Application scenarios
Order No. 2089 00
Page 13
3.5. Access via other TCP protocols
Using the Gira S1, it is possible to use nearly all TCP-based protocols securely over the Internet.
The Remote Desktop Protocol (RDP), which Microsoft has defined for remote access to Windows com
-
puters, is widely used, among others. Together with the Gira S1 Windows client, you can easily con
-
figure access. For more information, see chapter 10.3.3 “Using other TCP protocols via remote
access”.
3.6. User rights and user groups
Irrespective of the type of access (e.g. websites, KNX, HomeServer, remote desktop connection),
access rights for the predefined user groups “residents” and “installer” can be configured for each
relationship between the Gira S1 and portal user and controlled dynamically using KNX communica
-
tion objects.
A typical scenario after handing over the keys could look like this:
• With the Gira S1, one or more portal users of the electrical trade company/system integrator are
linked in the role of the “installer” for maintenance purposes.
• With the Gira S1, one or more portal users are linked in the role of “resident”, typically all family
members, for visualisation on a smartphone and website access.
• The Gira S1 is configured using the parameters in the ETS in such a way that the users with the
“residents” user group always have access; in addition, the users in the “installer” user group have
access by default.
• If the installer wants to access the system for a maintenance appointment or due to a call from the
home owner, he/she contacts the home owner. The home owner then grants the installer access by
selecting an option in his/her visualisation or using the corresponding communication object. Auto
-
matic deactivation of access after a certain period of time is also easy to arrange using logic or a
timer.
• For security-sensitive residents, it is also possible to deactivate remote access completely using a
button or visualisation. In this case, the Gira S1 no longer reports to the portal, and remote access
is
impossible.
• The Gira S1 indicates that a connection has been established via remote access using KNX commu
-
nication objects, thereby making suitable processing in a visualisation/logic (e.g. e-mail when some
-
one
connects) easily possible.
In addition, software access, such as visualisations, can be controlled using activation codes. Each
user can create any number of codes on each Gira S1 to which he/she has access, e.g. for visualisation
(see chapter 9.7 “Access to applications”).
