System and method of preventing hijacking of security systems and components

• US 9,769,182 B2
• Filed: 02/06/2015
• Issued: 09/19/2017
• Est. Priority Date: 02/06/2015
• Status: Active Grant

• Current Assignee: Ademco Inc. (Resideo Technologies, Inc.)
• Original Assignee: Honeywell International Inc.
• Inventors: Schmit, Thomas Paul
• Primary Examiner(s): Zee, Edward
• Application Number:
  US14/616,196
• Publication Number:
  US 20160234226A1
• Time in Patent Office: 956 Days
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G08B 25/003 Address allocation methods and details
• CPC Class Codes: G08B 25/14 Central alarm receiver or annunciator arrangements
• CPC Class Codes: G08B 29/16 Security signalling or alarm systems, e.g. redundant systems
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection

Abstract

A decentralized component is provided as an overly for a centralized system architecture as represented, for example, by a regional monitoring system. The decentralized component provides additional authentication of communications with a displaced monitoring service. Where agents of the decentralized component detect the presence of an unauthenticated monitoring service, messages can be generated or other actions can be taken to respond to that monitoring service.

Claims

1. A system comprising:

a common control element in communication with an authenticated monitoring service facility;

a plurality of detectors coupled to the common control element, wherein the plurality of detectors includes condition sensors, security sensors, or building automation related sensors; and

a decentralized monitoring unit, wherein the decentralized monitoring unit evaluates communications between the authenticated monitoring service facility and the common control element for one or more patterns that indicate that at least some of the communications are emanating from an unauthenticated source other than the authenticated monitoring service facility, and

wherein, when the decentralized monitoring unit determines that the at least some of the communications are emanating from the unauthorized source, the common control element intermittently generates diagnostic messages.

2. The system as in claim 1 wherein, when the decentralized monitoring unit senses the unauthenticated source, the decentralized monitoring unit generates notice messages or alters performance of at least one of the plurality of detectors.

3. The system as in claim 1 wherein, in response to determining that none of the patterns indicate that the at least some of the communications are emanating from the unauthenticated source, the decentralized monitoring unit updates a local log.

4. The system as in claim 3 wherein the decentralized monitoring unit transmits an authenticating indicium to the common control element in response to determining that none of the patterns indicate that the at least some of the communications are emanating from the unauthenticated source.

5. The system as in claim 1 wherein the decentralized monitoring unit comprises a plurality of decentralized monitoring units.

6. The system as in claim 4 wherein the decentralized monitoring unit comprises a plurality of decentralized monitoring units.

7. The system as in claim 1 wherein, in a presence of an authenticated source, the common control element continues to communicate local sensed conditions to the authenticated source.

8. The system as in claim 7 wherein, in a presence of the unauthenticated source, the decentralized monitoring unit provides indicia to the common control element indicative of the unauthenticated source.

9. A method comprising:

providing a regional monitoring system that detects conditions in a secured region, wherein a control panel of the regional monitoring system communicates with an authenticated monitoring service facility; and

providing a decentralized supervisory system that at least intermittently authenticates communications between the control panel and the authenticated monitoring service facility by evaluating the communications for patterns that indicate that at least some of the communications are emanating from an unauthenticated source other than the authenticated monitoring service facility,

wherein, when the decentralized supervisory system determines that the at least some of the communications are emanating from the unauthenticated source, the control panel intermittently generates diagnostic messages.

10. The method as in claim 9 further comprising generating an indicator in response to an authentication failure.

11. The method as in claim 10 further comprising communicating the indicator to the regional monitoring system.

12. The method as in claim 9 further comprising generating trouble indicators upon detection of an unauthenticated supervisory facility.

13. The method as in claim 12 further comprising generating the trouble indicators at a plurality of sites in the regional monitoring system and broadcasting the trouble indicators.

14. An apparatus comprising:

a security system, a condition monitoring system, or a building automation system in communication with an authenticated monitoring service facility; and

a supervisory system comprising a plurality of agents,

wherein the plurality of agents detect communications associated with the security system, the condition monitoring system, or the building automation system,

wherein the plurality of agents evaluate the communications between the authenticated monitoring service facility and the security system, the condition monitoring system, or the building automation system for one or more patterns that indicate that at least some of the communications are emanating from an unauthorized source other than the authenticated monitoring service facility, and

wherein, when the plurality of agents determine that the at least some of the communications are emanating from the unauthorized source, a control panel of the security system, the condition monitoring system, or the building automation system intermittently generates diagnostic messages.

15. The apparatus as in claim 14 further comprising circuitry for communicating with a wireless user device, wherein, responsive to determining that the one or more patterns indicate that the at least some of the communications are emanating from the unauthorized source, the supervisory system transmits a warning indication to the wireless user device.

16. The apparatus as in claim 14 further comprising circuitry for communicating with a wireless user device, wherein, responsive to determining that the one or more patterns indicate that the at least some of the communications are emanating from the unauthorized source, the supervisory system transmits a performance altering indicium to the security system, the condition monitoring system, or the building automation system.