Secure control of network appliances uses a central hub connected to a plurality of network appliances or multiple hubs in a short-range wireless mesh network. The central hub controls communication with the appliances and also includes a cellular link for communication with a cellular network. Only the central hub can communicate with the Internet via the cellular link. User equipment (UE) contains an application program that works in conjunction with the central hub to control the appliances. Commands generated by the UE are sent either directly to the central hub or via the mesh network. Upon receipt of an authenticated command, the central hub propagates commands via the short-range wireless mesh network to the intended network appliance either directly or via the mesh network.