Abstract: The present technology pertains to a system that authenticates the identity of a user trying to access a service. The system comprises an authentication provider configured to communicate authentication requirements to a continuous multifactor authentication device and the continuous multifactor authentication device configured to receive authentication requirements, to fuse multiple identification factors into an identification credential for a user according to the authentication requirements, and to send the authentication credential to the authentication provider. After receiving the identification credential meeting the authentication requirements, the authentication provider is configured to instruct a service provider to initiate a session.

Abstract: The invention regards the forwarding of multicast messages in a network system. A network router according to the present invention comprises a memory in which configuration data is stored. The configuration data define at least one route along which a multicast message is to be forwarded. If the forwarding of a multicast message is allowed in principle by such specified route, it is additionally checked if from the downlink side of the network router, multicast listener information was received. Only if both conditions are fulfilled, the multicast message will be forwarded along the specified route.

Abstract: A first plurality (201) of network nodes (120-123, 130-133) of a network (100) is associated with a first cryptographic keying material and the multicast IP address. A second plurality (202) of network nodes (120-123, 130-133) of the network (100) is associated with a second cryptographic keying material and the multicast IP address. The first cryptographic keying material has a different secret than the second cryptographic keying material.

Abstract: The invention relates to the field of commissioning of infrastructure elements of a lighting network for connecting wireless enabled lighting devices in a secure manner to a wireless network using key information acquired via a cloud based service. A commissioning device comprises a first communication means for communicating with a server unit. The commissioning device obtains identification information from the infrastructure element to be commissioned and transmits the obtained identification information to a server unit which stores key information associated with identification information of the infrastructure element. The server unit retrieves the key information associated with the transmitted identification information and transmits the retrieved key information to the commissioning device. The commissioning device uses the received key information for establishing a secure communication channel to the infrastructure element.

Abstract: A management system performs a focused search to find uniform resource identifiers (URIs) of potentially counterfeit products and/or fake assets online, performs a search for adjacencies of blacklist URIs of counterfeit products and/or fake assets online to find additional URIs of potentially counterfeit products and/or fake assets online that are related to the blacklist URIs, and adds the URIs and the additional URIs to a URI list. The management system classifies, by a machine learning classifier, each URI on the URI list as one of a blacklist URI of counterfeit products and/or fake assets online, and a whitelist URI of authentic products and/or assets online, and repeats the performing the search for adjacencies using blacklist URIs resulting from the classifying, the adding, and the classifying operations, and removes access to counterfeit and/or fake assets online revealed by the focused search, the search for adjacencies, or the classifying.

Abstract: A communication module for a building technology device, especially a luminaire, is provided, wherein the communication module is configured to be connectable to an IoT-network and a communication bus, and being configured for a bi-directional communication on the IoT-network and the communication bus, wherein the communication module is configured to convert communication data between the communication bus and the IoT-network.

Abstract: A building technology device communication system is provided, comprising at least one border router comprising a first network interface configured to connect to an external network, and a second network interface configured to connect to an IoT-network, and wherein the border router is configured to logically and/or physically connect the external network to the IoT-network, preferably in a wireless mesh network, and a plurality of IoT-network devices in the IoT-network connected directly and/or indirectly to the at least one boarder router by wired and/or wireless connection, wherein the plurality of IoT-network devices is adapted to selectively operate in an ad-hoc communication mode.

Abstract: The present technology pertains to a system that authenticates the identity of a user trying to access a service. The system comprises an authentication provider configured to communicate authentication requirements to a continuous multifactor authentication device and the continuous multifactor authentication device configured to receive authentication requirements, to fuse multiple identification factors into an identification credential for a user according to the authentication requirements, and to send the authentication credential to the authentication provider. After receiving the identification credential meeting the authentication requirements, the authentication provider is configured to instruct a service provider to initiate a session.

Abstract: The invention refers to a communication module arranged to support execution of commissioning of one or more installed devices and configured to transmit, according to Thread network protocol, via multiple channels a connectivity verification message arranged to initiate an execution of a predetermined activity by the one or more installed devices. Present invention concerns a commissioning device, transmitting the connectivity verification message to the one or more installed devices via the communication module, and installed devices, each installed device monitoring received messages, determining whether or not a received message is the connectivity verification message, determining whether or not a signal strength of the received message is above a predetermined threshold, if the received message is a connectivity verification message and if the signal strength of the received message is above the predetermined threshold, executing the predetermined activity.

Abstract: Communication (351) on a communication link is monitored. At a predetermined point in time (380), packetized data (350) indicating a luminaire status information of a luminaire is sent. Said sending of the packetized data (350) is selectively executed depending on said monitoring. In various embodiments, said sending of the packetized data (350) and said monitoring of the communication on the communication link may comprise executing a Trickle algorithm.

Abstract: A building technology device communication system is provided, comprising at least one border router comprising a first network interface configured to connect to an external network, and a second network interface configured to connect to an IoT-network, and wherein the border router is configured to logically and/or physically connect the external network to the IoT-network, preferably in a wireless mesh network, and a plurality of IoT-network devices in the IoT-network connected directly and/or indirectly to the at least one boarder router by wired and/or wireless connection, wherein the plurality of IoT-network devices is adapted to selectively operate in an ad-hoc communication mode.

Abstract: The invention refers to a communication module arranged to support execution of commissioning of one or more installed devices and configured to transmit, according to Thread network protocol, via multiple channels a connectivity verification message arranged to initiate an execution of a predetermined activity by the one or more installed devices. Present invention concerns a commissioning device, transmitting the connectivity verification message to the one or more installed devices via the communication module, and installed devices, each installed device monitoring received messages, determining whether or not a received message is the connectivity verification message, determining whether or not a signal strength of the received message is above a predetermined threshold, if the received message is a connectivity verification message and if the signal strength of the received message is above the predetermined threshold, executing the predetermined activity.

Abstract: A system for controlling a plurality of building technology devices, in particular lighting units, by sending messages over a network, is provided, the system comprising: a plurality of building technology devices, and a network functionally connecting said building technology devices, wherein at least one of the building technology devices is a message issuing building technology device configured to send multicast or broadcast messages to a plurality of or all of the remaining building technology devices. The network is arranged such that at least three, preferably each of the remaining building technology devices form at least one ring network topology, and wherein the remaining building technology devices in such ring network topology are configured to exchange unicast messages in this at least one ring network topology.

Abstract: The invention regards the forwarding of multicast messages in a network system. A network router according to the present invention comprises a memory in which configuration data is stored. The configuration data define at least one route along which a multicast message is to be forwarded. If the forwarding of a multicast message is allowed in principle by such specified route, it is additionally checked if from the downlink side of the network router, multicast listener information was received. Only if both conditions are fulfilled, the multicast message will be forwarded along the specified route.

Abstract: A communication module for a building technology device, especially a luminaire, is provided, wherein the communication module is configured to be connectable to an IoT-network and a communication bus, and being configured for a bi-directional communication on the IoT-network and the communication bus, wherein the communication module is configured to convert communication data between the communication bus and the IoT-network.

Abstract: The invention relates to the field of commissioning of infrastructure elements of a lighting network for connecting wireless enabled lighting devices in a secure manner to a wireless network using key information acquired via a cloud based service. A commissioning device comprises a first communication means for communicating with a server unit. The commissioning device obtains identification information from the infrastructure element to be commissioned and transmits the obtained identification information to a server unit which stores key information associated with identification information of the infrastructure element. The server unit retrieves the key information associated with the transmitted identification information and transmits the retrieved key information to the commissioning device. The commissioning device uses the received key information for establishing a secure communication channel to the infrastructure element.

Abstract: Communication (351) on a communication link is monitored. At a predetermined point in time (380), packetized data (350) indicating a luminaire status information of a luminaire is sent. Said sending of the packetized data (350) is selectively executed depending on said monitoring. In various embodiments, said sending of the packetized data (350) and said monitoring of the communication on the communication link may comprise executing a Trickle algorithm.

Abstract: A system for controlling a plurality of building technology devices, in particular lighting units, by sending messages over a network, is provided, the system comprising: a plurality of building technology devices, and a network functionally connecting said building technology devices, wherein at least one of the building technology devices is a message issuing building technology device configured to send multicast or broadcast messages to a plurality of or all of the remaining building technology devices. The network is arranged such that at least three, preferably each of the remaining building technology devices form at least one ring network topology, and wherein the remaining building technology devices in such ring network topology are configured to exchange unicast messages in this at least one ring network topology.

Abstract: A first plurality (201) of network nodes (120-123, 130-133) of a network (100) is associated with a first cryptographic keying material and the multicast IP address. A second plurality (202) of network nodes (120-123, 130-133) of the network (100) is associated with a second cryptographic keying material and the multicast IP address. The first cryptographic keying material has a different secret than the second cryptographic keying material.

Abstract: A lighting control system includes a master unit and a plurality of slave units. The slave units are respectively designed to consume power by operating lighting means, are supplied by a common power supply unit, can be provided with commands from the master unit, and are respectively provided with a control unit which modulates the power consumption of the associated slave unit according to a defined protocol. The master unit is designed to measure the power consumed by all slave units.