Security functions
Attention
Chapter not yet documented.
Power outage alert
Les produits alimentés disposent d’une détection de la coupure de leur alimentation.
Une coupure de l’alimentation doit déclencher une notification d’alerte (publication d’un message de défaut Mesh), remonté à l’App et à l’IoTHub (si disponible).
📋 Requirement: Grâce aux capacités du PCB, le micro-contrôleur reste suffisamment alimenté pour détecter le défaut et publier son message Mesh d’alerte, avant de s’éteindre.
Overheat alert
Lorsque la température lue sur le SoC Nordic dépasse le seuil de T_overheat (ce niveau est contenu dans une feature property et paramétrable via l’app), alors le produit doit, par sécurité:
Couper l’alimentation de la charge (ie, passer la feature globalement en OFF)
Envoyer une alerte à l’utilisateur “Echauffement”. Cet échauffement présentant un risque d’incendie, on notifiera l’utilisateur par tous les moyens possible: push+mail+SMS
L’alimentation des sorties reste coupée jusqu’à ce que l’utilisateur aille sur la page du device concerné sur l’application mobile. Il lui sera alors possible d’appuyer sur le bouton « Je confirme qu’une intervention d’un électricien professionnel a eu lieu pour vérifier et le cas échéant réparer le câblage et que l’installation a été jugé conforme ».
📋 Requirement: the overheat threshold is 50 °C on every reference built on PCB1A and PCB1C.
📋 Requirement: the overheat threshold is 60 °C on the REF11 and on references built on PCB1D and PCB4.
📋 Requirement: the overheat threshold is 70 °C on every reference built on PCB3A and PCB3B.
📋 Requirement: the overheat threshold is 85 °C on every reference built on PCB2, except the REF11.
Output states on cut-off
The fallback state depends on the control feature carried by the output.
📋 Requirement: on the cut-off triggered by the overheat alert, an onoff-controller output goes to OFF.
📋 Requirement: on the cut-off triggered by the overheat alert, a level-controller output goes to 0 %.
📋 Requirement: on the cut-off triggered by the overheat alert, a shutter-controller output goes to STOP if it is moving.
📋 Requirement: on the cut-off triggered by the overheat alert, a ventilation-controller output goes to OFF.
📋 Requirement: on the cut-off triggered by the overheat alert, a chime-controller output goes to STOP if it is ringing.
📋 Requirement: on the cut-off triggered by the overheat alert, a pilot-wire-controller output goes to OFF.
Zero-load detection
Zero-load detection reports that an output switched on draws no current: the load is missing, unplugged or out of order — a blown luminaire, an unplugged appliance, a severed cable.
It is evaluated while the output is on, and relies on the instantaneous consumption measured by the product.
Detection belongs to the control feature, and is enabled per output. It is available on On/Off (onoff-controller) and dimming (level-controller) control features.
The wiring template chosen at installation time determines which feature is assigned to an output, hence whether detection is available on that output. A given product therefore offers it on some of its outputs, depending on the chosen configuration.
Detection is enabled through the output-zero-load-control feature property, independently for each output. It is disabled by default; products shipping with the detection set this property to “enabled” in their factory configuration.
The product then publishes a Mesh fault message, reported to the Mobile App and to the IoTHub when available, and the user receives the device-no-load push notification.
📋 Requirement: Detection is available on the onoff-controller and level-controller control features.
📋 Requirement: Detection is evaluated while the output is switched on.
📋 Requirement: The product measures its total consumption through a single energy meter. Detection therefore covers all active outputs together, and triggers when their combined consumption falls below the threshold.
📋 Requirement: The fault is cleared as soon as one of the trigger conditions stops holding: consumption rises back above the threshold, or no output remains active. Clearing is automatic.
📋 Requirement: The setting is offered to the user for outputs whose control feature carries the activation property.