Digital fingerprint tracking

• US 9,972,185 B2
• Filed: 11/07/2016
• Issued: 05/15/2018
• Est. Priority Date: 12/30/2014
• Status: Active Grant

• Current Assignee: Alarm.com Inc. (Alarm.com Holdings, Inc.)
• Original Assignee: Alarm.com Inc. (Alarm.com Holdings, Inc.)
• Inventors: Hutz, David James
• Primary Examiner(s): File, Erin M
• Application Number:
  US15/344,863
• Publication Number:
  US 20170053507A1
• Time in Patent Office: 554 Days
• CPC Class Codes: G08B 13/00 Burglar, theft or intruder alarms
• CPC Class Codes: G08B 13/19697 Arrangements wherein non-video detectors generate an alarm themselves
• CPC Class Codes: G08B 15/00 Identifying, scaring or incapacitating burglars, thieves or intruders, e.g. by explosives
• CPC Class Codes: G08B 21/02 Alarms for ensuring the safety of persons
• CPC Class Codes: G08B 21/0205 Specific application combined with child monitoring using a transmitter-receiver system
• CPC Class Codes: G08B 21/0225 Monitoring making use of different thresholds, e.g. for different alarm levels
• CPC Class Codes: G08B 21/0277 Communication between units on a local network, e.g. Bluetooth, piconet, zigbee, Wireless Personal Area Networks [WPAN]
• CPC Class Codes: H04L 12/6418 Hybrid transport

Abstract

Techniques are described for tracking intruders of a monitored property by the unique identifying characteristics or “digital fingerprints” of electronic devices carried by the intruders. A system detects an alarm event at a monitored property based on output from at least one sensor located at the monitored property. In response to detecting the alarm event at the monitored property, the system initiates a process to gather electronic identifiers for mobile electronic devices located within the monitored property at a time corresponding to the detected alarm event. The system determines electronic identifiers for the mobile electronic devices located within the monitored property at a time corresponding to the detected alarm event. The system stores in electronic storage, information indicating the determined electronic identifiers for the mobile electronic devices located within the monitored property at a time corresponding to the detected alarm event.

Claims

1. A computer-implemented method comprising:

monitoring, by a server, mobile electronic device identifiers comprising media access control (MAC) addresses associated with mobile electronic devices present within the monitored property;

receiving, by the server and from one or more sensors in the monitored property, system data for the monitored property;

generating, by the server, a profile for the monitored property based on the monitored mobile electronic device identifiers and the monitored system data, the profile comprising data indicative of one or more MAC addresses associated with mobile electronic devices that are detected in the monitored property equal to or more than a threshold number of times during a particular time period;

determining, based on the profile, whether a particular MAC address of a particular device detected during the particular time period corresponds to the one or more MAC addresses associated with mobile electronic devices that are detected in the monitored property equal to or more than the threshold number of times during the particular time period; and

in response to determining that the particular MAC address of the particular device detected during the particular time period does not correspond to the one or more MAC addresses associated with mobile electronic devices that are detected in the monitored property equal to or more than the threshold number of times during the particular time period, transmitting an alert message to a device of a user associated with the monitored property, the alert message comprising data indicative of the particular MAC address and the particular time period.

2. The method of claim 1, wherein the monitored system data comprises one or more of system status data or sensor data.

3. The method of claim 1, wherein determining whether the particular MAC address of the particular device detected during the particular time period corresponds to the one or more MAC addresses comprises:

identifying MAC addresses for mobile electronic devices frequently detected within the monitored property and providing an alert when a MAC address not associated with the mobile electronic devices frequently detected within the monitored property is detected within the monitored property.

4. The method of claim 1, wherein monitoring mobile electronic device identifiers present within the monitored property comprises:

monitoring when electronic identifiers are detected for mobile electronic devices within the monitored property across time periods of hours, days, weeks, and months; and

storing information indicating the time periods when the electronic identifiers were detected within the monitored property.

5. The method of claim 1, wherein receiving system data for the monitored property comprises:

receiving sensor data and data indicative of alarm event types detected at the monitored property across time periods of hours, days, weeks, and months; and

storing information indicating the time periods corresponding to the sensor data and the data indicative of alarm event types.

6. The method of claim 1, wherein determining whether the particular MAC address of the particular device detected during the particular time period corresponds to the one or more MAC addresses comprises:

determining that a MAC address not frequently detected at a particular time of day is being detected at the particular time of day; and

in response to the determination that the MAC address not frequently detected at the particular time of day is being detected at the particular time of day, generating an alert for the user associated with the monitored property.

7. The method of claim 1, wherein determining whether the particular MAC address of the particular device detected during the particular time period corresponds to the one or more MAC addresses comprises:

determining that a MAC address that is frequently detected for a particular day is not detected for the particular day; and

in response to the determination that the MAC address that is frequently detected for the particular day is not detected for the particular day, generating an alert for the user associated with the monitored property.

8. The method of claim 1:

wherein monitoring the mobile electronic device identifiers associated with mobile electronic devices that are present within the monitored property comprises monitoring for electronic device identifiers associated with mobile electronic devices that are present within the monitored property over particular time ranges on particular days of a week;

wherein receiving system data for the monitored property comprises receiving sensor data captured at the monitored property over the particular time ranges on the particular days of a week;

wherein generating a profile for the monitored property based on the monitored mobile electronic device identifiers and the monitored system data comprises generating the profile for the monitored property that indicates that a second mobile electronic device associated with a second electronic device identifier is detected within the monitored property during a particular time range on a particular day of the week equal to or more than the threshold number of times; and

wherein determining whether the particular MAC address of the particular device detected during the particular time period corresponds to the one or more MAC addresses comprises;

determining, based on the profile, that the second mobile electronic device associated with the second electronic device identifier is not detected at the monitored property during the particular time range on the particular day of the week and that an unknown electronic device identifier of an unknown mobile electronic device is detected at the monitored property during the particular time range on the particular day of the week; and

based on the determination that the second mobile electronic device associated with the second electronic device identifier is not detected at the monitored property during the particular time range on the particular day of the week and that the unknown electronic device identifier of the unknown mobile electronic device is detected at the monitored property during the particular time range on the particular day of the week, providing, to the device of the user associated with the monitored property, an alert that indicates that, during the particular time range on the particular day of the week, the second mobile electronic device associated with the second electronic device identifier was not detected at the monitored property and that the unknown mobile electronic device with the unknown electronic device identifier was detected at the monitored property.

9. The method of claim 1:

wherein monitoring the mobile electronic device identifiers associated with mobile electronic devices that are present within the monitored property comprises monitoring for electronic device identifiers associated with mobile electronic devices that are present within the monitored property over particular time ranges on particular days of a week;

wherein receiving system data for the monitored property comprises receiving sensor data captured at the monitored property over the particular time ranges on the particular days of a week;

wherein generating a profile for the monitored property based on the monitored mobile electronic device identifiers and the monitored system data comprises generating the profile for the monitored property that indicates that a second mobile electronic device associated with a second electronic device identifier is detected within the monitored property during a particular time range on a particular day of the week less than the threshold number of times; and

wherein determining whether the particular MAC address of the particular device detected during the particular time period corresponds to the one or more MAC addresses comprises;

determining, based on the profile, that the second mobile electronic device associated with the second electronic device identifier is detected at the monitored property during the particular time range on the particular day of the week; and

based on the determination that the second mobile electronic device associated with the second electronic device identifier is detected at the monitored property during the particular time range on the particular day of the week, providing, to the device of the user associated with the monitored property, an alert that indicates that the second mobile electronic device associated with the second electronic device identifier is detected at the monitored property during the particular time range on the particular day of the week and that the second mobile electronic device associated with the second electronic device identifier is typically not detected at the monitored property during the particular time range on the particular day of the week.

10. The method of claim 1, further comprising configuring one or more electronic device detectors to:

spoof a trusted wireless device or trusted wireless network; and

transmit one or more requests for device identification information to electronic devices located in the monitored property.

11. A system comprising:

one or more computers; and

one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising;

monitoring mobile electronic device identifiers comprising media access control (MAC) addresses associated with mobile electronic devices present within the monitored property;

receiving, from one or more sensors in the monitored property, system data for the monitored property;

generating a profile for the monitored property based on the monitored mobile electronic device identifiers and the monitored system data, the profile comprising data indicative of one or more MAC addresses associated with mobile electronic devices that are detected in the monitored property equal to or more than a threshold number of times during a particular time period;

determining, based on the profile, whether a particular MAC address of a particular device detected during the particular time period corresponds to the one or more MAC addresses associated with mobile electronic devices that are detected in the monitored property equal to or more than the threshold number of times during the particular time period; and

in response to determining that the particular MAC address of the particular device detected during the particular time period does not correspond to the one or more MAC addresses associated with mobile electronic devices that are detected in the monitored property equal to or more than the threshold number of times during the particular time period, transmitting an alert message to a device of a user associated with the monitored property, the alert message comprising data indicative of the particular MAC address and the particular time period.

12. The system of claim 11, wherein the monitored system data comprises one or more of system status data or sensor data.

13. The system of claim 11, wherein determining whether the particular MAC address of the particular device detected during the particular time period corresponds to the one or more MAC addresses comprises:

identifying MAC addresses for mobile electronic devices frequently detected within the monitored property and providing an alert when a MAC address not associated with the mobile electronic devices frequently detected within the monitored property is detected within the monitored property.

14. The system of claim 11, wherein monitoring mobile electronic device identifiers present within the monitored property comprises:

monitoring when electronic identifiers are detected for mobile electronic devices within the monitored property across time periods of hours, days, weeks, and months; and

storing information indicating the time periods when the electronic identifiers were detected within the monitored property.

15. The system of claim 11, wherein receiving system data for the monitored property comprises:

receiving sensor data and data indicative of alarm event types detected at the monitored property across time periods of hours, days, weeks, and months; and

storing information indicating the time periods corresponding to the sensor data and the data indicative of alarm event types.

16. The system of claim 11, wherein determining whether the particular MAC address of the particular device detected during the particular time period corresponds to the one or more MAC addresses comprises:

determining that a MAC address not frequently detected at a particular time of day is being detected at the particular time of day; and

in response to the determination that the MAC address not frequently detected at the particular time of day is being detected at the particular time of day, generating an alert for the user associated with the monitored property.

17. The system of claim 11, wherein determining whether the particular MAC address of the particular device detected during the particular time period corresponds to the one or more MAC addresses comprises:

determining that a MAC address that is frequently detected for a particular day is not detected for the particular day; and

in response to the determination that the MAC address that is frequently detected for the particular day is not detected for the particular day, generating an alert for the user associated with the monitored property.

18. The system of claim 11:

wherein monitoring the mobile electronic device identifiers associated with mobile electronic devices that are present within the monitored property comprises monitoring for electronic device identifiers associated with mobile electronic devices that are present within the monitored property over particular time ranges on particular days of a week;

wherein receiving system data for the monitored property comprises receiving sensor data captured at the monitored property over the particular time ranges on the particular days of a week;

wherein generating a profile for the monitored property based on the monitored mobile electronic device identifiers and the monitored system data comprises generating the profile for the monitored property that indicates that a second mobile electronic device associated with a second electronic device identifier is detected within the monitored property during a particular time range on a particular day of the week equal to or more than the threshold number of times; and

wherein determining whether the particular MAC address of the particular device detected during the particular time period corresponds to the one or more MAC addresses comprises;

determining, based on the profile, that the second mobile electronic device associated with the second electronic device identifier is not detected at the monitored property during the particular time range on the particular day of the week and that an unknown electronic device identifier of an unknown mobile electronic device is detected at the monitored property during the particular time range on the particular day of the week; and

based on the determination that the second mobile electronic device associated with the second electronic device identifier is not detected at the monitored property during the particular time range on the particular day of the week and that the unknown electronic device identifier of the unknown mobile electronic device is detected at the monitored property during the particular time range on the particular day of the week, providing, to the device of the user associated with the monitored property, an alert that indicates that, during the particular time range on the particular day of the week, the second mobile electronic device associated with the second electronic device identifier was not detected at the monitored property and that the unknown mobile electronic device with the unknown electronic device identifier was detected at the monitored property.

19. The system of claim 11:

wherein monitoring the mobile electronic device identifiers associated with mobile electronic devices that are present within the monitored property comprises monitoring for electronic device identifiers associated with mobile electronic devices that are present within the monitored property over particular time ranges on particular days of a week;

wherein receiving system data for the monitored property comprises receiving sensor data captured at the monitored property over the particular time ranges on the particular days of a week;

wherein generating a profile for the monitored property based on the monitored mobile electronic device identifiers and the monitored system data comprises generating the profile for the monitored property that indicates that a second mobile electronic device associated with a second electronic device identifier is detected within the monitored property during a particular time range on a particular day of the week less than the threshold number of times; and

wherein determining whether the particular MAC address of the particular device detected during the particular time period corresponds to the one or more MAC addresses comprises;

determining, based on the profile, that the second mobile electronic device associated with the second electronic device identifier is detected at the monitored property during the particular time range on the particular day of the week; and

based on the determination that the second mobile electronic device associated with the second electronic device identifier is detected at the monitored property during the particular time range on the particular day of the week, providing, to the device of the user associated with the monitored property, an alert that indicates that the second mobile electronic device associated with the second electronic device identifier is detected at the monitored property during the particular time range on the particular day of the week and that the second mobile electronic device associated with the second electronic device identifier is typically not detected at the monitored property during the particular time range on the particular day of the week.

20. The system of claim 11, wherein the operations further comprise configuring one or more electronic device detectors to:

spoof a trusted wireless device or trusted wireless network; and

transmit one or more requests for device identification information to electronic devices located in the monitored property.