ITUB20154749A1 - INTERFACE EQUIPMENT - Google Patents

Description

"INTERFACE EQUIPMENT"

DESCRIPTION

[BACKGROUND OF THE INVENTION]

The present invention relates to an interface apparatus, suitable for allowing safe communication between an electric / electronic device and a terminal device.

The present invention also relates to a terminal, suitable for cooperating with said interface equipment, and to a system which comprises said interface equipment, said terminal, and a server adapted to communicate with said interface equipment and said terminal.

The present invention also relates to a method for controlling said terminal, for establishing a connection with said interface equipment, a software program that allows the implementation of this method, and a method for establishing a connection between said terminal and said equipment. interface, based on the functionality of said system.

As is known, the electric / electronic devices commonly available to users can be connected to each other, so as to interact and provide extended potential to the users themselves.

In particular, the devices belonging to the same environment (domestic, industrial, etc.) can be connected in such a way as to be monitored / regulated, so that the overall energy consumption can be kept under control and / or the devices can be remotely controlled.

The Applicant has noted that the simplicity of configuring the connections and the security with which the information is transmitted / received are extremely critical aspects in this context.

[OBJECTIVES AND SUMMARY OF THE INVENTION]

The object of the present invention is therefore to provide an interface apparatus which allows an electric / electronic device to be connected in a simple and safe manner to a terminal, and possibly to a telematic network in a more general sense.

Another object of the present invention is to make available a hardware-software infrastructure capable of facilitating the control of electrical / electronic devices and the monitoring of electrical energy consumption of devices forming part of the same environment.

These and other objects are substantially achieved by an interface apparatus according to what is described in the attached claims.

[BRIEF DESCRIPTION OF THE DRAWINGS]

Further features and advantages will become more apparent from the detailed description of preferred but not exclusive embodiments of the invention.

This description is provided below with reference to the accompanying figures, also having purely illustrative and therefore non-limiting purposes, in which:

Figure 1 shows a block diagram of a system in which the invention can be inserted;

Figure 2 shows a block diagram of an interface apparatus according to the invention;

Figure 3 shows a block diagram of a terminal associated with the interface apparatus of Figure 2.

[DETAILED DESCRIPTION OF THE INVENTION]

With reference to the accompanying figures, 1 indicates an interface apparatus in accordance with the present invention as a whole.

The apparatus 1 can be advantageously used to connect, in a simple and rapid way, any electrical / electronic device to the internet and, in particular, to a cloud system and to a terminal, so that the so-called " Internet of Things "(IoT), By way of example, for example, logic can be adopted for monitoring and regulating electricity consumption in a domestic or industrial environment. Clearly, the invention can also be applied for other purposes, which are conveniently achieved through the functions that will be described and claimed hereinafter.

1 / apparatus 1 is therefore suitable for being part of a system 400 (Figure 1) further comprising a terminal 200 and a server 300.

The apparatus 1 (Figure 2) first of all comprises an interface module 10.

The interface module 10 has the task of connecting the apparatus 1 to a respective electric / electronic device 100. The electric / electronic device 100, in practical terms, is the apparatus which, by means of the apparatus 1, can be connected in network with other devices, for example with a cloud structure and / or with the terminal 200.

The interface module 10 can be, for example, a serial connector, a USB (Universal Serial Bus) connector, or any other connector that can connect the equipment 1 and the electrical / electronic device 100 in data connection.

The interface module 10 can also be suitable for hardware / software communication based on Modbus protocol or other similar protocols.

The apparatus 1 further comprises a connection structure 20.

The connection structure 20 has the task of putting the interface 1 in communication with the terminal 200 and with the server 300.

The connection structure 20 preferably comprises a short range connection module 21. In particular, the short range connection module 21 can be an NFC (Near Field Communication) module.

Advantageously, the short range connection module 21 is used for the communication between the apparatus 1 and the aforementioned terminal 200.

In one embodiment, the connection structure 20 further comprises at least one additional module 22; such additional module can be for example a wi-fi module and / or a long range connection module.

Conveniently, the communication between the apparatus 1 and the aforementioned server 300 takes place via the additional module 22, ie, for example, via a wi-fi connection or a long-range connection.

It should be noted that in the present context and in the subsequent claims, "short range communication" or "short range connection" means a telematic communication in which the distance between the devices involved must remain below a predetermined threshold, so that the communication can take place. Examples of short-range communication are Bluetooth® technology, NFC technology, etc.

Advantageously, a short range communication is able to give the user the physical security that the communication itself is not intercepted by unauthorized third parties.

In the present context and in the subsequent claims, by "long-range communication" or "long-range connection" is meant a telematic communication in which the geographical position of the devices involved is not substantially limited, especially in terms of mutual distance. Examples of long-range communication are GSM, GPRS, UMTS, LTE, LTE-A technologies, etc.

The apparatus 1 also comprises a memory 30 in which at least one identification code ID univocally associated with the apparatus 1 itself and / or with the short-range connection module 21 is stored.

In the event that the short-range connection module 21 is an NFC module, the identification code ID can be the code natively associated with this module.

The apparatus 1 further comprises a control unit 40, operatively associated with the various modules and elements described up to now.

The control unit 40 preferably has the task of supervising the entire operation of the apparatus 1.

In particular, the control unit 40 is suitable for receiving, through the short-range connection module 21, a token T and access information AI.

Token T and AI login information are sent to equipment 1 by terminal 200.

In the present context and in the subsequent claims, "token" means a code, formed for example by an alphanumeric string, which can be used only once for carrying out and identifying a specific operation. operation in association with a certain token, the same can no longer be used and, to carry out that operation again, it will be necessary to use a new token, generated in an appropriate manner.

As will become clearer later, the token T is generated by the server 300, which acts as a guarantor of the security of the communication between the terminal 200 and the equipment 1.

AI login information is information that allows you to connect to server 300.

Token T and AI login information are received from equipment 1 via short-range connection module 21.

The control unit 40 is also configured to send to the server 300, on the basis of the access information AI, the token T and its own identification code ID, stored in the memory 30.

As mentioned, the connection between the equipment 1 and the server 300 takes place via wi-fi and / or long-range connection.

Preferably, the apparatus 1 and the terminal 200 are associated, at the server 300, to the same account.

In response, the control unit receives one or more security keys to communicate at least with the terminal 200.

Corresponding keys are also made available to the terminal 200, so that a secure communication can take place between the apparatus 1 (and therefore the respective electrical / electronic device 100) and the terminal 200.

In one embodiment, other keys can be provided to other terminals recognized by the server 300 as associated with the terminal 200. In practical terms, these are terminals that pertain to the same account or to other accounts owned or associated with the person owning the account. Basic.

It should be noted that suitable keys can also be provided for subsequent communication between the apparatus 1 and the server 300.

The control unit 40 can therefore receive, from the terminal 200, a first signal SI, incorporating at least a reference code RC and an instruction X.

The first signal SI is sent from the terminal 200 to the apparatus 1 for the purpose, for example, of controlling / regulating the electric / electronic device 100.

The first signal SI is generated, by the terminal 200, using the keys K sent by the server 300 at the end of the "handshaking" procedure described above.

The control unit 40 then processes this first signal SI on the basis of the previously received keys K, so as to correctly interpret the content of the first signal SI itself.

The control unit 40 then compares the reference code RC with the identification code ID, associated with the apparatus 1, so as to verify that the signal SI is actually destined for the apparatus 1 itself.

If there is a correspondence between the two codes, the control unit 40 gives the instruction X to the electric / electronic device 100.

This instruction X can be, for example, a request for data collection relating to the energy consumption of the device 100, or a regulation for its operation, aimed at containing future consumption.

The control unit 40 is also configured to generate a second signal S2, incorporating the identification code ID and at least one datum D associated with the electric / electronic device 100, By way of example, the datum D can relate to the energy consumption of the device 100 same.

The second signal S2 is then processed by the control unit 40 on the basis of the previously received security keys, so as to be then sent to the terminal 200.

Advantageously, the communication from / to the equipment 1 is based on general rules that allow more specific future implementations and do not place constraints, for example, on the type of data exchanged.

Regardless of the type of transport chosen (TCP, UDP or other), there is a couple of messages required for a response, even for requests that do not require any response data (eg activation of a digital output).

The communications are based on the aforementioned identification code ID, which preferably coincides with the unique identifier of the NFC protocol. Each signal generated contains a unique string of bytes (eg 7), which the system uses to ensure the correct addressing of messages to the recipient device.

A key-value map is then defined which describes the types of commands that can be sent / received. Particular devices may, in the future, not accept all types of commands. For this reason, another key-value map describes the device types. This map, as well as the previous one, can be updated when needed.

When the information exchanged passes through the cloud structure, the latter responds to HTTP requests with messages that contain useful information for subsequent requests: if it is, for example, a POST by the terminal 200 to send a new request, the cloud will reply with the details of the created request, including an identifier (corresponding to the primary key of the database requests table) with which to subsequently check whether the request has been processed by the recipient device, and the date / time of creation of the request itself.

The cloud structure (which, as mentioned, can advantageously include the server 300) can offer, through an API based on REST principles, a series of user services that make secure communication between the user and his devices possible:

• user account;

• device table, for each user;

• Create-Read-Update-Delete (CRUD) operations on the device table;

• table of "places", for each user;

• sharing of places and / or devices on multiple users (many-to-many relationship between users and devices and between users and places, one-to-many between place and devices);

• sending requests / commands to the device (POST) and requests table;

• query requests / commands from the device (GET);

• sending responses / actuations from the device (POST) and response table;

• querying of answers / actuations from the user terminal (GET);

• filing of the request-response pairs on a historical table for subsequent analysis.

It should be noted that the communication between the terminal 200 and the equipment 1 takes place via short-range technology (eg NFC) when the procedure for the generation and distribution of the security keys K is in progress. Subsequently, the terminal 200 and the equipment 1 can also communicate via long-range connection and / or by relying on a cloud structure, which cooperates in the management / regulation of the electrical / electronic device 100. Advantageously, the server 300 is part of this cloud structure.

The control unit 40 can also be configured to manage the protection of the memory 30, so that its contents are not accessible in the absence of the necessary access credentials.

From a practical point of view, the control unit 40 can be (or comprise) an integrated circuit (TI CC3200), equipped with a dedicated flash memory which allows to host the binary code that the processor can execute.

For example, such code can perform the following functions:

1. initialization of device peripherals:

Digital (including LED) and analog I / O; wi-fi, in "station" mode;

serial port;

NFC;

2. NFC memory reading to retrieve information and wi-fi network credentials;

3. search and connection to the wi-fi network;

4. opening of incoming (server) and outgoing (client) UDP sockets;

5. opening of TCP sockets for HTTP connection to server 300;

6. registration of equipment 1 to the cloud service (POST in the device table);

7. LOOP (adjustable period, in the order of seconds):

control of messages from HTTP servers; control of messages from UDP;

execution of commands described in the message;

reply to the message.

Figure 3 shows a block diagram of the terminal 200. The terminal 200 can be for example a portable device, such as a smartphone or a tablet.

The terminal 200 comprises a communication interface 210. The communication interface 210 comprises a first module 211 for communication with the server 300, and a second module for communication with the apparatus 1.

Preferably the first module 211 is a wi-fi module and / or a module for a long range connection.

Preferably the second module 212 is a short range connection module, in particular an NFC module.

The terminal 200 also comprises a processing unit 220 configured to send to the server 300, via the first communication module 211, a request signal RS, aimed at activating communication with a new device 1.

Preferably, the generation of the request signal RS is activated by a user through a suitable data entry section DE, which is part of the terminal 200.

In response to the RS request signal, the processing unit 220 receives the token T from the server 300.

At this point, the processing unit 220 preferably generates a notification signal, so as to inform the user that a new equipment can be configured. The user then proceeds to bring the apparatus 1 close to the terminal 200, so that a short range connection (NFC) can be established.

By means of the second module 212, the processing unit 220 then transmits to the apparatus 1 the token T and the aforementioned access information AI to access the server 300.

Preferably, before carrying out this transmission, the terminal 200 checks that the apparatus 1 is "new" (therefore not yet configured for the connection) and that it is open for both reading and writing.

As described above, the apparatus 1 can then connect to the server 300 and, following a positive authentication, the server 300 distributes the K keys to the terminal 200 and the apparatus 1.

In the event that the terminal 200 does not positively conclude the handshaking with the apparatus 1, the processing unit 220 generates an alert signal intended for the server 300.

It should be noted that the invention can be conveniently applied in a context in which there are various electrical / electronic devices, each associated with a respective interface apparatus similar to the one described above.

By means of a terminal 200 it is therefore possible to configure various devices, in order to subsequently connect to them, also via a cloud structure, so as to control / regulate the various devices in a simple and intuitive way.

As mentioned, the terminal 200 can be for example a smartphone or a tablet. The functionalities of the terminal 200 within the scope of the present invention can be implemented by means of a mobile application ("app") installed on the terminal 200 itself.

Alternatively, the terminal 200 can be realized as a conventional personal computer (PC), equipped with short range connectivity (eg additional NFC module), which is configured to perform the operations described above.

The invention achieves important advantages.

First of all, the invention makes it possible to connect electrical / electronic devices to a cloud system with great simplicity and speed.

The invention also makes it possible to carry out techniques for monitoring / controlling devices and equipment, optimizing their operation and, for example, obtaining significant results in terms of reducing energy consumption.

Claims (18)

CLAIMS 1. Interface equipment (1) comprising: - an interface module (10) for a connection with a respective electric / electronic device (100); - a connection structure (20), comprising at least one short-range connection module (21); - a memory (30) in which at least one identification code (ID) univocally associated with said equipment (1) is stored; - a control unit (40) suitable for: receiving, from a terminal (200), through said short-range connection module (21), a token (T) and access information (AI) for accessing a server (300); sending said token (T) and said identification code (ID) to said server (300), through said connection structure (20), on the basis of said access information (AI); receiving from said server (300) one or more security keys (K) to communicate at least with said terminal (200). 2. Apparatus according to claim 1, wherein said connection structure (20) further comprises at least one additional module (22), said additional module being a wi-fi module and / or a long range connection module, wherein the communication between said interface equipment (1) and said server (300) takes place through said additional module (22). Apparatus according to claim 1 or 2, wherein said short-range connection module (21) is an NFC module. 4. Apparatus according to claim 3, wherein said identification code (ID) is a unique code of said NFC module. Apparatus according to any one of the preceding claims, wherein said control unit (40) is further suitable for; receiving from said terminal (200) a first signal (SI), incorporating at least a reference code (RC) and an instruction (X); processing said first signal (SI) on the basis of said one or more security keys (K); comparing said reference code (RC) with said identification code (ID); if said reference code (RC) corresponds to said identification code (ID), give said instruction (X) to said electric / electronic device (100) through said interface module (10), Apparatus according to any one of the preceding claims, wherein said control unit (40) is further suitable for; generating a second signal (S2), incorporating said identification code (ID) and at least one datum (D) associated with the electric / electronic device (100); processing said second signal (S2) on the basis of said one or more security keys (K); sending said second signal (S2) processed to said terminal (200) and / or to said server (300). 7. Terminal (200) comprising: - a communication interface (210); - a processing unit (220) suitable for: sending to a server (300), through said communication interface (210), a request signal (RS); receiving from said server (300), through said communication interface (210), a token (T); sending to an interface apparatus (1), via said communication interface (210), said token (T) and access information (AI) to access said server (300); receiving from said server (300), through said communication interface (210), one or more security keys (K) for a communication at least with said interface equipment (1). The terminal according to claim 7, wherein said communication interface (210) comprises: - a first module (211) for communication with said server (300) and / or with said apparatus (1); - a second module (212) for communication with said interface equipment (1). Terminal according to claim 8, wherein said first module (211) is a wi-fi module and / or a long range connection module. Terminal according to claim 8 or 9, wherein said second module (212) is a short range communication module, preferably an NFC module. Terminal according to any one of claims 7 to 10, wherein said terminal (200) comprises a data entry section (DE) at least to allow a user to activate the generation of said request signal (RS). A terminal control method (200) for establishing a connection with an interface equipment (1), said method comprising: sending from said terminal (200) to a server (300) a request signal (RC); receiving from said server (300) a token (T); sending from said terminal (200) to said interface apparatus (1) said token (T) and access information (AI) to access said server (300); receiving from said server (300) one or more security keys (K) for communication at least with said interface equipment (1). Method according to claim 12, wherein the communication between said terminal (200) and said server (300) takes place via wi-fi connection and / or long-range connection. Method according to claim 12 or 13, wherein the communication between said terminal (200) and said interface apparatus (1) is a short-range communication, preferably based on NFC protocol. Method according to any one of claims 12 to 14, wherein said terminal (200) receives said one or more security keys (K) from said server following a communication between said server (300) and said equipment (1 ) of interface, said communication being preferably based on said token (T) and said access information (AI). Software program comprising instructions which, when executed by a processing unit (220) of a terminal (200), cause said terminal (200) to execute the method according to any one of claims 12 to 15. System (400) comprising; a terminal (200) according to any one of claims 7 to 11; an interface apparatus (1) according to any one of claims 1 to 6; - a server (300) configured for: receiving a request signal (RS) from said terminal; sending to said terminal (200), in response to said request signal, a token (T); receiving from said interface equipment (1) said token (T) and an identification code (ID) associated with said interface equipment (1); sending to said terminal (200) and to said interface apparatus (1) one or more security keys (K) at least for a communication between said terminal (200) and said interface apparatus (1). 18. A method of establishing a connection between a terminal (200) and an interface equipment (1), said method comprising: sending from said terminal (200) to a server (300) a request signal (RS); sending from said server (300) to said terminal (200) a token (T); sending from said terminal (200) to said interface apparatus (1) said token (T) and access information (AI) to access said server (300); send from said interface equipment (1) to said server (300), on the basis of said access information (AI), said token (T) and an identification code (ID) associated with said interface equipment (1), - sending, from said server to said terminal (200) and to said interface apparatus (1), one or more security keys (K) at least for a communication between said terminal (200) and said interface apparatus (1).