SECURE UNLOCK OF A DEVICE

• US 20170109518A1
• Filed: 10/20/2015
• Published: 04/20/2017
• Est. Priority Date: 10/20/2015
• Status: Active Grant

• Current Assignee: Vivint Incorporated (NRG Energy, Inc.)
• Original Assignee: Vivint Incorporated (NRG Energy, Inc.)
• Inventors: Bui, Johny, Rigby, John, Vernon, Bruce, Matsuura, Craig, Carlson, Ryan
• Granted Patent: US 10,387,636 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards

Abstract

A control panel may prevent access to one or more aspects of the control panel based at least in part on one or more security parameters. The security parameters may include a default locked status and a takeover locked status. The default locked status may prevent a user or other personnel from accessing the software, code, or other intellectual property on the control panel while still allowing the user to interface with the security and/or automation system. The takeover locked status may prevent any access or use of the control panel. To protect the automation system and the automation system provider, it may be desired to use a unique identifier to unlock at least one or more aspects of the control panel. The unique identifier may be loaded onto an external storage device which the control panel may automatically recognize.

Claims

1. A method for security and/or automation systems, comprising:

generating a unique identifier for a device;

transmitting the unique identifier to a location remote from the device;

locking at least one aspect of the device based at least in part on one or more security parameters;

unlocking the at least one aspect of the device when the unique identifier is input into the device.

2. The method of claim 1, further comprising:

determining when an external storage device connects to the device via a universal serial bus connection;

authenticating the external storage device using one or more authentication codes;

searching the external storage device for one or more unique identifiers;

opening a profile associated with the unique identifier after unlocking the device.

3. The method of claim 2 wherein authenticating the external storage device comprises:

detecting an authentication code on the external storage device;

comparing the detected authentication code with an authentication code stored locally on the device; and

approving the external storage device when the two authentication codes match.

4. The method of claim 2, wherein the profile comprises a provider profile to troubleshoot a problem with a control panel.

5. The method of claim 2, wherein the profile comprises a user profile and unlocking the device enables a user to presume regular use of the device.

6. The method of claim 1, further comprising:

alerting an automation system provider of the locking when the device is completely inaccessible, wherein the device is a control panel associated with the automation system provider.

7. The method of claim 1, further comprising:

resetting the unique identifier at a predetermined time period.

8. The method of claim 1, further comprising:

expiring the unique identifier after a predetermined time period.

9. The method of claim 1, wherein the device is a control panel and the unique identifier is only accessible on an external device authenticated by an automation system provider associated with the control panel.

10. The method of claim 9, wherein the external device is a universal serial bus (USB) drive, and the external device connects to a USB port on the device.

11. The method of claim 1, further comprising:

entering a locked state when the device is reformatted.

12. A device for a security and/or automation system, comprising:

a processor;

memory in electronic communication with the processor; and

instructions stored in the memory, the instructions being executable by the processor to;

generate a unique identifier;

transmit the unique identifier to a location remote from the device;

lock at least one aspect of the device based at least in part on one or more security parameters;

unlock the at least one aspect the device when the unique identifier is input into the device.

13. The device of claim 12, wherein the instructions are further executable by the processor to:

determine when an external storage device connects to the device via a universal serial bus connection;

authenticate the external storage device using an authentication code;

search the external storage device for a unique identifiers;

open a profile associated with the unique identifier after unlocking the device.

14. The device of claim 13, wherein the instructions are further executable by the processor to:

detect an authentication code on the external storage device;

compare the detected authentication code with an authentication code stored locally on the device; and

approve the external storage device when the two authentication codes match.

15. The device of claim 12, wherein the instructions are further executable by the processor to:

alert an automation system provider of the locking when the device is completely inaccessible, wherein the device is a control panel associated with the automation system provider.

16. The device of claim 12, wherein the device is a control panel and the unique identifier is only accessible an external device authenticated by an automation system provider associated with the control panel.

17. A non-transitory computer-readable medium storing computer-executable code for security and/or automation systems, the code executable by a processor to:

generate a unique identifier;

transmit the unique identifier to a location remote from a device;

lock at least on aspect of the device based at least in part on one or more security parameters;

unlock the at least one aspect of the device when the unique identifier is input into the device.

18. The non-transitory computer-readable medium of claim 17, the code further executable by the processor to:

determine when an external storage device connects to the device via a universal serial bus connection;

authenticate the external storage device using an authentication codes;

search the external storage device for a unique identifier;

open a profile associated with the unique identifier after unlocking the device.

19. The non-transitory computer-readable medium of claim 18, the code further executable by the processor to:

detect an authentication code on the external storage device;

compare the detected authentication code with an authentication code stored locally on the device; and

approve the external storage device when the two authentication codes match.

20. The non-transitory computer-readable medium of claim 17, the code further executable by the processor to:

alert an automation system provider of the locking when the device is completely inaccessible, wherein the device is a control panel associated with the automation system provider.