Supervision of high value assets

• US 7,651,530 B2
• Filed: 03/22/2004
• Issued: 01/26/2010
• Est. Priority Date: 03/22/2004
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Winick, Steven J.
• Primary Examiner(s): LAFORGIA, CHRISTIAN A
• Application Number:
  US10/805,702
• Publication Number:
  US 20050210532A1
• Time in Patent Office: 2,136 Days
• Field of Search: 726/35
• US Class Current: 726/35
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Electronic devices in a local area network (LAN), e.g., a DVD video recorder, plasma display, and audio controller in a home network, are protected by a security system that is networked with the devices. In one aspect, the security system periodically polls the devices to confirm that they are present in the LAN. If a device does not respond, an alarm is set. Installation of the electronic device in an unauthorized network is detected by verifying the Internet Protocol (IP) address of the device, such as when the device attempts to contact a server that provides services such as downloading new or updated software to the device, performing remote programming, and uploading diagnostic data. The devices may encrypt their messages using encryption codes that are unique individually or for a specified group of electronic devices.

Claims

1. An electronic device in a local area network, comprising:

a network interface that communicates with a connection point of the local area network (LAN), and that receives a polling signal from a first security system in the local area network via the connection point; and

a control that causes the network interface to communicate a response to the first security system via the connection point in response to receipt of the polling signal, said first security system generates an alarm if said electronic device is not present and, said control causes the network interface to communicate the response through an Internet connection to a second security system as an encrypted message using an encryption code that is unique to the electronic device;

wherein said message includes an address and an identifier associated with the electronic device and said second security system verifies that said electronic device is installed in an authorized network based upon said address and said identifier;

software stored in a memory of the electronic device that automatically initiates communication with a server of the electronic device to download new or updated software; and

a user interface configured to allow a user to arm and disarm building intrusion detection features separately from security features of said LAN.

2. The electronic device of claim 1, wherein:

the network interface communicates with at least one other electronic device in the local area network via the connection point to transfer entertainment content.

3. The electronic device of claim 1, wherein:

the network interface communicates, via the connection point, with a remote server that provides services for the electronic device.

4. The electronic device of claim 3, wherein:

the services include at least one of downloading software to the electronic device, performing remote programming of the electronic device, and uploading diagnostic data from the electronic device.

5. The electronic device of claim 1, wherein:

the connection point comprises at least one of a hub and a gateway.

6. The electronic device of claim 1, wherein:

the network interface receives software from the security system via the connection point for configuring the electronic device as a sensor of the security system.

7. The electronic device of claim 1, wherein:

the security system sets an alarm if it does not receive the response from the network interface after sending the polling signal to the network interface.

8. The electronic device of claim 1, wherein:

the control causes the network interface to communicate the response to the security system as an encrypted message using an encryption code that is unique for a specified group of electronic devices.

9. The electronic device of claim 1, wherein said control is configured to not allow spoofing of said electronic device.

10. A security system, comprising:

a security system server;

a local area network (LAN) coupled to the security system server through an Internet connection;

a network interface that communicates with a connection point of the local area network (LAN); and

a control that causes the network interface to transmit a polling signal to an electronic device in the local area network via the connection point, said control causes the network interface to communicate the response to the security system server as an encrypted message using an encryption code that is unique to the electronic device;

software stored in a memory of the electronic device that automatically initiates communication with a server of the electronic device to download new or updated software;

wherein said message includes an address and an identifier associated with the electronic device and said security system server verifies that said electronic device is installed in an authorized network based upon said address and said identifier;

wherein the control sets an alarm if a response to the polling signal is not received from the electronic device; and

wherein said network interface is configured to allow a user to arm and disarm building intrusion detection features separately from security features of said LAN.

11. The security system of claim 10, wherein:

the electronic device communicates with at least one other electronic device in the local area network via the connection point to transfer entertainment content.

12. The security system of claim 10, wherein:

the network interface communicates, via the connection point, with a remote server that provides services for the security system.

13. The security system of claim 12, wherein:

when the alarm is set, the network interface communicates a message to the remote server indicating that the alarm has been set.

14. The security system of claim 13, wherein:

the message comprises at least a portion of an Internet Protocol address associated with the electronic device.

15. The security system of claim 10, wherein:

the connection point comprises at least one of a hub and a gateway.

16. The security system of claim 10, wherein:

the network interface transmits software to the electronic device via the connection point to configure the electronic device as a sensor of the security system.

17. The security system of claim 10, further comprising:

means for monitoring at least one sensor for detecting intrusion in a building.

18. The security system of claim 10, wherein:

the response to the polling signal is provided as an encrypted message using an encryption code that is unique for a specified group of electronic devices.

19. The security system of claim 10, wherein said control is configured to not allow spoofing of said electronic device.

20. A security system server, comprising:

an electronic device;

software stored in a memory of the electronic device that automatically initiates communication with a server of the electronic device to download new or updated software;

a database of networks and identifiers of electronic devices authorized to operate in each network;

a local area network connected to the electronic device;

a network interface that receives a message that includes an address and an identifier associated with the electronic device; and

a control means coupled to the database for determining whether the address is consistent with the identifier, said control means verifies that said electronic device is installed in an authorized network based upon said address and said identifier and generates an alarm if said electronic device is not present, and said control causes the network interface to communicate the response to the security system as an encrypted message using an encryption code that is unique to the electronic device;

wherein said message includes an address and an identifier associated with the electronic device;

and said network interface is configured to allow a user to arm and disarm building intrusion detection features separately from security features of said LAN.

21. The security system server of claim 20, wherein:

the message is received from the electronic device.

22. The security system server of claim 20, wherein:

the message is received from a server that provides services for the electronic device.

23. The security system server of claim 20, wherein:

the address comprises at least a portion of an Internet Protocol address.

24. The security system server of claim 20, wherein:

the identifier comprises a serial number.

25. The security system server of claim 20, wherein:

the message is received as an encrypted message using an encryption code that is unique for a specified group of electronic devices.

26. The security system server of claim 20, wherein said control is configured to not allow spoofing of said electronic device.