Landis+gyr Innovations, Inc.

Landis+gyr Technology, Inc.

Pushpesh Kumar Deshmukh

John Bettendorff

Michael Gerard Demeter

Ashok Mahadevan

Timothy James Rutten

Stephen John Chasko

Damien Hugoo

Narinder Mittal

Timothy Rutten

In one implementation, a system includes a web application and a desktop application, where the web application acts as an intermediary between the desktop application and an identity server. The desktop application loads a browser control to navigate an internal browser of the desktop application to the web application, and the web application redirects the internal browser to the identity server. The desktop application submits, via the internal browser, user credentials to authenticate a user of the desktop application to the identity server. The desktop application receives, at the internal browser, a cookie including an access token for the user of the desktop application. The desktop application transmits, to a web application programming interface (API) associated with the web application, an authentication request including the access token. The desktop application grants access to a resource of the desktop application based on an indication of authentication received from the web API.

Web-based authentication for desktop applications

A system for generating and applying a secure token in a resource distribution network is provided. For example, a headend system generates a time-based token based on a time duration specified for a meter. The time-based token indicates the time duration for the meter. The time-based token is further generated based on an identifier of the meter. The headend system transmits the time-based token to the meter via at least a mesh network. After receiving the time-based token, the meter validates the time-based token to determine that the time-based token is generated for the meter based on information related to the identifier of the meter. If the meter determines that the time-based token is valid, the meter connects premises associated with the meter to a resource distribution network for at least the time duration specified in the time-based token.

Secure tokens for controlling access to a resource in a resource distribution network

A system for generating and applying a secure token in a resource distribution network is provided. For example, a headend system generates a payment-based token based on a payment made for a meter. The payment-based token indicates a credit value to be applied to the meter. The credit value can range from a negative credit value limit and a positive credit value limit. The payment-based token is further generated based on a meter identifier. The headend system transmits the payment-based token to the meter via at least a mesh network. After receiving the payment-based token, the meter validates the payment-based token to determine that the payment-based token is generated for the meter. The meter further determines the balance associated with the meter based on the credit value specified in the payment-based token. Based on the balance, the meter connects or disconnects premises associated with the meter from a resource supply.

Techniques described herein register an endpoint device, such as a utility meter, with multiple headend systems. A system described herein includes a utility meter, which measures consumption of a resource, and a Network Management System (NMS) headend system, which manages a network. The utility meter joins the network and obtains an Internet Protocol (IP) address of the NMS headend system. The utility meter transmits a network registration request to the NMS headend system using the IP address of the NMS headend system and receives, from the NMS headend system, network-related settings of the network. The utility meter obtains an IP address of a second headend system configured to provide a service over the network. Further, the utility meter receives, from the second headend system, configuration settings for using the service of the second headend system and, as such, configures the radio with the network-related settings and the configuration settings.

Registering an endpoint with multiple headend systems

A system for generating and applying a secure token in a resource distribution network is provided. For example, a headend system generates a global token based on a time duration specified for multiple meters that are in communication with the headend system through at least a mesh network in a normal condition. The global token is associated with the time duration and is applicable to the multiple meters. The headend system causes the global token to be broadcast via a broadcast network. After receiving the global token, the meter verifies the global token and determines the time duration associated with the global token. The meter further connects premises associated with the meter to a resource distribution network for at least the time duration associated with the global token.

Techniques are disclosed for software development on utility devices. In an example, a utility device, responsive to validating a manufacturer signature, transitions to an isolated development mode. When in the isolated development mode, the utility device is restricted from joining a network and receives an application from a development computing system. The utility device validates a network signature and transitions to a network testing mode. When in the network testing mode, the utility device joins the network, registers with a head end system via the network, and executes the application. After a threshold amount of time has lapsed the utility device transitions to the isolated development mode.

Enabling isolated development mode in utility end points

Techniques for secure team-based communication on existing wireless mesh networks are disclosed. In an example, a first network node receives a network encryption key from a headend system. The first network node receives a sub-group encryption key that is unique to a sub-group of nodes, a sub-group identifier, and a sub-group node list that lists the sub-group of nodes associated with the sub-group identifier. The first network node generates an application layer message for a second node of the sub-group of nodes at an application layer. The first network node encrypts the application layer message using the sub-group encryption key. The first network node generates a team packet that is addressed to a selected node and includes the encrypted application layer message and the sub-group identifier. The first network node encrypts the team packet using the network encryption key and transmits the encrypted team packet to the selected node.

Secure peer-to-peer communication over wireless mesh networks

Described is a communication link establishment method. The method includes transmitting, by a diagnostic tool, a wireless wake signal on a wake wireless channel to a low-power endpoint in a metrology mesh network. The wake wireless channel is selected using a unique identifier of the battery-operated endpoint. The method also includes receiving, at the diagnostic tool, a confirmation message from the low-power endpoint that the wireless wake signal was received at the low-power endpoint. Additionally, the method includes establishing, by the diagnostic tool, a communication link between the diagnostic tool and the low-power endpoint at a wireless communication channel different from the wake wireless channel. Further, the method includes performing, by the diagnostic tool, a diagnostic operation on the low-power endpoint.

Point to point communication with low-power device

Systems and methods for secure team-based communication on existing wireless mesh networks are disclosed. In an example network with multiple network nods, a headend system designates a first network node and a second network node as a sub-group of nodes, generates a sub-group encryption key that is unique to the sub-group of nodes, and transmits the sub-group encryption key and the sub-group node list and to the first node and the second node. The first node encrypts an application layer message with the sub-group encryption key and sends the message to the second node. The second node decrypts the application layer message with the sub-group encryption key and performs an action based on the message.

Prior to joining a device to a network, the device is connected to an external system via a local connection. The external system provides the device with a local time stamp that includes a local time value and a local time error value. The device may use the time information to communicate with the external system. After the device is joined to the network, the device may transmit a communication on the network that includes time information. If so, then the communication includes a time value based on the device's time value and a time error value set to a value indicating a maximum error. The network is protected from potentially poor quality time information. Any device that receives the communication rejects the time information since the time error value indicates a maximum error.

Growing community of inventors

Alpharetta, GA, United States of America

Pushpesh Kumar Deshmukh