Systems and methods for reducing cyber security incidents with intelligent password management

• US 10,404,672 B2
• Filed: 03/23/2017
• Issued: 09/03/2019
• Est. Priority Date: 03/23/2017
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Saha, Avijit, Thomas, Manu, Chaurasia, Jitendra Sitaram, Meganathan, Deepak Sundar
• Primary Examiner(s): Getachew, Abiy
• Application Number:
  US15/467,747
• Publication Number:
  US 20180278593A1
• Time in Patent Office: 894 Days
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

Systems and methods for reducing cyber security incidents in video surveillance and security systems with intelligent password management are provided. Some methods can include assessing a vulnerability of a current password for each of a plurality of cameras, responsive to detecting that the current password for at least one of the plurality of cameras is vulnerable, automatically generating an updated password for the at least one of the plurality of cameras, and assigning the updated password to the at least one of the plurality of cameras.

Claims

1. A method comprising:

a server in communication with a plurality of cameras assessing a vulnerability of a current password for at least one of the plurality of cameras by detecting that the current password for the at least one of the plurality of cameras is a default password for the at least one of the plurality of cameras, that the current password for the at least one of the plurality of cameras is blank, or that the current password for the at least one of the plurality of cameras is weak;

responsive to detecting that the current password for the at least one of the plurality of cameras is vulnerable, the server automatically generating an updated password for the at least one of the plurality of cameras; and

the server assigning the updated password to the at least one of the plurality of cameras.

2. The method of claim 1 further comprising the server transmitting a notification of the updated password to the at least one of the plurality of cameras or to a user.

3. The method of claim 1 further comprising the server detecting that the current password for the at least one of the plurality of cameras is vulnerable includes determining that the at least one of the plurality of cameras has no password.

4. The method of claim 1 further comprising the server detecting that the current password for the at least one of the plurality of cameras is vulnerable when the server receives user input indicating that the current password for the at least one of the plurality of cameras is lost, stolen, or disclosed.

5. The method of claim 1 wherein the updated password for the at least one of the plurality of cameras is a unique password.

6. The method of claim 1 further comprising the server assessing the vulnerability of the current password for the at least one of the plurality of cameras after installation of the at least one of the plurality of cameras.

7. The method of claim 1 further comprising the server assessing the vulnerability of the current password for the at least one of the plurality of cameras during maintenance of the at least one of the plurality of cameras.

8. The method of claim 1 further comprising the server periodically assessing the vulnerability of the current password for the at least one of the plurality of cameras at predetermined time intervals.

9. The method of claim 1 further comprising the server assessing the vulnerability of the current password for the at least one of the plurality of cameras responsive to receiving user input.

10. A system comprising:

a transceiver device of a server in communication with a plurality of cameras;

a programmable processor of the server; and

executable control software stored on a non-transitory computer readable medium of the server,

wherein the programmable processor and the executable control software of the server assess a vulnerability of a current password for at least one of the plurality of cameras by detecting that the current password for the at least one of the plurality of cameras is a default password for the at least one of the plurality of cameras, that the current password for the at least one of the plurality of cameras is blank, or that the current password for the at least one of the plurality of cameras is weak,

wherein, responsive to detecting that the current password for the at least one of the plurality of cameras is vulnerable, the programmable processor and the executable control software automatically generate an updated password for the at least one of the plurality of cameras, and

wherein the programmable processor and the executable control software assign the updated password to the at least one of the plurality of cameras.

11. The system of claim 10 wherein the programmable processor and the executable control software of the server are further configured to detect that the current password for the at least one of the plurality of cameras is vulnerable by determining that the at least one of the plurality of cameras has no password.

12. The system of claim 10 wherein the programmable processor and the executable control software of the server are further configured to detect that the current password for the at least one of the plurality of cameras is vulnerable when the server receives user input indicating that the current password for the at least one of the plurality of cameras is lost, stolen, or disclosed.

13. The system of claim 10 wherein the programmable processor and the executable control software of the server are further configured to assess the vulnerability of the current password for the at least one of the plurality of cameras after installation of the at least one of the plurality of cameras.

14. The system of claim 10 wherein the programmable processor and the executable control software of the server are further configured to assess the vulnerability of the current password for the at least one of the plurality of cameras during maintenance of the at least one of the plurality of cameras.

15. The system of claim 10 wherein the programmable processor and the executable control software of the server are further configured to periodically assess the vulnerability of the current password for the at least one of the plurality of cameras at predetermined time intervals.

16. The system of claim 10 wherein the programmable processor and the executable control software of the server are further configured to assess the vulnerability of the current password for the at least one of the plurality of cameras responsive to receiving user input.