ZWAVE 防盜命令類Anti-theft Command Class

Anti-theft Command Class, version 1 [OBSOLETED]

 

The Anti-theftCommand Class is used to disable a subset of supported/controlled commandclasses in a device if the device is being excluded and re-included into aZ-Wave network again. This command class is typically used when installing aZ-Wave device in a public location such as a hotel room or conference center.The command class allows the user to lock the device to the actual Z-Wavenetwork and to render it useless if it is removed from the local networkwithout being unlocked. Another application would be to protect serviceprovider owned products from leaving the service providers network before theyare paid for.

如果設備被刪除並重新添加到某個Z-Wave網絡中時，防盜命令類用於禁用設備中受控的一部分命令類，以便讓設備被盜後無法正常工作。 此命令類通常用於在公共場所（如酒店房間或會議中心）安裝的Z-Wave設備。 命令類允許用戶將設備鎖定到自己實際工作的Z-Wave網絡，如果一旦它從本地網絡中移除而沒有被解鎖，則使它無法正常工作（類似運營商綁定的手機）。 另一個應用是保護服務提供商擁有的產品在支付之前離開服務提供商網絡。

Version 2 limitsthe Magic Code and Anti-theft Hint maximum bytes to 10. This makes it possibleto embed Anti-theft Command Class Version 2 in one Security Command Class andthereby avoid splitting it.

 

Anti-theft Command Class, version 2

The Anti-theftCommand Class MUST NOT be supported unless the Device Class or Device Typeimplemented by the device explicitly allows for support of the Anti-theftCommand Class. 不是每個設備都可以隨便支持Anti-theft Command Class的。只有某個設備類型在ZWAVE協議中明確表示支持Anti-theft Command Class時，這類設備才能支持Anti-theft Command Class。例如來《sds10242-28_z-wave_device_class_specification》中規定door lock可以支持Anti-theft Command Class。

The Anti-theftCommand Class is intended for devices operating in public locations such ashotel rooms or a conference center. The purpose of the Anti-theft Command Classis to render a device useless if it is removed from its actual network withoutbeing unlocked by the owner or a service provider.

通常安裝在公共場合（例如酒店，會議中心）的設備會支持Anti-theft Command Class。該命令類的設計目的是：當設備在未經主人或者運營商授權的情況下從它工作的ZWAVE網絡中被刪除時，它將無法正常工作。

The Anti-theftCommand Class is used to disable all command classes related to the actualapplication functionality of a device if is it excluded and later included in anothernetwork. It does not matter if the device implements a single resourceaddressed via the Root Device or a collection of resources addressed viaindividual Multi Channel End Points Enabling anti-theft protection in a deviceMUST NOT change any operation with respect to supported/controlled commandclasses as long as the device stays in the actual network.

If a locked deviceis excluded, it MUST enter the protected state. When in the protected state,the node information frame (NIF) MUST NOT advertise support of the protectedcommand classes. The NIF MUST however continue advertising support of theAnti-theft Command Class and all other non-application specific commandclasses; just as when the device operates in its home network. The device MUSTNOT respond to application commands while in the protected state. A device inprotected state MUST NOT leave its protected state if it is re-included intoits home network. Another Anti-Theft Set command MUST be used to either disablelocking or to clear the protected state.

如果某個處於鎖定網絡狀態的ZWAVE設備被刪除時，它必須進入到保護狀態。處於保護狀態的設備，在節點信息幀中不會通告它支持哪些被保護的命令類，以使得小偷無法正常使用該設備的功能。不過此時，設備可以通報它支持Anti-theft Command Class和其他和實際功能無關的specific command classes；處於保護狀態的設備不能迴應application commands。如果設備不被重新添加回它原來屬於的那個網絡，則設備必須一直處於保護狀態。

The followingnon-device specific command classes must not be protected by the anti-theftfunctionality (i.e. will always be available in the device regardless ofprotection state): 下面這些非應用相關的命令類，由於和某個設備的具體功能無法，所以不能被防盜功能保護

 

l  Manufacturer Specific Command Class

l  Version Command Class

l  Anti-theft Command Class

l  Security Command Class (optional) Securityencapsulated command classes are allowed to be protected. In that case theymust be removed from the Security Commands Supported Report Command whenin the protected state in a foreign network.

The protection statemay be updated by sending the set command with the correct magic code to thedevice at any time and in any network. When the protection state is updated thedevice must return to normal operation, regardless of whether the update is todisable or re-enable protection. However, it is not possible to updateprotection state when device is excluded because it must be able to receive acommand.

不管在任何時刻和任何網絡中，只要用戶通過Anti-Theft Set command給出了正確的magic code，則設備可以從被保護狀態恢復到正常工作狀態。當然如果設備被刪除後，由於它無法接收命令，所以此時它也無法重新恢復到正常工作狀態；言外之意就是，需要重新添加這個設備，然後在發送Anti-Theft Set command；

The Anti-theftprotection state must be preserved in the following situations:

l  Exclusion of a network

l  Reset to factory default  

l  OTA update of firmware

 

If secure device,supports Anti-theft Command Class, Security Command Class needs to be supportedregardless of anti-theft protection state. A security enabled device MUST beable to join any secure Z-Wave network regardless of its anti-theft protectionstate.

It is RECOMMENDEDfor a device that supports anti-theft protection to have physical mark thatindicates that this device is capable of being locked. It is further RECOMMENDEDthat the device is capable of signaling via a LED or other means if the devicedevice refuses inclusion in a network because the device is locked to anothernetwork. Finally, the user guide and installation manual MUST advertise supportof anti-theft protection.

 

Anti-theft SetCommand

The Anti-theft SetCommand is used to enable/disable anti-theft protection in a device alreadyincluded into a Z-Wave Network by sending a magic code to device in question.The same magic code MUST be used to disable anti-theft protection again. A newmagic code may be used the next time to enable anti-theft protection in thedevice, but only if protection is disabled at the time. A new device MUST haveanti-theft protection disabled. Enabling anti-theft protection in analready-enabled device restores it to normal operation if it is in reducedfunctionality mode, but otherwise has no effect.

 

7	6	5	4	3	2	1	0
Command Class = COMMAND_CLASS_ANTITHEFT
Command = ANTITHEFT_SET
Enable				Number of Magic Code bytes
Magic Code 1
…
Magic Code N
Manufacturer ID MSB
Manufacturer ID LSB
Anti-theft Hint Number Bytes
Anti-theft Hint Byte 1
…
Anti-theft Hint Byte N

Enable (1 bit)

The value MAY be 0(Attempt to disable anti-theft protection in device) or 1 (Attempt to enable orre-enable anti-theft protection in device). It is not necessary to firstdisable an exclude device having protection enable; it can be re-enableddirectly in a new network by using correct magic code again.

Number of MagicCode bytes (7 bits)

Indicates the Numberof Magic Code fields N used in bytes. Maximum number of Magic Code fields MUSTNOT exceed 10 bytes.

Magic Code (Nbytes)

The Magic Codefields hold the code to enable/disable the Z-Wave device in question.

Manufacturer ID(2 bytes)

The Manufacturer IDof the company’s product having a central role in the application requiringanti-theft protection enabled. Device should report 0xFFFF if anti-theftprotection is disabled.

Manufactureridentifiers can be found in [15].

Number ofAnti-theft Hint bytes (8 bits)

Indicates the Numberof Anti-theft Hint fields N used in bytes. If length is 0 no Hint provided.Maximum number of Anti-theft Hint fields MUST NOT exceed 10 bytes.

Anti-theft HintByte (N bytes)

Anti-theft HintBytes that may be used as an identifier or key value for retrieving the MagicCode. The exact format and meaning of these Bytes is specific to the product orservice that enabled anti-theft protection on the device, as identified by theManufacturer ID above. If it is necessary to render the Hint Bytes for display,each byte should be interpreted as an unsigned integer value and represented inhexadecimal.

 

 

Examples

Following examplesare for reference only.

4.8.4.1 Exampleof a non-secure Thermostat

Below is shown anexample of the Node Information Frame (NIF) content for a non-securethermostat. The first NIF shows a device having anti-theft protection disabled.The device may never been included into a network or reside in a network orexcluded from a network:

 

Disabled anti-theft protection

Manufacturer Specific Command Class

Version Command Class

Anti-theft Command Class

Thermostat Operating State Command Class

Thermostat Mode Command Class

Association Command Class

Battery Command Class

處於正常工作的設備上報的NIF中包括它實際功能的一些命令類。

 

 

The second NIFshows a device having anti-theft protection enabled. The device may be excludedfrom network in which it was originally anti-theft protection enabled orre-included into a network. This also applies in case device is re-includedinto the network, which device originally was anti-theft protection enabled:

Enabled anti-theft protection

Manufacturer Specific Command Class

Version Command Class

Anti-theft Command Class

處於保護狀態的設備，它通告的NIF中不再包含它支持的實際功能；所以此時小偷即便是重新添加了該設備也無法正常使用它。