IoT Security and Connected LED Lighting Networks: The Good News, The Bad News and the Way Forward

IoT Security

Oct 20, 2019

A little over a decade ago, the introduction of LED lighting seemed to transform commercial lighting overnight. Now we’re seeing it happen again. This time, connectivity and big data are driving the change, creating a profound shift in how new commercial lighting is evaluated, specified and approved.

Suddenly everyone is talking and writing about connected lighting, networked lighting, smart lighting controls and the Internet of Things (IoT). As more companies explore networkable lighting and connected smart controls, a new player will be sitting at the table: the corporate IT department. And they’re going to be asking a lot of serious questions about cybersecurity.

In general, the more extensively a lighting network is connected to other networks, the greater the exposure to cybersecurity threats. Consider Gartner’s observation in its 2019 review of cybersecurity trends: “Companies have made a ‘smart’ version of basically everything you can think of, but many of those products have glaring security holes.” In fact, according to McAfee, 70% of IoT devices have such security flaws.

What’s worse, cybersecurity and IT experts point out, is that instead of “baking in” security measures as an essential ingredient of product development, many IoT device manufacturers are “bolting on” security after the fact. Which is a bit like constructing an office building without plumbing and electricity. Adding it later is expensive and difficult, if not impossible.

Leading us to the bad news: the security measures protecting the networkable products of many lighting vendors and their customers are almost non-existent or already years out of date.

But doesn’t almost every LED lighting vendor use 128-bit AES encryption and meet the National Institute of Standards and Technolog’s (NIST) FIPS 140-2, Level 1 requirements? In a word, yes. But encryption isn’t the only issue in smart lighting security, and unless encryption is consistently applied as part of a larger cybersecurity strategy, it won’t satisfy enterprise-level IT departments because it won’t protect the network from a myriad of other vulnerabilities.

Here’s the good news: Cree Lighting developed their smart lighting control networks from the ground up with an IT-grade cybersecurity strategy that has proactively excelled in rigorous independent security evaluations.

Cree Lighting recognized from the beginning that its SmartCast Technology would ultimately serve as an open and interoperable IoT platform. With that in mind, Cree Lighting set out to create a secure architecture to protect data and access. Our benchmark isn’t the best practices of the lighting industry; it’s those of the IT industry.

To ensure the security of the platform, Cree Lighting engaged independent cybersecurity consultants to intentionally attempt to hack the SmartCast Intelligence Platform. After extensive penetration testing, this global firm subsequently ranked the cybersecurity measures of the SmartCast Intelligence Platform in the top 10% of all technology companies they’ve tested, which includes leading technology companies that you use every day.

So what’s the way forward?

Today, anyone involved in commercial lighting projects needs to be guided by four basic assumptions:

1. Every lighting control network will eventually be connected to other enterprise networks and/or the Internet.

2. Any lighting control network that doesn’t provide enterprise-level cybersecurity may compromise the company and put valuable assets and resources at risk.

3. Not all lighting manufacturers give cybersecurity the same priority.

4. Since every IoT-enabled lighting network will require the blessing of the corporate IT department, you’ll want to choose a lighting vendor with cybersecurity that will earn IT department approval.

Welcome to the new reality of commercial lighting. Given the stakes, it’s worth the time to learn a little more about IoT security issues and their solutions. 

For additional information, download Cree Lighting’s FAQ on IoT security, developed for lighting designers and specifiers, or our new Position Paper for IT professionals outlining key security features of the SmartCast Intelligence Platform.

Source: https://www.creelighting.com/insights/article/iot-security-and-connected-led-lighting-networks

Related Articles


Latest Articles

  • ABB Wins New Product Award at MCEE Show

    ABB Wins New Product Award at MCEE Show

    April 28, 2025 ReliaHome™ Smart Panel won Best New Product Award in the Software, Controls and Related Components category. Iberville® Gangable boxes with low-voltage cables support bracket was recognized as a finalist in the Commercial, Institutional and Industrial Electrical Products category. ABB was honored with a Best New Product Award in the Software, Controls and… Read More…

  • Weidmuller Celebrating a Legacy: 175 Years Globally, 50 Years in Canada

    Weidmuller Celebrating a Legacy: 175 Years Globally, 50 Years in Canada

    April 28, 2025 The year 2025 is truly special for Weidmüller. The company proudly celebrates not just 50 remarkable years in Canada but also its 175th anniversary globally—an extraordinary achievement few companies can claim. This legacy is a testament to the company’s relentless pursuit of innovation and commitment to refining its offerings. But the journey… Read More…

  • Canada Stands Tall at Hannover Messe 2025

    Canada Stands Tall at Hannover Messe 2025

    April 28, 2025 By Owen Hurst At Hannover Messe earlier this month Canada had a strong presence as the host country with a wide variety of companies and programs focusing on the development of advance technology. The presence was accentuated by numerous halls hosting Canada pavilions. Partner Country Canada presented itself impressively at HANNOVER MESSE…. Read More…

  • BC Prompt Payment Legislation Progressing

    BC Prompt Payment Legislation Progressing

    April 28, 2025 Consistent with its mandate of growing the economy, the government wants to ensure that businesses are paid promptly for work performed on (or material provided to) construction projects. British Columbia’s Ministry of Attorney General staff have been tracking the issue of payment delay in the construction industry, including legislative responses in other… Read More…


Changing Scene

  • Schneider Electric Advances in Product Environmental Data Transparency

    Schneider Electric Advances in Product Environmental Data Transparency

    April 28, 2025 Schneider Electric has launched its Environmental Data Program. This initiative, which builds on the legacy Green Premium label, provides customers with unique access to information on the environmental impact of its products, enabling them to make better informed, data-based decisions and meet evolving regulatory requirements with confidence. Schneider Electric has frequently been recognized… Read More…

  • nVent Sustainability Report Highlights Progress and Focus on Electrification

    nVent Sustainability Report Highlights Progress and Focus on Electrification

    April 15, 2025 nVent Electric plc announced the release of its 2024 Sustainability Report. The new report highlights nVent’s achievements in each of its sustainability focus areas: People, Products, Planet and Governance. The report also highlights how nVent solutions support electrification, digitalization and sustainability efforts around the world. “nVent is becoming a more focused electrical… Read More…

  • Ontario Introduces Legistlation to Unlock Trade and Labour Mobility Within Canada

    Ontario Introduces Legistlation to Unlock Trade and Labour Mobility Within Canada

    April 18, 2025 As a next step in its plan to protect Ontario by unleashing the province’s economy, the Ontario government is introducing the Protect Ontario through Free Trade within Canada Act to unlock free trade and labour mobility within Canada. This legislation will, if passed, create new opportunities for job creation and investment attraction, supporting economic… Read More…

  • Ontario, P.E.I. Join Nova Scotia With Legislation to Remove Internal Trade Barriers

    Ontario, P.E.I. Join Nova Scotia With Legislation to Remove Internal Trade Barriers

    April 18, 2025 Prince Edward Island and Ontario have joined the Nova Scotia by introducing reciprocal legislation that will help foster an environment of mutual recognition of goods, services and labour mobility between these provinces. “Leaders across the country are expressing interest in removing trade barriers, and I’m very pleased that P.E.I. and Ontario have… Read More…