Back KNX Secure – the secure standard.

The KNX standard means a plus in security. To effectively safeguard the infrastructure against hacker attacks in a professional installation, measures should be taken at the hardware and software levels.

KNX Secure encrypts the data communication in the network and ensures secure transmission of all KNX telegrams. The communication to visualisations is also made secure by this. KNX IP Secure and Data Secure stand for secure data transmission in KNX systems. KNX Data Secure means that selected KNX telegrams are authenticated and encrypted, independently of the medium. In this way, the communication between sensor and actuator cannot be interpreted or manipulated. The communication to visualisations is also made secure by this. The rooms are connected to the central visualisation system via an IP backbone using a JUNG KNX IP interface. The KNX IP router can also be used as an area or line coupler.
 



KNX Secure is so flexible: Five concrete use cases

New construction, renovation or restructuring: KNX Secure should be taken into account from the beginning of building activities. Because everything you can operate digitally yourself, can theoretically also be controlled by unauthorised third parties. This is where KNX Secure comes in and offers effective protection in a Smart Home or Smart Building in accordance with banking standards.

Building of a new warehouse

A new warehouse normally fits logistically and architecturally into the existing building. Likewise, in the area of automation you do not have to redesign everything in order to integrate the new building into the existing KNX system. With an additional KNX/IP router, you can easily extend the existing project. To do so, simply apply the standard settings of the KNX/IP router. Extend your existing building in this way by an additional line and add the desired devices.
 
  1. Connect the new router
  2. Connect actuators and sensors to the new router
  3. Add new devices in Plain Mode
 
With ETS 5.6.X, no Secure can be activated. Use standard parameters.

A new pair of semi-detached houses

Everything under one roof: Here, KNX enables many individual automation possibilities. For a new building, create a new KNX project. You take account of every party with their own KNX/IP router and then link the desired devices. With this allocation you ensure that each party can only access their own KNX island. At the same time, central components can, however, be jointly used. In this way, a central weather station provides the two individual house parties with automation-relevant data.
 
  1. Create a new project.
  2. Add lines
  3. Add new devices in Plain Mode

Construction of a multi-storey office building

The demands on multi-floor office buildings are as various as the world of work. For such a new building, create a new KNX project. Provide one KNX/IP router and Smart Visu Server per floor and link the desired devices. In the process, you can apply the standard settings of the router. This ensures that the control is carried out via the SV server per floor. For improved diagnosis, reserve a connection for the SV server in the KNX/IP router. 
 
  1. Open a new project.
  2. Add lines
  3. Add new devices in Plain Mode
  4. Use the preferred connection in the application
  5. Establish IP tunnelling for visualisation
     
SV Server: input of IP address, JVP server: via JVP connection manager

Renovation of a family-run guesthouse

Increase the feel-good factor of the guests with automation: For the new construction of a family-run guesthouse, create a new KNX project with Secure Routing. To do so, activate KNX IP Secure. Depending on the project-specific requirements, plan the necessary number of KNX/IP routers. Then link the desired devices. Add the individual factory key (FDSK) per device to the ETS project. In addition, note the commissioning password and the authentication code.
 
  1. Open a new project.
  2. Add lines
  3. Add devices
    Under Topology Activate security, FDSK entry, Change commissioning
    password, leave authentication code at standard value
  4. With an open project, it is not necessary to provide the passwords
  5. With projects that are not open, it is necessary to provide the commissioning password
     

Building of a modern hotel

High standards, individual convenience: for comprehensive hotel automation with Secure IP Tunnelling, create a new KNX project and activate KNX IP Secure. Depending on the requirements, plan the necessary number of KNX/IP routers. Then link the desired devices. Add the individual factory key (FDSK) per device to the ETS project. In addition, note the commissioning password and the authentication code. Afterwards, allocate a password for each IP tunnel connection.
 
  1. Open a new project.
  2. Add lines
  3. Add devices
    Under Topology Activate security, FDSK entry, Change commissioning
    password, leave authentication code at standard value
  4. With an open project, it is not necessary to provide the passwords
  5. With projects that are not open, it is necessary to provide the commissioning password
  6. The individual tunnel addresses must not have a password and make sure the tunnel connection is deactivated


The secure KNX topology using a hotel as an example



The advantages at a glance

  • Compact construction (2 TE) ideal for space-saving installation
     
     
  • Electricity supply purely from the KNX bus – a separate auxiliary supply is unnecessary
  • Up to 8 IP tunnel connections possible

  • Integrated OLED display for presenting the most important information


More information