Integrated security and communications system with secure communications link

• US 7,558,379 B2
• Filed: 05/12/2005
• Issued: 07/07/2009
• Est. Priority Date: 03/13/2000
• Status: Expired due to Term

• Current Assignee: Ademco Inc. (Resideo Technologies, Inc.)
• Original Assignee: Honeywell International Inc.
• Inventors: Winick, Steven
• Primary Examiner(s): Woo; Stella L
• Application Number:
  US11/127,100
• Publication Number:
  US 20050213715A1
• Time in Patent Office: 1,517 Days
• Field of Search: 379/39, 379/37, 379/40, 379/45, 379/90.01, 379/106, 379/93.02, 379/93.01, 709/227
• US Class Current: 379/37
• CPC Class Codes: G08B 25/008 Alarm setting and unsetting, i.e. arming or disarming of the security system
• CPC Class Codes: H04M 11/04 with alarm systems, e.g. fire, police or burglar alarm systems

Abstract

An integrated security and communications system combines a security system to either or both of a telephone system interface and a data interface. Data functions such as electronic mail and possible partial or full World Wide Web access may also be provided at keypads of the security system, as well as at connected personal computers or computer terminals. The system keypads may be enhanced to better accommodate some of the added functions. A central communications station could be used to maintain secure, shared private key encrypted communications with each premises system, using a redirector arrangement or relay to allow each premises system to communicate securely with a central monitoring station and with other systems. The secure communications system could be used without a security system to allow secure computer-to-computer communications.

Claims

1. A secure communications system comprising:

a first communication station connected to a communication medium;

a central communication station connected to said communication medium; and

at least a second communication station connected to said communication medium;

wherein;

all communication between said first communication station and said central communication station is initiated by said first communication station;

communication between said first communication station and said second communication station is established by leaving a message for said first communication station at said central communication station indicating communication is desired between said first communication station and said second communication station; and

when said first communication station periodically initiates communication with said central communication station, said first communication station receives said message for said first communication station, maintains its initiated communication with said central communication station and instructs said central communication station to relay communications between said first communication station and said second communication station.

2. The secure communications system of claim 1 wherein said message for said first communication station is left by said second communication station.

3. The secure communications system of claim 1 wherein said message for said first communication station is left by said central communication station.

4. The secure communications system of claim 1 wherein:

said first communication station includes a first firewall between said first communication station and said communication medium; and

said first firewall allows only communication originating at said first station and prevents communication originating on said communication medium.

5. The secure communications system of claim 1 wherein:

said first communication station further comprises a first station encryption processor for encrypting and decrypting communications using a first digital key identified with said first station;

said central communication station further comprises;

a central encryption processor for encrypting and decrypting communications using a digital key, and key memory for storing said first digital key and associating said stored first digital key with said first communication station;

said first communication station uses said first station encryption processor to encrypt with said first station digital key each communication sent to said central communication station, and to decrypt with said first station digital key each communication received from said central communication station; and

said central communication station uses said central encryption processor to encrypt with said first station digital key each communication sent to said first communication station and to decrypt with said first station digital key each communication received from said first communication station.

6. The secure communications system of claim 5 wherein:

all communication between said second communication station and said central communication station is initiated by said second communication station;

communication between said second communication station and said first communication station is established by leaving a message for said second communication station at said central communication station indicating communication is desired between said second communication station and said first communication station; and

when said second communication station periodically initiates communication with said central communication station, said second communication station receives said message for said second communication station, maintains its initiated communication with said central communication station and instructs said central communication station to relay communications between said first communication station and said second communication station.

7. The secure communications system of claim 6 wherein said message for said second communication station is left by said first communication station.

8. The secure communications system of claim 6 wherein said message for said second communication station is left by said central communication station.

9. The secure communications system of claim 6 wherein:

said second communication station includes a second firewall between said second communication station and said communication medium; and

said second firewall allows only communication originating at said second station and prevents communication originating on said communication medium.

10. The secure communications system of claim 6 wherein:

said second communication station further comprises a second station encryption processor for encrypting and decrypting communications using a second digital key identified with said second station;

said key memory of said central communication station further stores said second digital key and associates said stored second digital key with said second communication station;

said second communication station uses said second station encryption processor to encrypt with said second station digital key each communication sent to said central communication station, and to decrypt with said second station digital key each communication received from said central communication station; and

said central communication station uses said central encryption processor to encrypt with said second station digital key each communication sent to said second communication station and to decrypt with said second station digital key each communication received from said second communication station.

11. The secure communications system of claim 10 wherein:

said first communication station is a premises alarm system; and

said second communication station is a central alarm monitoring station.

12. The secure communications system of claim 10 wherein:

said first communication station is a first premises alarm system; and

said second communication station is a second premises alarm system.

13. The secure communications system of claim 10 wherein:

said first communication station is a premises alarm system; and

said second communication station is a remote communications terminal.

14. The secure communications system of claim 1 wherein:

all communication between said second communication station and said central communication station is initiated by said second communication station;

communication between said second communication station and said first communication station is established by leaving a message for said second communication station at said central communication station indicating communication is desired between said second communication station and said first communication station; and

when said second communication station periodically initiates communication with said central communication station, said second communication station receives said message for said second communication station, maintains its initiated communication with said central communication station and instructs said central communication station to relay communications between said first communication station and said second communication station.

15. The secure communications system of claim 14 wherein said message for said second communication station is left by said first communication station.

16. The secure communications system of claim 14 wherein said message for said second communication station is left by said central communication station.

17. The secure communications system of claim 14 wherein:

said second communication station includes a second firewall between said second communication station and said communication medium; and

said second firewall allows only communication originating at said second station and prevents communication originating on said communication medium.

18. The secure communications system of claim 14 wherein:

said first communication station is a premises alarm system; and

said second communication station is a central alarm monitoring station.

19. The secure communications system of claim 14 wherein:

said first communication station is a first premises alarm system; and

said second communication station is a second premises alarm system.

20. The secure communications system of claim 14 wherein:

said first communication station is a premises alarm system; and

said second communication station is a remote communications terminal.

21. The secure communications system of claim 1 wherein:

said first communication station is a premises alarm system; and

said second communication station is a central alarm monitoring station.

22. The secure communications system of claim 1 wherein:

said first communication station is a first premises alarm system; and

said second communication station is a second premises alarm system.

23. The secure communications system of claim 1 wherein:

said first communication station is a premises alarm system; and

said second communication station is a remote communications terminal.

24. The secure communications system of claim 1 further comprising:

at said central communication station, at least one service agent unit for communicating between said first communication station and at least one service on said communications medium;

wherein;

at least one of said at least one service requires a secure identifier for access thereto; and

at least one of said at least one service agent unit comprises secure identifier storage, a user at said first communication station registering said user'"'"'s secure identifier for said at least one of said at least one service;

whereby;

when said user accesses said at least one of said at least one service, said user need not transmit said secure identifier over said communication medium, said secure identifier being transmitted securely by said service agent unit from said secure identifier storage.

25. A secure communications system for communicating between first and second communication stations connected to a communications medium;

said system comprising;

a central communication station connected to said communication medium and having a secure digital session key generator;

wherein;

each of said first and second communication means further comprises a respective encryption processor for encrypting and decrypting communications using a digital key;

all communication with said first communication station is initiated by said first communication station;

all communication with said second communication station is initiated by said second communication station;

communication between said first communication station and said second communication station is established by generating at said secure digital session key generator a secure digital session key and leaving a respective message at said central communication station for each of said first and second communication stations, each said respective message including said secure digital session key;

when said first communication station periodically initiates communication with said central communication station, said first communication station receives said message including said secure digital session key;

when said second communication station periodically initiates communication with said central communication station, said second communication station receives said message including said secure digital session key; and

said first and second communication stations communicate with one another using said secure digital session key and said respective encryption processors.

26. A secure communications method for communicating between first and second communication stations connected to a communications medium;

said method comprising;

providing a central communication station connected to said communication medium;

initiating all communication between said first communication station and said central communication station at said first communication station;

establishing communication between said first communication station and said second communication station by leaving a message for said first communication station at said central communication station indicating communication is desired between said first communication station and said second communication station; and

when said first communication station periodically initiates communication with said central communication station, said first communication station receiving said message for said first communication station, maintaining its initiated communication with said central communication station and instructing said central communication station to relay communications between said first communication station and said second communication station.

27. The secure communications method of claim 26 further comprising said second communication station leaving said message for said first communication station.

28. The secure communications method of claim 26 further comprising said central communication station leaving said message for said first communication station.

29. The secure communications method of claim 26 wherein said first communication station includes a first firewall between said first communication station and said communication medium, said first firewall allowing only communication originating at said first station and preventing communication originating on said communication medium.

30. The secure communications method of claim 26 further comprising:

at said central communication station and said first communication station, storing a first digital key and associating said stored first digital key with said first communication station;

at said first communication station, encrypting each communication sent to said central communication station, and decrypting each communication received from said central communication station, using said first digital key identified with said first communication station; and

at said central communication station, encrypting with said first station digital key each communication sent to said first communication station and decrypting with said first station digital key each communication received from said first communication station.

31. The secure communications method of claim 30 further comprising:

initiating all communication between said second communication station and said central communication station at said second communication station;

establishing communication between said second communication station and said first communication station by leaving a message for said second communication station at said central communication station indicating communication is desired between said second communication station and said first communication station; and

when said second communication station periodically initiates communication with said central communication station, said second communication station receiving said message for said second communication station, maintaining its initiated communication with said central communication station and instructing said central communication station to relay communications between said second communication station and said first communication station.

32. The secure communications method of claim 31 further comprising said first communication station leaving said message for said second communication station.

33. The secure communications method of claim 31 further comprising said central communication station leaving said message for said second communication station.

34. The secure communications method of claim 31 wherein said second communication station includes a second firewall between said second communication station and said communication medium, said second firewall allowing only communication originating at said second station and preventing communication originating on said communication medium.

35. The secure communications method of claim 31 wherein:

at said central communication station and said second communication station, storing a second digital key and associating said stored second digital key with said second communication station;

at said second communication station, encrypting each communication sent to said central communication station, and decrypting each communication received from said central communication station, using said second digital key identified with said second communication station; and

at said central communication station, encrypting with said second station digital key each communication sent to said second communication station and decrypting with said second station digital key each communication received from said second communication station.

36. The secure communications method of claim 26 further comprising:

initiating all communication between said second communication station and said central communication station at said second communication station;

establishing communication between said second communication station and said first communication station by leaving a message for said second communication station at said central communication station indicating communication is desired between said second communication station and said first communication station; and

when said second communication station periodically initiates communication with said central communication station, said second communication station receiving said message for said second communication station, maintaining its initiated communication with said central communication station and instructing said central communication station to relay communications between said second communication station and said first communication station.

37. The secure communications method of claim 36 further comprising said first communication station leaving said message for said second communication station.

38. The secure communications method of claim 36 further comprising said central communication station leaving said message for said second communication station.

39. The secure communication method of claim 36 wherein said second communication station includes a second firewall between said second communication station and said communication medium, said second firewall allowing only communication originating at said second station and preventing communication originating on said communication medium.

40. The secure communications method of claim 26 further comprising:

at said central communication station, providing at least one service agent unit for communicating between said first communication station and at least one service on said communications medium;

wherein;

at least one of said at least one service requires a secure identifier for access thereto;

said method further comprising;

providing secure storage at at least one of said at least one service agent unit, and storing in said secure storage a secure identifier for said at least one of said at least one service registered at said secure storage by a user at said first communication station;

whereby;

when said user accesses said at least one of said at least one service, said user need not transmit said secure identifier over said communication medium, said secure identifier being transmitted securely by said service agent unit from said secure identifier storage.

41. A secure communications method for communicating between first and second communication stations connected to a communications medium;

said method comprising;

providing a central communication station connected to said communication medium and having a secure digital session key generator;

providing at each of said first and second communication means a respective encryption processor for encrypting and decrypting communications using a digital key;

initiating all communication with said first communication station at said first communication station;

initiating all communication with said second communication station at said second communication station;

establishing communication between said first communication station and said second communication station by generating at said secure digital session key generator a secure digital session key and leaving a respective message at said central communication station for each of said first and second communication stations, each said respective message including said secure digital session key;

when said first communication station periodically initiates communication with said central communication station, said first communication station receiving said message including said secure digital session key;

when said second communication station periodically initiates communication with said central communication station, said second communication station receiving said message including said secure digital session key; and

said first and second communication stations communicating with one another using said secure digital session key and said respective encryption processors.

42. A secure communications system comprising:

first communication means connected to a communication medium;

central communication means connected to said communication medium; and

at least second communication means connected to said communication medium;

wherein;

all communication between said first communication means and said central communication means is initiated by said first communication means;

communication between said first communication means and said second communication means is established by leaving a message for said first communication means at said central communication means indicating communication is desired between said first communication means and said second communication means; and

when said first communication means periodically initiates communication with said central communication means, said first communication means receives said message for said first communication means, maintains its initiated communication with said central communication means and instructs said central communication means to relay communications between said first communication means and said second communication means.

43. The secure communications system of claim 42 wherein said message for said first communication means is left by said second communication means.

44. The secure communications system of claim 42 wherein said message for said first communication means is left by said central communication mean.

45. The secure communications system of claim 42 wherein:

said first communication means includes a first firewall between said first communication means and said communication medium; and

said first firewall allows only communication originating at said first communication means and prevents communication originating on said communication medium.

46. The secure communications system of claim 42 wherein:

said first communication means further comprises first encryption means for encrypting and decrypting communications using a first digital key identified with said first communication means;

said central communication means further comprises;

central encryption means for encrypting and decrypting communications using a digital key, and key memory for storing said first digital key and associating said stored first digital key with said first communication means;

said first communication means uses said first encryption means to encrypt with said first digital key each communication sent to said central communication means, and to decrypt with said first digital key each communication received from said central communication means; and

said central communication means uses said central encryption means to encrypt with said first digital key each communication sent to said first communication station and to decrypt with said first station digital key each communication received from said first communication station.

47. The secure communications system of claim 46 wherein:

all communication between said second communication means and said central communication means is initiated by said second communication means;

communication between said second communication means and said first communication means is established by leaving a message for said second communication means at said central communication means indicating communication is desired between said second communication means and said first communication means; and

when said second communication means periodically initiates communication with said central communication means, said second communication means receives said message for said second communication means, maintains its initiated communication with said central communication means and instructs said central communication means to relay communications between said first communication means and said second communication means.

48. The secure communications system of claim 47 wherein said message for said second communication means is left by said first communication means.

49. The secure communications system of claim 47 wherein said message for said second communication means is left by said central communication means.

50. The secure communications system of claim 47 wherein:

said second communication means includes a second firewall between said second communication means and said communication medium; and

said second firewall allows only communication originating at said second communication means and prevents communication originating on said communication medium.

51. The secure communications system of claim 47 wherein:

said second communication means further comprises a second encryption means for encrypting and decrypting communications using a second digital key identified with said second communication means;

said key memory of said central communication means farther stores said second digital key and associates said stored second digital key with said second communication means;

said second communication means uses said second encryption means to encrypt with said second digital key each communication sent to said central communication means, and to decrypt with said second digital key each communication received from said central communication means; and

said central communication means uses said central encryption means to encrypt with said second digital key each communication sent to said second communication means and to decrypt with said second digital key each communication received from said second communication means.

52. The secure communications system of claim 51 wherein:

said first communication means is a premises alarm system; and

said second communication means is a central alarm monitoring station.

53. The secure communications system of claim 51 wherein:

said first communication means is a first premises alarm system; and

said second communication means is a second premises alarm system.

54. The secure communications system of claim 51 wherein:

said first communication means is a premises alarm system; and

said second communication means is a remote communications terminal.

55. The secure communications system of claim 42 wherein:

all communication between said second communication means and said central communication means is initiated by said second communication means;

communication between said second communication means and said first communication means is established by leaving a message for said second communication means at said central communication means indicating communication is desired between said second communication means and said first communication means; and

when said second communication means periodically initiates communication with said central communication means, said second communication means receives said message for said second communication means, maintains its initiated communication with said central communication means and instructs said central communication means to relay communications between said first communication means and said second communication means.

56. The secure communications system of claim 55 wherein said message for said second communication means is left by said first communication means.

57. The secure communications system of claim 55 wherein said message for said second communication means is left by said central communication means.

58. The secure communications system of claim 55 wherein:

said second communication means includes a second firewall between said second communication means and said communication medium; and

said second firewall allows only communication originating at said second communication means and prevents communication originating on said communication medium.

59. The secure communications system of claim 55 wherein:

said first communication means is a premises alarm system; and

said second communication means is a central alarm monitoring station.

60. The secure communications system of claim 55 wherein:

said first communication means is a first premises alarm system; and

said second communication means is a second premises alarm system.

61. The secure communications system of claim 55 wherein:

said first communication means is a premises alarm system; and

said second communication means is a remote communications terminal.

62. The secure communications system of claim 42 wherein:

said first communication means is a premises alarm system; and

said second communication means is a central alarm monitoring station.

63. The secure communications system of claim 42 wherein:

said first communication means is a first premises alarm system; and

said second communication means is a second premises alarm system.

64. The secure communications system of claim 42 wherein:

said first communication means is a premises alarm system; and

said second communication means is a remote communications terminal.

65. The secure communications system of claim 42 further comprising:

at said central communication means, at least one service agent means for communicating between said first communication means and at least one service on said communications medium;

wherein;

at least one of said at least one service requires a secure identifier for access thereto; and

at least one of said at least one service agent means comprises means for securely storing an identifier, a user at said first communication means registering said user'"'"'s secure identifier for said at least one of said at least one service;

whereby;

when said user accesses said at least one of said at least one service, said user need not transmit said secure identifier over said communication medium, said secure identifier being transmitted securely by said service agent means from said secure identifier storage means.

66. A secure communications system for communicating between first and second communication means connected to a communications medium;

said system comprising;

a central communication means connected to said communication medium and having a secure digital session key generating means;

wherein;

each of said first and second communication means further comprises a respective encryption means for encrypting and decrypting communications using a digital key;

all communication with said first communication means is initiated by said first communication means;

all communication with said second communication station is initiated by said second communication means;

communication between said first communication means and said second communication means is established by generating at said secure digital session key generating means a secure digital session key and leaving a respective message at said central communication means for each of said first and second communication means, each said respective message including said secure digital session key;

when said first communication means periodically initiates communication with said central communication means, said first communication means receives said message including said secure digital session key;

when said second communication means periodically initiates communication with said central communication means, said second communication means receives said message including said secure digital session key; and

said first and second communication means communicate with one another using said secure digital session key and said respective encryption means.