Abstract: Sensorized commercial buildings are a rich target for building a new class of applications that improve operational and energy efficiency of building operations that take into account human activities. Such applications, however, rarely experience widespread adoption due to the lack of a common descriptive schema that would enable porting these applications and systems to different buildings. Our demo presents Brick [4], a uniform schema for representing metadata in buildings. Our schema defines a concrete ontology for sensors, subsystems and relationships among them, which enables portable applications. Using a web application, we will demonstrate real buildings that have been mapped to the Brick schema, and show application queries that extracts relevant metadata from these buildings. The attendees would be able to create example buildings and write their own queries.

Abstract: A building management system (BMS) includes building equipment configured to provide raw data samples of one or more data points in the BMS. The BMS further includes a data collector configured to collect raw data samples from the building equipment and generate one or more raw data timeseries comprising a plurality of the raw data samples. The BMS also includes a timeseries processing engine. The timeseries processing engine is configured to identify one or more timeseries processing workflows that apply to the raw data timeseries, each of the workflows comprising a predefined sequence of timeseries processing operation. The timeseries processing engine is further configured to process the raw data timeseries using the identified timeseries processing workflows to generate one or more derived data timeseries. The BMS further includes a timeseries storage interface configured to store the raw data timeseries and the derived data timeseries in a timeseries database.

Abstract: A system for securely communicating information in a building management system (BMS) includes a plurality of HVAC devices communicably coupled via a network each HVAC device storing a copy of an HVAC data chain that includes a plurality of blocks linked sequentially. The plurality of HVAC devices includes a first HVAC device including a processing circuit configured to generate a first block comprising device data and send the block to at least a portion of the plurality of HVAC devices. The processing circuit is configured to receive a second block from one of the plurality of HVAC devices and solve the second block. The processing circuit is further configured to add the solved block to the HVAC data chain of the first HVAC device as the newest block and send the solved block to each of the plurality of HVAC devices.

Abstract: A building management system (BMS) includes building equipment configured to provide raw data samples of one or more data points in the BMS. The BMS further includes a data collector configured to collect raw data samples from the building equipment and generate one or more raw data timeseries comprising a plurality of the raw data samples. The BMS also includes a timeseries processing engine. The timeseries processing engine is configured to identify one or more timeseries processing workflows that apply to the raw data timeseries, each of the workflows comprising a predefined sequence of timeseries processing operation. The timeseries processing engine is further configured to process the raw data timeseries using the identified timeseries processing workflows to generate one or more derived data timeseries. The BMS further includes a timeseries storage interface configured to store the raw data timeseries and the derived data timeseries in a timeseries database.

Abstract: A building management system includes one or more computer-readable storage media having a data structure, wherein the data structure comprises a plurality of vulnerabilities and a plurality of pairs, each of the plurality of pairs comprising one of a plurality of assets and one of the plurality of threat types, wherein each of the plurality of pairs is associated with one of the plurality of vulnerabilities and instructions. The instructions cause one or more processors to receive a threat, the threat comprising a particular threat type of the plurality of threat types, the threat indicating an incident affecting a risk value associated with a particular asset of the plurality of assets, identify a particular vulnerability of the data structure based on the particular threat type and the particular asset, and determine, based on the particular vulnerability and the threat, the risk value associated with the particular asset.

Abstract: A building management system includes one or more computer-readable storage media having instructions stored thereon that, when executed by one or more processors, cause the one or more processors to receive threat events from one or more data sources, each threat event including a description and for each threat event determine whether the description for the threat event corresponds to one of a multiple predefined threat categories, generate a standardized threat object for the threat event using the corresponding predefined threat category, and in response to determining the description does not correspond to one of the predefined threat categories, process the description using a natural language processing engine to identify one of the predefined threat categories to be assigned to the threat event and generate a standardized threat object for the threat event using the predefined threat category identified by the natural language processing engine.

Abstract: A system for predicting performance of building equipment includes one or more processors and memory storing instructions. When executed by the one or more processors, the instructions cause the one or more processors to perform operations. The operations include obtaining sensor data generated by one or more sensors while operating the building equipment to affect one or more environmental conditions of a building, generating a predicted performance of the building equipment using a machine learning model if the machine learning model comprises prior data similar to the sensor data, and requesting feedback from an expert related to the predicted performance of the building equipment if the sensor data are different from the prior data.

Abstract: A building risk analysis system including one or more memory devices storing instructions thereon, that, when executed by one or more processors, cause the one or more processors to receive threats, each of the threats including a location, wherein each of the threats are threats of a particular threat category, determine a number of threats for each of geographic areas based on the location of each of the threats, and generate a distribution based on the number of threats for each of the geographic areas. The instructions further cause the one or more processors to determine a risk score for each of the geographic areas based on one or more characteristics of the distribution and the number of threats for each of the geographic areas.

Abstract: One embodiment of the present disclosure is a system for predicting performance of building equipment. The system comprises one or more sensors in communication with the building equipment, and the sensors are operable to detect characteristics from the building equipment. The system further comprises a computing device in communication with the sensors and in the same geographic location as the sensors. The computing device comprises one or more memory devices configured to store instructions that, when executed on one or more processors, cause the one or more processors to receive data from the sensors, the data based on the detected characteristics. The one or more processors also generate, based on a machine learning model and the data, a predicted performance of the building equipment when the machine learning model comprises a prior data substantially similar to the data.

Abstract: A building management system includes one or more computer-readable storage media having instructions stored thereon that, when executed by one or more processors, cause the one or more processors to receive threats, the threats each indicating an incident affecting a dynamic risk score associated with an asset, wherein one or more of the threats are current threats that are active at a current point in time and one or more of the threats are historic threats that were active at one or more past times. The instructions cause the one or more processors to generate, based on the one or more current threats, the dynamic risk score at the current point in time, generate, based on the one or more historic threats, a baseline risk score, and cause a user interface to display an indication of the dynamic risk score at the current point in time and an indication of the baseline risk score.

Abstract: A building management system includes one or more computer-readable storage media having a data structure, wherein the data structure comprises a plurality of vulnerabilities and a plurality of pairs, each of the plurality of pairs comprising one of a plurality of assets and one of the plurality of threat types, wherein each of the plurality of pairs is associated with one of the plurality of vulnerabilities and instructions. The instructions cause one or more processors to receive a threat, the threat comprising a particular threat type of the plurality of threat types, the threat indicating an incident affecting a risk value associated with a particular asset of the plurality of assets, identify a particular vulnerability of the data structure based on the particular threat type and the particular asset, and determine, based on the particular vulnerability and the threat, the risk value associated with the particular asset.

Abstract: A building management system includes one or more computer-readable storage media having instructions stored thereon that, when executed by one or more processors, cause the one or more processors to receive threats, the threats each indicating an incident affecting a dynamic risk score associated with an asset, wherein one or more of the threats are current threats that are active at a current point in time and one or more of the threats are historic threats that were active at one or more past times. The instructions cause the one or more processors to generate, based on the one or more current threats, the dynamic risk score at the current point in time, generate, based on the one or more historic threats, a baseline risk score, and cause a user interface to display an indication of the dynamic risk score at the current point in time and an indication of the baseline risk score.

Abstract: A building management system includes one or more computer-readable storage media having instructions stored thereon that, when executed by one or more processors, cause the one or more processors to receive threat events from one or more data sources, each threat event including a description and for each threat event determine whether the description for the threat event corresponds to one of a multiple predefined threat categories, generate a standardized threat object for the threat event using the corresponding predefined threat category, and in response to determining the description does not correspond to one of the predefined threat categories, process the description using a natural language processing engine to identify one of the predefined threat categories to be assigned to the threat event and generate a standardized threat object for the threat event using the predefined threat category identified by the natural language processing engine.

Abstract: A building management system (BMS) includes building equipment configured to provide raw data samples of one or more data points in the BMS. The BMS further includes a data collector configured to collect raw data samples from the building equipment and generate one or more raw data timeseries comprising a plurality of the raw data samples. The BMS also includes a timeseries processing engine. The timeseries processing engine is configured to identify one or more timeseries processing workflows that apply to the raw data timeseries, each of the workflows comprising a predefined sequence of timeseries processing operation. The timeseries processing engine is further configured to process the raw data timeseries using the identified timeseries processing workflows to generate one or more derived data timeseries. The BMS further includes a timeseries storage interface configured to store the raw data timeseries and the derived data timeseries in a timeseries database.

Abstract: A building management system includes one or more computer-readable storage media having a data structure, wherein the data structure comprises a plurality of vulnerabilities and a plurality of pairs, each of the plurality of pairs comprising one of a plurality of assets and one of the plurality of threat types, wherein each of the plurality of pairs is associated with one of the plurality of vulnerabilities and instructions. The instructions cause one or more processors to receive a threat, the threat comprising a particular threat type of the plurality of threat types, the threat indicating an incident affecting a risk value associated with a particular asset of the plurality of assets, identify a particular vulnerability of the data structure based on the particular threat type and the particular asset, and determine, based on the particular vulnerability and the threat, the risk value associated with the particular asset.

Abstract: A system for user interaction with a building automation system (BAS). The system includes a user device configured to accept vocal inputs and produce audio outputs, and a server in communication with the user device and a BAS controller. The server is configured to translate a vocal input to input text, and determine and store a conversation context based on the input text. The server is further configured to determine a desired output corresponding to the input text. Additionally, the server is configured to receive, from the BAS controller, BAS data corresponding to the desired output, and generate at least one audio output from the BAS data. The user device outputs the at least one audio output, and the server is configured to apply the conversation context to a subsequent vocal input.

Abstract: A building management system includes one or more computer-readable storage media having instructions stored thereon that, when executed by one or more processors, cause the one or more processors to receive threat events from one or more data sources, each threat event including a description and for each threat event determine whether the description for the threat event corresponds to one of a multiple predefined threat categories, generate a standardized threat object for the threat event using the corresponding predefined threat category, and in response to determining the description does not correspond to one of the predefined threat categories, process the description using a natural language processing engine to identify one of the predefined threat categories to be assigned to the threat event and generate a standardized threat object for the threat event using the predefined threat category identified by the natural language processing engine.

Abstract: A building risk analysis system including one or more memory devices storing instructions thereon, that, when executed by one or more processors, cause the one or more processors to receive threats, each of the threats including a location, wherein each of the threats are threats of a particular threat category, determine a number of threats for each of geographic areas based on the location of each of the threats, and generate a distribution based on the number of threats for each of the geographic areas. The instructions further cause the one or more processors to determine a risk score for each of the geographic areas based on one or more characteristics of the distribution and the number of threats for each of the geographic areas.

Abstract: A building management system (BMS) includes building equipment configured to provide raw data samples of one or more data points in the BMS. The BMS further includes a data collector configured to collect raw data samples from the building equipment and generate one or more raw data timeseries comprising a plurality of the raw data samples. The BMS also includes a timeseries processing engine. The timeseries processing engine is configured to identify one or more timeseries processing workflows that apply to the raw data timeseries, each of the workflows comprising a predefined sequence of timeseries processing operation. The timeseries processing engine is further configured to process the raw data timeseries using the identified timeseries processing workflows to generate one or more derived data timeseries. The BMS further includes a timeseries storage interface configured to store the raw data timeseries and the derived data timeseries in a timeseries database.

Abstract: A building management system (BMS) includes building equipment configured to provide raw data samples of data points in the BMS, a data collector configured to generate raw data timeseries including raw data samples from the building equipment, and a timeseries processing engine. The timeseries processing engine is configured to identify an initial timeseries processing workflow that applies to the raw data timeseries, identify other data timeseries required as inputs to the initial timeseries processing workflow, and generate an enriched timeseries processing workflow that includes the initial timeseries processing workflow, the raw data timeseries, and the other data timeseries. The timeseries processing engine is configured to execute the enriched timeseries processing workflow to generate a derived data timeseries. The BMS further includes a timeseries storage interface configured to store the raw data timeseries and the derived data timeseries in a timeseries database.