PNNL Study Targets Authentication Vulnerability of Connected Lighting Systems

CEW 13 Controls 400

July 3, 2020
By Craig DiLouie

The U.S. Department of Energy has released the results of a study examining authentication vulnerabilities in connected lighting systems (CLS). Particularly as emerging CLS incorporate distributed intelligence, network interfaces and sensors, they can serve as data-collection platforms that enable a wide range of valuable new capabilities as well as greater energy savings in buildings and cities. However, CLS technology is currently at an early stage of development, and its increased connectivity introduces cybersecurity risks that are new to the lighting industry and must be addressed for successful integration with other systems.

There are numerous existing frameworks and guidelines for evaluating cybersecurity vulnerability, such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework, the NIST 800 series comprising more than 150 resources, the International Electrotechnical Commission (IEC) 62443 series, International Organization for Standardization 27001 and 27002, Unified Facilities Criteria (UFC) 4-010-06, and UL 2900-1. Furthermore, a variety of testing resources are widely available, including the Open Web Application Security Project (OWASP) Testing Guide. While these frameworks, guidelines, and tests may apply to CLS in whole or in part, there is currently no mandatory requirement for cybersecurity testing or certification.

Photo: Conceptual representation of multiple connected lighting systems, showing common system architecture variations and technology implementations:

CEW 13 Multiple Connection Lighting System 400

The lighting industry, including technology developers and specification organizations, is currently evaluating the suitability of existing frameworks and guidelines for CLS. To support these efforts, the Pacific Northwest National Laboratory (PNNL) is conducting a series of studies intended to educate lighting-industry stakeholders on specific cybersecurity practices and characterize their implementation in commercially available CLS with varying system architectures, network-communication technologies, and degrees of maturity.

The first study explores authentication practices and their implementation in multiple CLS. A total of 18 tests were developed by UL and implemented in PNNL’s Connected Lighting Test Bed (CLTB). The tests explore the implementation of basic authentication best practices as well as known technology-specific best practices. As a result, not all tests are applicable to all CLS.

A total of 40 out of 72 potential tests (4 CLS, 18 potential tests each) were applicable for 4 evaluated CLS, and the CLS collectively passed 26 of the 40 tests (65%). While pass/fail ratio is a simple way of reporting test results, it is not really a relevant metric. Cybersecurity vulnerability testing is a risk-analysis practice; the relevance of passing or failing a certain test is best evaluated in concert with an understanding of the risk associated with that vulnerability in a specific implementation. Nevertheless, pass/fail ratios give some indication of the range of performance found in market-available CLS.

Based on the limited results of this study, it appears that the CLS being brought to market have varying levels of authentication vulnerability. It is hoped that these evaluations will support and perhaps accelerate industry discussions on the risks of specific security vulnerabilities, what vulnerabilities should be addressed by lighting-specific best practices in development, and whether any such practices should be included in voluntary lighting standards.

PNNL plans to conduct more authentication testing and to work with UL and other cybersecurity experts to explore authorization vulnerabilities. PNNL will bring these results to the ANSI C137 Lighting Systems ad-hoc working group focusing on cybersecurity vulnerability, for consideration in the creation and development of new standards.

Go HERE for the report

Craig DiLouie, LC, is Education Director for the Lighting Controls Association. Reprinted with permission of the Lighting Controls Association, www.lightingcontrolsassociation.org

Photo by jaydeep_ on Pixabay

Related Articles


Changing Scene

  • Noramco-Announces-Samantha-Boernsen-as-New-Regional-Sales-Manager-Winnipeg

    Noramco Announces Samantha Boernsen as New Regional Sales Manager, Winnipeg

    Please join Noramco in welcoming Samantha Boernsen as Regional Sales Manager, Winnipeg! Samantha brings a wealth of experience in the electrical industry, with a strong focus on lighting, marketing strategy, and customer engagement. She has built her career on connecting technical expertise with real-world application, making her a trusted partner to clients and colleagues alike.… Read More…

  • July 7, 2025 - Light Years Ahead SkyView by BIOS Launches in BC with Mac’s II Agencies

    Light Years Ahead: SkyView by BIOS Launches in BC with Mac’s II Agencies

    Mac’s II Agencies is proud to represent SkyView by BIOS Lighting across British Columbia. As the first agency in BC to bring this innovative brand to market, they are excited to help launch a new chapter for SkyView—a new company rooted in cutting-edge science and committed to wellness through light. This addition to Mac’s II Agencies’ lighting… Read More…


Design

  • What You Need to Consider When Choosing Data Center Lighting

    What You Need to Consider When Choosing Data Center Lighting

    When operating a data center, the lighting syst​em is often not the most concerned part. Actually, lighting system performance directly influences whole electricity consumption and operating costs, especially in a 24-hour non-stop data center. This article will delve into the key factors to be considered when choosing data center lighting. For enterprises that are planning to… Read More…

  • Artika: 5 Advantages of Smart Lighting

    Artika: 5 Advantages of Smart Lighting

    Lighting is arguably one of the most important features of any home. Too bright, and it can be abrasive, increasing your sensitivity to light. Too dim, and it hides the unique characteristics of your home and can have adverse effects on your mood. When you design your home, the type of lighting and fixtures you… Read More…


New Products

  • RENO Lighting: Lucid Series Ambient Bi-Directional Luminaire

    RENO Lighting: Lucid Series Ambient Bi-Directional Luminaire

    The Lucid Series Bi-Directional Luminaire is an ultra-slim, contemporary light designed for performance. It provides seamless, dot-free upward and downward illumination with a 50/50 direct-indirect distribution. Its translucent lens creates an elegant, diffused glow resembling natural daylight that brings warmth to any environment.​ Designed for modern, design- forward interiors, the Lucid Bi- Directional Luminaire is… Read More…

  • Eralux: New OCEANO Outdoor Wall Sconce

    Eralux: New OCEANO Outdoor Wall Sconce

    The OCEANO outdoor sconce features an elegant design, offering up and down lighting. With IP65 weatherproofing, it’s built for durability. Its sleek, modern design and robust construction make it perfect for both aesthetic appeal and long-lasting performance in any outdoor setting. Applications: Commercial Entrances | Outdoor Landscapes | Facades | Residential Exteriors Read More…