Security system for a moveable barrier operator

Patent metadata

Field	Value
Publication number	US-10652743-B2
Application number	US-201816226066-A
Country	US
Kind code	B2
Filing date	Dec 19, 2018
Priority date	Dec 21, 2017
Publication date	May 12, 2020
Grant date	May 12, 2020

Abstract

Electronic systems are provided for secure actuation of a remote device such as a moveable barrier operator. The systems address the “man in the middle” problem of persons intercepting and duplicating radio frequency signals from a control device by introducing timing parameters into a bidirectional communication sequence between at least two devices.

First claim

What is claimed is:

1. A method of operation by a first device communicating with a second device to effect an action by the second device, the method comprising:
transmitting from the first device a first encrypted message that includes at least a first fixed code and a first changing code;
receiving by the first device a response from the second device, wherein the response comprises a second encrypted message including a second fixed code and a second changing code that is independent from the first changing code;
validating by the first device the response by comparing the second fixed code and the second changing code to second stored code values;
in response to validating the response, transmitting by the first device a third encrypted message including at least the first fixed code and a changed version of the second changing code, wherein the third encrypted message is configured to effect performance of an action by the second device.

2. An apparatus configured to communicate with a second device to effect an action by the second device, the apparatus comprising:
a controller circuit;
a transmitter in operative communication with the controller circuit;
a receiver in operative communication with the controller circuit;
a user input device in operative communication with the controller circuit;
wherein the controller circuit is configured to:
in response to detecting an input at the user input device, control the transmitter to transmit a first encrypted message that includes at least a first fixed code and a first changing code;
receive through the receiver a response from the second device, wherein the response comprises a second encrypted message including a second fixed code and a second changing code that is independent from the first changing code;
validate the response by comparing the second fixed code and the second changing code to second stored code values from a memory circuit;
in response to validating the response, control the transmitter to transmit a third encrypted message including at least the first fixed code and a changed version of the second changing code, wherein the third encrypted message is configured to effect performance of an action by the second device.

3. The method of claim 1 , further comprising determining, by the first device before the receiving, a first time window in which to expect the response from the second device based on at least a portion of the first encrypted message.

4. The method of claim 3 , further comprising enabling a receiver of the first device to receive a transmission from the second device within the first time window.

5. The method of claim 4 , wherein enabling the receiver of the first device comprises turning on the receiver.

6. The method of claim 4 , wherein enabling the receiver comprises commanding the receiver to process incoming transmissions.

7. The method of claim 3 , further comprising determining if the response from the second device was received within the first time window.

8. The method of claim 1 wherein the first fixed code uniquely identifies the first device and the second fixed code uniquely identifies the second device.

9. The method of claim 1 wherein the second stored code values includes a previous fixed code and a previous changing code from a previous communication between the first and second devices.

10. The method of claim 9 wherein comparing the second fixed code and the second changing code to the second stored code values includes determining whether the second fixed code matches the previous fixed code and the second changing code corresponds to the previous changing code.

11. The method of claim 9 wherein validating includes retrieving the previous fixed code and the previous changing code from a memory of the first device.

12. The method of claim 1 wherein transmitting from the first device the first encrypted message includes wirelessly transmitting the first encrypted message using a radio frequency signal.

13. The method of claim 1 wherein the first device includes an in-vehicle transmitter and the second device includes a movable barrier operator.

14. The apparatus of claim 2 wherein the controller circuit is configured to determine a first time window in which to expect the response from the second device based on at least a portion of the first encrypted message.

15. The apparatus of claim 14 wherein the controller circuit is configured to enable the receiver to receive a transmission from the second device within the first time window.

16. The apparatus of claim 15 wherein the controller circuit is configured to enable the receiver by turning on the receiver.

17. The apparatus of claim 15 wherein the controller circuit is configured to enable the receiver by commanding the receiver to process incoming transmissions.

18. The apparatus of claim 14 wherein the controller circuit is configured to determine whether the response from the second device was received within the first time window.

19. The apparatus of claim 2 wherein the first fixed code uniquely identifies the first device and the second fixed code uniquely identifies the second device.

20. The apparatus of claim 2 wherein the second stored code values include a previous fixed code and a previous changing code from a previous communication with the second device.

21. The apparatus of claim 20 wherein the controller circuit is configured to compare the second fixed code and the second changing code to the second stored code values by determining whether the second fixed code matches the previous fixed code and the second changing code corresponds to the previous changing code.

22. The apparatus of claim 20 wherein the controller circuit is configured to retrieve the previous fixed code and the previous changing code from the memory circuit.

23. The apparatus of claim 2 wherein the transmitter is configured to wirelessly transmit the first encrypted message via a radio frequency signal.

24. A non-transitory computer readable medium having stored thereon instructions that when executed by a controller circuit of a first device cause the controller circuit to perform operations comprising:
transmitting from the first device a first encrypted message that includes at least a first fixed code and a first changing code;
receiving by the first device a response from the second device, wherein the response comprises a second encrypted message including a second fixed code and a second changing code that is independent from the first changing code;
validating by the first device the response by comparing the second fixed code and the second changing code to second stored code values;
in response to validating the response, transmitting by the first device a third encrypted message including at least the first fixed code and a changed version of the second changing code, wherein the third encrypted message is configured to effect performance of an action by the second device.

25. The non-transitory computer readable medium of claim 24 , wherein the operations further include determining, by the first device before the receiving, a first time window in which to expect the response from the second device based on at least a portion of the first encrypted message.

26. The non-transitory computer readable medium of claim 25 , wherein the operations further include enabling a receiver of the first device to receive a t

Assignees

• Chamberlain Group Inc

Inventors

• Fitzgibbon James J

Classifications

• H04L9/32

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title

• G07C2009/00849

  programming by learning · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G07C9/00896

  specially adapted for particular uses · CPC title

• H04W12/06 Primary

  Authentication · CPC title