Broadcast Encryption Based Security System

• US 20130022200A1
• Filed: 09/14/2012
• Published: 01/24/2013
• Est. Priority Date: 02/07/2006
• Status: Active Grant

• Current Assignee: Generac Power Systems Incorporated (Generac Holdings Incorporated)
• Original Assignee: International Business Machines Corporation
• Inventors: Bellwood, Thomas A., Chumbley, Robert B., Rutkowski, Matthew F., Tarpinian, Alexander
• Granted Patent: US 8,724,811 B2
• Time in Patent Office: Days
• US Class Current: 380/255
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G08B 13/19697 Arrangements wherein non-video detectors generate an alarm themselves
• CPC Class Codes: G08B 25/003 Address allocation methods and details
• CPC Class Codes: G08B 25/009 Signalling of the alarm condition to a substation whose identity is signalled to a central station, e.g. relaying alarm signals in order to extend communication range
• CPC Class Codes: G08B 25/10 using wireless transmission systems G08B25/009 takes precedence
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 12/2807 Exchanging configuration information on appliance services in a home automation network arrangements for maintenance or administration involving network analysis for automatically determining the actual topology of a network H04L41/12; hardware or software tools for network management using graphical user interfaces H04L41/22; address allocation H04L61/50
• CPC Class Codes: H04L 12/2838 Distribution of signals within a home automation network, e.g. involving splitting/multiplexing signals to/from different paths adaptations of television systems for transmission by electric cable for domestic distribution H04N7/106; hybrid transport H04L12/6418; home network arrangements specially adapted for distribution of digital video signals H04N7/24
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833

Abstract

Provided are techniques for providing a home or business security system that relies upon data encryption for both communication and the storage of content. The disclosed technology incorporates all the devices necessary for a comprehensive security system, including, but not limited to, controllers, monitors, alarms and communication media. The system may include an unlimited number of devices and, further, individual devices may be added and removed as needed. Users may define and change the boundaries of a security system or, in other words, decide what devices to include or not include in such a system. A defined boundary does not need to be confined to a single location. In one embodiment, the claimed subject matter incorporates xCP based broadcast encryption technology.

Claims

1. A security system, comprising:

a plurality of security components associated with physical assets of a facility;

a cluster that binds the plurality of physical components into a secure configuration for the protection of the physical assets; and

logic for;

transmitting, using broadcast encryption, an encrypted message between a first component and second component of the physical components;

decrypting the encrypted message text to produce a decrypted text message; and

executing a command transmitted in the decrypted message on the second component.

2. The security system of claim 1, wherein the transmission of the encrypted message is via a wireless protocol based upon xCP broadcast encryption.

3. The security system of claim 1, the logic for decrypting the encrypted message, comprising:

logic for decrypting an encrypted title key (ETk) to generate a title key (Kt); and

logic for decrypting the encrypted message using the Kt.

4. The security system of claim 1, wherein the security system is a home security system.

5. The security system of claim 1, wherein the security system is a business security system.

6. The security system of claim 1, wherein the security components are from a list comprising:

a door alarm;

a window alarm;

a keypad.

7. The security system of claim 1, further comprising a third component at a remote location incorporated into the cluster.

8. A method, comprising:

grouping a plurality of security components associated with physical assets of a facility into a cluster that binds the plurality of components into a secure configuration for the protection of the physical assets;

transmitting an encrypted message from a first component of the plurality of security components to a second component of the plurality of security components, wherein the transmitting of the encrypted message is via broadcast encryption;

decrypting the encrypted message to produce a decrypted message; and

executing a command transmitted in the decrypted message on the second component.

9. The method of claim 8, wherein the transmission of the encrypted message is via a wireless protocol based upon xCP broadcast encryption.

10. The method of claim 8, the logic for decrypting the encrypted message, comprising:

logic for decrypting an encrypted title key (ETk) to generate a title key (Kt); and

logic for decrypting the encrypted message using the Kt.

11. The method of claim 8, wherein the security system is a home security system.

12. The method of claim 8, wherein the security system is a business security system.

13. The method of claim 8, wherein the security components are from a list comprising:

a door alarm;

a window alarm;

a keypad.

14. The method of claim 8, wherein a third component at a remote location is incorporated into the cluster.

15. A computer programming product, comprising:

a computer readable storage medium; and

logic stored on the computer-readable storage medium for execution on a processor, for;

grouping a plurality of security components associated with physical assets of a facility into a cluster that binds the plurality of components into a secure configuration for the protection of the physical assets;

transmitting, via broadcast encryption, an encrypted message from a first component of the plurality of security components to a second component of the plurality of security components;

decrypting, at the second component, the encrypted message to produce a decrypted message; and

executing a command transmitted in the decrypted message on the second component.

16. The computer programming product of claim 15, wherein the physical assets comprise a home.

17. The computer programming product of claim 15, wherein the physical assets comprise a business.

18. The computer programming product of claim 15, wherein the security components are selected from a list comprising:

a door alarm;

a window alarm;

a keypad.

19. The computer programming product of claim 15, the logic for executing a command on the second component comprising logic for deactivating an alarm.

20. The computer programming product of claim 15, the logic for executing a command on the second component comprising logic for activating an alarm.