Koninklijke Philips Corporation N.v.

Signify Holding B.v.

Philips Lighting Holding B.v.

Sye Loong Keoh

Sandeep Shankaran Kumar

Oscar Garcia Morchon

Petrus Johannes Lenoir

Bozena Erdmann

Alphons Antonius Maria Lambertus Bruekers

Paulus Mathias Hubertus Mechtildis Antonius Gorissen

Robert Paul Koster

Fulong Ma

Muhammad Asim

Klaus Kursawe

Paulus Mathias Hubertus Mechtildis Anton Gorissen

Ileana R Buhan

Amit Soni

Martina Brachmann

The resource metering system comprises: an end-point device () consuming a resource, in particular for usage in a building () or in an outdoor lighting system, said device comprising a detection unit that produces status information and an indicator of usefulness; a smart meter () comprising: a communication circuitry provided with an interface adapted for receiving from said device status information and said indicator of usefulness; a metrology device connected to a medium () that provides the resource to said device; and a control circuitry connected to the metrology device for collecting resource consumption data, the control circuitry being connected to the communication circuitry and adapted to produce monitoring data to be securely transmitted to a server () after processing the status information and said indicator. Monitoring data are used when determining consumption tariffs, so as to encourage energy efficient usage of the device.

Resource metering system and method using such a system for smart energy consumption

The present invention relates to a method for access decision evaluation in a building automation and control system, the method comprising: sending, from an accessing device () to an accessed device (), an access request, sending, from the accessed device () to a central decision evaluation apparatus (), an evaluation request asking if the access request is granted or denied, evaluating, at the central decision evaluation apparatus (), the evaluation request using one or more central access control policies in order to reach a decision on if the access request is granted or denied, deriving, at the central decision evaluation apparatus (), the one or more central access control policies that was used for evaluation into a device specific access policy, sending, from the central decision evaluation apparatus () to the accessed device (), the decision and the device specific access policy, and storing, at the accessed device (), the device specific access policy.

System and method for access decision evaluation for building automation and control systems

The invention provides methods, devices () and communication systems () for establishing end-to-end secure connections and for securely communicating data packets. Such a communication system () comprises a first device (), an intermediate device () and a second device (). The first device () communications via a first network (), which is based on a first transport protocol and a first transport security protocol with the intermediate device (). The second device () communications via a second network, which is based on a second transport protocol and a second transport security protocol with the intermediate device (). The intermediate device () modifies packets received via first network to packets suitable for communication via the second network, and vice versa. The first device () is able to reconstruct a header of a received packet as if the packet was sent via the second network () and its transport and security protocols. Further, the first device () is able to verify, on basis of the reconstructed header, verification fields which are generated on basis of the second transport security protocol.

Methods, devices and systems for establishing end-to-end secure connections and for securely communicating data packets

A system including a server system, a user terminal and a hardware token, for providing secure access to a data record. The server system comprises storage means () for storing a plurality of data records, a data record () having associated therewith a sequence of secrets () shared with a hardware token () corresponding to the data record (), the server system () further being arranged for storing user authentication information (). User authenticating means () are provided for receiving authentication credentials () of a user from a user terminal () and authenticating the user as an authorized user, based on the authentication credentials () of the user and the stored authentication information (). Secret-receiving means () are provided for receiving a representation of a secret () revealed by a hardware token () and information identifying the data record corresponding to the hardware token from the terminal. Marking means () are provided for marking the unused secret (s) as used.

Secure access to personal health records in emergency situations

Growing community of inventors

Eindhoven, Netherlands

Sye Loong Keoh