Proximity based wireless security system

• US 9,980,161 B2
• Filed: 12/30/2015
• Issued: 05/22/2018
• Est. Priority Date: 09/14/2011
• Status: Active Grant

• Current Assignee: Enel X North America, Inc. (ENEL SPA)
• Original Assignee: Enernoc
• Inventors: Willig, Randy C.
• Primary Examiner(s): Hoffman, Brandon
• Assistant Examiner(s): Anderson, Michael D
• Application Number:
  US14/983,939
• Publication Number:
  US 20160119353A1
• Time in Patent Office: 874 Days
• Field of Search: 726 3
• CPC Class Codes: G01D 4/002 Remote reading of utility meters
• CPC Class Codes: G08C 15/02 simultaneously, i.e. using frequency division
• CPC Class Codes: H04B 1/7156 Arrangements for sequence synchronisation
• CPC Class Codes: H04B 2001/71563 Acquisition
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04Q 2209/43 using wireless personal area networks [WPAN], e.g. 802.15, 802.15.1, 802.15.4, Bluetooth or ZigBee
• CPC Class Codes: H04Q 2209/50 using a mobile data collecting device, e.g. walk by or drive by
• CPC Class Codes: H04Q 2209/60 for transmitting utility meters data, i.e. transmission of data from the reader of the utility meter
• CPC Class Codes: H04Q 9/00 Arrangements in telecontrol or telemetry systems for selectively calling a substation from a main station, in which substation desired apparatus is selected for applying a control signal thereto or for obtaining measured values therefrom
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 24/06 Testing, supervising or monitoring using simulated traffic
• CPC Class Codes: H04W 24/08 Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: Y04S 20/30 Smart metering, e.g. specially adapted for remote reading

Abstract

A wireless security system is provided. The system includes a first wireless device, a second wireless device, an uninstalled wireless device, and an access controller. The first wireless device is disposed within a first security zone having first security provisions within a network configuration. The second wireless device is disposed within a second security zone having second security provisions within the network configuration. The second security provisions are greater than the first security provisions. The access controller communicates with the uninstalled wireless device, and determines a proximity of the uninstalled wireless device relative to the first and second wireless devices, and configures third security provisions for the uninstalled device corresponding to the proximity.

Claims

1. A wireless security system, comprising:

a first wireless device, disposed within a first security zone having first security provisions within a network configuration;

a second wireless device, disposed within a second security zone having second security provisions within said network configuration, wherein said second security provisions are greater than said first security provisions;

an uninstalled wireless device; and

an access controller, that communicates with said uninstalled wireless device, wherein said access controller determines a proximity of said uninstalled wireless device relative to first and second wireless devices, and wherein said access controller configures third security provisions for said uninstalled device corresponding to said proximity, and wherein said access controller determines said proximity based on response latencies to ping messages transmitted to said uninstalled device by comparing said response latencies to latencies corresponding to said first and second security zones.

2. The wireless security system as recited in claim 1, wherein said proximity does not correspond to said first or second security zones, and wherein said third security provisions comprise denial of access to said network configuration.

3. The wireless security system as recited in claim 1, wherein said proximity corresponds to said first security zone, and wherein said third security provisions comprise said first security provisions.

4. The wireless security system as recited in claim 3, wherein said first security provisions comprise a first security key type and length, and wherein said second security provisions comprise a second security key type and length, and wherein said first security key type and length comprises reduced security requirements over said second security key type and length.

5. The wireless security system as recited in claim 3, wherein said first security provisions comprise a first one of a plurality of security algorithms, and wherein said second security provisions further comprise a second one of a plurality of security algorithms, and wherein said first one comprises reduced security requirements over said second one.

6. The wireless security system as recited in claim 1, wherein said access controller determines said proximity based on geographic position data provided by said uninstalled device instead of determining said proximity based on said response latencies to said ping messages, if said uninstalled device is capable of providing said geographic information.

7. A proximity based wireless security mechanism, comprising:

an uninstalled wireless device;

a plurality of first wireless devices disposed in a first security zone having first security provisions within a network configuration;

a plurality of second wireless devices disposed in a second security zone having second security provisions within said network configuration, wherein said second security provisions are greater said first security provisions; and

an access controller, that communicates with said uninstalled wireless device, wherein said access controller determines a proximity of said uninstalled wireless device relative to said pluralities of first and second wireless devices, and wherein said access controller configures third security provisions for said uninstalled device corresponding to said proximity, and wherein said access controller determines said proximity based on response latencies to ping messages transmitted to latencies corresponding to said first and second security zones.

8. The proximity based wireless security mechanism as recited in claim 7, wherein said proximity does not correspond to said first or second security zones, and wherein said third security provisions comprise denial of access to said network configuration.

9. The proximity based wireless security mechanism as recited in claim 7, wherein said proximity corresponds to said first security zone, and wherein said third security provisions comprise said first security provisions.

10. The proximity based wireless security mechanism as recited in claim 9, wherien said first security provisions comprises a first security key type and length, and wherein second security provisions comprise a second security key type and length, and wherein said first security key type and length comprises reduced security requirements over said second security key type and length.

11. The proximity based wireless security mechanism as recited in claim 9, wherein said first security provisions comprise a first one of a plurality of security algorithms, and wherein said second security provisions further comprise a second one of a plurality of security algorithms, and wherein said first one comprises reduced security requirements over said second one.

12. The proximity based wireless security mechanism as recited in claim 7, wherein said access controller determines said proximity based on geographic position data provided by said uninstalled device instead of determining Said proximity based on said response latencies to said ping messages, if said uninstalled device is capable of providing said geographic information.

13. A method for proximity based wireless security, the method comprising:

disposing a first wireless device within a first security zone having first security provisions within a network configuration;

disposing a second wireless device within a second security zone having second security provisions within the network configuration, wherein the second security provisions are greater the first security provisions;

via an access controller, (communicating with an uninstalled wireless device;

via the access controller, determining a proximity of the uninstalled wireless device relative to the first and second wireless devices by evaluating response latencies to ping messages transmitted to the uninstalled device and comparing the response latencies to latencies corresponding to the first and second security zones; and

via the access controller, configuring third security provisions for the uninstalled device corresponding to the proximity.

14. The method as recited in claim 13, wherein the proximity does not correspond to the first or second security zones, and wherein the third security provisions comprise denial of access to the network configuration.

15. The method as recited in claim 13, wherein the proximity corresponds to the first security zone, and wherein the third security provisions comprise the first security provisions.

16. The method as recited in claim 15, wherein the first security provisions comprise a first security key type and length, and wherein the second security provisions comprise a second security key type and length, and wherein the first security key type and length comprises reduced security requirements over the second security key type and length.

17. The method as recited in claim 15, wherein the first security provisions comprise a first one of a plurality of security algorithms, and wherein the second security provisions further comprise a second one of a plurality of security algorithms, and wherein the first one comprises reduced security requirements over the second one.

18. The method as recited in claim 13, wherein the proximity provided by said determining is based on geographic position data provided by the uninstalled device, instead of the response latencies to the ping messages, if the uninstalled device is capable of providing the geographic information.