The field relates to security systems and more particularly to wireless security systems.
Security systems are well known. Such systems typically involve a secured area protected by one or more sensors. The secured area may include some form of physical barrier (e.g., a wall, a fence, etc.) provided around the secured area with one or more portals (e.g., doors, windows, etc.) that allow entry into or egress from the secure area by authorized persons. The sensors may be provided in the form of limit switches that are arranged to detect opening of the portals by intruders. The sensors may also be provided in the form of motion detectors that detect motion within a portion of the secured area.
The sensors may be coupled to a local alarm panel. In the event of detection of an intruder, the alarm panel may activate a local audible alarm. The alarm panel may also send an alarm message to a central monitoring station.
The sensors may be coupled to the alarm panel wirelessly. In this case, each of the sensors (and alarm panel) is equipped with a separate radio frequency transceiver. Such transceiver usually operates at a low-power level that does not require an FCC license.
In most cases, the wireless exchange between transceivers is encrypted to avoid subversion of the security system. Usually, this requires the use of secret coding schemes. However, this makes the set-up of such wireless sensors time consuming and expensive. Accordingly, a need exists for better methods of setting up such systems.
While embodiments can take many different forms, specific embodiments thereof are shown in the drawings and will be described herein in detail with the understanding that the present disclosure is to be considered as an exemplification of the principles hereof, as well as the best mode of practicing same. No limitation to the specific embodiment illustrated is intended.
The sensors 16, 18 may be based upon any of a number of different technologies. For example, the sensors 16, 18 may include one or more limit switches coupled to a door or window that provides entrance to or egress from the secured area 12.
Alternatively, the sensors 16, 18 may include one or more motion detection devices using infrared or image processing techniques. For example, under one embodiment, the one or more devices 16, 18 may be PIR devices. Alternatively, the one or more devices may be cameras with a processor that compares successive images to detect the movement of people or objects across a field of view of each of the cameras.
As a still further alternative, the sensors 16, 18 may include one or more fire or gas detection devices. Where the sensors detect fires, the devices 16, 18 may be based upon any of a number of different sensing methodologies (e.g., carbon monoxide detection, smoke detection, etc.).
Each of the devices 16, 18 may be coupled to the alarm panel 20 wirelessly. In this regard, one or more wireless transceivers 22 within the alarm panel 20 may be coupled to a respective transceiver 24 within each of the sensors 16, 18.
Included within the alarm panel 20 may be one or more processing apparatus (processors) 26, 28 that monitor the sensors 16, 18. Included within each of the sensors 16, 18 may also be one or more processors 26, 28. The processors 26, 28 may operate under control of one or more computer programs 30, 32 loaded from a non-transitory computer readable medium (memory) 34. As used herein, reference to a step performed by one of the programs 30, 32 is also a reference to the processor 26, 28 that executed that step.
In general, the alarm panel 20 may be controlled through a user interface 36. A user may arm or disarm the system 10 and panel 20 through a keyboard 40 of the user interface. The status of the alarm panel 20 may be shown on a display 38.
Once armed, a sensor processor 26, 28 may monitor a state of each of the sensors 16, 18. Upon detection of the activation of one of the sensors 16, 18, the sensor processor may transfer notification of activation to an alarm processor 26, 28. The alarm processor, in response, may send an alarm message to a central monitoring station 42. The central monitoring station may respond by summoning the fire or police department depending on the type of alarm.
In general, the sensors 100-126 exchange packets with each other and with the transceiver 22 under Internet Protocol version 6 (IPv6). With certain exceptions, the communication network of
The wireless network of
The transceivers 22, 24 of the sensors 100-126 and alarm panel 20 may operate in the frequency range of from 2405 to 2480 Mhz. The transceivers may operate on 16 different channels within this frequency range.
Each of the sensors 100-126 may be provided with a secret key 128 or array 130 of secret keys 128 and a system address of the alarm panel 20. Each of the sensors 100-126 may also be provided with its own unique Electrical and Electronics Engineers (IEEE) address or a Media Access Control (MAC) address. The secret keys 128, the system address of the panel 20 and the IEEE or MAC address may be provided via direct physical connection with a programming device during manufacture in order to ensure the security of the sensors 100-126.
In order to form a wireless network, each of the co-ordinator sensors may be provided with the details of the sensors that will potentially join the network. A valid sensor may be identified by the IEEE or MAC address and a unique commissioning key. In this regard, the commissioning key is independently formed within each of the sensors 100-126 by an encryption processor 26, 28 of the sensor 100-126. In this regard, the commissioning key is formed by encryption of the IEEE or MAC address with the secret key.
In order to form a network, each of the end sensors may send a registration message to a respective co-ordinator sensor as part of a process that allows the end sensor to join the co-ordinator sensor. The registration message includes the IEEE or MAC address of the end sensor and the commissioning key of the end sensor. The co-ordinator sensor receives the registration message and authenticates the end sensor by using its own separate copy of the secret key to decrypt the commissioning key within a decryption processor and thereby recover the IEEE or MAC address of the end sensor. However, since the IEEE or MAC address was included within the originally received registration request message under an unencrypted format, a comparison processor of the co-ordinator sensor may be used to simply compare the recovered IEEE or MAC address with the unencrypted IEEE or MAC address originally received as part of the registration message. Where there is a match between the recovered and originally received IEEE or MAC address, the end sensor is authenticated. In a similar manner, each sensor 100-126 may authenticate any transmission from any other sensor 100-126. A similar process can be used by the alarm panel to authenticate transmissions from the sensors 100-126 and by the sensors to authenticate transmissions from the alarm panel.
Turning now to the wireless network, in general, an explanation will be provided of how the sensors 100-126 arrange themselves into the wireless network. For simplicity, the explanation with be based primarily upon a single co-ordinator sensor and a single end sensors. A similar process may be used by co-ordinator sensors to join other co-ordinator sensors and the alarm panel 20.
For example, upon start-up, the co-ordinator sensors immediately begin to search for a suitable radio channel. In this regard, the co-ordinator sensor will search for, identify and adopt for use the radio frequency channel with the least measured activity.
The co-ordinator sensor may assign a unique Personal Area Network (PAN) identifier (id) to the network. The PAN identifier may be stored in a memory of the sensor during manufacture or may be based upon the secret key 128. The co-ordinator sensor may listen for the PAN ids of any neighboring networks to verify that the PAN identifier is unique. If it is not, then the co-ordinator sensor may increment the identifier until a unique value is found.
The co-ordinator sensor may then enter a “commissioning mode” where the co-ordinator sensor may join other sensors. The co-ordinator sensor then listens on the adopted channel for registration requests from other sensors (router sensors and end sensors) to join the network.
Upon start-up, end sensors (and router sensors) scan the available channels to identify channels with coordinating sensors in commissioning mode. The end sensor (and routing sensors) transmit beacon requests on the identified channels and wait for beacons from coordinating sensors that the sensor may join. In this regard, the end sensors (and router sensors) may detect one or more coordinating sensors that the end sensors (and router sensors) may join in a parent-child relationship.
The end sensors may join the coordinating sensor in either a star or tree network. In a star network, a router sensor would simply assume the role of any another end sensor.
Initially, the co-ordinator sensor may be the only potential parent of a new end sensor. However, once the network has partially formed, the joining end sensor may be able to detect the co-ordinator sensors and one or more routing sensors of the same network. In this case, the end sensor may use a sequential set of rules to choose its parent. The first choice may be based upon signal strength where the parent with the highest signal strength is selected first. Next, the number of children of each parent is considered where preference is given to the parent with the fewest children. Finally, the depth of the tree is considered where preference is given to the parent highest in the tree. These rules are used in reverse order by any sensor operating as a router sensor.
The end sensor then sends a registration message as a join request to the selected parent, asking to join the wireless network through it. The co-ordinator sensor may initially reject the join request pending verification (via the IEEE or MAC address and commissioning key) that the end sensor is authorized to register with the system. After the initial rejection, the end sensor may resend the registration request to the same potential parent this time encrypting the request with the sensor's commissioning key. Provided that the sensor has been successfully validated by the potential parent and the registration request can be decrypted with the secret key, the request is accepted.
The end sensor then sends an establish route message to the co-ordinator sensor. The co-ordinator sensor replies with a confirmation of the sensor's membership in the network. This exchange of messages causes a set of entries for the end sensor being added to the routing tables between the end sensor and coordinating sensor.
In general, any packet sent by a sensor through the network 128 may contain two addresses for routing purposes including a first address of the destination sensor and a second address of the next hop sensor. The second address is modified after each hop by the receiving sensor as the packet propagates through the network, and becomes the same as the destination sensor address for the final hop.
In response to receipt of the establish route message, the co-ordinator sensor may forward a network security key (run time key) to the end sensor. The network security key may be based upon the secret key or may be a selected one of the array of keys.
Once the sensors 100-126 have organized themselves into a wireless communication network 128, a respective monitoring processor 26, 28 within each of the sensor 100-126 may monitor a sensing element for changes. Upon detecting a change above a threshold value the processor 26, 28 may compose and send a packet to a corresponding processor 26, 28 with the alarm panel notifying the alarm panel of the change. The packet may be transmitted directly to the panel 20 in some cases (e.g., co-ordinator sensor 100) or may be received and retransmitted by other sensors (e.g., sensor 106 transmits the packet to sensor 100 and sensor 100 retransmits the packet to the alarm panel 20.
The system 10 and, especially, the wireless network of the system 10 offers a number of advantages over conventional systems. For example, the saving of the secret key into the sensors 100-126 allows the system to be set up without the need for a trained technician to enter passwords or other encryption data. Since each sensor 100-126 has the secret key stored in memory, each system 10 can identity any other member of its network of sensors 100-126 without any ambiguity.
In addition, the presence of the secret key saved in the memory of each of the devices 100-126 allows the secret key to be changed periodically (or immediately after installation) without compromising security. In this case, any new secret key may simply be encrypted by the originally saved secret key and transferred over the air-interface without loss of security.
Alternatively, where an array of secret keys is saved in memory, the secret key can be selected sequentially or randomly from the array of secret keys for a predetermined time period.
After the predetermined period of time, the next secret key in the array may be used for another period of time.
From the foregoing, it will be observed that numerous variations and modifications may be effected without departing from the spirit and scope hereof. It is to be understood that no limitation with respect to the specific apparatus illustrated herein is intended or should be inferred. It is, of course, intended to cover by the appended claims all such modifications as fall within the scope of the claims.
Number | Name | Date | Kind |
---|---|---|---|
7596223 | Vogel, III | Sep 2009 | B1 |
8069470 | Montenegro | Nov 2011 | B1 |
20040083362 | Park et al. | Apr 2004 | A1 |
20080186171 | Gates | Aug 2008 | A1 |
20090154482 | Ham et al. | Jun 2009 | A1 |
20100140926 | Swift et al. | Jun 2010 | A1 |
20100332831 | Shon et al. | Dec 2010 | A1 |
20120144197 | Chung et al. | Jun 2012 | A1 |
20120257753 | Ochikubo et al. | Oct 2012 | A1 |
20130103939 | Radpour | Apr 2013 | A1 |
Entry |
---|
Jennic Technology for a Changing World, JenNet-IP Stack User Guide, Jan. 3, 2012, pp. 1-14, 68-254, JN-UG-3080 Rev. 0.6, NXP Laboratories UK Ltd.,Sheffield, UK. |
Number | Date | Country | |
---|---|---|---|
20140169561 A1 | Jun 2014 | US |