Networked security system

Patent metadata

Field	Value
Publication number	US-9843566-B2
Application number	US-201514853906-A
Country	US
Kind code	B2
Filing date	Sep 14, 2015
Priority date	Mar 15, 2013
Publication date	Dec 12, 2017
Grant date	Dec 12, 2017

Abstract

A method of securing communications between a security device and a security server include receiving, at the security server, a registration request from the security device, the registration request being encrypted using an initial registration key. A device identifier and rotation key unique to the security device are transmitted to the security device. A first session key request is received at the security server from the security device, the request being encrypted using the rotation key. A first session key is transmitted to the security device in response. One or more communications, encrypted using the first session key, is received at the security server from the security device. A second session key request is received at the security server from the security device after the first session key has expired, the request encrypted using the rotation key. A second session key is transmitted to the security device in response.

First claim

What is claimed is:

1. A security system, comprising:
a security server;
one or more master devices; and
one or more slave devices,
wherein each of the one or more master devices and the one or more slave devices is configured to:
receive, from an access point, an access point identifier associated with the access point and a network address associated with the respective device, and
transmit the access point identifier and the network address to the security server,
wherein the security server is configured to:
for each of the one or more slave devices, determine whether the access point identifier received from the slave device matches an access point identifier received from at least one of the one or more master devices, and
for each slave device from which a matching access point identifier is received, transmit the network address of the slave device to each of the one or more master devices from which the matching access point identifier was received,
wherein the one or more master devices from which the matching access point identifier was received are configured to receive the network address from the security server and use the network address to transmit one or more messages to the slave device on the local network.

2. The security system of claim 1 , wherein communication is established between the one or more master devices and the one or more slave devices without utilizing a network discovery protocol of the local network.

3. The security system of claim 2 , wherein the network discovery protocol comprises Bonjour or uPnP.

4. The security system of claim 1 , wherein the network addresses are Internet Protocol (IP) addresses and the access point identifiers are Basic Service Set Identifiers (BSSID).

5. The security system of claim 1 , wherein the one or more master devices comprise one or more security cameras.

6. The security system of claim 1 , wherein the security server is configured to receive a request from a mobile computing device to discover the one or more slave devices, and wherein the security server is configured to transmit the network locations of the one or more slave devices to the mobile computing device in response to the request.

7. The security system of claim 6 , wherein the mobile computing device is configured to transmit one or more messages to at least one of the one or more slave devices using at least one of the network locations received from the security server.

8. The security system of claim 1 , wherein each of the one or more master devices is configured to: transmit one or more master registration messages, each of the one or more master registration messages comprising a master access point identifier and a master network address associated with the master device from which the respective master registration message was transmitted.

9. The security system of claim 1 , wherein each of the one or more slave devices is configured to: transmit one or more slave registration messages, each of the one or more slave registration messages comprising a slave access point identifier and a slave network address associated with the slave device from which the respective slave registration message was transmitted.

10. The security system of claim 1 , wherein the one or more slave devices comprise one or more locking devices.

11. A method of enabling communication between devices, the method comprising:
associating a master device with an access point on a local network;
receiving, at the master device, a first access point identifier associated with the access point and a first network address assigned by the access point to the master device;
transmitting, from the master device to a security server, the first access point identifier and the first network address, wherein the security server is configured to receive a second access point identifier and a second network address from a slave device and, when the second access point identifier matches the first access point identifier, transmit the second network address to the master device;
receiving, at the master device, the second network address from the security server; and
transmitting one or more messages from the master device to the slave device on the local network using the second network address received from the security server.

12. The method of claim 11 , wherein communication is established between the first device and the second device without utilizing a network discovery protocol of the local network.

13. The method of claim 11 , wherein the network discovery protocol comprises Bonjour or uPnP.

14. The method of claim 11 , wherein the first network address and the second network address are Internet Protocol (IP) addresses and the first access point identifier and the second access point identifier are Basic Service Set Identifiers (BSSID).

15. The method of claim 11 , wherein the slave device perform one or more actions responsive to receiving the one or more messages.

16. The method of claim 11 , wherein the slave device is a locking device.

17. The method of claim 11 , wherein the security server receives a request from a mobile computing device to discover the one or more slave devices, and wherein the security server transmits the network locations of the one or more slave devices to the mobile computing device in response to the request.

18. The method of claim 17 , further comprising: receiving, by at least one of the one or more slave devices from the mobile computing device, one or more messages using at least one of the network locations received from the security server.

19. One or more non-transitory computer-readable storage media having instructions stored thereon that, when executed by one or more processors, cause the one or more processors to implement a method comprising:
receiving one or more master registration messages from one or more master devices, each of the one or more master registration messages comprising a master access point identifier and a master network address associated with the master device from which the respective master registration message was received;
receiving one or more slave registration messages from one or more slave devices, each of the one or more slave registration messages comprising a slave access point identifier and a slave network address associated with the slave device from which the respective slave registration message was received;
for each of the one or more slave devices, determining whether the slave access point identifier in the slave registration message received from the respective slave device matches one of the master access point identifiers of the one or more master registration messages; and
for each slave device from which a matching slave access point identifier is received, transmitting the slave network address of the slave device to each of the one or more master devices from which the matching master access point identifier was received;
wherein the one or more master devices receiving the slave network address are configured to use the slave network address to transmit one or more messages to the slave device on the local network.

20. The one or more non-transitory computer-readable storage media of claim 19 , wherein the slave device is a locking device.

Assignees

• Master Lock Co
• Vardr Pty Ltd

Inventors

• Smith Geoff
• Celinski Tom
• Fitzpatrick Matthew

Classifications

• H04L63/168

  above the transport layer · CPC title

• H04W4/005

  Electricity · mapped topic

• H04W76/021

  Electricity · mapped topic

• H04L2463/062

  applying encryption of the keys · CPC title

• H04W8/26

  Network addressing or numbering for mobility support · CPC title