Secure key fob

• US 10,244,390 B2
• Filed: 10/16/2015
• Issued: 03/26/2019
• Est. Priority Date: 10/16/2015
• Status: Active Grant

• Current Assignee: Vivint Incorporated (NRG Energy, Inc.)
• Original Assignee: Vivint Incorporated (NRG Energy, Inc.)
• Inventors: Call, Wayne, DeVries, Craig, Warren, Jeremy B., Child, Michael D.
• Primary Examiner(s): Brown, Anthony D
• Application Number:
  US14/885,615
• Publication Number:
  US 20170111787A1
• Time in Patent Office: 1,257 Days
• Field of Search: 380270
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/0816 Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

Systems, apparatuses, and methods relating to operating a security system are described. In one embodiment a method may include receiving at a receiving unit a protected signal sent from a portable transmitter, the receiving unit in communication with a security system panel, assessing at least one characteristic of the protected signal, modifying at least one characteristic of the protected signal based at least in part on the assessing, and comparing the protected signal to a stored signal after the modifying.

Claims

1. A computer-implemented method for operating a security system, comprising:

receiving at a receiving unit a protected signal sent from a portable transmitter, the receiving unit in communication with a security system panel, wherein the protected signal comprises an authentication signal having a secret;

assessing at least one characteristic of the protected signal;

modifying at least one characteristic of the protected signal based at least in part on the assessing, wherein modifying the protected signal comprises authenticating the authentication signal, and wherein the authentication signal comprises a hash;

comparing, at the receiving unit, the protected signal to a stored signal after the modifying, wherein comparing the protected signal to the stored signal comprises determining whether at least one packet of the protected signal is valid; and

transmitting, to the portable transmitter, an indication of whether the protected signal is valid based at least in part on comparing the protected signal to the stored signal, wherein the indication comprises a signal to enter a security mode based at least in part on determining that the at least one packet of the protected signal is invalid.

2. The method of claim 1, wherein the protected signal comprises an encrypted signal having a key.

3. The method of claim 2, wherein modifying the protected signal comprises decrypting the encrypted signal.

6. The method of claim 1, wherein the portable transmitter comprises a key fob.

7. The method of claim 1, further comprising:

changing one or more characteristics of the protected signal based at least in part on a first input; and

changing one or more characteristics of the stored signal based at least in part on the first input.

8. The method of claim 7, wherein the first input comprises a user input.

9. The method of claim 8, wherein the first input comprises a number of times the user input has been received.

10. The method of claim 7, wherein the first input comprises a number of times the first input has been changed.

11. The method of claim 7, wherein the one or more characteristics of the protected signal comprise a key.

12. The method of claim 7, wherein at least one of the one or more characteristics of the protected signal and the one or more characteristics of the stored signal can be changed randomly.

13. The method of claim 7, wherein at least one of the one or more characteristics of the protected signal and the one or more characteristics of the stored signal can be changed pseudo-randomly.

14. The method of claim 7, further comprising changing at least one of the protected signal and the stored signal based at least in part on a number of times the receiving unit has received one or more protected signals.

15. The method of claim 1, further comprising:

electronically linking the receiving unit to the portable transmitter, wherein the linking is based at least in part on a proximity of the receiving unit and the portable transmitter.

4. A computer-implemented method for operating a security system, comprising:

receiving at a receiving unit a protected signal sent from a portable transmitter, the receiving unit in communication with a security system panel, wherein the protected signal comprises an authentication signal having a secret, wherein the protected signal further comprises an encrypted signal, and wherein the encrypted signal comprises at least a portion of the authentication signal;

assessing at least one characteristic of the protected signal;

modifying at least one characteristic of the protected signal based at least in part on the assessing;

comparing, at the receiving unit, the protected signal to a stored signal after the modifying, wherein comparing the protected signal to the stored signal comprises determining whether at least one packet of the protected signal is valid; and

transmitting, to the portable transmitter, an indication of whether the protected signal is valid based at least in part on comparing the protected signal to the stored signal, wherein the indication comprises a signal to enter a security mode based at least in part on determining that the at least one packet of the protected signal is invalid.

5. The method of claim 4, wherein modifying the protected signal further comprises:

decrypting the encrypted signal received at the receiving unit; and

authenticating the authentication signal received at the receiving unit.

16. An apparatus for operating a security system, comprising:

a receiving unit having a receiver in communication with a security system panel;

at least one processor;

memory in electronic communication with the at least one processor; and

instructions stored in the memory, the instructions being executable by the at least one processor to;

receive at the receiving unit a protected signal sent from a portable transmitter, wherein the protected signal comprises an authentication signal having a secret;

assess at least one characteristic of the protected signal;

modify at least one characteristic of the protected signal based at least in part on the assessing, wherein the modification of the protected signal comprises authenticating the authentication signal, and wherein the authentication signal comprises a hash;

compare, at the receiving unit, the protected signal to a stored signal after the modifying, wherein comparing the protected signal to the stored signal comprises determining whether at least one packet of the protected signal is valid; and

transmit, to the portable transmitter, an indication of whether the protected signal is valid based at least in part on comparing the protected signal to the stored signal, wherein the indication comprises a signal to enter a security mode based at least in part on determining that the at least one packet of the protected signal is invalid.

19. The apparatus for operating a security system of claim 16, wherein the protected signal comprises an encrypted signal having a key.

20. The apparatus for operating a security system of claim 19, wherein modifying the protected signal comprises decrypting the encrypted signal.

21. The apparatus for operating a security system of claim 16, wherein the portable transmitter comprises a key fob.

22. The apparatus for operating a security system of claim 16, the instructions being executable by the at least one processor to:

change one or more characteristics of the protected signal based at least in part on a first input;

or

change one or more characteristics of the stored signal based at least in part on the first input;

or

both.

23. The apparatus for operating a security system of claim 22, wherein the first input comprises a user input, a number of times the user input has been received, a number of times the first input has been changed, or a combination thereof.

17. A non-transitory computer-readable storage medium storing computer executable instructions that when executed by a processor cause the processor to:

receive at a receiving unit a protected signal sent from a portable transmitter, wherein the protected signal comprises an authentication signal having a secret;

assess at least one characteristic of the protected signal;

modify at least one characteristic of the protected signal based at least in part on the assessing, wherein the modification of the protected signal comprises authenticating the authentication signal, and wherein the authentication signal comprises a hash;

compare, at the receiving unit, the protected signal to a stored signal after the modifying, wherein comparing the protected signal to the stored signal comprises determining whether at least one packet of the protected signal is valid; and

transmit, to the portable transmitter, an indication of whether the protected signal is valid based at least in part on comparing the protected signal to the stored signal, wherein the indication comprises a signal to enter a security mode based at least in part on determining that the at least one packet of the protected signal is invalid.

18. The non-transitory computer-readable storage medium of claim 17, the computer executable instructions further comprising changing one or more characteristics of the protected signal based at least in part on a number of events, wherein the protected signal comprises an encrypted signal having a key.

24. The non-transitory computer-readable storage medium of claim 18, wherein at least one of the number of events comprises a user input, or a number of times the user input has been received, or both.

25. The non-transitory computer-readable storage medium of claim 18, wherein the one or more characteristics of the protected signal comprise a key.