# US 12,114,408 B2 · Controller for providing uninterrupted control of a node in a lighting network and a method thereof

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,114,408 B2
- Document ID: US12114408B2
- Status: Granted
- Kind: B2
- Application number: 17/913,903
- Filed: 2021-03-22
- Published: 2024-06-27
- Granted: 2024-10-08
- Earliest claimed: 2020-03-24
- Assignees: Signify Holding B.V.
- Applicants: Signify Holding B.V.
- Inventors: Mohammad Fal Sadikin; Muhammad Mohsin Siraj
- Web page: https://patentgrep.com/patent/US12114408B2

## CPC

- H05B 47/17: Operational modes, e.g. switching from manual to automatic mode or prohibiting specific operations
- G06F 21/554: {involving event detection and direct action}
- H04L 63/1416: {Event detection, e.g. attack signature detection}
- H04W 12/121: Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
- H05B 47/196: {characterised by user interface arrangements}
- H05B 47/20: Responsive to malfunctions or to light source life; for protection
- H05B 47/19: via wireless transmission
- H05B 47/1965: {using handheld communication devices}
- H05B: ELECTRIC HEATING; ELECTRIC LIGHT SOURCES NOT OTHERWISE PROVIDED FOR; CIRCUIT ARRANGEMENTS FOR ELECTRIC LIGHT SOURCES, IN GENERAL
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A method for providing uninterrupted control of a node via a segment controller; wherein the method comprises: executing a plurality of logical instances of a control application on the segment controller; detecting a malicious signal indicative of an unauthorized access request to the segment controller; determining that a logical instance which currently controls the node has been affected by the unauthorized access request; determining a logical instance, of the plurality of logical instances, which is unaffected by the unauthorized access request; switching the logical instance of the segment controller which controls the node from the affected logical instance to the unaffected logical instance.

## Claims

### Claim 1

A method for providing uninterrupted control of a node via a segment controller; wherein the node is comprised in a lighting network:
wherein the method comprises:
executing a plurality of logical instances of a control application on the segment controller;
detecting a malicious signal indicative of an unauthorized access request to the segment controller;
determining that a logical instance which currently controls the node has been affected by the unauthorized access request;
determining a logical instance, of the plurality of logical instances, which is unaffected by the unauthorized access request;
switching the logical instance of the segment controller which controls the node from the affected logical instance to the unaffected logical instance;
and wherein when the malicious signal is detected; the lighting network is switched from a normal control mode to a basic lighting control mode; wherein in the basic lighting control mode, the determination of an unaffected logical instance, of the plurality of logical instances, is limited to an unaffected logical instances arranged for providing control of the node being a lighting device;
wherein in the basic control lighting mode, the control of the lighting device is limited to providing functional lighting, which provides the mandatory illumination needed for the daily activities.

### Claim 2 (depends on 1)

The method according to the claim 1; wherein the segment controller is arranged for receiving control commands from a central controller for controlling the node, and wherein the central controller is connectable to the segment controller via a local network and/or an external network;
wherein the method further comprises:
determining whether the unauthorized access request is received via the local network or the external network;
and wherein when the unauthorized access request is received via the local network;
disconnecting a local connection of the central controller with the segment controller;
receiving the control commands from the central controller via the external network;
and wherein when the unauthorized access request is received via the external network;
disconnecting an external connection of the central controller with the segment controller;
receiving the control commands from the central controller via the local network.

### Claim 3 (depends on 2)

The method according to the claim 2; wherein the method further comprises:
determining whether the central controller is connected to the segment controller via the local network and/or the external network;
wherein when the unauthorized access request is received via the local network and when the central controller is not connected to the segment controller via the external network;
establishing, after the unauthorized access request, an external connection between the central controller and the segment controller; and
wherein when the unauthorized access request is received via the external network and when the central controller is not connected to the segment controller via the local network;
establishing, after the unauthorized access request, a local connection between the central controller and the segment controller.

### Claim 4 (depends on 1)

The method according to the claim 1; wherein the switching further comprises suspending the affected logical instance.

### Claim 5 (depends on 1)

The method according to the claim 1; wherein the plurality of logical instances are executed at the startup of the segment controller, and subsequently only one logical instance, of the plurality of logical instances, is active at a time; wherein remaining logical instances, of the plurality of logical instances, are idle.

### Claim 6 (depends on 1)

The method according to the claim 1; wherein the plurality of logical instances of the control application is executed on the segment controller using virtualization techniques.

### Claim 7 (depends on 6)

The method according to the claim 6; wherein the virtualization techniques comprise one or more of type-1 virtualizations, type-2 virtualizations, container-based virtualizations, application virtualizations, physical or hardware virtualizations.

### Claim 8 (depends on 1)

The method according to the claim 1; wherein the malicious signal is detected by the segment controller using detection mechanism algorithms.

### Claim 9 (depends on 1)

The method according to the claim 1; wherein the malicious signal is detected by an external device, external to the segment controller.

### Claim 10 (depends on 8)

The method according to the claim 8; wherein the detection mechanism algorithms comprise one or more of intrusion detection systems, machine learning techniques, rule-based learning, anomaly detection, learning systems.

### Claim 11 (depends on 1)

A segment controller for providing uninterrupted control of a node; wherein the segment controller comprises:
a local input interface to receive control commands from a central controller via a local network;
an external input interface to receive the control commands from the central controller via an external network;
an output interface to output control instructions based on the received control commands to the node; and
a processor to execute the steps of the method according to claim 1.

### Claim 12 (depends on 11)

A system for providing uninterrupted control of a node;
wherein the system comprises:
a segment controller according to the claim 11; and
the node.

### Claim 13 (depends on 12)

The system according to claim 12; wherein the system further comprises the central controller; wherein the segment controller is arranged for receiving control commands from the central controller.

### Claim 14 (depends on 1)

A computer program product comprising instructions which, when the program is executed by a segment controller or a central controller, cause the segment controller or the central controller to carry out the steps of the method of claim 1.