ZWAVE 防盗命令类Anti-theft Command Class

Anti-theft Command Class, version 1 [OBSOLETED]

 

The Anti-theftCommand Class is used to disable a subset of supported/controlled commandclasses in a device if the device is being excluded and re-included into aZ-Wave network again. This command class is typically used when installing aZ-Wave device in a public location such as a hotel room or conference center.The command class allows the user to lock the device to the actual Z-Wavenetwork and to render it useless if it is removed from the local networkwithout being unlocked. Another application would be to protect serviceprovider owned products from leaving the service providers network before theyare paid for.

如果设备被删除并重新添加到某个Z-Wave网络中时，防盗命令类用于禁用设备中受控的一部分命令类，以便让设备被盗后无法正常工作。 此命令类通常用于在公共场所（如酒店房间或会议中心）安装的Z-Wave设备。 命令类允许用户将设备锁定到自己实际工作的Z-Wave网络，如果一旦它从本地网络中移除而没有被解锁，则使它无法正常工作（类似运营商绑定的手机）。 另一个应用是保护服务提供商拥有的产品在支付之前离开服务提供商网络。

Version 2 limitsthe Magic Code and Anti-theft Hint maximum bytes to 10. This makes it possibleto embed Anti-theft Command Class Version 2 in one Security Command Class andthereby avoid splitting it.

 

Anti-theft Command Class, version 2

The Anti-theftCommand Class MUST NOT be supported unless the Device Class or Device Typeimplemented by the device explicitly allows for support of the Anti-theftCommand Class. 不是每个设备都可以随便支持Anti-theft Command Class的。只有某个设备类型在ZWAVE协议中明确表示支持Anti-theft Command Class时，这类设备才能支持Anti-theft Command Class。例如来《sds10242-28_z-wave_device_class_specification》中规定door lock可以支持Anti-theft Command Class。

The Anti-theftCommand Class is intended for devices operating in public locations such ashotel rooms or a conference center. The purpose of the Anti-theft Command Classis to render a device useless if it is removed from its actual network withoutbeing unlocked by the owner or a service provider.

通常安装在公共场合（例如酒店，会议中心）的设备会支持Anti-theft Command Class。该命令类的设计目的是：当设备在未经主人或者运营商授权的情况下从它工作的ZWAVE网络中被删除时，它将无法正常工作。

The Anti-theftCommand Class is used to disable all command classes related to the actualapplication functionality of a device if is it excluded and later included in anothernetwork. It does not matter if the device implements a single resourceaddressed via the Root Device or a collection of resources addressed viaindividual Multi Channel End Points Enabling anti-theft protection in a deviceMUST NOT change any operation with respect to supported/controlled commandclasses as long as the device stays in the actual network.

If a locked deviceis excluded, it MUST enter the protected state. When in the protected state,the node information frame (NIF) MUST NOT advertise support of the protectedcommand classes. The NIF MUST however continue advertising support of theAnti-theft Command Class and all other non-application specific commandclasses; just as when the device operates in its home network. The device MUSTNOT respond to application commands while in the protected state. A device inprotected state MUST NOT leave its protected state if it is re-included intoits home network. Another Anti-Theft Set command MUST be used to either disablelocking or to clear the protected state.

如果某个处于锁定网络状态的ZWAVE设备被删除时，它必须进入到保护状态。处于保护状态的设备，在节点信息帧中不会通告它支持哪些被保护的命令类，以使得小偷无法正常使用该设备的功能。不过此时，设备可以通报它支持Anti-theft Command Class和其他和实际功能无关的specific command classes；处于保护状态的设备不能回应application commands。如果设备不被重新添加回它原来属于的那个网络，则设备必须一直处于保护状态。

The followingnon-device specific command classes must not be protected by the anti-theftfunctionality (i.e. will always be available in the device regardless ofprotection state): 下面这些非应用相关的命令类，由于和某个设备的具体功能无法，所以不能被防盗功能保护

 

l  Manufacturer Specific Command Class

l  Version Command Class

l  Anti-theft Command Class

l  Security Command Class (optional) Securityencapsulated command classes are allowed to be protected. In that case theymust be removed from the Security Commands Supported Report Command whenin the protected state in a foreign network.

The protection statemay be updated by sending the set command with the correct magic code to thedevice at any time and in any network. When the protection state is updated thedevice must return to normal operation, regardless of whether the update is todisable or re-enable protection. However, it is not possible to updateprotection state when device is excluded because it must be able to receive acommand.

不管在任何时刻和任何网络中，只要用户通过Anti-Theft Set command给出了正确的magic code，则设备可以从被保护状态恢复到正常工作状态。当然如果设备被删除后，由于它无法接收命令，所以此时它也无法重新恢复到正常工作状态；言外之意就是，需要重新添加这个设备，然后在发送Anti-Theft Set command；

The Anti-theftprotection state must be preserved in the following situations:

l  Exclusion of a network

l  Reset to factory default  

l  OTA update of firmware

 

If secure device,supports Anti-theft Command Class, Security Command Class needs to be supportedregardless of anti-theft protection state. A security enabled device MUST beable to join any secure Z-Wave network regardless of its anti-theft protectionstate.

It is RECOMMENDEDfor a device that supports anti-theft protection to have physical mark thatindicates that this device is capable of being locked. It is further RECOMMENDEDthat the device is capable of signaling via a LED or other means if the devicedevice refuses inclusion in a network because the device is locked to anothernetwork. Finally, the user guide and installation manual MUST advertise supportof anti-theft protection.

 

Anti-theft SetCommand

The Anti-theft SetCommand is used to enable/disable anti-theft protection in a device alreadyincluded into a Z-Wave Network by sending a magic code to device in question.The same magic code MUST be used to disable anti-theft protection again. A newmagic code may be used the next time to enable anti-theft protection in thedevice, but only if protection is disabled at the time. A new device MUST haveanti-theft protection disabled. Enabling anti-theft protection in analready-enabled device restores it to normal operation if it is in reducedfunctionality mode, but otherwise has no effect.

 

7	6	5	4	3	2	1	0
Command Class = COMMAND_CLASS_ANTITHEFT
Command = ANTITHEFT_SET
Enable				Number of Magic Code bytes
Magic Code 1
…
Magic Code N
Manufacturer ID MSB
Manufacturer ID LSB
Anti-theft Hint Number Bytes
Anti-theft Hint Byte 1
…
Anti-theft Hint Byte N

Enable (1 bit)

The value MAY be 0(Attempt to disable anti-theft protection in device) or 1 (Attempt to enable orre-enable anti-theft protection in device). It is not necessary to firstdisable an exclude device having protection enable; it can be re-enableddirectly in a new network by using correct magic code again.

Number of MagicCode bytes (7 bits)

Indicates the Numberof Magic Code fields N used in bytes. Maximum number of Magic Code fields MUSTNOT exceed 10 bytes.

Magic Code (Nbytes)

The Magic Codefields hold the code to enable/disable the Z-Wave device in question.

Manufacturer ID(2 bytes)

The Manufacturer IDof the company’s product having a central role in the application requiringanti-theft protection enabled. Device should report 0xFFFF if anti-theftprotection is disabled.

Manufactureridentifiers can be found in [15].

Number ofAnti-theft Hint bytes (8 bits)

Indicates the Numberof Anti-theft Hint fields N used in bytes. If length is 0 no Hint provided.Maximum number of Anti-theft Hint fields MUST NOT exceed 10 bytes.

Anti-theft HintByte (N bytes)

Anti-theft HintBytes that may be used as an identifier or key value for retrieving the MagicCode. The exact format and meaning of these Bytes is specific to the product orservice that enabled anti-theft protection on the device, as identified by theManufacturer ID above. If it is necessary to render the Hint Bytes for display,each byte should be interpreted as an unsigned integer value and represented inhexadecimal.

 

 

Examples

Following examplesare for reference only.

4.8.4.1 Exampleof a non-secure Thermostat

Below is shown anexample of the Node Information Frame (NIF) content for a non-securethermostat. The first NIF shows a device having anti-theft protection disabled.The device may never been included into a network or reside in a network orexcluded from a network:

 

Disabled anti-theft protection

Manufacturer Specific Command Class

Version Command Class

Anti-theft Command Class

Thermostat Operating State Command Class

Thermostat Mode Command Class

Association Command Class

Battery Command Class

处于正常工作的设备上报的NIF中包括它实际功能的一些命令类。

 

 

The second NIFshows a device having anti-theft protection enabled. The device may be excludedfrom network in which it was originally anti-theft protection enabled orre-included into a network. This also applies in case device is re-includedinto the network, which device originally was anti-theft protection enabled:

Enabled anti-theft protection

Manufacturer Specific Command Class

Version Command Class

Anti-theft Command Class

处于保护状态的设备，它通告的NIF中不再包含它支持的实际功能；所以此时小偷即便是重新添加了该设备也无法正常使用它。