increasing and that no contact can be made with tenants.

It is known to provide a gas appliance having a timer configured to prevent operation of the gas appliance after a fixed period, for example 12 months. However, such appliances may limit the flexibility with which inspection may be carried out. For example, existing rules allow for a gas inspection to be carried out within a grace period of 2 months before a due date, and for a certificate to then be extended to 12 months after the due date. The use of a 12 month timer may not allow such a grace period to be applied.

In general, landlords may have only limited insight into what is happening within their properties. A landlord typically has very little, if any, real time or near-real time visibility or control of the operation of the various mechanical and electrical equipment installed within its properties. Such equipment may include gas appliances as described above.

The equipment may also, or alternatively, include domestic electrical appliances. The equipment may include components of a water heating system, for example a radiator circuit and boiler. The equipment may include alarm systems including, for example, heat, smoke, or carbon monoxide alarms.

In general, mechanical and electrical equipment within domestic properties are not inherently designed to communicate with each other. Domestic properties may typically be remote from each other. For example, a landlord may only own a single property in a street, or a single flat within a block of flats. There may be no common services or interconnectivity between different domestic properties owned by the same landlord.

It is known to provide commercial building management systems in, for example, large office buildings and shopping centres. These commercial building management systems are typically very complex, expensive pieces of equipment that are not suitable for use in domestic properties.

Commercial building management systems typically require constant and reliable connectivity, for example internet connectivity. In contrast, a landlord typically has no standard connectivity into their properties. Significant proportions of tenants do not have broadband. Even those tenants who do have broadband are unlikely to be willing to give access to their broadband to the landlord.

It is desirable for landlords, particularly social landlords, to have increased insight and/or control in relation to equipment installed in domestic properties that are owned by the landlord.

Summary

In a first aspect, there is provided a control device comprising: at least one receiver configured to receive signals from at least one remote data source, wherein the at least one remote data source is configured to store compliance data, and wherein the at least one receiver is further configured to receive signals from at least one local sensor; and a controller operable to control an actuator in dependence on a signal from the remote data source that is indicative of a compliance condition, and in dependence on a signal from the at least one sensor that is indicative of a detection condition. The control device may be a domestic control device.

The control device may comprise a gas control device. The at least one local sensor may comprise or form part of at least one of a heat detector, a smoke detector, a carbon monoxide detector, a gas flow sensor. The actuator may comprise a gas shutoff device. The gas shutoff device may be configured to shut off a supply of gas to at least one gas appliance. The gas appliance may be a domestic gas appliance.

The controller may be further operable to control a water top up device to top up water in a domestic water heating system. The at least one local sensor may comprise or form part of a pressure sensor, an energy meter, a heating appliance. The controller may be further configured to operate the water top up device in dependence on a further signal from the remote data source. The controller may be further configured to operate the water top up device in dependence on a signal from the at least one sensor that is indicative of a further detection condition. The further detection condition may comprise a sensor reading being lower than a threshold value for pressure.

The control device may comprise a pressure control device. The actuator may comprise a water top up device. The at least one local sensor may comprise or form part of a motion detector. The control device may further comprise a communications device operable to communicate with a mobile computing device.

The control device may be used to shut off the gas supply in a dwelling without having to enter the dwelling. Compliance with gas inspection requirements may therefore be achieved without entry (for example, forced entry) to the dwelling. The control device may operate the gas shutoff device in response to a range of conditions for which information may be supplied locally (for example, by local sensors) or remotely (for example, centrally stored data from a remote data source). The control device may have the flexibility to sense environments as well as actuate controls.

The control device may be used to top up water in a radiator circuit of a domestic heating system in response to a low pressure signal. The water may be topped up automatically without an engineer having to attend.

The control device may provide domestic property insight and safety compliance. The control device may be used to remotely monitor and/or control a plurality of sensors, actuators and/or devices.

The control device may be used to monitor and control multiple items of independent mechanical and electrical systems installed within domestic properties, provide additional controls and add-on systems to ensure the safety of the tenants and to minimise damage to the property at a cost which is reasonable in comparison to the value of both the property and systems installed.

The controller may be configured to operate the gas shutoff device automatically without the presence of a human operator. The controller may be configured to operate the water top up device automatically without the presence of a human operator.

The at least one receiver may be configured to receive signals from the at least one remote data source via a low-power wide area network (WAN). The at least one receiver may be configured to receive signals from the at least one local sensor via a or the low-power WAN. The low-power WAN may comprise a Sigfox WAN. The low-power WAN may comprise a LoRaWAN WAN. The at least one receiver may be configured to receive signals from the at least one remote data source via a cellular connection. The at least one receiver may be configured to receive signals from the at least one local sensor via a cellular connection.

The compliance condition may comprise expiry of a gas inspection certificate. The controller may be configured to operate the gas shutoff to shut off the gas supply on receiving a signal that is indicative of the expiry of the gas inspection certificate.

The detection condition may comprise a sensor reading that is indicative of at least one of a fire, a gas leak. The controller is configured may be operate the gas shutoff to shut off the gas supply on receiving a signal that is indicative of the fire or gas leak. The detection condition may comprise a sensor reading exceeding a threshold for at least one of heat, smoke, carbon monoxide, gas flow. The controller may be configured to operate the gas shutoff to shut off the gas supply on receiving a signal that is indicative of the exceeding of the threshold.

The controller may be configured to control the gas shutoff device to shut off the gas supply in response to a first condition. The controller may be further configured to control the gas shutoff to turn the gas supply back on in response to a second, later condition.

The control device may further comprise a transmitter configured to transmit data to the at least one remote data source or to a further remote data source. The transmitter may be configured to transmit the data via a or the low-power WAN. The transmitted data may comprise sensor data from the at least one sensor. The transmitted data may comprise an alert that a detection condition has occurred. The transmitted data may comprise an indication that the gas shutoff device has been operated.

The at least one receiver and the controller may be housed in a single housing. The single housing may be water-resistant.

The communications device may comprise an identity device configured to identify the control device. The communications device may comprise an RFID device.

The gas shutoff device may comprise a solenoid. The at least one domestic gas appliance may comprise at least one of a gas boiler, a gas fire, a gas cooker. The control device may be battery-powered. The control device may be connectable to mains power.

There may be provided a system comprising a control device as claimed or described herein; a gas shutoff device; a water top up device; and the at least one sensor.

The at least one sensor may comprise at least one smoke detector. The at least one sensor may comprise at least one heat detector. The at least one sensor may comprise at least one carbon monoxide detector. The at least one sensor may comprise at least one gas flow sensor. The at least one sensor may be coupled to the control device by a wired connection. The at least one sensor may be coupled to the control device by a wireless connection.

The system may further comprise a gateway device. The gateway device may be configured to interface between the control device and a or the remote data store. The system may further comprise a or the remote data store.

The system may further comprise a mobile computing device. The mobile computing device may be configured to communicate with the communications device. The mobile computing device may be configured to receive signals from the control device. The mobile computing device may be configured to receive signals from the at least one remote data source. The mobile computing device may comprise at least one of a mobile phone, a tablet computer.

The control device may be configured to send notifications to a user. The remote data store may be configured to send notifications to a user. The notifications may comprise at least one notification of at least one gas compliance condition. The notifications may comprise at least one notification of at least one detection condition. The notifications may comprise at least one notification of operation of the gas shutoff device.

The remote data store may be further configured to determine analytics that are representative of performance of the at least one domestic gas appliance over time. The remote data store may be further configured to determine analytics that are representative of operation of the control device over time. The remote data store may be further configured to determine analytics that are representative of sensor data over time.

The remote data store may be configured to aggregate performance data for multiple dwellings.

In a further aspect, which may be provided independently, there is provided a domestic control device comprising: at least one receiver configured to receive signals from at least one remote data source, wherein the at least one remote data source is configured to store compliance data, wherein the at least one receiver is further configured to receive signals from at least one local sensor, wherein the at least one local sensor comprises or forms part of at least one of a heat detector, a smoke detector, a carbon monoxide detector, a gas flow sensor, a pressure sensor, an energy meter, a heating appliance, a motion detector; a communications device operable to communicate with a mobile computing device; and a controller operable to control a gas shutoff device to shut off a supply of gas to at least one domestic gas appliance and further operable to control a water top up device to top up water in a domestic water heating system; wherein the controller is configured to operate the gas shutoff device in dependence on a signal from the remote data source that is indicative of a compliance condition, the controller is further configured to operate the gas shutoff device in dependence on a signal from the at least one sensor that is indicative of a detection condition, the controller is further configured to operate the water top up device in dependence on a further signal from the remote data source; and the controller is further configured to operate the water top up device in dependence on a signal from the at least one sensor that is indicative of a further detection condition.

In a further aspect, which may be provided independently, there is provided a control method comprising: receiving, by at least one receiver of a control device, signals from at least one remote data source, wherein the at least one remote data source is configured to store compliance data; receiving, by the at least one receiver, signals from at least one local sensor, wherein the at least one local sensor comprises or forms part of at least one of a heat detector, a smoke detector, a carbon monoxide detector, a gas flow sensor, a pressure sensor, an energy meter, a heating appliance, a motion detector; in dependence on the signal from the remote data source that is indicative of a compliance condition and/or in dependence on a signal from the at least one sensor that is indicative of a detection condition, operating a gas shutoff device by a controller of the control device, thereby to shut off a supply of gas to at least one domestic gas appliance; and in dependence on a further signal from the remote data source and/or in dependence on a signal from the at least one sensor that is indicative of a further detection condition, operating by the controller a water top up device, thereby to top up water in a domestic water heating system.

In a further aspect, which may be provided independently, there is provided a control device for controlling pressure of a water heating system. The water heating system may be a domestic water heating system. Controlling pressure of the water heating system may comprise controlling pressure in a radiator circuit of the water heating system. The radiator circuit may be a domestic radiator circuit.

The control device comprises at least one receiver configured to receive signals from a pressure sensor, wherein the pressure sensor is configured to monitor pressure of the domestic water heating system; and a controller configured to determine from the signals if the pressure level is below a desired pressure, and, if the pressure level is below the desired pressure, to operate a water top up device to top up water in the domestic water heating system; wherein the controller is further configured to send a message to a remote server indicating that the valve has been operated. The control device may further comprising the pressure sensor and/or the water top up device. The water top up device may comprise a solenoid valve. There may be provided a control system comprising the control device.

In a further aspect, which may be provided independently, there is provided a method for controlling pressure of a water heating system, the method comprising: monitoring, by a pressure sensor, pressure of the water heating system; receiving, by at least one receiver of a control device, signals from the pressure sensor; determining if the pressure level is below a desired pressure, wherein the determining is in dependence on the signals received from the pressure sensor; if the pressure level is below the desired pressure, operating by a controller of the control device a water top up device to top up water in the water heating system; and sending, by the controller, a message to a remote server indicating that the water top up device has been operated.

In a further aspect, which may be provided independently, there is provided a device comprising: a low-power wide area network transceiver configured to transmit data periodically from the device to a remote server; a cellular transceiver configured to communicate with the remote server, wherein the cellular transceiver is switched off by default; and a controller configured to: receive an activation message from the remote server; on receiving the activation message, turn off the low-power wide area network transceiver and turn on the cellular transceiver; receive data using the cellular transceiver for a predetermined period of time and/or until a further message is received from the remote server; and on confirming successful reception of the data, turn off the cellular transceiver and turn on the low-power wide area network transceiver. The cellular transceiver may comprise an electronic Subscriber Identity Module (eSIM). The data received using the cellular transceiver may comprise a firmware update. The firmware update may comprise at least one of a device firmware update, a low-power wide area network firmware update.

The device may comprise at least one of an Internet of Things device, a sensor device, a control device, a domestic Internet of Things device, a domestic sensor device, a domestic control device.

In a further aspect, which may be provided independently, there is provided a method for communication between a device and a remote server, the method comprising: transmitting data periodically by a low-power wide area network transceiver of the device to the remote server; sending, by the remote server, an activation message; receiving, by a controller of the device, the activation message from the remote server; on receiving the activation message, turning off, by the controller, the low-power wide-area network transceiver; on receiving the activation message, turning on, by the controller, a cellular transceiver of the device, wherein the cellular transceiver is switched off by default; receiving, by the control device, data using the cellular transceiver for a predetermined period of time and/or until a further message is received from the remote server; on confirming successful reception of the data, turning off, by the controller, the cellular transceiver; and on confirming successful reception of the data, turning on, by the controller, the low-power wide area network transceiver.

In a further aspect, which may be provided independently, there is provided a device comprising: a low-power wide area network transceiver configured to transmit data periodically from the device to a remote server; a cellular transceiver configured to communicate with the remote server, wherein the cellular transceiver is switched off by default; and a controller; wherein the controller is configured to: identify data to be transmitted by the device that exceeds a data limit for low-power wide area network transmission and/or is of high importance; turn off the low-power wide area network transceiver and turn on the cellular transceiver; and transmit the identified data using the cellular transceiver. The cellular transceiver may comprise an electronic Subscriber Identity Module (eSIM).

There may be provided a method, apparatus or system substantially as described herein with reference to the accompanying drawings.

Features in one aspect may be provided as features in any other aspect as appropriate. For example, features of a method may be provided as features of an apparatus and vice versa. Any feature or features in one aspect may be provided in combination with any suitable feature or features in any other aspect.

Brief description of the drawings

Embodiments of the invention are now described, by way of non-limiting example, and are illustrated in the following figures, in which:-Figure 1 is a schematic illustration of a gas control system in accordance with an embodiment; Figure 2 is a flow chart illustrating in overview a method in accordance with an embodiment; Figure 3 is a schematic illustration of a control device in accordance with an embodiment; Figure 4 is a schematic illustration of a device in accordance with an embodiment, the device comprising an electronic Subscriber Identity Module (eSIM); and Figure 5 is a flow chart illustrating in overview a method in accordance with an embodiment.

Detailed description of the drawings

Figure 1 is a schematic diagram illustrating in overview a control system 10 according to an embodiment. In the embodiment of Figure 1, the control system 10 is a gas control system 10 which is configured to control a flow of gas from a gas meter 12 to a domestic gas appliance 14 In other embodiments, a control system 10 may be provided which provides control and/or monitoring of any suitable equipment in a domestic property. The control system 10 may be a multi-functional control system which provides control and/or monitoring of multiple items of equipment in the domestic property. Examples of such other embodiments are recited below.

Turning back to Figure 1, the domestic gas appliance 14 illustrated in Figure 1 is a boiler which is used to provide heat and hot water to a domestic dwelling. In other embodiments, the gas appliance may be any domestic gas appliance, for example a gas fire or gas cooker. The domestic appliance may be any appliance used in the context of a dwelling or group of dwellings, for example an appliance used to heat a home or a group of homes.

The gas control system 10 is configured to shut off the supply of gas to the domestic gas appliance 14 if certain conditions are met. In the present embodiment, the gas control system 10 is configured to shut off the supply of gas if it receives information indicating that an inspection certificate has expired (for example, if it is over 12 months since a last inspection). The gas control system 10 is also configured to shut off the supply of gas if readings from sensors are indicative of a fire, gas leak, or carbon monoxide leak. In the present embodiment, the sensors form part of the gas control system 10. In other embodiments, the sensors may be external to the gas control system 10.

In further embodiments, the gas control system 10 may be configured to control a flow of gas in dependence on any appropriate condition.

The gas control system 10 comprises a gas control device 20. The gas control device 20 comprises a controller 21, a Bluetooth connection 22, a battery 23, an RFID device 24, a Sigfox transceiver 26, a LoRaWAN transceiver 28, and a radio transceiver 86. The gas control device 20 further comprises four input/output (I/O) connectors 30, 32, 34, 36. In the present embodiment, the gas control device 20 is configured to be mounted within the same dwelling as the domestic gas appliance 14. For example, the gas control device 20 may be positioned on a wall or ceiling of any room of the dwelling.

The gas control system 10 further comprises a solenoid 40 and a two-port valve 42. The solenoid 40 and two-port valve 42 are configured to shut off the gas supply from the gas meter 12 to the domestic gas appliance 14 when instructed to do so by the gas control device 20.

The gas control system 10 further comprises a central server 60 which is configured to store information remotely from the gas control device 20. The gas control device 20 and central server 60 communicate using a Low-Power Wide Area Network, which in the present embodiment comprises a Sigfox and/or LoRaWAN network. In other embodiments, any one or more Low-Power Wide Area Networks may be used. Low-power wide area network technologies such as Sigfox and LoRaWAN use a regulated but not licenced part of the RF spectrum. Limits are placed on duty cycle and on the amount of data transmitted. In further embodiments, any suitable communication network or networks may be used for communication between the gas control device 20 and central server 60.

The gas control system 10 of Figure 1 comprises a Sigfox gateway 50, a LoRaWAN gateway 52, an internet connection 54, a Sigfox communication server 56, and a LoRaWAN communication server 58.

The central server 60 acts as a remote data store. For example, the central server 60 may store information about previous gas inspections and gas inspection due dates. The Sigfox gateway 50, LoRaWAN gateway 52, internet connection 54, a Sigfox communication server 56, and LoRaWAN communication server 58 are configured to pass information from the gas control system 20 to the central server 60, and from the central server 60 to the gas control device 20. The central server 60 is also configured to send email messages 62 and text messages 64 to users (for example, landlords and/or tenants).

The gas control system 10 further comprises a plurality of wired sensor devices which are coupled to the gas control device 20 by a wired connection. In the present embodiment, the plurality of wired sensor devices comprises a smoke detector 70, heat detector 72, and carbon monoxide detector 74. The wired sensor devices 70, 72, 74 are coupled to a switch 76 by a wired connection, and the switch 76 is coupled to I/O connectors 34 and 36 by a wired connection.

The gas control system 10 further comprises a plurality of wireless sensor devices which are coupled to the gas control device 20 by a wireless connection. In the present embodiment, the wireless sensor devices comprise a wireless smoke detector 80, wireless heat detector 82, and wireless carbon monoxide detector 84.

The wireless sensor devices 80, 82, 84 communicate with each other via low power radio frequency signals. When one of the wireless sensor devices 80, 82, 84 is activated, it outputs a radio frequency signal. When one of the wireless sensor devices 80, 82, 84 is activated, the other wireless sensor devices 80, 82, 84 are also activated.

A radio transceiver 86 is located within the device 20. The control device is programmed to listen for specific radio frequencies sent from the smoke, heat and/or carbon monoxide alarm (which is sent on activation to tell other alarms in the property to sound) and send the data of the activation to the server 60 and/or activate the solenoid.

The control device is also programmed to send a radio frequency signal from the control device to the smoke, heat and/or carbon monoxide alarm telling the alarms to sound.

In other embodiments, any suitable method of wireless communication from one or more of the wireless sensor devices 80, 82, 84 to the gas control device 20 may be used. In further embodiments, one or more of the alarms may not be configured for wireless communication. The one or more alarms may be connected to the gas control device 20 by a wired connection, for example a cable. The cable may be used to send and/or receive a voltage signals to activate the alarm, or to be informed of activation of the alarm.

In other embodiments, the wired sensor devices and/or the wireless sensor device may include any suitable type of sensor device, for example a gas flow sensor and/or pressure sensor, or further sensors as described below in relation to further embodiments.

In the present embodiment, each of the local sensor devices 70 to 74, 80 to 84 is located within the same dwelling as the gas control device 20 and domestic appliance 14. For example, each of the local sensor devices 70 to 74, 80 to 84 may be mounted to a respective wall or ceiling of the dwelling. In other embodiments, at least some of the local sensor devices 70 to 74 and 80 to 84 may be positioned outside the dwelling, for example in a neighbouring dwelling or in a common area such as a corridor.

The gas control device 20 communicates with the central server 60 using a low-powered wide area network, which in the present embodiment may be Sigfox and/or LoRaWAN. The gas control device 20 sends information and receives information from the central server 60 via a Sigfox path (Sigfox transceiver 26, Sigfox gateway 50, internet connection 54, Sigfox server 56) and/or a LoRaWAN path (LoRaWAN transceiver 28, LoRaWAN gateway 52, internet connection 54, LoRaWAN server 58). Signals are sent via one or more antennas (not shown).

The information sent to the central server 60 may include, for example, sensor data received from the sensor devices 70 to 74, 80 to 84. The information sent to the central server 60 may include information on actions performed by the gas control device 20, for example signals sent to the solenoid 40 or, in other embodiments, to other actuators In some embodiments, communication between the gas control device 20 and the central server 60 may switch to cellular communication, for example as described below with reference to Figures 4 and 5. For example, communication may switch to cellular communication if the gas control device 20 loses communication with the server.

The gas control device 20 receives information from the central server 60. The information may comprise, for example, instructions to turn off the gas supply. Information from the central server may be sent in response to the central server 60 determining a state of compliance or non-compliance. For example, if a gas certificate has expired, the central server 60 may determine a state of non-compliance and send instructions to the gas control device 20. A state of compliance or non-compliance may be referred to as a compliance condition.

The controller 21 of the gas control device 20 is configured to determine when to send a signal to the solenoid 40 based on data obtained from local sensor devices 70 to 74, 80 to 84; and also based on information obtained from the central server 60.

The solenoid 40 is configured to change the state of the two-port valve between a first state in which gas is allowed to flow from the gas meter 12 to the domestic appliance 14 through the two-port valve 42 and a second state in which gas is prevented from flowing through the two-port valve 42, thereby shutting off a supply of gas from the gas meter 12 to the domestic appliance 14.

If the gas supply from the gas meter 12 is currently operational but should be turned off, the controller 21 sends a signal to the solenoid 40 to indicate that the solenoid 40 is to be operated to shut off the two-port valve to shut off the gas supply to the domestic gas appliance 14. If the gas supply from the gas meter 12 is currently turned off but should be made operational, the controller 21 sends a signal to the solenoid 40 to indicate that the solenoid 40 is to be operated to open the two-port valve to restart the gas supply to the domestic gas appliance 14.

There may be several conditions under which the controller 21 may determine that the gas supply should be shut off, and therefore send a signal to the solenoid to shut off the flow of gas through the two-port valve. The controller 21 may determine that local conditions indicate that it is not safe for the gas supply to be turned on. For example, the controller may process signals from one or more of the local sensor devices 70 to 74, 80 to 84 and may determine that the signals are indicative of a possible fire or gas leak. The determining of a possible fire or gas leak may be referred to as a detection condition. The controller 21 may then send a signal to the solenoid 40 to turn off the gas supply to prevent additional gas leakage and/or to prevent gas fuel being provided to a possible fire.

The controller 21 is also configured to turn off the gas supply based on information obtained remotely from the central server 60. The central server 60 may store certification information including a due date for a next gas inspection. If the controller 21 receives information in response to a determination by the central server 60 that the due date for next gas inspection has been reached, the controller 21 may send a signal to the solenoid 40 to turn off the gas supply to ensure legal compliance.

The controller 21 is also configured to send signals to the solenoid 40 to turn the gas supply back on when it has been turned off, for example because local conditions have been changed or because information in the central server 60 has been updated.

The central server 60 may sent an email message 62 and/or text message 64 in response to information received from the gas control device 60. For example, the control server 60 may send a message 60, 62 to a housing association if the gas supply in one of the dwellings managed by the housing association has been turned off. The control server 60 may send a message 60, 62 to a tenant if the gas supply in their dwelling has been turned off. In other embodiments, any suitable message 60, 62 may be sent by the central server 60 in response to information received from the gas control device 20 and/or in response to information held by the central server 60.

Figure 2 is a flow chart illustrating in overview a method of using the gas control device 20. At stage 90, the gas control device 20 receives sensor data from one or more of the sensors 70 to 74, 80 to 84. At stage 91, the gas control device 20 sends the sensor data to the central server 60 via LoRaWAN or Sigfox. At stage 92, the controller determines whether any thresholds are exceeded. If no thresholds are exceeded, the gas control device 20 goes into hibernation until a next iteration of stage 90. If one or more threshold is exceeded, the flow chart proceeds to stage 93 and the solenoid 40 is operated to shut off the gas supply. The solenoid 40 may be referred to as a gas shutoff device. In other embodiments, any suitable gas shutoff device may be used to stop the flow of gas.

At stage 94, which may occur in parallel with any of stages 90 to 92, the gas control device 20 receives compliance information from the server 60. At stage 95, the controller 21 determines whether the appliance is compliant. If the appliance is compliant, the gas control device 20 goes into hibernation until a next iteration of stage 90. If the appliance is non-compliant, the flow chart proceeds to stage 93 and the solenoid 40 is operated to shut off the gas supply. At stage 96, the controller 21 sends information to the server 60 indicating that the solenoid 40 has been operated. Optionally, the server 60 may send an email 62 and/or text message 64 reporting that the solenoid 40 has been operated. For example, an email 62 and/or text message 64 may be sent to the landlord and/or to the tenant. In other embodiments, any form of communication may be used to notify the landlord, the tenant, or any other appropriate party.

At stage 97, the controller 21 determines at a later time that thresholds are not exceeded and the appliance is compliant, and operates the solenoid to switch on the gas supply. At stage 98, the controller sends information to the server 60 reporting the operation of the solenoid 40 that occurred at stage 97. Optionally, the server 60 may send an email 62 and/or text message 64 and/or other communication reporting the operation of the solenoid 40 that occurred at stage 97.

The server 60 may also send an email 62 and/or text message 64 and/or other communication to report that a compliance condition (for example, certificate expiry) or a detection condition (for example, signals that are indicative of a fire or gas leak) has occurred.

In further embodiments, the server 60 may send an email 62 and/or text message 64 and/or other communication as a warning before an action takes place, for example before gas is shut off. The warning may be in dependence on information stored by the server 60 (for example, compliance information) and/or data received from the gas control device 20.

In the present embodiment, the central server 60 is configured to aggregate information sent from a plurality of gas control devices 20, for example gas control devices 20 positioned in a large number of homes. The central server 60 may collect statistics on information received from the gas control devices 20, for example sensor readings and/or activation events. The central server 60 may monitor the operation of a gas control device 20 or a group of gas control devices 20 over time. The central server 60 may analyse information received to determine trends or identify areas of concern. For example, the data received at the central server 60 may be analysed to determine a performance of a gas appliance that is monitored by the gas control device 20. The central server 60 may provide a monitoring and reporting function.

Using the gas control device 20 in a dwelling may allow a gas supply to be controlled automatically without requiring access by an engineer. This may allow legal compliance to be obtained without requiring forced access. Furthermore, the gas control device 20 provides automatic control of gas supply in the case where sensor conditions indicate an adverse event such as a fire, gas leak, or carbon monoxide leak. Safety in a property may thereby be improved.

Figure 1 shows one embodiment of a control device, which is a gas control device 20.

In other embodiments, a control device may be provided which controls any suitable mechanical and/or electrical equipment, for example any suitable mechanical and/or electrical equipment which is installed in a domestic property.

The control device may be configured to operate any suitable actuator or other mechanical or electrical control. For example, in one embodiment, a control device as described above with reference to Figure 1 is also configured to operate a water top up device as described below with reference to Figure 3.

The control device may receive signals from any suitable wired or wireless sensors.

For example, the control device may receive signals from at least one of a heat detector, a smoke detector, a carbon monoxide detector, a gas flow sensor, a pressure sensor, or a motion detector. The control device may receive signals from one or more appliances, for example from a sensor installed in an appliance. The appliances may comprise, for example, heating or cooling appliances or cookers.

In some embodiments, the control device is configured to receive signals from a movement sensor, for example from a passive infrared movement sensor. The movement sensor may be located within the domestic property, for example near the main door of the domestic property. The control device transmits signals to the central server 60 that are representative of movement. The movement sensor detects movement within the domestic property. Movement data may be used to identify when the property has been vacant for a significant period. Conversely, movement data may be used to identify if a property that is expected to be vacant is actually occupied.

In some embodiments, the control device is configured to monitor gas usage. Gas data logging may be provided. Data from the gas meter 12 may be provided to the control device. For example, a twisted pair may be taken from the gas meter 12 to the control device.

In some embodiments, the control device further comprises a communications device, for example an RFID tag. A mobile computing device may be used to interface with the communications device. For example, an engineer may use a tablet device to interface with the communications device when the engineer is in proximity to the control device.

A mobile application installed on the tablet may be used to interface with the control device via the communications device.

In some embodiments, the control device has an RFID tag installed which will send a signal to a capable tablet device with a mobile application installed on the tablet. The mobile application will, when open, log that the tablet has been within range of the RFID tag.

Furthermore, the tablet will log the time the tablet has been within range of the RFID tag. This may allow landlords to confirm if an engineer has attended a property to maintain the mechanical and/or electrical equipment within the property. For example, it may be expected that an annual inspection should take about an hour. In conventional systems, a landlord may have no way to establish whether, and for how long, the engineer attended the property. The connection with the RFID tag may be used to verify a length of attendance.

Typically, various certificates are be completed by engineers who attend the properties. In an embodiment, these certificates are completed on the software on the tablet devices and the data from the certificates is sent to the server which will in turn update the data which controls the triggers for the sensors. For example, the gas can be cut off based on the date of the last CP12 gas certificate completed. If the new CP12 certificate is completed on the tablet, the date for a valid certificate will change. In turn the date for disconnection will be changed to 12 months from the date of the certificate being sent from the tablet.

In other embodiments, any suitable communications device may be used by the control device to communicate with a mobile computing device, for example a tablet or mobile phone.

An analytics platform and algorithms may use data obtained by the control device to identify abandoned properties, identify tenants in fuel poverty and/or monitor unauthorised access while a property is unlet by the landlord. For example, gas logging data may be used to identify tenants in fuel poverty. Movement data and/or gas logging data may be used to identify abandoned properties. Movement data may be used to monitor unauthorised access.

In some embodiments, data is provided from the boiler 14 to the control device. The boiler 14 may be connected to the control device, for example by taking a cable from the boiler 14 to the control device. The boiler may be configured to provide various status information and parameters. Any suitable information and/or parameters may be obtained by the control device. For example, the boiler 14 may provide data relating to a number of hours that the boiler has been in operation since it was installed. The information about boiler operation may be provided to the central server 60 and fed into an analyfics platform. The analytics platform may be used to anticipate and predict failures in the equipment (in this case, the boiler). Information provided by the analyfics platform may allow landlords to replace the boiler based on data, for example based on running hours, failure rates and predictions.

At present, many landlords replace boilers at fixed time intervals regardless of usage. For example, landlords may routinely replace boilers every 15 years. In some circumstances, replacing boilers on a fixed schedule may not be optimal. For example, if two boilers installed at the same time and one is used half the amount of the other, the one with less usage may be expected to last much longer. Currently landlords are unlikely to have usage data available. By providing usage data, boiler replacement may be optimised. Similar considerations may apply to other appliances.

In some embodiments, the control device connects to alarm devices, for example smoke alarms, heat alarms and carbon monoxide alarms. An alarm device may comprise a sensor and an associated alarm indicator, for example an audible and/or visual alarm. At present in the UK, landlords are required to install life detection systems into all social rented properties by law. The life detection systems may include smoke alarms, heat alarms and carbon monoxide alarms.

Alarms should be tested annually. Therefore, the issues described above around obtaining access for gas appliance testing may also apply to alarm testing. In some embodiments, the control device is connected to alarms, for example smoke, heat and carbon monoxide alarms. For example, the control device may be connected to the alarms either via hard wired cable or via radio frequency transmission. Activation of one or more of the alarms causes data to be received by the control device. The control device notifies the central server 60 of the alarm activation. The interface of the control device with the alarms may be agnostic and may work with all manufacturers of life safety alarms.

The central server 60 may store alarm information. A user (for example, a landlord) may be able to log into a software program which uses data provided by the central server 60. The user may be able to identify any alarms which have not been activated in the last 12 months. The user may be provided with the ability to activate the alarms remotely for the purposes of testing. The alarms may be activated by, for example, the central server 60 sending signals to the control device, which then sends signals to one or more alarm devices to instruct the alarm device to activate.

In general, social landlords would like to have information on smoke, heat and carbon monoxide alarm activations within their properties. Often fires occur which are extinguished by the tenants without the need for emergency services. These fires may cause small amounts of damage to the properties or the smoke / heat detectors themselves and the landlord does not find out until they have to fix the damage at change of tenancy. Tenants are often unaware of the operation of equipment in their homes, especially when a new tenancy occurs. For example, a tenant is unlikely to tell the difference between a heat detector on the ceiling, a smoke detector or a carbon monoxide detector.

Landlords have regular issues where tenants remove and destroy smoke, heat and carbon monoxide detectors within the properties, usually as a result of an activation. In some circumstances, a tenant may remove or destroy a carbon monoxide alarm after occasional activation because of low-grade emissions, leaving the tenants unprotected from further exposure and the landlord unaware of the incident or removal.

Manufacturers of domestic life safety alarms recommend that the should be tested annually to ensure they operate correctly, by pressing the button on the alarm.

A control system in accordance with an embodiment may provide remote monitoring of alarms and alarm activation. An alarm may be remotely activated and tested from a distant location, for example the offices of the landlord.

The central server 60 may be configured to communicate with a plurality of control devices, for example as described in relation to gas control devices above. Landlords may currently have no ability to take an event which has happened in one property and have that event trigger an action in another property or multiple properties. By communicating with control devices in multiple properties, information collected by the central server 60 from one property may be used to trigger an action in another property or multiple properties. For example, if a sensor signal is received in one property that may be indicative of a fire or gas leak, the central server may communicate with control devices in other properties to turn off the gas supply in those other properties.

As described above, the central server 60 may be configured to send messages to tenants, landlords or third parties, for example by email 62 or text 64. In some embodiments, the central server 60 is configured to provide notifications to specific members of staff based on information received from one or more control devices. The notifications may be provided to specific members of staff based on the nature of the notification. For example, notification of a smoke alarm activation goes to employees X and Y and a notification of a carbon monoxide activation goes to employee A and B. The control device may provide an integrated and unobtrusive local device that provides advanced control and monitoring functions. The control device may be particularly suitable for use by large housing providers such as councils or housing associations.

Communicating via a low-power wide area network may result in low power usage and hence a long battery lifetime. Low power usage may be particularly relevant where devices will be positioned in tenants' homes and will have long intervals between access (for example, one year). There may be flexibility in positioning the control device where it may not have access to mains power.

Typically, mechanical and electrical equipment within domestic properties are not inherently designed to communicate with one and other for example there is no protocol open or closed for a gas boiler to talk to or link with domestic smoke detectors. The mechanical and electrical equipment installed within domestic properties may be considered to be relatively dumb in comparison to commercial grade equipment. The use of the control device and central server may allow information from one piece of domestic equipment to influence operation of another piece of domestic equipment.

Typically, the control device itself has a relatively low processing power, being designed to keep costs low and power usage low. Triggers, notifications and data are sent to a remote server and the remote server performs calculations and process that information to perform actions which are sent back to the control device to action.

The server software has the ability to create notifications via email SMS and other forms of electronic communication and send these notifications to specific users or groups of users based on the data received.

The server will identify data received from a sensor and/or multiple sensors in multiple properties and trigger actions in a property or multiple properties based on the data. In one example, a smoke alarm is activated in property A, then the property above property A in a block of flats has a smoke alarm activation. The server will trigger for the gas to be switched off using the solenoid valve in all properties in the block of flats.

We turn now to a more detailed description of a control device. Although we have used examples of a gas control device 20 above, in other embodiments a control device may be used to monitor and/or control any suitable components.

As described above, the control device 20 is configured to wake up periodically, take sample sensor readings and possibly actuate In the present embodiment, the control device 20 is small and unobtrusive in design such that it can be installed in a range of environments, for example, a bathroom, utility room or plant room. The control device 20 has an ingress protection rating of IP67 rating and is not prone to water or dust.

The control device 20 is powered by battery 23. In the present embodiment, the control device 20 is also connectable to an external power source (not shown in Figure 1), for example mains power. Optionally, external power may be provided by a standard USB port.

The control device 20 is configured such that it will largely remain in a deep sleep low power mode of operation and will wake periodically to sample and/or activate connected devices. The control device 20 may provide suitable external power-up time and sampling time to receive reliable readings from sensors by using its internal power.

Optionally, the control device 20 and/or the sensors may be powered using external power, for example via a USB port.

A Low-Power Wide Area Network is typically designed for power efficiency in broadcasting very small messages. In some circumstances, a battery-powered control device 20 may deliver sensor readings for which mains power is not available or not practical. The control device 20 of the present embodiment may last for five years reporting every 15 minutes on self-contained batteries. For example, an Eve lithium AA size ER14505 battery may be used.

The control device 20 is configured such that batteries may be replaced by a visiting engineer without detaching the control device 20, but such that it is difficult for other individuals (for example, tenants) to remove or replace the battery 23.

Additional power or permanent power may also be provided by standard USB. This may be to support additional sensor or actuation or to provide mains power. In some embodiments, USB is used where available, with battery used as a backup. In other embodiments, the battery is used as primary power. The control unit 20 may select the most appropriate power source using battery as the last option.

In the present embodiment, the control device 20 is configured to power and sample from up to four external probes or sensors and to actuate one or more devices. In other embodiments, the control device 20 may be configured to communicate with any suitable number of probes, sensors and/or devices. The control device 20 is capable of sufficient power to provide a surge or spike that might be demanded on sampling or actuation. The control device 20 also offers a start-up time before sampling as needed by some external components.

Power may be used intelligently to maximise a shelf-life of the control device 20. Components may be selected based on power consumption but also for example speed of acquisition or sampling times. Components may be powered off or placed in deep sleep mode when not used.

When physically turned off, the control device 20 may retain settings in a non-volatile memory. When in sleep mode, values or characteristics of the network may be retained, for example Join keys. Network connectivity may be retained without performing power hungry joins each time the control device wakes from sleep.

In various embodiments, the control device 20 has connectivity with between 0 and 4 external sensors (sampling a reading or environment) and/or between 0 and 2 actuators (triggering an event). The connectivity may be via a common connector.

Firmware may support each connected device (sensor or actuator) to be either Sampled (pull), Triggered (interrupt), or for actuators, Activate (push). In other embodiments, the control device 20 may be connected to any suitable number of sensors and/or actuators. Any suitable number of input and/or output connectors may be provided.

A sample event may be an event where a sensor is sampled by applying power and then receiving an analogue or digital response. For example, a temperature probe may be sampled at a time that the control device 20 wakes up as part of a sampling cycle.

A counter event may be an event where a remote sensor sends pulse signals on each iteration and a counter is maintained. For example, the remote sensor may be a gas meter. A number of pulses received may be counted without the control device 20 waking or performing a full sample.

A trigger event may be an event where a remote sensor triggers or sends an interrupt as a result of an action or environmental change. The control device 20 may be configured to wake out of its sleep and react in response to a trigger. Triggers may be capped to prevent too much traffic. An activation event may be an event in which an actuator is activated.

The control device 20 of Figure 1 supports up to four external connected probes for sampling through connectors 30, 32, 34, 36. In addition, internal battery voltage of battery 23 and a state of a tamper switch (not shown) of the gas control device 20 may also be sampled. The type of sensors and/or actuators supported may be dependent on the firmware used. New sensors and/or actuators may be supported over time with firmware libraries extended as necessary.

Each connected sensor may be configured as to the type of sensor, event type and any power or coding requirements. For example, an external temperature probe may requiring an external start-up time and sampling time before timing out. Such settings may be used to ensure enough time is given to sample accurate readings.

As an example, a temperature sensor may perform a sample event. An external startup time before the sample is performed may be 50 ms. An external fimeout time may be 25 ms. In a further example, a pulse input (for example, gas) may perform a counter event which has a 0 ms external start-up and 0 ms external timeout.

In the present embodiment, the control device 20 wakes on a given sampling cycle, for example every 15 minutes. The control device 20 may also be woken by a trigger, for example a signal from a tamper switch. After waking, the control device 20 samples each sensor, adhering to any power constraints. If the sensor is a counter, the sampling comprises reporting the total incremental counter for that device.

For each of the sensors sampled (both internal and external), the results may be turned into sensor-understandable units such as conversion to a temperature in degrees.

Internal Hex or other form may be used. The sampled readings may be in a format which can then be used in determining if any triggers are met.

In the present embodiment, firmware of the controller 21 converts readings from the sensors into human-understandable units. The controller 21 determines whether any thresholds have been reached. The controller 21 determines whether any activations should be performed. For example, the controller 21 may store a threshold temperature and threshold carbon monoxide level, and may determine that an activation should be performed if a sensor reading exceeds a corresponding threshold for a predetermined time.

The determination of whether thresholds have been reached and/or activations should be performed takes place in real time. In the embodiment of Figure 1, the determination is performed by an internal lookup table which defines the thresholds and any associated actions that might be taken.

For each connected sensor both internal and external, one or more trigger points may be set for an action to be taken. The trigger points may comprise thresholds on one or more sensor reading. The firmware may also define a connected device to be triggered in response to a threshold being reached. On reaching a threshold, a notification may be sent from the controller 21 to the central server 60 or to any appropriate device.

In the present embodiment, each sensor signals is considered in isolation from other sensor signals when considering trigger or threshold points. We consider a set of sensor signals numbered from Si to 56. A trigger point may comprise crossing a threshold value, for example crossing a threshold value for a predetermined time.

A first action may be prescribed when a threshold is crossed in one direction (for example, from below the threshold to above the threshold) and a second, different action may be prescribed when a threshold is crossed in the opposite direction (for example, from above the threshold to below the threshold).

In the present embodiment, each sensor has an upper threshold level and a lower threshold level. Each sensor has four possible trigger points listed as 1 to 4 below.

Each trigger point may have a corresponding action.

1. Upper Action: The action to take when an upper level is reached and exceeded 2. Upper Recovery: The action when the sensor returns below the upper level 3. Lower Action: The action to take when the lower level is reached or falls below 4. Lower Recovery: The action when the sensor returns above the lower level For each of the four trigger points, an activation can optionally be set. Activation may comprise turning on or turning off a connected device. In the present embodiment, activation does not permanently power a device. Activation may simply activate or deactivate. An Upper Recovery or Lower Recovery may only be triggered when the previous state had exceeded the threshold, and then only once.

For example, a sensor reading above the upper level threshold may trigger activation of a device. The sensor reading falling back below the upper level threshold may trigger deactivation of the device. As another example, a sensor reading falling below the lower level threshold may trigger activation of a device.

The sensor reading then rising back above the lower level threshold may trigger deactivation of the device.

We consider the example of a first sensor Si which is a temperature sensor for sensing a water temperature of a boiler 14. If the temperature meets or exceeds 20 degrees C (upper level), it activates an LED which indicates that water is hot.

When it then falls back below 20 degrees C (upper recovery), the LED is deactivated. If the temperature meets or falls below 5 degrees C (lower action), a heater is turned on. When the temperature falls back above 5 degrees C (lower recovery), the heater is turned off.

We consider an example of a second sensor S2 which has a pulse input representing a flow of gas. If the pulse count of gas is at 20 or above for a last sample period (for example, 15 minutes), the solenoid is deactivated to turn the gas supply off.

The threshold configurations may be configured as part of a factory build. The threshold configurations may also be configurable in the field by an engineer. For example, the engineer may update the thresholds by communicating with the control device 20 over Bluetooth using Bluetooth connection 22. In further embodiments, the threshold may also be configurable via downlinks over RF or by

any suitable method.

The control device 20 is configured to send details of the thresholds and actuation points to the central server 60 as a special uplink. The special uplink may be sent, for example, once a day or at a given sample period.

The firmware of the controller determines if any activations should be performed on any connected device. The actuations may be in dependence on reaching a threshold as described above. Alternatively, an actuation may be performed in dependence on a downlink signal from the central server 60. In some embodiments, a trigger is activated in the central server 60 and transmitted to the control device 20, which instructs activation of a connected device in response to the trigger. In some embodiments, information is sent from the central server 60 and the controller 21 activates a trigger in response to the information sent, for example by comparing the information to a threshold.

In the present embodiment, the control device 20 is capable of supporting up to two external connected actuators for triggering an action. The external connected actuators may be referred to generally as Al and A2. In addition, there is an external visible LED (not shown) on the control device 20, which may be referred to as A3. Each of these actuators Al, A2, A3 is capable of being turned on or turned off. Each of Al, A2, A3 may have either a default state of being turned on, or a default state of being turned off.

Each connected actuator may be configured as to a type of event that triggers or de-triggers the actuator. Each type of actuator may be added to the firmware of the controller 21.

During sampling, each attached internal and external sensor may be checked against thresholds. A decision may be made as to whether each actuator should be activated or deactivated. Data from sensors may be processed in order, for example Sl, S2, S3, S4, S5. In some embodiments, if two sensors oppose each other on a single actuation type, the later sensor to be considered takes precedence. For example, if a threshold of S1 indicates that a heater should be turned on, and a threshold of S2 indicates that the heater should be turned off, then the heater is not activated. In the present embodiment, activation of an actuator only takes place after thresholds for all sensors have been checked.

At the end of the sampling process and checks against thresholds, one or more activations or deactivations of actuators may be performed. The control device 20 cycles through its list of activities and performs each activity in turn. In some embodiments, each activity (for example, each activation or deactivation) is performed sequentially to ensure that enough power draw is available, instead of all activities being initiated at the same time. The controller 21 stores the state of actuation of each actuator.

Downlink messages from the server 60 may also be used to instigate an actuation in turning on or turning off a device. The downlink messages may be considered to provide an override to an existing state. The existing state may first be checked before performing the override. As part of the downlink, it may be specified that a given actuation device (for example, Al or A2) is required to power up or power down. In some circumstances, sensors may be turned on or off to prevent an override by the sensors.

Activations performed may be reported back with an immediate broadcast message as described below. The broadcast message for an event may comprise information regarding a sensor that triggered the event; the actuator triggers; and whether the event is up or down (for example, activation or deactivation). In some circumstances, if two sensors actuate the same event, details of only the last sensor may be sent.

In the embodiment of Figure 1, the controller 21 sends a broadcast message each time a broadcast cycle has been reached. The controller 21 may also send a broadcast message if an actuation event has occurred that has been caused by a trigger, for example a trigger from a sensor device. For example, in some circumstances the control device 20 may sample data from sensors every 5 minutes but may only broadcast every 30 minutes unless a threshold or downlink resulted in an activation, in which case an additional broadcast message may be sent. The broadcast message may contain at least some of the following list: * The sensor values as sampled or counted during the last sample cycle.

* Information about any trigger event which has caused the control device 20 to wake up.

* Information about any actuation even in which a sample has triggered an actuation.

* The current understood state of each connected actuator.

The sensor samples may be sent in a compressed format. Sensor readings from on-board sensors and/or from the battery 23 may also be sent.

An additional threshold message may be sent on a defined period, for example once a day. The threshold message may detail the current threshold configuration.

The control device 20 may be provisioned to send the broadcast messages using Sigfox or to send the broadcast messages over LoRaWAN. For example, an engineer may sample both Sigfox and LoRaWAN during installation and may select the more appropriate network.

In some embodiments, the controller 21 may be configured to select a network over which to send the broadcast messages. For example, the network may be selected for low cost routing and/or quality of service.

Both LoRaWAN and Sigfox have duty cycle regulated limits and maximum payload sizes. For example, maximum payload sizes may be linked to spread factor. Duty cycle regulated limits and maximum payload sizes are taken into account when sending messages, for example to ensure compliance with no truncation. Messages may be encoded to use the least amount of bandwidth possible.

In the present embodiment, no message confirmation is provided, in order to meet duty cycle limits. In general, downlinks are usually avoided. In some circumstances, downlinks may be sent that relate to Adaptive Data Rate. Downlinks may be sent to turn on or off a sensor, change threshold values, or actuate a device Downlinks may be processed and acknowledged by the control device 20.

The control device 20 may be configured with a Sigfox network server or a cloud LoRaWAN network server. As part of any message broadcast, the control device 20 may perform any necessary Joins to join a network in a way that minimises duty cycle.

In the case of LoRaWAN, Link Check may be used to check connectivity at regular intervals (for example, after a predetermined number of samples) and then re-join the network if necessary.

The control device 20 has a range of configuration values which may be set during factory production, provisioning before distribution, or by on-site installation engineers.

Bluetooth connection 22 or other localised technology may be used to provide easy configuration by installation engineers. In some circumstances, updates to soft settings may be provided by downlink communications, for example as described above for thresholds.

Settings may be hard (fixed) or soft (variable). For example, hard settings may include LoRa or Sigfox characteristics which are not changeable, for example EUI (End Unit Identifier) keys. Soft parameters may include, for example, parameters that determine sample times, activation thresholds or alarm thresholds. Values for all settings may be stored in persistent memory which will survive battery replacement or loss of power.

The control device 20 may be individually identified using, for example, the RFID device 24 and/or a OR code (not shown). The individual identification may allow registration in a network server.

The control device 20 illustrated in Figure 1 is for the control of a gas supply. In other embodiments, the same control device 20 or a similar control device may be used for accurate sampling of water temperatures, for example for compliance reporting associated with Legionnaire's disease. For example, the control device 20 may be connected to two or four temperature probes that sample the temperature of water in pipes at periodic intervals. An external light (not shown) may be actuated by the control device 20 if a temperature sensed by one or more of the temperature probes exceeds configured thresholds. The control device may send temperature information to the central server 60. The control device may notify the control server if water temperatures are not compliant, for example if water temperatures are too high or too low. The central server 60 may provide a notification, for example an email or text message to a landlord or tenant.

Figure 3 illustrates a further control device 100 comprising a pressure sensor 102 for monitoring pressure of a gas boiler 14. In some embodiments, the gas control system of Figure 1 may further comprise a control device 100 as shown in Figure 3. In some embodiments, at least some of the functionality of the control device 100 may be integrated into the gas control device 20. In an embodiment, a single control device controls both a gas shutoff device and a water top up device. In some embodiments, the control device may also control further devices.

A domestic gas boiler may typically be connected to a domestic hot water circuit comprising radiators connected to the boiler. It is known that domestic gas boilers may naturally lose pressure from the domestic hot water circuit over time. Pressure loss can be the result of several factors including, for example, loose or degraded seals, joints in the pipework, or degraded (for example, rusted) pipework.

In a conventional heating system, when pressure is lost, the occupier of the property may need to call an engineer to attend the property. The engineer may then top up the pressure using a quarter-turn isolation valve at the boiler.

Landlords have issues where pressure drops occur in the radiator circuits and they get call outs as the heating is no longer working as a result. An engineer usually attends to top up the pressure in the boiler which has a significant cost. In conventional systems, it is difficult for the engineer to determine if the loss in pressure was the result of natural expected losses or a leak in the system as there is no ongoing monitoring.

In the embodiment of Figure 3, the control device 100 comprises a pressure sensor 102 which is attached to pipework 104 of the domestic hot water circuit. In other embodiments, the pressure sensor 102 may not form part of the control device 100. The control device 102 may be connected to the control device 100 by any suitable wired or wireless connection. The pressure sensor 102 may be positioned at any suitable part of the system.

In some embodiments, a pressure sensor is situated within a gas appliance, for example a boiler. A cable may be connected to the gas appliance. Pressure sensor data may be provided to the control device 100 via the cable connection.

In some embodiments, the control device 100 may monitor the pressure through OpenTherm. OpenTherm is an open protocol for connectivity to heat generation equipment. OpenTherm allows bi-directional digital communication between a boiler and other equipment, which in this case may be the control device 100. In some embodiments, the boiler obtains pressure data (for example, using an internal pressure sensor) and sends pressure data to the control device 100 by OpenTherm or by any suitable method. In further embodiments, a pressure sensor 102 external to the control device may send pressure data to the control device 100 by any suitable method, for example by OpenTherm or LoRaWAN.

The control device 100 comprises or is coupled to a water top up device. In the embodiment of Figure 3, the water top up device comprises a solenoid valve 110. In other embodiments, any suitable water top up device may be used.

The solenoid valve 100 is configured such that, when open, it allows water from a water supply 112 to pass into the domestic hot water circuit 104, thereby increasing the pressure in the domestic hot water system.

In the embodiment of Figure 3, if the data received from the pressure sensor 102 indicates that the pressure has dropped below a predetermined level, the control device 100 sends a signal to open the solenoid valve 110 until the pressure measured by the pressure sensor reaches a desired pressure setting. A time for which the solenoid valve is opened may be limited to a maximum time in seconds. Once the desired pressure setting has been reached or the maximum time is reached, the control device 100 closes the solenoid valve 110. The control device 100 transmits to a server (for example, central server 60 as described above) a message indicating that the solenoid valve 110 has been operated. The message may be transmitted by any suitable method, for example by LoRaWAN or Sigfox as described above. The method comprises data indicating that the solenoid valve 110 has been operated; the starting pressure; the ending pressure; and how long the solenoid valve 110 was open for.

In other embodiments, the control device 100 transmits data representative of a pressure reading to the control server 60. The control device 100 receives instructions from the central server 60 to operate the water top up device. The control device 100 operates the water top up device in response to the instructions from the central server 60.

In some embodiments, the control device 100 is configured to operate the water top up device in response to data from the central server 60 that is representative of a compliance condition.

In further embodiments, the control device 100 notifies the central server 60 that the pressure has dropped. The central server 60 notifies a user. The user uses software to remotely send a signal to the control device 100 which instructs the control device 100 to operate the water top up device to top up the pressure, and to monitor the pressure readings as it is doing so.

In some embodiments, the control device 100 uses data from the pressure sensor to detect when the heating system has been manually pressurised. More technically astute tenants have been found to re-pressurise the radiator circuits themselves when pressure drops, without the landlord ever knowing. This can happen repeatedly over time. Ongoing re-pressurising and over pressurising can exacerbate leaks which can cause property damage.

In addition, when a radiator circuit is pressurised too far, the system is configured to blow off to outside the property via a pipe. Blow off comprises a release of water that is triggered by the pressure being too high. This blow off can cause staining to the walls of the properties (for example, to render and/or external wall insulation, FWD. If the blow off happens during winter months the water on the wall can freeze can crack the render and EWI. Landlords wish to minimise the number of blow offs that occur from radiator circuits.

The pressure sensor will monitor for the system being manually pressurised. When the system is manually pressurised the pressure sensor and/or control device 100 may record the pressure added to the system. The control device 100 may send to data to the server 60 that is representative of pressure added to the system. The central server 60 may monitor a number of manual pressurisation events. The central server 60 may issue a notification, for example to the landlord, if repeated manual pressurisation events are detected. If the system is regularly being topped up, this may identify a leak that should be investigated. The central server 60 may identify if, based on the details of the equipment installed in the property, the manual pressurisation is likely to have resulted in a blow-off event.

In further embodiments, the control device 100 may be configured to control pressure in any appropriate appliance or system.

In embodiments described above, the gas control device 20 or control device 100 communicates with a server (for example, central server 60) via a low-power wide area network, for example LoRaWAN.

LoRaWAN achieves low power usage by sending very small amounts of data. Low power usage is also achieved by a device (for example, the gas control device 20) going into hibernation when not communicating, and then waking up to send information back to a gateway.

LoRaWAN devices (and other low-power wide area network devices) use unlicensed radio frequencies. In such unlicensed radio frequencies, regulations require that only small amounts of data are sent to and from a device in a set period of time. Data can be sent to devices in addition to data sent from the devices to/from the gateways.

However, data sent to the devices may not always be guaranteed to be received. The amount of data that can be sent is limited by size due to regulations.

The low power usage allows the devices to be battery operated, typically lasting between 5 and 10 years.

Remotely updating the device's firmware over a low-power wide area network may be difficult due to the inherent low data and low power. A firmware update over LoRaWAN may take a day or more to complete due to the size of the data file being sent.

Furthermore, where changes to the firmware are needed that require updates to radio settings of the firmware, you are updating the firmware of the very item which is receiving the update information. In some circumstances the firmware upgrade may fail. If the firmware upgrade fails, it is possible that the device may be rendered useless.

In general, the industry considers remote updates of LoRaWAN devices to be at best challenging and at worst something which should not be done. Typically, if a device needs to be updated then it is either replaced with a device that has the latest firmware, or updated in person in situ. Similar considerations may apply to the updating of security settings on the device. Remote updates of security settings over LoRaWAN may be considered to be challenging.

In addition, with LoRaWAN, signals sent from sensors are not always guaranteed to be received by the gateways (receivers). If a specific gateway receives too many chirps of data at the same time then the message may be lost.

Figure 4 is a schematic illustration of a device 200 which comprises a LoRaWAN board 201 having an eSIM 204 installed. The device 200 may otherwise be similar to the gas control device 20 or control device 100 described above. In other embodiments, the LoRaWAN board may be replaced by any suitable hardware that supports communication over any suitable low-power wide area network. In further embodiments, any suitable cellular transceiver may be used to provide cellular connectivity. The cellular transceiver may or may not comprise an eSIM.

An eSIM 204 (electronic, or embedded, Subscriber Identity Module) allows multiple operator profiles to be stored on a device simultaneously. An eSIM may allow switching between the multiple profiles remotely, though typically only one of the operator profiles can be used at a time. A device having an eSIM may not need to comprise a conventional, removable SIM card.

In the embodiment of Figure 4, the LoRaWAN board 202 provides both LoRaWAN functionality through a LoRaWAN transceiver 202, and eSIM functionality through a cellular transceiver 203. The cellular transceiver 203 may be configured to provide connectivity via GPRS, 2G, 3G,4G, 5G, NBloT, or any suitable cellular network. In other embodiments, a cellular transceiver 203 may provide cellular connectivity without the use of an eSIM.

Each of the LoRaWAN functionality and eSIM functionality has respective, independent firmware for connectivity. Shared firmware for the device 200 is also provided on the LoRaWAN board. For example, the shared firmware may provide the functionality of a controller (not shown in Figure 4). The controller may, for example, control data transmission and/or data processing and/or activation of at least one actuator.

Figure 5 is a flow chart illustrating in overview a method of updating firmware on device 200.

Stage 220 represents normal use of the device 200. In normal use, the eSIM 204 is completely switched off so that it does not draw any power. Firmware for the device 200 (for example LoRaWAN firmware, eSIM firmware and/or shared firmware) is stored in ROM and RAM. The firmware is not overwritten until it has been successfully updated. LoRaWAN is used to send periodic data to a server 60, for example as described above with reference to Figure 1 and Figure 2.

At stage 222, when an update is required to the LoRaWAN firmware or shared firmware, an activation message is sent from the server 60 to the device 200 via LoRaWAN. The activation message instructs the device 200 to power up the eSIM 204. The activation message also activates one of the operator profiles. The activation of the operator profile comprises loading network registration information which is sent with the activation message.

At stage 224, the controller activates the eSIM in response to the activation message. The activation of the operator profile gives the device 200 cellular connectivity using the cellular transceiver 203.

At stage 226, once cellular connectivity is achieved, the LoRaWAN radio 202 is put into sleep mode.

At stage 228, the firmware is updated over the cellular connection using the eSIM card 204. The firmware update may be achieved in a very short time due to the increased data speed of the cellular connection when compared to the LoRaWAN connection.

At stage 230, systems are tested with the new firmware. The controller confirms that the firmware update is successful. A message may be sent to the server 60 to indicate the successful update.

At stage 232, once the successful firmware update is confirmed, the eSIM is switched back off. At stage 232, the LoRaWAN functionality is turned back on, and the device 200 returns to LoRaWAN being its sole connectivity.

As described above, the eSIM cellular connection may be remotely activated via LoRaWAN to update LoRaWAN firmware and/or device firmware. The cellular connectivity may be deactivated once the firmware update is completed.

Since the cellular connectivity using the eSIM is switched on only when firmware updates are required, the use of cellular connectivity may have minimal impact on battery life. The use of cellular connectivity via the eSIM rather than LoRaWAN for firmware updates may allow the firmware updates to be performed more rapidly than would be the case on LoRaWAN. The chances of a successful firmware update may be improved.

In further embodiments, the cellular connection may be used for sending data from the device 200. The eSIM 204 may be woken if, for example, the amount of data to be sent from the device would mean that daily data limits for unlicensed technology are exceeded and/or it is critical that the data being sent from the device 200 is received by the server 60.

In some embodiments, the controller assesses whether the amount of data would exceed a daily data limit. If so, the controller turns on the cellular connection and turns off the LoRaWAN connection. Data is sent over the cellular connection. The cellular connection stays active until the controller receives confirmation that the data has been received by the server 60. The controller then turns off the cellular connection and turns on the LoRaWAN connection.

In some embodiments, the controller assesses whether data to be sent is important enough to be considered critical. If the data is considered critical, the controller turns on the cellular connection and turns off the LoRaWAN connection. Data is sent over the cellular connection. The cellular connection stays active until the controller receives confirmation that the data has been received by the server 60. The controller then turns off the cellular connection and turns on the LoRaWAN connection.

In some embodiments, the controller turns on the cellular transceiver if communication via low-power WAN is not made within a given timeframe. The cellular transceiver may take over to notify the central server 60.

The device 200 may be any suitable device, for example a gas control device 20 or control device 100 as described above. The device 200 may be any domestic control device. In other embodiments, cellular connectivity via an eSIM as described above may be used in any device that communicates using a low power wide area network, for example any Internet of Things device.

In some embodiments, a control device is configured to control a gas shutoff device and a water top up device. The control device may also control further devices. The control device comprises a cellular transceiver which comprises an eSIM. The control device is configured to communicate primarily by LoRaWAN or by another low-power network. The control device is configured to communicate via a cellular connection if, for example, a larger volume of data needs to be transmitted or received by the control device.

In one embodiment, a LoRaWAN flood sensor network is installed across rivers in a council area. The flood sensors of the flood sensor network send data every 30 minutes to a server using LoRaWAN. The data sent by the flood sensors details the height of the water in each sensor location, for example in rivers and canals.

Very heavy rain starts and the water levels rise to a level where there is risk of flooding.

The council wish to get data on the river heights every 30 seconds and need to be sure the data is received.

All of the LoRaWAN sensor devices receive a signal which switches on a cellular connection using an eSIM for a period of time, ensuring the data is received. The signal also instructs the LoRaWAN sensor devices to send sensor readings every 30 seconds until the water levels begin to drop.

By using the eSIM for cellular connectivity, more frequent updates may be provide, without having to comply with data limits for low-power wide area networks. A more robust connection to the server may be provided. It may be possible to confirm that all data has been received by the server.

In other embodiments, cellular connectivity may be provided using any appropriate hardware.

Embodiments above describe particular types of device, for example a gas control device and pressure control device. In other embodiments, methods described above may be applied with any suitable device, for example any device using a low-power wide area network or any Internet of Things device. The device may be used to control any suitable apparatus, for example any domestic or other appliance. Components of one embodiment (for example the gas control device 20 of Figure 1) may be combined with components of other embodiments (for example, the control device 100 of Figure 3 and/or the device 200 of Figure 4).

Functions described above as being performed by a local device 20, 100, 200 may in further embodiments be performed remotely, for example at the central server 60. In some embodiments, functions described as being performed by the central server 60 may instead be performed locally at the device 20, 100, 200. The functionality of the central server 60 may be spread across multiple computing devices. For example, the functionality of the central server may be provided in the cloud.

A skilled person will appreciate that variations of the enclosed arrangement are possible without departing from the invention. Accordingly, the above description of the specific embodiment is made by way of example only and not for the purposes of limitations. It will be clear to the skilled person that minor modifications may be made without significant changes to the operation described.

Claims

CLAIMS: 1. A domestic control device comprising: at least one receiver configured to receive signals from at least one remote data source, wherein the at least one remote data source is configured to store compliance data, wherein the at least one receiver is further configured to receive signals from at least one local sensor, wherein the at least one local sensor comprises or forms part of at least one of a heat detector, a smoke detector, a carbon monoxide detector, a gas flow sensor, a pressure sensor, an energy meter, a heating appliance, a motion detector; a communications device operable to communicate with a mobile computing device; and a controller operable to control a gas shutoff device to shut off a supply of gas to at least one domestic gas appliance and further operable to control a water top up device to top up water in a domestic water heating system; wherein the controller is configured to operate the gas shutoff device in dependence on a signal from the remote data source that is indicative of a compliance condition, the controller is further configured to operate the gas shutoff device in dependence on a signal from the at least one sensor that is indicative of a detection condition, the controller is further configured to operate the water top up device in dependence on a further signal from the remote data source; and the controller is further configured to operate the water top up device in dependence on a signal from the at least one sensor that is indicative of a further detection condition.
2. A domestic control device according to claim 1, wherein the controller is configured to operate the gas shutoff device and the water top up device automatically without the presence of a human operator.
3. A domestic control device according to claim 1 or claim 2, wherein the at least one receiver is configured to receive signals from the at least one remote data source via a low-power wide area network (WAN).
4. A domestic control device according to any preceding claim, wherein the at least one receiver is configured to receive signals from the at least one local sensor via a or the low-power WAN, optionally wherein the low-power WAN comprises at least one of: Sigfox, LoRaWAN.
5. A domestic control device according to any preceding claim, wherein the compliance condition comprises expiry of a gas inspection certificate, and the controller is configured to operate the gas shutoff to shut off the gas supply on receiving a signal that is indicative of the expiry of the gas inspection certificate.
6. A domestic control device according to any preceding claim wherein the detection condition comprises a sensor reading that is indicative of at least one of a fire, a gas leak; and the controller is configured to operate the gas shutoff to shut off the gas supply on receiving a signal that is indicative of the fire or gas leak.
7. A domestic control device according to any preceding claim, wherein the detection condition comprises a sensor reading exceeding a threshold for at least one of heat, smoke, carbon monoxide, gas flow; and the controller is configured to operate the gas shutoff device to shut off the gas supply on receiving a signal that is indicative of the exceeding of the threshold.
8. A domestic control device according to any preceding claim, wherein the controller is configured to control the gas shutoff device to shut off the gas supply in response to a first condition, and is further configured to control the gas shutoff device to turn the gas supply back on in response to a second, later condition.
9. A control device according to any preceding claim, wherein the further detection condition comprises a sensor reading being lower than a threshold value for pressure.
10. A domestic control device according to any preceding claim, further comprising a transmitter configured to transmit data to the at least one remote data source or to a further remote data source, wherein the transmitter is configured to transmit the data via a or the low-power WAN
11. A domestic control device according to claim 10, wherein the transmitted data comprises at least one of a), b) and c):-a) sensor data from the at least one sensor; b) an alert that a detection condition has occurred; c) an indication that the gas shutoff device has been operated.
12. A domestic control device according to any preceding claim, wherein the at least one receiver and the controller are housed in a single housing.
13. A domestic control device according to any preceding claim, wherein the communications device comprises an identity device configured to identify the gas control device.
14. A domestic control device according to any preceding claim, wherein the communications device comprises an RFID device.
15. A domestic control device according to any preceding claim, wherein the at least one domestic appliance comprises at least one of a gas boiler, a gas fire, a gas cooker.
16. A domestic control system comprising: the domestic control device of any preceding claim; the gas shutoff device; the water top-up device; and the at least one sensor.
17. A system according to claim 16, further comprising the mobile computing device, wherein the mobile computing device is configured to receive signals from the at least one remote data source and the mobile computing device is configured to receive signals from the control device, and wherein the mobile computing device comprises at least one of a mobile phone, a tablet computer.
18. A system according to claim 16 or claim 17, wherein the domestic control device and/or the remote data store is configured to send notifications to a user" wherein the notifications comprise at least one of: notifications of a gas compliance condition, notifications of a detection condition, notification of operation of the gas shutoff device.
19. A system according to any of claims 16 to 18, wherein the remote data store is further configured to determine analyfics that are representative of performance of the at least one domestic gas appliance over time and/or operation of the domestic control device over time and/or sensor data over time.
20. A system according to any of claims 16 to 19, wherein the remote data store is configured to aggregate performance data for multiple dwellings.
21. A control method comprising: receiving, by at least one receiver of a control device, signals from at least one remote data source, wherein the at least one remote data source is configured to store compliance data; receiving, by the at least one receiver, signals from at least one local sensor, wherein the at least one local sensor comprises or forms part of at least one of a heat detector, a smoke detector, a carbon monoxide detector, a gas flow sensor, a pressure sensor, an energy meter, a heating appliance, a motion detector; in dependence on the signal from the remote data source that is indicative of a compliance condition and/or in dependence on a signal from the at least one sensor that is indicative of a detection condition, operating a gas shutoff device by a controller of the control device, thereby to shut off a supply of gas to at least one domestic gas appliance; and in dependence on a further signal from the remote data source and/or in dependence on a signal from the at least one sensor that is indicative of a further detection condition, operating by the controller a water top up device, thereby to top up water in a domestic water heating system.
22. A control device for controlling pressure of a water heating system, the control device comprising: at least one receiver configured to receive signals from a pressure sensor, wherein the pressure sensor is configured to monitor pressure of the water heating system; and a controller configured to determine from the signals if the pressure level is below a desired pressure, and, if the pressure level is below the desired pressure, to operate a water top up device to top up water in the water heating system; wherein the controller is further configured to send a message to a remote server indicating that the water top up device has been operated.
23. A device comprising: a low-power wide area network transceiver configured to transmit data periodically from the device to a remote server; a cellular transceiver, wherein the cellular transceiver is switched off by default; and a controller configured to: receive an activation message from a remote server; on receiving the activation message, turn off the low-power wide area network transceiver and turn on the cellular transceiver; receive data using the cellular transceiver for a predetermined period of time and/or until a further message is received from the remote server; and on confirming successful reception of the data, turn off the cellular transceiver and turn on the low-power wide area network transceiver.
24. A device comprising: a low-power wide area network transceiver configured to transmit data periodically from the device to a remote server; a cellular transceiver, wherein the cellular transceiver is switched off by default; and a controller; wherein the controller is configured to: identify data to be transmitted by the device that exceeds a data limit for low-power wide area network transmission and/or is of high importance; turn off the low-power wide area network transceiver and turn on the cellular transceiver; and transmit the identified data using the cellular transceiver.
25. A device according to claim 23 or claim 24, wherein the cellular receiver comprises an electronic subscriber identity module (eSIM).