PROXIMITY BASED WIRELESS SECURITY SYSTEM

• US 20160119353A1
• Filed: 12/30/2015
• Published: 04/28/2016
• Est. Priority Date: 09/14/2011
• Status: Active Grant

• Current Assignee: Enel X North America, Inc. (ENEL SPA)
• Original Assignee: Enernoc
• Inventors: WILLIG, Randy C.
• Granted Patent: US 9,980,161 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G01D 4/002 Remote reading of utility meters
• CPC Class Codes: G08C 15/02 simultaneously, i.e. using frequency division
• CPC Class Codes: H04B 1/7156 Arrangements for sequence synchronisation
• CPC Class Codes: H04B 2001/71563 Acquisition
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04Q 2209/43 using wireless personal area networks [WPAN], e.g. 802.15, 802.15.1, 802.15.4, Bluetooth or ZigBee
• CPC Class Codes: H04Q 2209/50 using a mobile data collecting device, e.g. walk by or drive by
• CPC Class Codes: H04Q 2209/60 for transmitting utility meters data, i.e. transmission of data from the reader of the utility meter
• CPC Class Codes: H04Q 9/00 Arrangements in telecontrol or telemetry systems for selectively calling a substation from a main station, in which substation desired apparatus is selected for applying a control signal thereto or for obtaining measured values therefrom
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 24/06 Testing, supervising or monitoring using simulated traffic
• CPC Class Codes: H04W 24/08 Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: Y04S 20/30 Smart metering, e.g. specially adapted for remote reading

Abstract

A wireless security system is provided. The system includes a first wireless device, a second wireless device, an uninstalled wireless device, and an access controller. The first wireless device is disposed within a first security zone having first security provisions within a network configuration. The second wireless device is disposed within a second security zone having second security provisions within the network configuration. The second security provisions are greater than the first security provisions. The access controller communicates with the uninstalled wireless device, and determines a proximity of the uninstalled wireless device relative to the first and second wireless devices, and configures third security provisions for the uninstalled device corresponding to the proximity.

Claims

1. A wireless security system, comprising:

a first wireless device, disposed within a first security zone having first security provisions within a network configuration;

a second wireless device, disposed within a second security zone having second security provisions within said network configuration, wherein said second security provisions are greater than said first security provisions;

an uninstalled wireless device; and

an access controller, that communicates with said uninstalled wireless device, and that determines a proximity of said uninstalled wireless device relative to first and second wireless devices, wherein said access controller configures third security provisions for said uninstalled device corresponding to said proximity.

2. The wireless security system as recited in claim 1, wherein said proximity does not correspond to said first or second security zones, and wherein said third security provisions comprise denial of access to said network configuration.

3. The wireless security system as recited in claim 1, wherein said proximity corresponds to said first security zone, and wherein said third security provisions comprise said first security provisions.

4. The wireless security system as recited in claim 3, wherein said first security provisions comprise a first one of a plurality of security key types and lengths, and wherein said second security provisions comprise a second one of said plurality of security key types and lengths, and wherein said first one comprises reduced security requirements over said second one.

5. The wireless security system as recited in claim 3, wherein said first security provisions comprise a first one of a plurality of security algorithms, and wherein said second security provisions further comprise a second one of a plurality of security algorithm, and wherein said first one comprises reduced security requirements over said second one.

6. The wireless security system as recited in claim 1, wherein said access controller determines said proximity based on geographic position data provided by said uninstalled device.

7. The wireless security system as recited in claim 1, wherein said access controller determines said proximity based on response latencies to ping messages transmitted to said uninstalled device.

8. A proximity based wireless security mechanism, comprising:

an uninstalled wireless device;

a plurality of first wireless devices disposed in a first security zone having first security provisions within a network configuration;

a plurality of second wireless devices disposed in a second security zone having second security provisions within said network configuration, wherein said second security provisions are greater said first security provisions; and

an access controller, that communicates with said uninstalled wireless device, and that determines a proximity of said uninstalled wireless device relative to said pluralities of first and second wireless devices, and that configures third security provisions for said uninstalled device corresponding to said proximity.

9. The proximity based wireless security mechanism as recited in claim 8, wherein said proximity does not correspond to said first or second security zones, and wherein said third security provisions comprise denial of access to said network configuration.

10. The proximity based wireless security mechanism as recited in claim 8, wherein said proximity corresponds to said first security zone, and wherein said third security provisions comprise said first security provisions.

11. The proximity based wireless security mechanism as recited in claim 10, wherein said first security provisions comprise a first one of a plurality of security key types and lengths, and wherein said second security provisions comprise a second one of said plurality of security key types and lengths, and wherein said first one comprises reduced security requirements over said second one.

12. The proximity based wireless security mechanism as recited in claim 10, wherein said first security provisions comprise a first one of a plurality of security algorithms, and wherein said second security provisions further comprise a second one of a plurality of security algorithm, and wherein said first one comprises reduced security requirements over said second one.

13. The proximity based wireless security mechanism as recited in claim 8, wherein said access controller determines said proximity based on geographic position data provided by said uninstalled device.

14. The proximity based wireless security mechanism as recited in claim 8, wherein said access controller determines said proximity based on response latencies to ping messages transmitted to said uninstalled device.

15. A method for proximity based wireless security, the method comprising:

disposing a first wireless device within a first security zone having first security provisions within a network configuration;

disposing a second wireless device within a second security zone having second security provisions within the network configuration, wherein the second security provisions are greater the first security provisions;

communicating with an uninstalled wireless device;

determining a proximity of the uninstalled wireless device relative to the first and second wireless devices; and

configuring third security provisions for the uninstalled device corresponding to the proximity.

16. The method as recited in claim 15, wherein the proximity does not correspond to the first or second security zones, and wherein the third security provisions comprise denial of access to the network configuration.

17. The method as recited in claim 15, wherein the proximity corresponds to the first security zone, and wherein the third security provisions comprise the first security provisions.

18. The method as recited in claim 17, wherein the first security provisions comprise a first one of a plurality of security key types and lengths, and wherein the second security provisions comprise a second one of the plurality of security key types and lengths, and wherein the first one comprises reduced security requirements over the second one.

19. The method as recited in claim 17, wherein the first security provisions comprise a first one of a plurality of security algorithms, and wherein the second security provisions further comprise a second one of a plurality of security algorithm, and wherein the first one comprises reduced security requirements over the second one.

20. The wireless security system as recited in claim 15, wherein the proximity provided by said determining is based on geographic position data provided by the uninstalled device.

21. The wireless security system as recited in claim 15, wherein the proximity provided by said determining is based on response latencies to ping messages transmitted to the uninstalled device.