Anti-takeover systems and methods for network attached peripherals

• US 10,348,732 B2
• Filed: 03/23/2018
• Issued: 07/09/2019
• Est. Priority Date: 01/28/2014
• Status: Active Grant

• Current Assignee: Vivint Incorporated (NRG Energy, Inc.)
• Original Assignee: Vivint Incorporated (NRG Energy, Inc.)
• Inventors: Warren, Jeremy B.
• Primary Examiner(s): Chang, Kenneth W
• Application Number:
  US15/933,887
• Publication Number:
  US 20180288054A1
• Time in Patent Office: 473 Days
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

Methods, systems, and devices are described for the prevention of network peripheral takeover activity. Peripheral devices may implement an anti-takeover mechanism limiting the number of available device command classes when certain handshake and verification requirements are not met. Anti-takeover peripheral devices with protection enabled may be relocated within a controller network, or in certain cases, from one controller network to another controller network when certain conditions are met. That same device may be hobbled when removed from a controller network and may remain hobbled when connected to another network that fails to meet certain conditions. Unprotection and unhobbling of a device may occur through an algorithmic mechanism using values stored on the peripheral device and the controller device for one or more of anti-takeover code generation, anti-takeover code comparison, network identification value comparison, and manufacturer identification value comparison.

Claims

1. An automated anti-takeover method, comprising:

establishing a data session between a peripheral device and a network;

receiving, at the peripheral device, a hint package and an anti-takeover code derived from a function seeded with a shared secret value, the hint package being received based at least in part on detection of a network inclusion event associated with the peripheral device;

storing, at the peripheral device, the hint package and the anti-takeover code;

determining whether the anti-takeover code matches a previously stored anti-takeover code; and

unhobbling the peripheral device based at least in part on determining whether the anti-takeover code matches the previously stored anti-takeover code.

2. The method of claim 1, further comprising:

conducting a handshake between the peripheral device and the network before establishing the data session, wherein establishing the data session between the peripheral device and the network is based at least in part on conducting the handshake.

3. The method of claim 1, wherein the shared secret value comprises an undiscoverable value shared by a plurality of controller devices on one or more related networks.

4. The method of claim 1, further comprising:

retrieving the stored hint package; and

transmitting the hint package to a controller node during the unhobbling.

5. The method of claim 1, further comprising:

detecting, by the peripheral device, a network exclusion event, wherein the network exclusion event comprises an absence of communication between the peripheral device and the network; and

hobbling the peripheral device based at least in part on detecting the network exclusion event.

6. The method of claim 1, further comprising:

establishing a second data session between the peripheral device and a second network;

receiving, at the peripheral device, a second hint package and a second anti-takeover code different than the hint package and the anti-takeover code;

storing, at the peripheral device, the second hint package and the second anti-takeover code;

determining whether the second anti-takeover code matches the anti-takeover code; and

unhobbling the peripheral device based at least in part on determining whether the second anti-takeover code matches the anti-takeover code.

7. The method of claim 1, wherein unhobbling the peripheral device comprises:

transmitting the hint package to a node associated with the network, the hint package comprising a network identification value, a shared secret version value, and a random value such as a series of randomly generated bytes.

8. The method of claim 1, wherein the peripheral device comprises a sensor, a feature controller, a router, or a meter.

9. The method of claim 1, wherein the data session is established via a wireless connection.

10. An apparatus for security and/or automation systems, comprising:

a processor;

memory in electronic communication with the processor; and

instructions stored in the memory, the instructions being executable by the processor to;

establish a data session between a peripheral device and a network;

receive, at the peripheral device, a hint package and an anti-takeover code derived from a function seeded with a shared secret value, the hint package being received based at least in part on detection of a network inclusion event associated with the peripheral device;

store, at the peripheral device, the hint package and the anti-takeover code;

determine whether the anti-takeover code matches a previously stored anti-takeover code; and

unhobble the peripheral device based at least in part on determining whether the anti-takeover code matches the previously stored anti-takeover code.

11. The apparatus of claim 10, wherein the processor is further configured to:

conduct a handshake between the peripheral device and the network before establishing the data session, wherein establishing the data session between the peripheral device and the network is based at least in part on conducting the handshake.

12. The apparatus of claim 10, wherein the shared secret value comprises an undiscoverable value shared by a plurality of controller devices on one or more related networks.

13. The apparatus of claim 10, wherein the processor is further configured to:

retrieve the stored hint package; and

transmit the hint package to a controller node during the unhobbling.

14. The apparatus of claim 10, wherein the processor is further configured to:

detect, by the peripheral device, a network exclusion event, wherein the network exclusion event comprises an absence of communication between the peripheral device and the network; and

hobble the peripheral device based at least in part on detecting the network exclusion event.

15. The apparatus of claim 10, wherein the processor is further configured to:

establish a second data session between the peripheral device and a second network;

receive, at the peripheral device, a second hint package and a second anti-takeover code different than the hint package and the anti-takeover code;

store, at the peripheral device, the second hint package and the second anti-takeover code;

determine whether the second anti-takeover code matches the anti-takeover code; and

unhobble the peripheral device based at least in part on determining whether the second anti-takeover code matches the anti-takeover code.

16. The apparatus of claim 10, wherein the processor is further configured to:

transmit the hint package to a node associated with the network, the hint package comprising a network identification value, a shared secret version value, and a random value such as a series of randomly generated bytes.

17. The apparatus of claim 10, wherein the peripheral device comprises a sensor, a feature controller, a router, or a meter.

18. A non-transitory computer-readable medium storing computer-executable code, the code executable by a processor to:

establish a data session between a peripheral device and a network;

receive, at the peripheral device, a hint package and an anti-takeover code derived from a function seeded with a shared secret value, the hint package being received based at least in part on detection of a network inclusion event associated with the peripheral device;

store, at the peripheral device, the hint package and the anti-takeover code;

determine whether the anti-takeover code matches a previously stored anti-takeover code; and

unhobble the peripheral device based at least in part on determining whether the anti-takeover code matches the previously stored anti-takeover code.

19. The non-transitory computer-readable medium storing computer-executable code of claim 18, wherein the code is executable by the processor to:

conduct a handshake between the peripheral device and the network before establishing the data session, wherein establishing the data session between the peripheral device and the network is based at least in part on conducting the handshake.

20. The non-transitory computer-readable medium storing computer-executable code of claim 18, wherein the code is executable by the processor to:

retrieve the stored hint package; and

transmit the hint package to a controller node during the unhobbling.