Security system for a moveable barrier operator

• US 10,652,743 B2
• Filed: 12/19/2018
• Issued: 05/12/2020
• Est. Priority Date: 12/21/2017
• Status: Active Grant

• Current Assignee: The Chamberlain Group LLC
• Original Assignee: The Chamberlain Group, Inc. (The Chamberlain Group LLC)
• Inventors: Fitzgibbon, James J.
• Primary Examiner(s): Holloway, III, Edwin C
• Application Number:
  US16/226,066
• Publication Number:
  US 20190200225A1
• Time in Patent Office: 510 Days
• Field of Search: 340 57, 340 571
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2009/00769 with data transmission performed by wireless means
• CPC Class Codes: G07C 2009/00849 programming by learning
• CPC Class Codes: G07C 2009/00888 programming by learning
• CPC Class Codes: G07C 2009/00928 for garage doors
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00896 specially adapted for particular uses
• CPC Class Codes: G08C 2201/41 Remote control of gateways
• CPC Class Codes: G08C 2201/62 Rolling code
• CPC Class Codes: H04L 2012/2841 Wireless
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04W 12/06 Authentication

Abstract

Electronic systems are provided for secure actuation of a remote device such as a moveable barrier operator. The systems address the “man in the middle” problem of persons intercepting and duplicating radio frequency signals from a control device by introducing timing parameters into a bidirectional communication sequence between at least two devices.

Claims

1. A method of operation by a first device communicating with a second device to effect an action by the second device, the method comprising:

transmitting from the first device a first encrypted message that includes at least a first fixed code and a first changing code;

receiving by the first device a response from the second device, wherein the response comprises a second encrypted message including a second fixed code and a second changing code that is independent from the first changing code;

validating by the first device the response by comparing the second fixed code and the second changing code to second stored code values;

in response to validating the response, transmitting by the first device a third encrypted message including at least the first fixed code and a changed version of the second changing code, wherein the third encrypted message is configured to effect performance of an action by the second device.

3. The method of claim 1, further comprising determining, by the first device before the receiving, a first time window in which to expect the response from the second device based on at least a portion of the first encrypted message.

4. The method of claim 3, further comprising enabling a receiver of the first device to receive a transmission from the second device within the first time window.

5. The method of claim 4, wherein enabling the receiver of the first device comprises turning on the receiver.

6. The method of claim 4, wherein enabling the receiver comprises commanding the receiver to process incoming transmissions.

7. The method of claim 3, further comprising determining if the response from the second device was received within the first time window.

8. The method of claim 1 wherein the first fixed code uniquely identifies the first device and the second fixed code uniquely identifies the second device.

9. The method of claim 1 wherein the second stored code values includes a previous fixed code and a previous changing code from a previous communication between the first and second devices.

10. The method of claim 9 wherein comparing the second fixed code and the second changing code to the second stored code values includes determining whether the second fixed code matches the previous fixed code and the second changing code corresponds to the previous changing code.

11. The method of claim 9 wherein validating includes retrieving the previous fixed code and the previous changing code from a memory of the first device.

12. The method of claim 1 wherein transmitting from the first device the first encrypted message includes wirelessly transmitting the first encrypted message using a radio frequency signal.

13. The method of claim 1 wherein the first device includes an in-vehicle transmitter and the second device includes a movable barrier operator.

2. An apparatus configured to communicate with a second device to effect an action by the second device, the apparatus comprising:

a controller circuit;

a transmitter in operative communication with the controller circuit;

a receiver in operative communication with the controller circuit;

a user input device in operative communication with the controller circuit;

wherein the controller circuit is configured to;

in response to detecting an input at the user input device, control the transmitter to transmit a first encrypted message that includes at least a first fixed code and a first changing code;

receive through the receiver a response from the second device, wherein the response comprises a second encrypted message including a second fixed code and a second changing code that is independent from the first changing code;

validate the response by comparing the second fixed code and the second changing code to second stored code values from a memory circuit;

in response to validating the response, control the transmitter to transmit a third encrypted message including at least the first fixed code and a changed version of the second changing code, wherein the third encrypted message is configured to effect performance of an action by the second device.

14. The apparatus of claim 2 wherein the controller circuit is configured to determine a first time window in which to expect the response from the second device based on at least a portion of the first encrypted message.

15. The apparatus of claim 14 wherein the controller circuit is configured to enable the receiver to receive a transmission from the second device within the first time window.

16. The apparatus of claim 15 wherein the controller circuit is configured to enable the receiver by turning on the receiver.

17. The apparatus of claim 15 wherein the controller circuit is configured to enable the receiver by commanding the receiver to process incoming transmissions.

18. The apparatus of claim 14 wherein the controller circuit is configured to determine whether the response from the second device was received within the first time window.

19. The apparatus of claim 2 wherein the first fixed code uniquely identifies the first device and the second fixed code uniquely identifies the second device.

20. The apparatus of claim 2 wherein the second stored code values include a previous fixed code and a previous changing code from a previous communication with the second device.

21. The apparatus of claim 20 wherein the controller circuit is configured to compare the second fixed code and the second changing code to the second stored code values by determining whether the second fixed code matches the previous fixed code and the second changing code corresponds to the previous changing code.

22. The apparatus of claim 20 wherein the controller circuit is configured to retrieve the previous fixed code and the previous changing code from the memory circuit.

23. The apparatus of claim 2 wherein the transmitter is configured to wirelessly transmit the first encrypted message via a radio frequency signal.

24. A non-transitory computer readable medium having stored thereon instructions that when executed by a controller circuit of a first device cause the controller circuit to perform operations comprising:

transmitting from the first device a first encrypted message that includes at least a first fixed code and a first changing code;

receiving by the first device a response from the second device, wherein the response comprises a second encrypted message including a second fixed code and a second changing code that is independent from the first changing code;

validating by the first device the response by comparing the second fixed code and the second changing code to second stored code values;

in response to validating the response, transmitting by the first device a third encrypted message including at least the first fixed code and a changed version of the second changing code, wherein the third encrypted message is configured to effect performance of an action by the second device.

25. The non-transitory computer readable medium of claim 24, wherein the operations further include determining, by the first device before the receiving, a first time window in which to expect the response from the second device based on at least a portion of the first encrypted message.

26. The non-transitory computer readable medium of claim 25, wherein the operations further include enabling a receiver of the first device to receive a transmission from the second device within the first time window.

27. The non-transitory computer readable medium of claim 26, wherein enabling the receiver of the first device comprises turning on the receiver.

28. The non-transitory computer readable medium of claim 26, wherein enabling the receiver comprises commanding the receiver to process incoming transmissions.

29. The non-transitory computer readable medium of claim 25, wherein the operations further include determining if the response from the second device was received within the first time window.

30. The non-transitory computer readable medium of claim 24 wherein the first fixed code uniquely identifies the first device and the second fixed code uniquely identifies the second device.

31. The non-transitory computer readable medium of claim 24, wherein the second stored code values include a previous fixed code and a previous changing code from a previous communication between the first and second devices.

32. The non-transitory computer readable medium of claim 31, wherein comparing the second fixed code and the second changing code to the second stored code values includes determining whether the second fixed code matches the previous fixed code and the second changing code corresponds to the previous changing code.

33. The non-transitory computer readable medium of claim 31, wherein validating includes retrieving the previous fixed code and the previous changing code from a memory of the first device.

34. The non-transitory computer readable medium of claim 24, wherein transmitting from the first device the first encrypted message includes wirelessly transmitting the first encrypted message using a radio frequency signal.

35. The non-transitory computer readable medium of claim 24, wherein the first device includes an in-vehicle transmitter and the second device includes a movable barrier operator.