The Z-Wave Alliance has announced the release of the 2024A Z-Wave Specification Package as well as publishing a new Z-Wave Reference Application Design (ZRAD).
The new 2024A Z-Wave Specification Package includes several documents that have undergone an Intellectual Property Rights (IPR) review as well as clarifications and fixes to the User Credential Command Class (CC) and the User Credential Control Specification, plus minor clarifications in the Association v4 and MAC v5 Command Classes.
The Z-Wave User Credential Command Class (CC) is a specification within the Z-Wave protocol that defines how user credentials, such as passwords or PIN codes are managed and communicated between devices in a Z-Wave network.
Unprecedented in the smart lock category and exclusive to Z-Wave, this Command Class update provides a standardised way for smart locks to handle user authentication in access control, ensuring secure and reliable operation within a Z-Wave smart home network.
A key aspect of the update is credential management, allowing devices such as smart locks to create, modify and delete user credentials. It also includes defining the type of credential, its validity period and any associated permissions.
Security is also an important part of the update. Crucial for maintaining the integrity and confidentiality of the smart home environment, the Command Class ensures that user credentials are transmitted and stored securely within the network.
The update has also improved interoperability, allowing different Z-Wave devices to work together seamlessly to manage user access by following the specifications of the User Credential Command Class. For example, a smart lock from one manufacturer can understand and use the credentials provided by a smart home controller from another manufacturer.
User control has updated to allow users to control who can access their Z-Wave network and devices. For example, homeowners can add or remove users and set different access levels for family members, guests, or service personnel.
Another key aspect includes automation integration. The Command Class can be used in conjunction with other Z-Wave Command Classes to create sophisticated automation scenarios. For example, unlocking a door could trigger a series of events, such as turning on lights, adjusting the thermostat, or disarming a security system.
The Z-Wave User Credential Control Specification outlines the standards and protocols for managing user credentials within a Z-Wave network. It defines how devices should handle, store, and communicate user credentials such as PIN codes, passwords, or biometric data to ensure secure access control and authentication.
Key components include: credential types, which defines the different types of user credential that can be used, such as numeric PIN codes, alphanumeric passwords, and biometric data; credential management, which specifies how to create, update and delete user credentials, including procedures for adding new users, changing existing credentials, and removing users from the system; access control to establish how user credentials control access to devices and services within the Z-Wave network, involving setting permissions and access levels for different users; and security protocols, which outlines the security measures required to protect user credentials, including encryption standards for transmitting credentials, secure storage practices, and methods for verifying the authenticity of credentials.
Other key components comprise interoperability. This standardisation ensures that different Z-Wave devices can work together seamlessly when managing user credential. It allows devices from various manufacturers to understand and use credentials consistently. Event logging describes how to log events related to credential use, such as successful and failed authentication attempts. This is important for auditing and monitoring the security network. User interface provides guidelines for user interfaces that manage credentials, ensuring they are user-friendly and secure. The final important component is error handling which defines how devices should handle errors related to credential management, such as incorrect PIN entries or expired passwords.
By adhering to the Z-Wave User Credential Command Class and User Credential Control Specification, Z-Wave devices can offer robust, secure, and interoperable user authentication and access control, enhancing the overall security and user experience of the smart home network.
Finally, the Z-Wave Alliance has also announced the public release of the ZRAD. Created by Z-Wave wireless IoT expert, Eric Ryherd, ZRAD is an open-source reference design of a best-in-class RF range device.
ZRAD aims to accelerate time-to-market for Z-Wave products by providing a simple-to-follow application design example complete with detailed step-by-step instructions for implementing Z-Wave technology and the latest available features, such as Z-Wave Long Range (ZWLR).
A game-changer for the Z-Wave community, ZRAD dramatically lowers the barrier to entry for development and provides a clear path from concept to product. It offers the tools required to leverage the full power of Z-Wave technology and ZWLR.
It is a publicly available source of data, including detailed schematics and reference designs to help developers create Z-Wave products with enhanced range capabilities. Free to access, it offers a streamlined alternative to complex, all-encompassing developer kits, focusing on simplicity and practicality for the developer.
The ZRAD design features a USB controller with best-in-class RF range. It achieved over two miles of successful transmission in line-of-sight testing and yielded exceptional performance in noisy urban environments with over one mile of successful transmission. The design can be implemented as both a controller connected to a computer or as an end device with battery power, enabling the development of versatile applications.
The 2024A Z-Wave Specification Package is available to all Z-Wave Members through the Z-Wave Causeway with a certification update expected to be completed by August 2024. The 2023B Z-Wave Specification Package remains in force and available.
ZRAD is now publicly available on GitHub and open to anyone interested in developing Z-Wave products.