Signify Holding B.v.

Philips Lighting Holding B.v.

Koninklijke Philips Corporation N.v.

Sahil Sharma

Andries Van Wageningen

Ludovicus Marinus Gerardus Maria Tolhuizen

Oscar Garcia Morchon

Ronald Rietman

Piotr Polak

Mark Henricus Verberkt

Sandeep Shankaran Kumar

Fulong Ma

Marc Aoun

Supriyo Chatterjea

Esko Olavi Dijk

Alfonso De La Vega Ruiz

David Perera Barreda

Markus Jozef Maria Kurvers

Francisco Vidal Meca

Because of the line-of-sight character of optical wireless communication and a limited field-of-view of optical receivers, the coverage of an access point () and the overlapping coverage area of adjacent access points () in an optical system are smaller as compared to a RF system. It turns more challenging to support an end point () to roam securely in an optical multi-cell wireless communication network (). To address that problem, a subsystem is disclosed to select for the end point () a candidate access point out of the plurality of access points () in view of one or more neighbor relationships, and to inform the end point () about the candidate access point to trigger the end point () to start a procedure for pre-establishing a new pairwise transient key between the end point () and the candidate access point () for a secure handover.

Secure handover in a LiFi network

Because of the line-of-sight character of optical wireless communication and a limited field-of-view of optical receivers, the coverage of an access point and the overlapping coverage area of adjacent access points in an optical system are smaller as compared to a RF system. It turns more challenging to support an end point () to roam securely in an optical multi-cell wireless communication network. To speed up the derivation of a new pairwise transient key with a new access point during a handover procedure, the end point of this invention comprises a controller () that is configured to act as a second supplicant (), on behalf of a first supplicant () comprised in a host processor (), to communicate with an authenticator to establish a new pairwise transient key for the end point () and a candidate access point, and an active pairwise transient key with the currently associated access point is used to secure the communication for new key derivation.

Fast secure handover

Disclosed are systems and methods for cloud-based monitoring and control of physical environments. In various embodiments, a computing device () seeking to verify credentials of a lighting system controller () may obtain unverified credentials of the lighting system controller. The computing device may transmit, to a first remote device via a first network communication channel, a request to verify the unverified credentials. The computing device may receive verification from the first remote device or a second remote device via a second network communication channel. The second network communication channel may be different than the first network communication channel. The computing device may compare the unverified credentials to the verification data and verify, based on the comparing, that the unverified credentials are legitimate. Based on the verification, the computing device may establish a lighting information communication channel between the computing device and the lighting system controller.

Systems and methods for verifying credentials

This invention relates to a device comprising a routing controller for routing messages to a plurality of node devices of a network, the routing controller comprising at least one global instance enabling the routing of messages to a routing set of node devices, at least one local instance for routing packets to a neighbor node device neighboring the device, wherein the neighbor node device is selected regardless whether the neighbor node device belongs to the routing set of node devices, and wherein the routing controller is configured to use the local instance for routing of multicast messages to the node devices.

Method for configuring a node device, a network and a node device

The invention relates to a method for enabling a controller configured for controlling devices of a first system via a first backend to control devices of a second system via a second backend. The method, performed by the second backend, includes receiving, from the first backend, location information of the controller and credentials of the controller or/and of a user of the controller, receiving, from a source trusted by the second backend, location information of the controller and credentials of the controller or/and of the user, and performing context matching to enable the controller to control the devices of the second system by comparing the location information received from the first backend with the location information received from the source trusted by the second backend and by comparing the credentials received from the first backend with the credentials received from the source trusted by the second backend.

Context-aware controlling of multiple systems of controllable devices

Growing community of inventors

Eindhoven, Netherlands

Sahil Sharma