Installation Guide ECL Portal API
33
Danfoss District Energy VI.HX.I1.02 DEN-SMT/DK
4.0 General
The data that is available via the ECL Portal web API depends on the ECL application key installed in the ECL Comfort 310 in question.
I.e. the data set available is dierent for each ECL application type and can also depend on the various external data collection devices,
such as M-bus meters and congurable inputs with which ECL controllers can be tted.
The ECL Portal retrieves data from the ECL controllers once an hour just after the top of the hour. The integrated ECL Log contains
application-specic signals such as temperatures measured and temperature references, as well as wind speed, pressure or ow,
depending on the application installed. The ECL log contains data recorded at 15-minute intervals. If the customer has set up
congurable inputs or connected M-bus meters, the current values of these will also be retrieved once an hour.
If it is not possible to retrieve data from an ECL controller because of a communication error or for some other reason, an attempt will be
made to retrieve the ECL log when the next collection takes place one hour later. The internal ECL log in the ECL controller contains data
for the last ten days, so if it has not been possible to retrieve the log from an ECL controller for ten days, data will be lost from the ECL
portal and will thus not be available through the web API.
As soon as data is available on the ECL Portal, it will also be available through the ECL Portal web API. It is not possible to retrieve data
through the web API that is not available on the ECL Portal. If, for example, a customer deletes an ECL log or M-bus meter on the ECL
Portal, it will no longer be available through the web API either.
Data is not saved for congurable inputs and M-bus meters in the ECL controller, so historical values will not be read when the logs are
next retrieved if there has been no contact with the ECL Portal.
Guides for individual ECL applications are available at www.ecl.doc.danfoss.com, if it is necessary for a third party to have more specic
knowledge of the data that can be extracted from the ECL controllers.
A description of communication for ECL controllers may be found here:
http://heating.danfoss.com/PCMPDF/VILGV402_ECL_Comfort_210_310_Communication.pdf or by Googling “ecl communication
description” to nd the latest version. The communication description contains, among other things, a general list of parameters that are
logged by some applications.
5.0 Security
As this is an external interface from the ECL Portal server to the outside world, it is particularly important to make sure that it is not
possible to gain access to other parties’ data.
The rst element in securing data is identication, so that you can validate whether the client that is calling the ECL Portal web API is
authorised to view the data being requested. You must therefore always specify the following in requests:
• Servercode.ThisisissuedbyDanfosstoathirdpartyorcustomer,sothattheopeningofthedatainterfaceisanactiveprocess
performed by Danfoss. This involves a setup in connection with the conclusion of a legal contract.
• ECLserialnumber.UsedtoidentifyanECLcontrollerofinterest.TheserialnumbermaybefoundinsidetheECLcontroller’smenuor
at the ECL Portal
• Thirdpartycode.CreatedbythecustomerintheECLPortalandissuedtoathirdparty.
Not only must the third party or customer have stated a server code and know the serial number, but the customer himself must link
third party codes to the ECL controller. This provides the customer with the possibility of controlling which third party people and systems
they wish to allow to extract the data by assigning them various third party codes, which can of course also be revoked individually.
This means that in order to obtain data from a given ECL controller, you must know its serial number, have a server code issued from
Danfoss and have assigned yourself, your system or third party an ECL-specic third party code.
Just as with traditional user name/password combinations, data will only be able to fall into the wrong hands if the combination is
compromised, as in such an eventuality an external party would only be able to use the same codes and perform his own requests.
Security is thus dependent in this scenario on how the customer and the third party protect this information.
Server codes are issued to the customer/third party individually and may not be shared by a number of customers, as under the legal
contract such party may be cancelled when the contract expires or in the event of abuse.
Data communication through the web API requires SSL support. If a client sends requests via HTTP, it will be redirected to HTTPS.