SECURE MECHANISMS TO ENABLE MOBILE DEVICE COMMUNICATION WITH A SECURITY PANEL

• US 20130173913A1
• Filed: 12/31/2012
• Published: 07/04/2013
• Est. Priority Date: 12/29/2011
• Status: Active Grant

• Current Assignee: Bosch Security Systems Incorporated (Robert Bosch GmbH), Robert Bosch GmbH
• Original Assignee: Bosch Security Systems Incorporated (Robert Bosch GmbH), Robert Bosch GmbH
• Inventors: Kocsis, Gabor Tamas, Abbe, Christopher Alan, Keller, Brent Andrew
• Granted Patent: US 8,990,887 B2
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: G08B 25/14 Central alarm receiver or annunciator arrangements
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A method of arming or disarming a building security system includes transferring an electronic security credential file from an authorizing environment to a mobile computing device. The electronic security credential file is read by the mobile computing device to extract authentication data. The authentication data is transmitted from the mobile computing device and received at the building security system. Within the building security system, the authentication data is used to verify that a user of the mobile computing device is authorized to communicate with the building security system. The mobile computing device is enabled to communicate with the building security system only if the electronic security credential file has been used to verify that a user of the mobile computing device is authorized to communicate with the building security system.

Claims

1. A method of operating a building security system, comprising the steps of:

transferring an electronic security credential file from an authorizing environment to a mobile computing device;

reading and interpreting the security credential file within a software application executing on the mobile computing device;

receiving from the mobile computing device at a building security system a communication including authentication data transmitted in the electronic security credential file;

within the building security system, using the authentication data to verify that a user of the mobile computing device is authorized to communicate with the building security system; and

enabling the mobile computing device to communicate with the building security system only if the authentication data stored in the electronic security credential file has been used to verify that a user of the mobile computing device is authorized to communicate with the building security system.

2. The method of claim 1, wherein the electronic security credential file is electronically transferred from the authorizing environment to the mobile computing device.

3. The method of claim 2, wherein the electronic transfer is in the form of an electronic mail message.

4. The method of claim 1, wherein the electronic security credential file comprises an electronic authorization certificate.

5. The method of claim 1, wherein usage of the electronic security credential file is restricted to a specific date range.

6. The method of claim 1, comprising the further step of generating the electronic security credential file by connecting to a data repository within the authorizing environment and extracting information from the data repository.

7. The method of claim 1, comprising the further step of generating the electronic security credential file by manual entry of information within the authorizing environment.

8. The method of claim 1, wherein the electronic security credential file is unique to the building security system.

9. The method of claim 1, wherein the authorizing environment comprises a central office, wherein the central office monitors whether the building security system detects a security breach.

10. The method of claim 1, wherein the authorizing environment comprises a central office, wherein the central office coordinates installation and maintenance of security alarm components.

11. The method of claim 1, comprising the further step of enabling the mobile computing device to remotely enable or remotely disable the building security system.

12. The method of claim 1, wherein the electronic security credential file contains the internet address of the building security system

13. The method of claim 1, wherein communication between the building security system and external devices is encrypted using a symmetric encryption key, and the electronic security credential file contains the symmetric encryption key.

14. The method of claim 1, wherein the electronic security credential file includes a first passcode, the enabling step including enabling the mobile computing device to communicate with the building security system only if the first passcode within the electronic security credential file corresponds to a second passcode that is stored in the building security system.

15. The method of claim 14, wherein the enabling step includes enabling the mobile computing device to communicate with the building security system only if the first passcode within the electronic security credential file matches the second passcode that is stored in the building security system.

16. The method of claim 15, wherein the first and second passcodes are secret to representatives of the authorizing environment, and the user of the remote computing application software enters a third passcode at the time of the connection, the enabling step including enabling the mobile computing device to communicate with the building security system only if the third passcode entered by the user matches a fourth passcode that is stored in the building security system.

17. The method of claim 1, wherein the electronic security credential file includes a first passcode, the enabling step including enabling the mobile computing device to communicate with the building security system only if the first passcode within the electronic security credential file corresponds to a second passcode that is stored in the building security system and that is valid for only one particular user.

18. The method of claim 17, wherein the electronic security credential file includes an identity of the mobile computing device for which the electronic security credential file was generated, the enabling step including enabling the mobile computing device to communicate with the building security system only if the identity of the mobile computing device from which the electronic security credential file was received matches the identity included in the security credential file.

19. A security arrangement, comprising:

An authorizing apparatus configured to;

generate an electronic security credential file including user authentication parameters; and

transfer the electronic security credential file to a mobile computing device belonging to a user of the building security system; and

a software application executing on the mobile computing device configured to extract the user authentication parameters from the electronic security credential file; and

a building security system including a telecommunication device and a security control unit, the security control unit having a processor and a memory device configured to store the user authentication parameters, the security control unit being configured to;

receive a wireless communication from the mobile computing device via the telecommunication device, the wireless communication including the user authentication parameters stored in the electronic security credential file that the mobile computing device received from the authorizing apparatus;

verify that user authentication parameters within the electronic security credential file received from the mobile computing device match the user authentication parameters stored in the memory device; and

enable the mobile computing device to communicate with the building security system only if it has verified that the user authentication parameters within the electronic security credential file received from the mobile computing device match the user authentication parameters stored in the memory device.

20. The arrangement of claim 19, wherein the authorizing apparatus is configured to encrypt the electronic security credential file transferred to the mobile computing device, and a software application executing on the mobile computing device is configured to decrypt the electronic security credential file received from the authorizing apparatus.

21. The arrangement of claim 20, wherein the encryption step is performed by a public key, and the decryption step is performed using a private key that corresponds to the public key known to the authorizing apparatus.

22. The arrangement of claim 19, wherein the authentication parameters include an identification of the building security system and a passcode corresponding to at least one of the building security system and a user of the mobile computing device.