Wireless device monitoring systems and monitoring devices, and associated methods

• US 8,737,965 B2
• Filed: 08/08/2008
• Issued: 05/27/2014
• Est. Priority Date: 05/07/2007
• Status: Active Grant

• Current Assignee: Battelle Energy Alliance LLC (Battelle Memorial Institute)
• Original Assignee: Battelle Energy Alliance LLC (Battelle Memorial Institute)
• Inventors: McCown, Steven H., Derr, Kurt W., Rohde, Kenneth W.
• Primary Examiner(s): Ly, Nghi H
• Application Number:
  US12/188,284
• Publication Number:
  US 20080291013A1
• Time in Patent Office: 2,118 Days
• Field of Search: 455/411.1, 455/410, 455/456.4, 455/411, 380/287, 380/247
• US Class Current: 455/411
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/64 using geofenced areas

Abstract

Wireless device monitoring systems and monitoring devices include a communications module for receiving wireless communications of a wireless device. Processing circuitry is coupled with the communications module and configured to process the wireless communications to determine whether the wireless device is authorized or unauthorized to be present at the monitored area based on identification information of the wireless device. Methods of monitoring for the presence and identity of wireless devices are also provided.

Claims

1. A monitoring device, comprising:

a communications module configured to detect the presence of a wireless device within a monitored area upon the wireless device being within wireless communications proximity to the monitoring device, transmit a first wireless communication to the wireless device in response to detecting the presence of the wireless device in the monitored area, the first wireless communication including an authentication identifier used by the wireless device to authenticate the monitoring device, receive a second wireless communication from the wireless device in response to the wireless device receiving the first wireless communication, the second wireless communication including an encrypted device identifier used by the monitoring device to authenticate the wireless device, forward the encrypted device identifier to at least one of a telecommunications provider and a management device, and receive the device identifier from the telecommunications provider in an unencrypted format;

processing circuitry coupled with the communications module and configured to process the device identifier received from the at least one telecommunications provider and management device in an unencrypted format to determine whether the wireless device is authorized or unauthorized to be present at the monitored area; and

an indication module configured to generate an indication regarding the presence of the wireless device when the wireless device is unauthorized to be present at the monitored area and provide the indication to a user of the monitoring device other than a user of the wireless device, the indication being at least one of a silent alarm, a visual alarm, and an audible alarm.

2. The monitoring device of claim 1, further comprising storage media configured to store information, and wherein the processing circuitry is configured to use the stored information to determine whether the wireless device is authorized or unauthorized to be present at the monitored area.

3. The monitoring device of claim 2, wherein the stored information comprises at least one of identification information and authentication data of one or more authorized wireless devices.

4. The monitoring device of claim 1, wherein the second wireless communication includes configuration data indicating a present configuration of the wireless device.

5. The monitoring device of claim 1, wherein the communications module is configured to communicate the wireless communications to at least one other monitoring device configured to determine whether the wireless device is authorized or unauthorized.

6. The monitoring device of claim 1, wherein the communications module is configured to receive the wireless communications from at least one other monitoring device.

7. The monitoring device of claim 1, wherein the communications module is configured to forward the wireless communications to an external device to determine whether the wireless device is authorized or unauthorized.

8. The monitoring device of claim 1, wherein the wireless device is associated with a user and the first wireless communication includes a request for identification information associated with the user and the second wireless communication includes the requested identification information associated with the user, further wherein the processing circuitry is configured to process the requested identification information to determine whether the user associated with the wireless device is authorized or unauthorized to be present at the monitored area.

9. A wireless device monitoring system, comprising:

at least one monitoring device comprising;

a communications module configured to detect the presence of wireless communications of a wireless device within a monitored area upon the wireless device being within wireless communications proximity to the at least one monitoring device, transmit a first wireless communication from the at least one monitoring device to the wireless device in response to detecting the presence of the wireless device in the monitored area, and receive a second wireless communication from the wireless device located within the monitored area in response to the wireless device receiving the first wireless communication, the second wireless communication including an encrypted device identifier used by the monitoring device to authenticate the wireless device, forward the encrypted device identifier to at least one of a telecommunications provider and a management device, and receive the device identifier from the telecommunications provider in an unencrypted format;

processing circuitry coupled with the communications module and configured to process the device identifier received from the at least one telecommunications provider and management device in an unencrypted format to determine whether the wireless device is authorized or unauthorized to be present at the monitored area; and

an indication module configured to generate an indication regarding the presence of the wireless device when the wireless device is unauthorized to be present at the monitored area and provide the indication to a user of the monitoring device other than a user of the wireless device, the indication being at least one of a silent alarm, a visual alarm, and an audible alarm.

10. The system of claim 9, wherein the communications module is configured to receive the wireless communications directly from the wireless device.

11. The system of claim 9, wherein the communications module is configured to receive the wireless communications of the wireless device from at least one other monitoring device.

12. The system of claim 11, wherein the at least one other monitoring device comprises at least another communications module configured to:

detect the wireless communications of the wireless device;

output communications to the wireless device and receive wireless communications from the wireless device responsive to the output communications; and

communicate the wireless communications to the at least one monitoring device.

13. The system of claim 9, further comprising at least one storage medium configured to store information, and wherein the processing circuitry is configured to use the stored information to determine whether the wireless device is authorized or unauthorized to be present at the monitored area.

14. The system of claim 13, wherein the stored information comprises at least one of identification information and authentication data regarding at least one authorized wireless device.

15. The system of claim 9, wherein the wireless device is associated with a user and the first wireless communication includes a request for identification information associated with the user and the second wireless communication includes the requested identification information associated with the user, further wherein the processing circuitry is configured to process the requested identification information to determine whether the user associated with the wireless device is authorized or unauthorized to be present at the monitored area.

16. A method comprising:

detecting, by a monitoring device, a wireless device within a monitored area upon the wireless device being within wireless communications proximity to the monitoring device;

transmitting from the monitoring device a first wireless communication to the wireless device in response to detecting the presence of the wireless device in the monitored area, the first wireless communication including an authentication identifier used by the wireless device to authenticate the monitoring device;

receiving, at the monitoring device, a second wireless communication from the wireless device in response to the wireless device receiving the first wireless communication, the second wireless communication including an encrypted device identifier;

forwarding, by the monitoring device, the encrypted device identifier to at least one of a telecommunications provider and a management device;

receiving, by the monitoring device, the device identifier in an unencrypted format from the at least one telecommunications provider and management device;

determining, by the monitoring device, whether the wireless device is authorized or unauthorized to be present at the monitored area using the device identifier received from the at least one telecommunications provider and management device in an unencrypted format in response to the obtained identification information; and

generating, by the monitoring device, an indication regarding the presence of the device when the wireless device is unauthorized to be present at the monitored area, the indication being at least one of a silent alarm, a visual alarm, and an audible alarm; and

providing, by the monitoring device, the indication to a user of the monitoring device other than a user of the wireless device.

17. The method of claim 16, wherein detecting the wireless device comprises scanning frequencies of use of the wireless device.

18. The method of claim 16, further comprising determining that the wireless device is unauthorized upon failure of the wireless device to provide the at least one responsive communication.

19. The method of claim 16, wherein obtaining identification information regarding the wireless device comprises obtaining information regarding at least one of a unique device identifier, an indicator whether the wireless device is enrolled in a corporate personal electronic devices (PED) server, and an identification of the corporate PED server for the wireless device.

20. The method of claim 16, wherein obtaining identification information regarding the wireless device comprises:

receiving, by the monitoring device, at least one indecipherable communication from the wireless device;

forwarding, by the monitoring device, the at least one indecipherable communication to the at least one telecommunications provider and management device; and

receiving, by the monitoring device, identification information regarding the wireless device from the at least one telecommunications provider and management device.

21. The method of claim 16, wherein determining whether the wireless device is authorized or unauthorized comprises comparing the obtained identification information from the wireless device with stored information.

22. The method of claim 16, wherein determining whether the wireless device is authorized or unauthorized comprises:

communicating, by the monitoring device, with an external device in order to access information accessible by the external device; and

comparing, by the monitoring device, the at least some of the identification information with information accessible by the external device.

23. The method of claim 16, further comprising:

obtaining, by the monitoring device, device authentication data relating to the wireless device;

accessing, by the monitoring device, a data storage device storing authentication data for the wireless device thereon;

comparing, by the monitoring device, the obtained device authentication data with authentication data stored on the data storage device; and

determining, by the monitoring device, if the wireless device is authorized or unauthorized responsive to the comparing.

24. The method of claim 16, wherein the wireless device is associated with a user and the first wireless communication includes a request for identification information associated with the user and the second wireless communication includes the requested identification information associated with the user, the method further comprising:

processing, by the monitoring device, the requested identification information to determine whether the user associated with the wireless device is authorized or unauthorized to be present at the monitored area.

25. A method comprising:

interrogating, by a monitoring device, a wireless device located in a monitored area;

receiving, by the monitoring device, at least one reply from the wireless device responsive to the interrogating the wireless device, wherein the at least one reply from the wireless device includes an encrypted device identifier;

forwarding, by the monitoring device, the encrypted device identifier to at least one of a telecommunications provider and a management device;

receiving, by the monitoring device, the device identifier in an unencrypted format from the at least one telecommunications provider and management device;

determining, by the monitoring device, whether the wireless device is authorized or unauthorized to be present at the monitored area using the device identifier received from the at least one telecommunications provider and management device in an unencrypted format, the determining being in compliance with the security protocol;

generating, by the monitoring device, an indication regarding the presence of the wireless device when the wireless device is unauthorized to be present at the monitored area, the indication being at least one of a silent alarm, a visual alarm, and an audible alarm; and

providing, by the monitoring device, the indication to a user of the monitoring device other than a user of the wireless device.

26. The method of claim 25, wherein interrogating a wireless device comprises requesting at least one of identification information of the wireless device and authentication data of the wireless device.

27. The method of claim 25, wherein receiving at least one reply from the wireless device responsive to the interrogating the wireless device comprises receiving at least one indecipherable reply from the wireless device, and further comprising:

forwarding, by the monitoring device, the at least one indecipherable reply to the at least one telecommunications provider and management device; and

receiving, by the monitoring device, the at least one reply in a decipherable format from the at least one telecommunications provider and management device.

28. The method of claim 25, wherein determining whether the wireless device is authorized or unauthorized to be present at the monitored area comprises comparing the at least one received reply with information stored on a data storage device communicatively coupled to the monitoring device.

29. The method of claim 25, wherein determining whether the wireless device is authorized or unauthorized comprises:

communicating, by the monitoring device, with an external device in order to access information accessible by the external device; and

comparing, by the monitoring device, the at least a portion of the at least one received reply from the wireless device with information accessible by the external device.

30. The method of claim 25, wherein the wireless device is associated with a user and the interrogation includes a request for identification information associated with the user and the at least one reply includes the requested identification information associated with the user, the method further comprising:

processing, by the monitoring device, the requested identification information to determine whether the user associated with the wireless device is authorized or unauthorized to be present at the monitored area.