Method and system for detecting alarm system tampering

• US 9,449,497 B2
• Filed: 10/24/2014
• Issued: 09/20/2016
• Est. Priority Date: 10/24/2014
• Status: Active Grant

• Current Assignee: Sierra Wireless America Incorporated (Sierra Wireless Incorporated)
• Original Assignee: Numerex Corporation (Sierra Wireless Incorporated)
• Inventors: Hyun, Eugene, Smith, Jeffery, Brown, Kevin, Wolverton, Andrew
• Primary Examiner(s): Yang, James
• Assistant Examiner(s): NGUYEN, LAURA N
• Application Number:
  US14/522,965
• Publication Number:
  US 20160117916A1
• Time in Patent Office: 697 Days
• US Class Current: 1/1
• CPC Class Codes: G08B 25/007 Details of data content structure of message packets; data protocols
• CPC Class Codes: G08B 29/12 Checking intermittently signalling or alarm systems

Abstract

An alarm system monitors a home, business, or other property for fire, burglary, break-in, or other event that may warrant raising an alarm. The alarm system is configured to detect tampering, whereby someone intentionally impedes the ability of the system to raise an alarm or otherwise interferes the system'"'"'s operation. An alarm panel of the alarm system communicates with a server. At certain times, the alarm system transmits a series of packets to the server using a unidirectional protocol. Upon receipt of one of the packets, the server alternates between monitoring for an incoming packet and ignoring any incoming packets. Detection of an incoming packet during a monitoring time period causes the server to transition to ignoring packets for a sleep period of time. Completion of the sleep period of time causes the server to return to monitoring for the monitoring period of time.

Claims

1. A server comprising:

a first communication interface that is configured to receive communications transmitted from an alarm panel, wherein the alarm panel is configured to transmit an arming notification, a disarm notification, an intrusion alarm, and packets transmitted periodically in a unidirectional communication protocol when a sensor connected to the alarm panel is triggered, wherein the alarm panel is further operable to stop transmitting packets in the unidirectional communication protocol when an alarm delay of the alarm panel expires or when the alarm panel is disarmed;

a second communication interface that is configured for bidirectional communication with a central monitoring station;

a processor that comprises;

a first connection to the first communication interface;

a second connection to the second communication interface;

memory; and

processor executable instructions stored in the memory to perform the steps of;

monitoring for the arming notification transmitted from the alarm panel;

monitoring for the disarm notification transmitted from the alarm panel;

monitoring for the intrusion alarm transmitted from the alarm panel;

responsive to receipt of the intrusion alarm, notifying the central monitoring station of the intrusion alarm;

alternating between;

for a first period of time, monitoring the first communication interface for a packet of the packets transmitted periodically in the unidirectional communication protocol from the alarm panel when the sensor connected to the alarm panel is triggered; and

for a second period of time, ignoring the packets transmitted periodically in the unidirectional communication protocol from the alarm panel when the sensor connected to the alarm panel is triggered,

wherein detection of the monitored-for packet of the packets transmitted periodically in the unidirectional communication protocol from the alarm panel during the first period of time suspends the packet monitoring of the first period of time and initiates the second period of time, and

wherein completion of the second period of time without detecting the monitored-for disarm notification and without detecting the monitored-for intrusion alarm initiates a subsequent execution of the first period of time; and

responsive to a completion of the subsequent execution of the first period of time during which the monitored-for packet has not been detected, the monitored-for disarm notification has not been received, and the monitored-for intrusion alarm has not been received, notifying the central monitoring station of an occurrence of a tampering event.

2. The server of claim 1, wherein the first period of time is predefined.

3. The server of claim 1, wherein the first period of time comprises randomness within a range.

4. The server of claim 1, wherein the second period of time is predefined.

5. The server of claim 1, wherein the second period of time comprises randomness within a range.

6. The server of claim 1, wherein the packets transmitted periodically are periodic with a period, and

wherein the first period of time is greater than twice the period.

7. he server of claim 1, wherein the packets transmitted periodically are periodic with a period, and

wherein the second period of time is greater than twice the period.

8. The server of claim 1, wherein second period of time is greater than twice the first period of time.

9. The server of claim 1, wherein the unidirectional protocol is user datagram protocol (UDP).

10. A method for detecting tampering of an alarm system, comprising the steps of:

monitoring for an arming notification transmitted from an alarm panel of the alarm system;

monitoring for a disarm notification transmitted from the alarm panel;

monitoring for an intrusion alarm transmitted from the alarm panel;

monitoring for packets transmitted periodically in a unidirectional communication protocol when a sensor connected to the alarm panel is triggered, wherein the alarm panel stops transmitting packets in the unidirectional communication protocol when an alarm delay of the alarm panel expires or when the alarm panel is disarmed;

responsive to receipt of the intrusion alarm, notifying a central monitoring station of the intrusion alarm;

alternating between;

for a first period of time, monitoring for a packet of the packets transmitted periodically in the unidirectional communication protocol from the alarm panel when the sensor connected to the alarm panel is triggered; and

for a second period of time, ignoring the packets transmitted periodically in the unidirectional communication protocol from the alarm panel when the sensor connected to the alarm panel is triggered,

wherein detection of the monitored-for packet of the packets transmitted periodically in the unidirectional communication protocol from the alarm panel during the first period of time suspends the packet monitoring of the first period of time and initiates the second period of time, and

wherein completion of the second period of time without detecting the monitored-for disarm notification during the second period of time and without detecting the monitored-for intrusion alarm during the second period of time initiates a subsequent execution of the first period of time; and

responsive to completion of the subsequent execution of the first period of time during which the monitored-for packet has not been detected, the monitored-for disarm notification has not been received, and the monitored-for intrusion alarm has not been received, notifying the central monitoring station of an occurrence of a tampering event.

11. The method of claim 10, wherein the first period of time is predefined.

12. The method of claim 10, wherein the first period of time comprises randomness within a range.

13. The method of claim 10, wherein the second period of time is predefined.

14. The method of claim 10, wherein the second period of time comprises randomness within a range.

15. The server of claim 10, wherein the packets transmitted periodically are periodic with a period, and

wherein the first period of time is greater than twice the period.

16. The server of claim 10, wherein the packets transmitted periodically are periodic with a period, and

wherein the second period of time is greater than twice the period.

17. The method of claim 10, wherein second period of time is greater than twice the first period of time.

18. The method of claim 10, wherein the unidirectional protocol is user datagram protocol (UDP).

19. A system comprising:

an alarm panel configured to perform the steps of;

transmitting an arming notification to a server in response to user entry of an arming command;

transmitting a disarming notification to the server in response to user entry of a disarm notification;

responsive to receiving a signal from a sensor while the alarm panel is armed, transmitting an intrusion alarm to the server if the alarm panel is not disarmed within a first period of time following receipt of the signal; and

responsive to receiving the signal from the sensor while the alarm panel is armed, transmitting a series of packets to the server using a unidirectional protocol; and

the server configured to perform the steps of;

responsive to receiving a packet in the series, ignoring any packets in the series incoming during a second period of time;

responsive to conclusion of the second period of time, monitoring for another packet in the series incoming during a third period of time;

if the another packet in the series is received during the third period of time, then ignoring any packets in the series incoming during a fourth period of time; and

if the another packet in the series is not received during the third period of time, then raising a tampering alarm unless the disarming notification is received during the third period of time and unless an intrusion alarm is received during the third period of time.

20. The system of claim 19, wherein the unidirectional protocol is UDP.