User-selectable security modes for interconnected devices

• US 9,407,624 B1
• Filed: 05/14/2015
• Issued: 08/02/2016
• Est. Priority Date: 05/14/2015
• Status: Active Grant

• Current Assignee: Delphian Systems, LLC
• Original Assignee: Delphian Systems, LLC
• Inventors: Myers, Gary L., Hirpara, Ashok, Veleris, John D.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Le, Thanh
• Application Number:
  US14/712,646
• Time in Patent Office: 446 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 3/0484 for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: Y02D 30/70 in wireless communication networks

Abstract

Systems, methods, and devices for forming networks of interconnected devices are provided. Individual devices of the network are configured to utilize multiple wireless communication standards which may include wireless LAN communication standards, short-range wireless communication standards, and low-power wireless communication standards. User utilize access devices to monitor and control the devices of the network. Communications transmitted to devices of the network may be routed through a server located remotely relative to the network as well as through other devices of the network. The devices of the network are configured with multiple security modes having different security features resulting in different response times. The security mode a device utilizes when communicating with an access device or another device of the network is selectable by the user.

Claims

1. A method comprising:

establishing a mesh network comprising a plurality of devices, each device being configured for wireless communication using a plurality of different low-power wireless communication standards;

utilizing, by a first device of the plurality of devices, one of the low-power wireless communication standards when wirelessly communicating with one or more devices of the plurality of devices;

receiving, at the first device, a command to set a security mode of the first device to a user-selected security mode selected from a plurality of security modes the first device is configured to utilize;

utilizing, by the first device, the security mode selected when wirelessly communicating with a user-operated device; and

based on whether the user-operated device is within wireless range of at least one of the plurality of devices of the mesh network, routing wireless communications exchanged between the first device and the user-operated device via either i) a second device of the plurality of devices that is within wireless range of the user-operated device, or ii) a server located remotely relative to the mesh network and the user-operated device.

2. The method of claim 1, wherein:

a first one of the plurality of security modes is associated with a first response time; and

a second one of the plurality of security modes is associated with a second response time that is shorter than the first response time.

3. The method of claim 2, wherein:

the first one of the plurality of security modes comprises a first set of security features; and

the second one of the plurality of security modes comprises a second set of security features that is different than the first set of security features.

4. The method of claim 3, wherein:

a security feature of at least one of the plurality of security modes comprises comparing a first serial number received in a communication from the user-operated device to a second serial number associated with the first device.

5. The method of claim 3, wherein:

a security feature of at least one of the plurality of security modes comprises decrypting content included in a communication received from the user-operated device using a key associated with the first device.

6. The method of claim 3, wherein:

a security feature of at least one of the plurality of security modes comprises reducing a wireless range of the first device.

7. The method of claim 3, wherein:

one of the plurality of security modes utilizes a first decryption algorithm to decrypt at least a portion of individual communications received at the first device from the user-operated device; and

another one of the plurality of security modes utilizes a second decryption algorithm, different than the first decryption algorithm, to decrypt at least a portion of individual communications received at the first device from the user-operated device.

8. The method of claim 1, further comprising:

utilizing, by the first device, the security mode selected when wirelessly communicating with one or more of the plurality of devices.

9. The method of claim 1, wherein:

a communication comprising the command is received at the first device directly from the user-operated device.

10. The method of claim 1, wherein:

the plurality of low-power wireless communication standards comprise at least one low-power wireless communication standard wherein power consumption of about 10 mA to about 30 mA occurs during transmission or reception of wireless communications.

11. A device comprising:

a communication module configured to communicate using a plurality of different low-power wireless communication standards; and

memory storing executable instructions comprising a plurality of instruction sets wherein individual instructions sets of the plurality of instructions sets correspond to one of a plurality of security modes;

wherein the instructions, when executed, cause the device to

join a mesh network comprising a plurality of devices, each device being configured to communicate using at least one of the low-power wireless communication standards,

utilize one of the low-power wireless communication standards when wirelessly communicating with one or more devices of the plurality of devices,

receive a command to set a security mode of the device to a user-selected security mode selected from the plurality of security modes,

utilize the security mode selected when wirelessly communicating with a user-operated device, and

when the user-operated device is not within wireless range of the device, route wireless communications exchanged between the device and the user-operated device via either i) a second device of the plurality of devices that is within wireless range of the user-operated device, or ii) a server located remotely relative to the mesh network and the user-operated device.

12. The device of claim 11, wherein:

a first one of the plurality of security modes is associated with a first response time; and

a second one of the plurality of security modes is associated with a second response time that is shorter than the first response time.

13. The device of claim 12, wherein:

the first one of the plurality of security modes comprises a first set of security features; and

the second one of the plurality of security modes comprises a second set of security features that is different than the first set of security features.

14. The device of claim 13, wherein:

a security feature of at least one of the plurality of security modes comprises at least one of

(i) comparing a first security token received in a communication from the user-operated device to a second security token associated with the device,

(ii) comparing a first serial number received in a communication from the user-operated device to a second serial number associated with the device,

(iii) comparing a first invitation code received in a communication from the user-operated device to a second invitation code stored in memory at the device,

(iv) encrypting a session identifier of a communication session established between the device and the user-operated device using a first key associated with the device,

(v) decrypting content included in a communication received from the user-operated device using a second key associated with the device,

(vi) bonding the device with the user-operated device during pairing of the device and the user-operated device,

(vii) reducing a wireless range of the device, and

(viii) combinations thereof.

15. The device of claim 11, wherein:

the instructions, when executed, further cause the device to

utilize the security mode selected when wirelessly communicating with one or more of the plurality of devices.

16. The device of claim 11, wherein:

the device receives the command from the user-operated device responsive to user input selecting of one of the plurality of security modes from an interface at the user-operated device, the interface displaying a list of one or more security modes available for selection.

17. The device of claim 16, wherein:

a first plurality of security modes is available for selection at one or more devices of the plurality of devices having a first device type and a second plurality of security modes that is different from the first plurality of security modes is available for selection at one or more devices of the plurality of devices having a second device type.

18. The device of claim 11, wherein:

the communication module is further configured to communicate using a wireless LAN communication standard and further configured to communicate via a cellular network.

19. The device of claim 11, wherein:

the communication module is further configured to communicate using a wired LAN communication standard.

20. The device of claim 11, further comprising:

a physical switch configured to toggle activation of the device wherein, when activated, the device either powers up and waits to receive a communication or powers up and transmits a communication.

21. A system comprising:

a plurality of devices forming a mesh network wherein individual devices of the plurality of devices are configured to communicate using at least one low-power wireless communication standard;

wherein the plurality of devices includes a device configured to communicate with at least one other device of the plurality of devices, the device comprising

a communication module configured to communicate using a plurality of different low-power wireless communication standards, and

memory storing executable instructions comprising a plurality of instruction sets wherein individual instructions sets of the plurality of instructions sets correspond to one of a plurality of security modes, and

wherein the instructions, when executed, cause the device to

utilize one of the low-power wireless communication standards when wirelessly communicating with one or more devices of the plurality of devices,

receive a command to set a security mode of the device to a user-selected security mode selected from the plurality of security modes,

utilize the security mode selected when wirelessly communicating with a user-operated device, and

when the user-operated device is not within wireless range of the device, routing wireless communications exchanged between the device and the user-operated device via either i) a second device of the plurality of devices that is within wireless range of the user-operated device, or ii) a server located remotely relative to the mesh network and the user-operated device.

22. The system of claim 21, wherein:

one of the plurality of devices of the mesh network is configured to communicate using the plurality of different low-power wireless communication standards and configured to communicate using a wired local area network (LAN) communication standard.

23. The system of claim 22, wherein:

another one of the plurality of devices of the mesh network is configured to communicate using the plurality of different low-power wireless communication standards and to communicate via a cellular network.

24. The system of claim 23, further comprising:

a server located remotely relative to the mesh network;

wherein the server is configured to communicate with one of the plurality of devices of the mesh network and is configured to communicate with the user-operated device; and

wherein the server comprises

a data store that stores, for each device in the plurality of devices, a record comprising a serial number, a security token, and at least one key used for at least one of encryption or decryption, and

memory storing instructions that, when executed, cause the server to transmit to the user-operated device a key associated with the device.

25. The system of claim 24, further comprising:

a gateway device in signal communication with the server and at least one device of the plurality of devices.

26. The system of claim 25, wherein:

the memory of the server further stores instructions that, when executed, cause the server to

receive from the user-operated device a command for one of the devices of the plurality of devices to execute, and

add the command received to a queue of commands associated with the gateway device.

27. The system of claim 26, wherein:

the instructions stored at the memory of the server, when executed, further cause the server to

receive from the gateway device a request for one or more commands in the queue of commands, and

transmit to the gateway device, responsive to receipt of the request, one or more commands in the queue of commands.