The present technology pertains to telecommunications networks and more specifically to network jamming detection and remediation.
The approaches described in this section could be pursued but are not necessarily approaches that have previously been conceived or pursued. Therefore, unless otherwise indicated, it should not be assumed that any of the approaches described in this section qualify as prior art merely by virtue of their inclusion in this section.
Communications networks can include a collection of nodes where transmission links are connected so as to enable communication between the nodes. The transmission links connect the nodes together. The nodes use circuit switching, message switching, or packet switching to pass the signal through the correct links and nodes to reach the correct destination terminal. Each node in the network usually has a unique address so messages or connections can be routed to the correct recipients. The collection of addresses in the network is called the address space.
This summary is provided to introduce a selection of concepts in a simplified form that are further described in the Detailed Description below. This summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to be used as an aid in determining the scope of the claimed subject matter.
The present disclosure is related to various systems and methods for remediation of jammed networks. Specifically, methods include: determining by a base unit of a jammed network and if outside connectivity is available; notifying at least one external service if connectivity is available; notifying a user device; generating a local alert and taking a local action. Some embodiments may further include: issuing an alert in response to the detected network jamming, the alert being at least one of: sounding an audible alarm, showing a visual alarm indication, communicating with law enforcement, and communicating with an alarm monitoring station.
Embodiments are illustrated by way of example, and not by limitation, in the figures of the accompanying drawings, in which like references indicate similar elements and in which:
While this technology is susceptible of embodiment in many different forms, there is shown in the drawings and will herein be described in detail several specific embodiments with the understanding that the present disclosure is to be considered as an exemplification of the principles of the technology and is not intended to limit the technology to the embodiments illustrated. The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the technology. As used herein, the singular forms “a,” “an,” and “the” are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms “comprises,” “comprising,” “includes,” and/or “including,” when used in this specification, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof. It will be understood that like or analogous elements and/or components, referred to herein, may be identified throughout the drawings with like reference characters. It will be further understood that several of the figures are merely schematic representations of the present technology. As such, some of the components may have been distorted from their actual scale for pictorial clarity.
Network Environment
In some embodiments, Base Unit 110 monitors various Sensor(s) 111 which are able to monitor conditions in and around Premises 105. Sensors may include but are not limited to security sensors, for example motion sensors, window and door sensors, pressure sensors, temperature sensors, heat sensors, smoke/CO detectors, glass break sensors, and the like. Security sensors are typically (although may not be exclusively) intended to be used to provide information about security for a premises, for example sensors connected to an alarm system or providing other security capabilities. Sensors may also include sensors embedded in other devices, for example motion sensors embedded in a thermostat, microphones in a television or consumer electronics device, and the like, even if these were not purpose-built for this role. That is, the sensor in a thermostat may have been intended to monitor for occupancy and to adjust the temperature accordingly, but may be monitored by Base Unit 110 for the purpose of intruder detection.
Additionally, Base Unit 110 may be used to enable communications services for users in Premises 105. Example communications services include telephony services, but could also include other communications mechanisms such as video, short message services, instant messaging, etc. A number of Communications Device(s) 112 work in cooperation with the Base Unit 110 to enable these services. Communications Device(s) 112 may include wired or wireless telephone handsets, video units, speakerphones, fax machines, etc.
Additional Device(s) 113 may also be deployed around Premises 105. Additional devices may be any device which does not fall into the categories of Base Unit 110, Communications Device 112, or Sensor(s) 111. For example, this may include other devices which are connected to a home network and may therefore observe behavior of the network, but are not being explicitly used as a sensor. Examples could include network infrastructure other than the Base Unit 110 (e.g., routers, switches, firewalls, access points, etc.), consumer electronic devices, gaming devices, smart home devices, etc.
Base Unit 110, Sensor(s) 111, Communications Device(s) 112, and Additional Device(s) 113 can interact with each other, as well as services, devices, and users both inside and outside Premises 105. Several networks can be used to enable these interactions.
Premises 105 can be equipped with one or more Internet Connection(s) 120. Internet Connection(s) allows devices (e.g., Base Unit 110, Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) to optionally communicate with the outside world, by providing access to the Internet 121. Internet Connection(s) logically include both the hardware and services needed to enable connection to the Internet 121. For example, this may consist of a cable modem, the cable connecting Premises to the cable operator's (as Internet service provider) network, and the services and infrastructure of the cable operator allowing access to the Internet 121. In many cases, Premises 105 may have more than one Internet Connection(s) 120, for example a primary cable data connection (e.g., cable internet service, Digital Subscriber Line (DSL), and the like), and a secondary network connection (e.g., WiMAX, LTE broad area wireless connection, and the like).
One or more Data Network(s) 122 can be deployed in and/or near Premises 105, and are also connected to Internet Connection(s) 120. Base Unit 110, and optionally other devices (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) can be connected to Data Network(s) 122, both as a mechanism to communicate with one another, as well as to access Internet 121. Examples of Data Network(s) 122 include a wireless network (i.e., Wi-Fi) within Premises 105, and/or a wired Ethernet network within Premises 105.
Additionally, one or more Telemetry Network(s) 123 can be deployed on Premises 105. Telemetry Network(s) 123 is designed to provide interconnection between the Base Unit and optionally various devices (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) within Premises 105. Generally, Telemetry Network(s) 123 is not directly connected to the Internet 121, but devices may communicate externally if messages are translated or relayed to Data Network(s) 122 and on to the Internet 121 via Internet Connection(s) 120. For example, devices may connect to Base Unit 110 via Telemetry Network(s) 123, and information may then be relayed over the Internet 121. Examples of typical networking technologies used for Telemetry Network(s) 123 include Bluetooth, Bluetooth Low Energy, DECT, ZWave, and Zigbee. In some cases, a networking technology more often used for a Data Network(s) 122 (e.g., Wi-Fi) may be used for Telemetry Network(s) 123. For example, a second, internal Wi-Fi network (without external connectivity) could be set up for use as Telemetry Network(s) 123.
Base Unit 110 and optionally other devices (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) communicate with external entities reached over the Internet 121. For example, to implement a security system, one or more Monitoring Service(s) 130 may be utilized. Monitoring Service(s) 130 monitor the status of the devices within Premises 105 and are able to respond to security alerts. For example, an alarm condition triggered by one or more Sensor(s) 111 (with messages potentially relayed by Base Unit 110) may be observed by Monitoring Service(s) 130. Monitoring Service(s) 130 can then take appropriate/responsive actions, for example alerting authorities, contacting the user of the system to confirm the threat, etc.
In various embodiments, communications services are offered to the end user devices. In this case, the devices (e.g., Base Unit 110, Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) may communicate over the Internet 121 with one or more Communications Service(s) 131 to facilitate the communications. This can include locating and establishing communications with other users, or connecting to telephony services (e.g. Plain Old Telephone Service (POTS)).
Other Services 132, which can provide services other than security monitoring and communications, may also be used by devices on Premises 105 (e.g., Base Unit 110, Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113). For example media streaming services, intelligent assistant services, and other capabilities may be used by or have information provided by devices on Premises 105.
An end user, for example the owner or another occupant of Premises 105, may have User Device 140 connected to one or more networks (e.g., Data Network(s) 122, Telemetry Network 123, and/or Internet 121). Examples of User Device 140 include a smart phone, a tablet, software running on a personal computer, a smart watch, etc. User Device 140 allows access to and control of devices within Premises 105 (e.g., Base Unit 110, Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113). Additionally, devices within Premises 105 may send information and notifications to User Device 140. User Device 140 may also communicate with the external services (e.g., Monitoring Service(s) 130, Communications Service(s) 131, and/or Other Service(s) 132). At various times, User Device 140 may be located on Premises 105 (e.g., while the user is physically at Premises 105, or located outside of Premises 105. When located at Premises 105, and depending on the networking capabilities available, optionally one or more of Data Network(s) 122 and Telemetry Network(s) 123 may be used to communicate. When located off Premises 105, optionally various connectivity mechanisms may be used to reach Internet 121, allowing connectivity.
External Entity Sensor(s) 220 can be connected to and/or incorporate one or more network connections, separate from the networks operated by the resident/occupant of Premises 105. In some embodiments, External Entity Sensor(s) 220 are connected to the Internet 121 via an External Entity Internet Connection(s) 230, for example a cellular or WiMax connection. This allows External Entity Sensor(s) 220 to send information back to External Entity, for example meter readings. In another embodiment, External Entity Sensor(s) 220 is connected to an External Entity Telemetry Network(s) 240. External Entity Telemetry Network(s) 240 may itself connect to External Entity Internet Connection 230 to send data to the External Entity 210, or, an individual associated with External Entity may come to or near the Premises and connect to the External Entity Telemetry Network(s) 240 using an External Entity Mobile Device(s) 250 to contact External Entity Sensor(s) 220. In one embodiment, External Entity Mobile Device(s) 250 is a meter reading device. In various embodiments, External Entity Sensor(s) 220 can use the consumer's (e.g., resident/occupant of Premises 105) network to connect.
Detection Overview
Various mechanisms can be used by various devices within the Premises 105 to detect when jamming has either occurred or been attempted. This detection may be performed by the Base Unit 110, or one of the other devices, for example Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113. Various actions may be taken in response to detecting of jamming behavior, as described below.
As used herein, “jamming” in broad terms is attempting to interfere with normal and proper communications between the various devices (e.g., Base Unit 110, Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) in Premises 105; between these devices and external services (e.g., Monitoring Service(s) 130, Communications Service(s) 131, and/or Other Service(s) 132); and/or between these devices and other entities reached over Internet 121.
By way of example, for a security system, the jamming would have the function of allowing an intruder into Premises 105 to enter and/or move about Premises 105 undetected and/or without issuing an alarm. By way further non-limiting example of a security alarm, positional information may be jammed, resulting in an inability to detect (or spoofing of) devices that have entered/exited the premises (geofencing), often used to arm or disarm systems, track intruders, etc.
Jamming may also be used as an active tool, with the attacker actively attempting to cause the alarm to sound. In such a case, law enforcement such as the police may respond. If this is combined with a call to police claiming an attacker is in the premises (e.g., “SWATing”), it may create a dangerous situation for the building occupants. A system that is able to recognize a jam condition (as opposed to an actual sensor trip, for example from a window being broken or a door opened) is advantageous.
According to various embodiments, an External Entity 210 wishes to detect jamming or tampering with their External Entity Internet Connection(s) and/or External Entity Telemetry Network(s) 240, to prevent falsification of sensor data (e.g., to prevent meter fraud). Detecting jamming by an outside intruder and preventing tampering of monitoring signals by the resident of Premises 105 are described below.
Loss of Network Connectivity
Detection of loss of access to one or more of the networks or connections can be used to detect jamming. For example, even if other mechanisms indicate failure, loss of connectivity to Telemetry Network(s) 123 and/or to Data Network(s) 122 (e.g., External Entity Telemetry Network(s) 240 or External Entity Internet Connection(s) 230 in the External Entity scenario) is an indication that jamming may be occurring. This loss may be at a very low level (e.g., loss of physical/electrical connection, loss of carrier, and the like), higher level (e.g., network appears functional but no traffic is seen and no responses to queries is returned), or in the form of garbled or incorrect data. This may be the result of something as simple as cutting cables; unplugging access points; unplugging switches, routers, bridges, hubs, etc.; removing antennas; wrapping antennas in opaque materials or otherwise obstructing signal paths; etc.
Loss of Internet Connection(s) 120 may be an indication of jamming. In this case, devices (e.g., Base Unit 110, Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113; or External Entity Sensor(s) 220 in the External Entity scenario) may be able to fully communicate with one another, but will have no access to external services (e.g., Monitoring Service(s) 130, Communications Service(s) 131, and/or Other Service(s) 132 (e.g., External Entity 210 and/or External Entity Mobile Device(s) 250 in the External Entity Scenario)) and/or to other entities on the Internet 121. This may be detected with tests such as attempting to reach a number of locations off the Premises 105 and determining all are unreachable. Again, such jamming may be achieved by an intruder in a number of ways analogous to those discussed above.
Many other failures that are not in fact jamming may also result on the observed behavior of network connection failure. This includes failures of physical connections (e.g., severing of cables); failure of equipment within the premises, the service provider, or the Internet; interference from other sources (e.g., a microwave oven interfering with a WiFi connection), etc.
Detect Full Power
In some embodiments, detection of jamming is performed by observing power levels on wireless frequencies used to communicate information over either Data Network(s) 122 and/or Telemetry Network(s) 123. Measurement can occur of these power levels over a variable, user-defined, and/or pre-determined interval. In the External Entity scenario, this same mechanism may be used to detect jamming on External Telemetry Network(s) 240 and/or External Entity Internet Connection(s) 230.
Many network protocols utilize short intervals, commonly referred to as the slot time, which are used as part of the algorithm when detecting if the shared wireless media is busy, noisy, etc. The process of measuring for signals over a multiple of this interval, specifically to detect if other devices are attempting to transmit, is referred to as carrier sense (CS) mechanism. If the spectrum is free for a particular multiple of these slots, plus a constant for process time, the channel is deemed to be available for transmission. The multiple may vary depending on the underlying network technology. For example, for 802.11 WiFi, 2*slot time is used. Similarly, the slot time itself varies depending on the technology used, the transmission speed of the network, and other factors. For example, for 802.11a WiFi 9 microseconds is used.
In addition or alternative to using the measurement of energy during the slot time to sense when the network is available, the same measurements can be used by Energy Detection (ED) algorithms to monitor for any noise or other energy which could disrupt the signal. If there is too much noise, that is, too much energy in the same spectrum used by the transmission, the wireless protocol will determine that effective transmission is not possible, and the connection will not be operational.
For the majority of cases where abnormal interference is not present, the energy detection algorithm can determine that the noise level is sufficiently low to allow for adequate data transmission, and normal communication can commence. The energy levels of the shared spectrum can continue to be measured at regular intervals as part of the carrier sense mechanism.
At step 310 the system can be queried to obtain a pre-defined signal (energy) threshold E. This level E may be the maximum level readable from the system, or may be a particular pre-defined (typically high) level of signal. Method 300 can proceed to step 315 where the analogous pre-defined integer multiple I of time intervals is obtained. This interval is used, in combination with the pre-defined signal threshold E from step 310 to determine that the signal is being jammed. In other words, if the measured signal level exceeds E for I or more time intervals, jamming will be indicated. After obtaining pre-defined values E and I, Method 300 can proceed to step 320.
At step 320, a signal strength measurement M can be obtained. Signal strength measurement M may be taken instantaneously, or over an interval, for example the slot time. Signal strength measurement M can be taken over one or more frequencies relevant to the wireless network monitored for jamming. Signal strength measurement M may be taken over one or more frequencies, over different frequencies (e.g., one randomly selected channel for each measurement), over a selected frequency as a representative frequency, etc. Measurements may be independent of each other, or may be weighted with previous measurements to obtain a sliding/moving/rolling/running average. In this way, brief pauses in signal jamming may still result in jamming being recognized.
Once the most recent measurement M has been obtained, method 300 can proceed to step 325 where the measurement M is compared to pre-defined energy threshold E. If the measurement M equals or exceeds threshold E (M>=E) at step 325, method 300 can proceed to step 330, where jam counter J is incremented (J:=J+1). Note that J represents the number of sequential measurement intervals for which M has exceeded E. Method 300 can proceed to step 335.
At step 335 it can be determined if the value of J (the number of intervals where measurement M has exceeded E) has reached or exceeded I. If J>=I, this indicates that the measured signal strength M has exceeded the predefined signal strength E for at least I intervals, and that jamming is detected, and method 300 can proceed to step 340 where the jam is detected. This may involve setting a flag or variable, sending a signal to an appropriate software process or hardware device, etc., and actions are taken as discussed later. This action may optionally be taken each time J increases, or only the first time that J equals or exceeds I. After detecting the jam at step 340, method 300 can return to step 320, where the next measurement M is taken.
If at step 325 signal level measurement M does not exceed E (e.g., M<E), method 300 can proceed to step 345, where it is determined if the jam has (just) been resolved. That is, if a jam has been detected immediately previously to this point. If so, method 300 can proceed to step 350, where jam clear is detected. Analogously to step 340, flags or variables may be set, or signals sent to appropriate software process or hardware devices to take action at the resolution of the jam (again, actions taken are discussed later), and again may be taken the first time M<E or each time. Method 300 can continue to step 355, where jam counter J is reset to zero (J:=0).
If it was determined at step 345 that a jam has not recently been cleared (e.g., no jam was previous occurring), method 300 can proceed to step 355, where jam counter J is reset to zero (J:=0). Following step 355, method 300 can proceed to step 320, where the next measurement M is taken.
Since measurement M taken at step 320 may be weighted or averaged using a moving average, intermittent or periodic jamming may still cause measurement M to remain above E, even when one or more raw measurements drops below E.
Obtaining Energy Level Information
Measurements M may be obtained in a number of ways, and in a number of places within system 100. Measurements may be taken by the Base Unit 110, or any of the other devices (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Devices 113), so long as the device is equipped with a radio capable of obtaining measurements of energy levels within the desired frequency or range of frequencies. Note also that various devices may monitor different frequencies, for example the Base Unit 110 may be monitoring WiFi, Bluetooth, and/or DECT for jamming, if equipped with all of these radios, and another device, for example a remote security sensor (e.g., an instance of Sensor(s) 111) may only be equipped with a DECT radio, and therefore only monitor related frequencies.
In the External Entity scenario, these measurements may be taken by External Entity Sensor(s) 220, by External Entity Mobile Device(s) 250, by equipment related to External Entity Internet Connection(s) 230, and/or by dedicated sensors attached to these networks.
Chipset, Driver, Software
Measurements are obtained by communicating with underlying hardware components/devices (e.g., radio system) and obtaining measurements from the software used to control and/or interface with the appropriate hardware, for example through a device driver, API, or similar software exposing functionality on the underlying hardware. For example, this information is obtained by explicitly requesting it from the underlying hardware. By way of further non-limiting example, the measurements are available in variables or similar locations, and may be queried by the system. By way of further non-limiting example, callback functions or similar mechanisms are exposed by the API, allowing the system to be notified when a new measurement or an abnormal measurement is available. These measurements may then be used in method 300 (e.g., evaluated and acted upon) as described above.
Tool
Specially designed monitoring software, for example Airshark from the University of Wisconsin can be used to monitor a wireless environment. This software allows control of the underlying hardware associated with various wireless network interface devices, and the use of that hardware to measure signal strengths for the frequencies that hardware is capable of measuring. These measurements may then be used in method 300 as described above.
Special Hardware/Software Signal
The underlying hardware can provide an explicit mechanism to signal software (or other hardware devices, which may then signal software) when the radio spectrum used is not available, such as when a transmission is in progress and the energy level on the desired frequency is too high. For example, the underlying WiFi controller may set a light, power a connection, etc., to indicate that it is unable to obtain access to a frequency, because the frequency is in use. Here, software can measure this hardware signal and provides the information to the system. These measurements may then be used in method 300 as described above. A software signal or indication can be used to determine that the underlying hardware has detected that the spectrum is unavailable.
Separate Jam Detector
According to some embodiments, a freestanding device can monitor and detect that the spectrum needed is in use (e.g., that a transmission is already using the frequency) over a given interval, and this information is reported to and/or queried by the algorithm to use as readings.
Corrupted Messages
According to various embodiments, the system monitors messages and notices when messages from one or more other devices suddenly becomes garbled or corrupted. A pre-defined threshold can be used to determine if message corruption is indicative of jamming. The pre-defined threshold may be a specified percentage of messages, bytes, segments, etc., over a given time being corrupted; a specified percentage of messages, bytes, segments, etc., over a given number of messages, bytes, segments, etc. being corrupted; a specified number of messages, bytes, segments, etc. being corrupted within a certain time; a specified increase in the rate or percentage of messages, bytes, segments, etc. (over time or over a certain number of messages, bytes, segments, etc.); and the like.
At step 420 one or more corrupted message measurements M (e.g., rates of loss, percentages of loss, etc., as described above) are obtained. Method 400 proceeds to step 430.
At step 430, measurement(s) M can be compared against the appropriate threshold(s) T. If any measurements exceed their corresponding thresholds, method 400 proceeds to step 440. If not, method 400 proceeds to step 450. Multiple comparisons, using multiple measurements and thresholds, may be made at step 430. For example, a comparison may be made between a percentage of bytes corrupted over the last second and the corresponding threshold, and between a number of segments corrupted out of the last 10 and a corresponding threshold. When particular combinations and/or permutations of these comparisons result in the measurement exceeding the threshold, method 400 proceeds to step 440. In other words, method 400 may designate more than one to metric to indicate jamming.
At step 440, jamming can be detected. Upon detection of jamming, a flag or variable may be set, a signal to an appropriate software process or hardware device may be sent, and the like, and actions are taken as described below. Such actions may optionally be taken each time measurements M exceed the threshold T, only the first time, etc. After detecting the jam at step 440, method 400 returns to step 420, where the next measurement(s) M can be taken.
If at step 430 no measurements M exceed any thresholds T, method 400 proceeds to step 450, where it is determined if the jam has just been resolved. That is, if a jam has been detected immediately previously to this point. If so, method 400 proceeds to step 460, where jam clear is detected. Analogous to step 440, flags or variables may be set, or signals sent to appropriate software process or hardware devices to take action at the resolution of the jam (again, actions taken are described below), and again may be taken the first time M<E or each time M<E. After determining that a jam has cleared at step 460, method 400 returns to step 420, where the next measurement(s) M can be taken.
If it was determined at step 450 that a jam has not recently cleared (e.g., no jam was previous occurring), method 400 returns to step 420, where the next measurement(s) M can be taken.
Other conditions, for example low batteries in devices or interference may also cause the messages to be corrupted, and additional mechanisms to filter for these conditions may be used.
Cryptographic Errors/Impersonation Mechanism
According to various embodiments, messages between devices in the system (e.g., Base Unit 110, Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) or between devices and User Device(s) 140 and/or services (e.g. Monitoring Service(s) 130, Communications Service(s) 131, and/or Other Service(s) 132) are monitored to observe encryption and/or authentication credentials. If messages are between the device(s) or service(s) with incorrect cryptographic properties (e.g., messages that are authenticated, signed, or encrypted improperly; and/or are not authenticated, signed, or encrypted when they are expected to be), this can be interpreted as evidence of jamming. When jamming is detected, the system is notified. This may involve setting a flag or variable, sending a signal to an appropriate software process or hardware device, etc., and actions are taken as described below.
In the External Entity scenario, External Entity Sensor(s) 220 may detect this directly (e.g., by seeing spoofed sensor data), the detection may occur at the External Entity 210 (e.g., by observing forged sensor data), or by External Entity Mobile Device(s) 250.
Beacon Pulse Change Detection
In some embodiments, protocols using beacon pulses (e.g., DECT, Bluetooth Low Energy (BLE), and the like) are monitored for abnormal beacon behavior to detect jamming. These types of networks may typically be an example of Telemetry Network(s) 123.
In various embodiments, Base Unit 110, or another device (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) serve as the master or base station. Periodically, the master or base station sends a beacon pulse out to all connected devices. If the master or base station detects that another device has sent a beacon pulse of its own (e.g., for the same network) just prior to the time the master would normally send the pulse, this may indicate that another device is attempting to impersonate the master or base station, and therefore control the network. This is interpreted as evidence of jamming. The message may appear to be a corrupted message from the master or base station. When jamming is detected, the system is notified. This may involve setting a flag or variable, sending a signal to an appropriate software process or hardware device, etc., and actions are taken as described below. In some network protocols, such a jamming attack does not need security credentials, for example a system shared secret (e.g., a password and/or security certificate used for authentication of (all) devices and can be at least one of preconfigured/preinstalled, automatically configured/downloaded, and manually configured/downloaded), to work. Such a jamming attack can be interfering with the connection to all devices over the Telemetry Network(s) 123.
In various embodiments, one or more remote devices (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) detect an incorrect base unit beacon pulse, and again interprets this pulse as a jamming attempt, as above.
According to some embodiments, rather than detecting a beacon pulse being transmitted immediately before the correct base pulse, a beacon pulse with a mangled (erroneous) ID is sent at the same time as the original beacon pulse, triggering the remote devices to resend (and resynchronize) using this mangled ID. The base unit and/or the remote units may detect this behavior and interpret it as jamming. When jamming is detected, the system is notified. This may involve setting a flag or variable, sending a signal to an appropriate software process or hardware device, etc., and actions are taken as described below.
In the External Entity scenario, these attacks may be detected by any device on External Entity Telemetry Network, e.g., External Entity Sensor(s) 220, External Entity Mobile Device(s) 250, or another device on that network (not shown).
Sequence Number Attack
In some embodiments, the detection system looks for devices attempting to deliberately jam, or to spoof links between devices by manipulating sequence numbers used by protocols, particularly connection-oriented or stream-oriented protocols. These sequence numbers are used by the protocols to ensure that packets are not lost, and that they are returned to the application in order for proper reassembly of the original message. Sequence numbers may be used at various levels in the protocol stack, including at lower levels to manage delivery of packets themselves, or at higher levels to ensure in-order delivery and to verify all packets have been received, particularly when running over lower level protocols that do not provide in-order assembly (e.g., by streaming protocols run over unreliable transports such as UDP).
In some protocols, such as Transmission Control Protocol (TCP), if multiple packets arrive with sequence numbers that are badly out of order, then one side may close the connection, deciding that the packet sequence has become too corrupt to recover. Attackers may use this approach to attempt to drop connections between devices. Similarly, creation of packets (e.g., TCP reset (RST) packets) with spoofed sequence numbers may be used by attackers to force connections to close. Both can have the effect of jamming the connection between devices by forcing the link to close. By watching either for a number of packets with bad sequence numbers, or by observing bad packets with slightly wrong sequence numbers, these attacks may be detected as a form of jamming.
Attack to Force Connection to Close
In various embodiments, a jamming device sends multiple packets for the targeted connection with deliberately incorrect sequence numbers, with the goal of causing the remote party to close the connection. Here, the detecting device (e.g., one or more of Base Unit 110, Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) observes that the sequences number on a particular connection are either arriving dramatically out of order or seem to have no resemblance to the original sequence number pattern. If one side of the connection in question is a security sensor, for example, this attack can result in the connection between the security sensor and the base unit being closed, and further messages from the security sensor (including alarm conditions) being ignored. This observation does not have to be for a connection (packet stream) which the observing device is a part of; the observing device may notice out of order sequence numbers on any un-encrypted connection the observing device can observe.
Several pre-defined metrics may be used to determine that this sort of attack is being mounted. According to some embodiments, if a pre-determined number of packets have sequence numbers that differ from the expected sequence numbers (e.g., the numbers expected for the current in-flight window) by more than pre-determined number, a jam is indicated. For example, if 10 or more packets are observed with sequence numbers differing by 100 or more from the expected sequence numbers, the connection is marked as jammed. According to various embodiments, this approach is used, but with a provision for a single “outlier” packet number that could be missing or corrupted on one part. In some embodiments, seeing a single sequence number repeated more than a pre-determined (large) number of times indicates that an attack is being mounted. In various embodiments, seeing more than a pre-determined number of packets with sequence numbers that differ by more than a reasonable in flight window size is used as an indication of jamming. For example, if a particular network is unlikely to have packets in flight with sequence numbers that differ by more than 1000, seeing some number (e.g., 3) that differ by more than 1000 is interpreted as jamming.
As with some of the mechanisms described earlier, other failures that are not in fact jamming may also result on the observed behavior of network connection failure. This includes equipment failure, software failures, interference from other sources (e.g., a microwave oven interfering with a WiFi connection), etc.
When jamming is detected, action can be taken by the detecting device. This may involve setting a flag or variable, sending a signal to an appropriate software process or hardware device, etc., and actions are taken as described below.
In the External Entity scenario, these attacks may be detected by any device on External Entity Telemetry Network, e.g., External Entity Sensor(s) 220, External Entity Mobile Device(s) 250, or another device on that network (not shown).
Incorrect Sequence Numbers
In some embodiments, a jamming device attempts to spoof the remote connection and send information from a remote device (e.g., one or more of Base Unit 110, Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) to make it appear as if it is the remote device. This could either be on an unencrypted connection, or on an encrypted connection for which credentials have been compromised. If the attacker correctly identifies the sequence numbers, it can insert traffic, sending erroneous messages, or move the message window ahead, causing later messages from the actual attacked device to be incorrectly interpreted as old (already received) packets and discarded. If one side of the connection in question is a security sensor, for example, this attack can result in incorrect “ok” packets being sent, moving the window forward, and when real “alarm” packets are later sent (with earlier sequence numbers), these will be rejected by the receiver. Note that this observation does not have to be for a connection which the observing device is a part of; any un-encrypted connection (or encrypted connection that the observing device has credentials for) can be observed.
When executed perfectly, this attack may be difficult to detect, but when a pre-determined number of packets are seen which have identical sequence numbers, but differing content, a jamming condition can be noted. This may indicate either the attacker guessed “wrong” and sent an “imposter” packet with a slightly too low sequence number, or the attacker has succeeded, moved the sequence number window forward, and the real party is now attempting to send actual data. In either case, the detecting party can interpret this as jamming.
As with some of the mechanisms described earlier, other failures that are not in fact jamming may also result on the observed behavior of network connection failure. This includes equipment failure, software failures, interference from other sources (e.g., a microwave oven interfering with a WiFi connection), etc.
When jamming is detected, action is taken by the detecting device. This may involve setting a flag or variable, sending a signal to an appropriate software process or hardware device, etc., and actions are taken as described below.
In the External Entity scenario, these attacks may be detected by any device on External Entity Telemetry Network, e.g., External Entity Sensor(s) 220, External Entity Mobile Device(s) 250, or another device on that network (not shown).
Jam/Reset Messages
According to some embodiments, a jamming device attempts to block information from a remote device (e.g., one or more of Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) from reaching Base Unit 110 using a reset attack, in which a spoofed protocol message, normally used to initiate tear down of the connection, is sent by the jamming device. An example of such an attack is the use of TCP reset (RST) messages to tear down connections, used by governments (e.g., the “Great Firewall of China”), service providers (e.g., Comcast against Peer-to-Peer applications in 2007), etc. In a stream of packets of a TCP connection, each packet contains a TCP header. Each of these headers contains a bit known as the “reset” (RST) flag. In most packets this bit is set to 0 and has no effect; however, if this bit is set to 1, it indicates to the receiving computer that the computer should immediately stop using the TCP connection; it should not send any more packets using the connection's identifying numbers, called ports, and discard any further packets it receives with headers indicating they belong to that connection. Other protocol mechanisms—which cause a connection to close and/or reset—can be used for such attacks, such as a “DEAUTH frame” in 802.11 wireless networks. Various detection mechanisms may be used to separate real protocol reset messages from attacker messages.
According to various embodiments, detection of protocol reset messages (e.g., TCP reset messages) is performed between devices (e.g., one of Base Unit 110, Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113). Generally, protocol reset messages occur infrequently in a well-functioning network in premises 105. Accordingly, if protocol reset message are discovered in a network in premises 105 more than once a minute (or once in period of time within a range of 2-60 minutes), then jamming may be indicated. Detection of protocol reset messages causes jamming to be detected, and when jamming is detected, action is taken by the detecting device. This may involve setting a flag or variable, sending a signal to an appropriate software process or hardware device, etc., and actions are taken as described below. Note that this observation does not have to be for a connection which the observing device is a part of; any un-encrypted connection (or encrypted connection that the observing device has credentials for) can be observed.
In the External Entity scenario, these attacks may be detected by any device on External Entity Telemetry Network, e.g., External Entity Sensor(s) 220, External Entity Mobile Device(s) 250, or another device on that network (not shown).
Base Unit Detects Jamming
At step 505, a list of all available networks and connections (e.g., Data Network(s) 122, Telemetry Network(s) 123, and/or Internet Connection(s) 120) is assembled. This list may be pre-provisioned, or determined dynamically at the time step 505 occurs. At step 510, the first network or connection is selected, and method 500 proceeds to step 515.
At step 515, Base Unit 110 runs one or more of the measurement and evaluation techniques described above to determine if the selected network or connection is available. Alternatively or additionally, this may be performed by polling entities that are performing the detecting, polling flags that were previously set by the detection entities, etc., as opposed to actively applying the measurement and evaluation techniques.
Additionally or alternatively, the “detection” of jamming may occur when a notification is received from another device (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113), indicating that that other device detected jamming occurring in the system for the selected network. That is, the other device may actually detect the jamming using one of the measurement and evaluation techniques described above, and then notifies Base Unit 110.
At step 520 it can be determined if the selected network or connection has moved to a jammed state. That is, it is determined if it was previously not jammed and is now jammed. If jamming is newly detected for the selected network or connection, method 500 proceeds to connector 1, and on to method 600 of
If no jamming is detected at step 520, or if the network was already in a jammed state, method 500 proceeds to step 530, where the selected network is checked to see if it has recently become unjammed.
At step 530, it can be determined if the selected network or connection has just become unjammed. That is, if the selected network was previously in a jammed state and has now become unjammed. If the selected network has not just become unjammed, method 500 proceeds to step 540. If the selected network has just become unjammed, method 500 proceeds to connector 3, and on to method 700 of
At step 540, it can be determined if more networks or connections are available on the list assembled at step 505. If there are no further networks or connections to check, method 500 returns to the start. This loop of checking all networks then returning to start represents a waiting state where the system monitors for any jamming or unjamming that occurs on networks and connections. If more networks or connections are available at step 540, the next network or connection is selected at step 545, and method 500 returns to step 515 to examine this next network or connection.
Processing when Jam Detected
There are many circumstances where jamming may be occurring, but the Base Unit 110 still has outside connectivity. For example, the base unit may be connected to both a wireless Data Network 122 (e.g., Wi-Fi) and a wired Data Network. While wireless Data Network 122 may be jammed, the wired connection may still function. In another instance, wireless Data Network 122 (e.g., Wi-Fi) may be jammed, but the Base Unit has a second wireless Data Network, for example an LTE connection, which is not jammed. In another example, one or more Telemetry Network(s) 123, for example a DECT or BLE network may be jammed, preventing the Base Unit from connecting to one or more devices (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) over the Telemetry Network, but one or more Data Network(s) is still available and providing connectivity to the outside world (e.g., to Internet 121).
If outside connectivity is still possible (e.g., available and not jammed), method 600 proceeds to step 615, where one or more external services are notified. Monitoring Service(s) 130, for example an alarm monitoring service/station, are optionally notified. In this context, there is external connectivity (as determined at step 610), allowing communication with the Monitoring Service. The service is alerted to the fact that jamming has occurred on the particular network selected at step 510 and/or 545. Additional information, for example the time of the jam and other information obtained may also be transmitted. Further actions, for example alerting appropriate authorities, may be initiated as appropriate by the Monitoring Service at this step. Other external services may also be notified, for example an off-site video recording service, a service that alerts a neighbor, etc. After alerting the Monitoring Service, method 600 continues to step 630.
If at step 610 it is determined that the outside connection is not available, then method 600 proceeds to step 620, where the information about which network or connection is jammed is stored/buffered. This information may include what is jammed, the time the jam began, and other information recorded about the jam condition. After storing the information about the jam, method 600 continues to step 630
At optional step 630, the user of the system is notified, typically by contacting User Device 140. In cases where outside connectivity is available, this may take the form of a telephone call or text message (e.g., initiated by Monitoring Service 130 or placed directly by action of Base Unit 110, optionally using Communications Service 131), an application push notification, or some other alert mechanism. The user may also be reached via notification to Other Services(s) 132. In cases where outside connectivity is unavailable, User Device may still be reachable over one or more of Data Network(s) 122 and/or Telemetry Network(s) 123. If available, these networks may be used to alert User Device (i.e., an internal User Device may be reachable over an unjammed local network even if outside connectivity is unavailable).
In some embodiments, the User Device 140 application may then allow the user to take other actions (e.g., triggering alarms, ignoring the alert, contacting authorities) as appropriate. In various embodiments, the system may only notify the user. After optionally alerting the user, method 600 continues to step 635.
At step 635, where possible, other devices within Premises 105 (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) are optionally notified of the jamming condition. Depending on which network(s) are being jammed (e.g. Data Network(s) 122, Telemetry Network(s) 123), one or more devices may be unreachable if the network used by these devices for connectivity is unavailable. The devices may take appropriate action upon being notified of the jamming condition, as discussed in relation to method 900 of
At step 640, local alerts are optionally generated by Base Unit 110. This may include generating a sound which may be a simple notification sound, or may be a full siren-like alarm sound. Indicator lights on the Base Unit may be activated or change color to indicate the jamming condition. Messages or graphical indications may be displayed on any displays incorporated into or attached to the Base Unit. Various sounds, lights, or displays may indicate different jamming conditions, i.e., which networks are jammed, etc. As discussed later (see
At step 645, local actions are optionally taken by the Base Unit 110. This includes taking actions that might otherwise be taken by an external entity, e.g., Monitoring Service(s) 130. In one embodiment, the action taken may include notifying authorities (e.g., law enforcement). In another embodiment, the action may include instructing other devices connected to the system (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) to take actions such as record video, activate door locks, turn on lights, etc.
After completing the optional actions, flow continues to step connector 3, and returns to the flow depicted in method 500 of
At step 715, any information about jams stored at step 620 of method 600 of
At step 720, notifications to users, for example via User Device 140 are delivered. If the User Device was not reachable via Data Network(s) 122 or Telemetry Network(s) 123 at step 630 of method 600, and external connectivity was not available, the user is now informed via the (now available) external connection. As with step 630, this notification may take several forms, and in some cases, the user may respond or take action based on this notification. Notification may include full details of the jam condition that has now resolved, as well as information about other jams that has been stored and not yet delivered.
At step 725, information about the jam that has resolved is stored to be transmitted when external connectivity returns. This information will be delivered later (at steps 715 and 720) when connectivity is restored. This step is analogous to step 620 in method 600.
At step 730, the user of the system is optionally notified that a network or connection has become unjammed. In cases where external connectivity has just become available, this step and the previous step 720 are substantially the same, but in cases where one or more networks or connections becomes unjammed and external connectivity is still not possible, local notifications may be delivered to a User Device 140 using a premises network (e.g. Data Network(s) 122 and/or Telemetry Network(s) 123) at this step. Notification may include full details of the jam condition that has now resolved, as well as information about other jams that has been stored and not yet delivered.
In some embodiments, an application running on User Device 140 may then allow the user to take other actions (e.g., triggering alarms, ignoring the alert, contacting authorities) as appropriate. In other embodiments, the system may only notify the user. After alerting the user, method 700 continues to step 735.
At step 735, where possible, other devices in or about Premises 105 (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) are optionally notified of the jamming condition which has now cleared. Note that depending on which network(s) are being jammed and which have had jams clear (e.g. Data Network(s) 122, Telemetry Network(s) 123), one or more devices may be unreachable if the network used by these devices for connectivity is unavailable. The devices may take appropriate action upon being notified of the clearing of the jamming condition, as discussed in method 1000 of
At step 740, local alerts are optionally generated or modified by Base Unit 110 in response to detecting the change in jamming status. For example, an alarm that was activated at step 640 of method 600 of
At step 745, local actions are optionally taken by the Base Unit 110 in response to the jam situation being resolved. Again, this may include taking actions that might otherwise be taken by an external entity, e.g., Monitoring Service(s) 130, such as notifying authorities, or changing the status of lights, locks, etc.
After completing the optional actions, method 700 continues to step connector 4, and returns to method 500 of
Secondary Device Detects Jamming
For devices, explicit detection is optional. Some devices may monitor all available networks, while others may only react to notifications of jamming (when they are possible to receive) from other devices. As a result while many steps here are the same as for methods 500, 600 and 700, the actions performed may be more limited or optional here (e.g., steps 805 and 810) than in their Base Unit 110 counterparts.
At step 805, a list of all available networks and connections—that is Data Network(s) 122, Telemetry Network(s) 123, and/or Internet Connection(s) 120 is assembled. This list may be pre-provisioned, or determined dynamically at the time step 805 occurs. At step 810, the first network or connection is selected, and control moves to step 815. Note that for devices, the list of networks may (but not necessarily) be more limited than for the Base Unit 110. For example, in many cases Sensor(s) 111 may only have a connection to a Telemetry Network and not to a Data Network.
Regardless of whether the device is monitoring for jamming itself, at step 815 “detection” of jamming may occur when a notification is received from Base Unit 110 or another device (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113), indicating that the other device detected jamming occurring in the system for the selected network. That is, the other device or Base Unit detects the jamming using one of the techniques described earlier, and then notifies the device.
If the device is monitoring for jamming directly itself, at step 815, the device performs one or more of the methods described earlier to determine if the selected network or connection is available. Note that this also may be performed by polling entities that are performing the detecting, polling flags that were previously set by the detection entities, etc., rather than actively running detection methods.
At step 820 it is determined if the selected network or connection has moved to a jammed state. That is, it is determined if it was previously not jammed and is now jammed. If jamming is newly detected for the selected network or connection, method 800 proceeds to connector 5, and on to method 900 of
If no jamming is detected at step 820, or if the network was already in a jammed state, flow moves to step 830, where the selected network is checked to see if it has recently become unjammed.
At step 830, it is determined if the selected network or connection has just become unjammed. That is, if the selected network was previously in a jammed state and has now become unjammed. If the selected network has not just become unjammed, method 800 proceeds to step 840. If the selected network has just become unjammed, method 800 proceeds to connector 7, and on to method 1000 in
At step 840, it is determined if more networks or connections are available on the list assembled at step 805. If there are no further networks or connections to check, method 800 returns to the start. This loop of checking all networks then returning to start represents a waiting state where the system monitors for any jamming or unjamming that occurs on networks and connections. If more networks or connections are available at step 840, the next network or connection is selected at step 845, and method 600 returns to step 815 to examine this next network or connection.
Processing when Jam Detected
Method 900 can commence at connector 7, and move to step 905, where it is determined if the device supports outside (external) connectivity. For example, a device equipped with Wi-Fi capabilities may connect to a Data Network(s) 122 and support external connectivity, while a simpler device may only connect to a Telemetry Network(s) 123 and not support outside connectivity. If outside connectivity is supported, method 900 proceeds to step 910 where the connectivity is checked. If outside connectivity is not supported, method 900 proceeds to step 925.
At step 910 it is determined if outside connectivity (e.g., connectivity to Internet 121) is functional (available and not jammed). This may be achieved with active probes, passive traffic observation, or other means. Again, only some devices (generally the more sophisticated) will have outside connectivity, and will perform this step.
For devices that do have external connectivity capability and the external connection is functioning as determined at steps 905 and 910, method 900 proceeds to step 915, where one or more external services (e.g., Monitoring Service(s) 130) are notified. Some home devices may connect and share information with Base Unit 110, but may also have their own independent monitoring services, which are notified of the jamming condition at this step. As discussed earlier in the discussion of method 600 of
If at step 910 it is determined that the outside connection is not functional, method 900 proceeds to step 920, where the information about which network or connection is jammed is stored. This information may include what is jammed, the time the jam began, and other information recorded about the jam condition. After storing the information about the jam, method 900 continues to step 925.
At optional step 925, Base Unit 110 is notified about the jam detected. Depending on which network(s) are being jammed (e.g., Data Network(s) 122, Telemetry Network(s) 123), Base Unit 110 may be unreachable if the network used by the device for connectivity to Base Unit 110 is unavailable. If connectivity to Base Unit 110 is unavailable, this information is stored to be relayed to Base Unit 110 when connectivity returns. If the source of the jamming information at step 815 was Base Unit 110, the device may not relay the information back to Base Unit 110 (or it may ignore the information) to prevent a loop condition. The information sent to Base Unit 110 or stored to send at a later time may include what is jammed, the time the jam began, and other information recorded about the jam condition. Once the information is transmitted to Base Unit 110 or stored, method 900 proceeds to step 930.
At optional step 930, the user of the system is notified, typically by contacting User Device 140. In cases where outside connectivity is supported and available, this may take the form of a telephone call or text message (initiated by Monitoring Service 130 or placed directly by action of device, optionally using Communications Service 131), an application push notification, or some other alert mechanism. The user may also be reached via notification to Other Services(s) 132. In cases where outside connectivity is unavailable, or where the device has no external connectivity capability, User Device may still be reachable over one or more of Data Network(s) 122 and/or Telemetry Network(s) 123. If available, these networks may be used to alert User Device.
In some embodiments, an application running on User Device 140 may then allow the user to take other actions (e.g., triggering alarms, ignoring the alert, contacting authorities) as appropriate. In other embodiments, the system may only notify the user. After optionally alerting the user, method 900 continues to step 935.
At step 935, where possible, other devices within the Premises 105 excluding Base Unit 110 (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) are optionally notified of the jamming condition. Note that depending on which network(s) are being jammed (e.g. Data Network(s) 122, Telemetry Network(s) 123), one or more devices may be unreachable if the network used by these devices for connectivity is unavailable. The devices may then detect this as a jam condition themselves (see step 815 of method 800 in
At step 940, local alerts are optionally generated by the device. This may include generating a sound which may be a simple notification sound, or may be a full siren-like alarm sound. Indicator lights on the device may be activated or change color to indicate the jamming condition. Messages or graphical indications may be displayed on any displays incorporated into or attached to the device. Various sounds, lights, or displays may indicate different jamming conditions, i.e., which networks are jammed, etc. As discussed later (See
At step 945, local actions are optionally taken by the device. This includes taking actions that might otherwise be taken by an external entity, e.g., Monitoring Service(s) 130. The action taken may include notifying authorities. The action may include instructing other devices connected to the system (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) to take actions such as record video, activate door locks, turn on lights, etc. Again, less sophisticated devices may take no action here, expecting that such actions will be taken by Base Unit 110 after the notification is sent at step 915.
After completing the optional actions, method 9 continues to step connector 6, and returns to flow chart 800.
Unjamming Detected
At step 1010, it is determined if outside connectivity (e.g., connectivity to Internet 121) has returned. This may be achieved with active probes, passive traffic observation, or other means. Again, only some devices (generally the more sophisticated) will have outside connectivity, and will perform this step. If external connectivity has returned, method 1000 proceeds to step 1015. If external connectivity has not returned, method 1000 proceeds to step 1025.
At step 1015, any information about jams stored at step 920 of method 900 is relayed to external services, for example to Monitoring Service 130. Additional information, for example the time of the jam and other information obtained may also be transmitted. Further actions, for example alerting appropriate authorities, may be initiated as appropriate by the Monitoring Service at this step. After alerting the Monitoring Service, method 1000 continues to step 1027.
At step 1020, notifications to users, for example via User Device 140 are delivered. If User Device 140 was not reachable via Data Network(s) 122 or Telemetry Network(s) 123 at step 930 of method 900 of
At step 1025, information about the jam that has resolved is stored to be transmitted when external connectivity returns. This information will be delivered later (e.g., at steps 1015 and 1020) when connectivity is restored. This step is analogous to step 920 in method 900 of
At optional step 1027, Base Unit 110 is notified about the jam resolving. Depending on which network(s) are being jammed (e.g., Data Network(s) 122, Telemetry Network(s) 123), Base Unit 110 may be unreachable if the network used by the device for connectivity to Base Unit 110 is unavailable. If connectivity to Base Unit 110 is unavailable, this information is stored to be relayed to the Base Unit when connectivity returns. If the unjamming has made the Base Unit available, any stored information (stored either at this step in a prior iteration, or at step 920 of method 900) is also transmitted to Base Unit 110. If the source of the unjamming information at step 815 was Base Unit 110, the device may not relay the information back to Base Unit 110 (or it may ignore the information) to prevent a loop condition. The information sent to Base Unit 110 or stored to send at a later time may include what is jammed (or has become unjammed), the time the jam began and ended, and other information recorded about the jam condition. Once the information is transmitted to Base Unit 110 or stored, method 1000 proceeds to step 1030.
At step 1030, the user of the system is optionally notified that a network or connection has become unjammed. In cases where external connectivity is supported and has just become available (has become unjammed), this step and the previous step 1020 are substantially the same, but in cases where one or more networks or connections becomes unjammed, but external connectivity is still not possible, local notifications may be delivered to a User Device 140 using a premises network (e.g., Data Network(s) 122 and/or Telemetry Network(s) 123) at this step. Notification may include full details of the jam condition that has now resolved, as well as information about other jams that has been stored and not yet delivered.
In some embodiments, an application running on User Device 140 may then allow the user to take other actions (e.g., triggering alarms, ignoring the alert, contacting authorities) as appropriate. In other embodiments, the system may only notify the user. After alerting the user, method 1000 continues to step 1035.
At step 1035, where possible, other devices within Premises 105 excluding Base Unit 110 (e.g., Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) are optionally notified of the jamming condition which has now cleared. Depending on which network(s) are being jammed and which have had jams clear (e.g., Data Network(s) 122, Telemetry Network(s) 123), one or more devices may be unreachable if the network used by these devices for connectivity is unavailable. These devices may themselves take appropriate action upon being notified of the clearing of the jamming condition, as discussed in method 1000. If the original detection of resolution of jamming took the form of a notification from another device (that is, another device detected the unjamming and notified the device performing this step), that device may not be notified (or may ignore the notification) to prevent a loop condition.
At step 1040, local alerts are optionally generated or modified by Base Unit 110 in response to detecting the change in jamming status. For example, an alarm that was activated at step 940 of flowchart 900 may be silenced or modified (reduced) at this stage as the jam is detected as resolved. As with the alerts discussed at step 640, alerts may include sounds, lights, and other visual indicators being updated to indicate a jam has resolved. Some devices may not have any mechanism to alert about the jamming condition, and no action is performed at this step. After generating or modifying local alerts, method 1000 continues to step 1045.
At step 1045, local actions are optionally taken by the device in response to the jam situation being resolved. Again, this may include taking actions that might otherwise be taken by an external entity, e.g., Monitoring Service(s) 130, such as notifying authorities, or changing the status of lights, locks, etc. Again, less sophisticated devices may take no action here, expecting that such actions will be taken by Base Unit 110 after the notification is sent at step 1027.
After completing the optional actions, method 1000 continues to step connector 8, and returns to method 800 of
Tamper Notifications
Devices (e.g., Base Unit 110, Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113) detecting jams may buffer jamming information to transmit this information later when a jam resolves, as discussed earlier. Additionally, devices may assume a device that is jammed and then returns or reboots after a jam has been tampered with, and send appropriate notification of the tamper—for example by notifying other devices on the premises (e.g., Base Unit 110, Sensor(s) 111, Communications Device(s) 112, and/or Additional Device(s) 113); by notifying services (e.g., Monitoring Service(s) 130, Communications Service(s) 131, Other Service(s) 132, or User Device(s) 140); by setting off local alerts, etc.
Jam Detection vs. Alerts
While both situations may require notification of the monitoring system, user, and/or authorities, detection of jamming or tampering situations are different than detection of an actual alarm condition (e.g., door opening, window breaking, etc.). In one implementation, detection of a jamming situation includes conveying the information that a jam or tamper, and not an actual breach of the alarm system, has occurred when contacting public safety authorities. This action has the potential to reduce the risk or severity of “SWATing” style attacks that include an attempt to use jamming to set off a premises alarm system.
External Entity Jam Notifications
In the case of jam detection in the External Entity scenario, jamming may be detected (e.g., using the mechanisms described earlier) by one or more of External Entity Sensor(s) 220, External Entity Mobile Device(s) 250, and/or External Entity 210. Indication of jamming may be buffered to report when a connection is jam is cleared, when an External Entity Mobile Device is within range, etc. Indication of the jam may be used to require a manual verification of the equipment the sensor is monitoring, alert authorities of potential fraud, etc.
The components shown in
Mass data storage 1130, which can be implemented with a magnetic disk drive, solid state drive, or an optical disk drive, is a non-volatile storage device for storing data and instructions for use by processor unit(s) 1110. Mass data storage 1130 stores the system software for implementing embodiments of the present disclosure for purposes of loading that software into main memory 1120.
Portable storage device 1140 operates in conjunction with a portable non-volatile storage medium, such as a flash drive, floppy disk, compact disk, digital video disc, or Universal Serial Bus (USB) storage device, to input and output data and code to and from the computer system 1100 in
User input devices 1160 can provide a portion of a user interface. User input devices 1160 may include one or more microphones, an alphanumeric keypad, such as a keyboard, for inputting alphanumeric and other information, or a pointing device, such as a mouse, a trackball, stylus, or cursor direction keys. User input devices 1160 can also include a touchscreen. Additionally, the computer system 1100 as shown in
Graphics display system 1170 include a liquid crystal display (LCD) or other suitable display device. Graphics display system 1170 is configurable to receive textual and graphical information and processes the information for output to the display device.
Peripheral device(s) 1180 may include any type of computer support device to add additional functionality to the computer system.
The components provided in the computer system 1100 in
Some of the above-described functions may be composed of instructions that are stored on storage media (e.g., computer-readable medium). The instructions may be retrieved and executed by the processor. Some examples of storage media are memory devices, tapes, disks, and the like. The instructions are operational when executed by the processor to direct the processor to operate in accord with the technology. Those skilled in the art are familiar with instructions, processor(s), and storage media.
In some embodiments, the computing system 1100 may be implemented as a cloud-based computing environment, such as a virtual machine operating within a computing cloud. In other embodiments, the computing system 1100 may itself include a cloud-based computing environment, where the functionalities of the computing system 1100 are executed in a distributed fashion. Thus, the computing system 1100, when configured as a computing cloud, may include pluralities of computing devices in various forms, as will be described in greater detail below.
In general, a cloud-based computing environment is a resource that typically combines the computational power of a large grouping of processors (such as within web servers) and/or that combines the storage capacity of a large grouping of computer memories or storage devices. Systems that provide cloud-based resources may be utilized exclusively by their owners or such systems may be accessible to outside users who deploy applications within the computing infrastructure to obtain the benefit of large computational or storage resources.
The cloud is formed, for example, by a network of web servers that comprise a plurality of computing devices, such as the computing system 1100, with each server (or at least a plurality thereof) providing processor and/or storage resources. These servers manage workloads provided by multiple users (e.g., cloud resource customers or other users). Typically, each user places workload demands upon the cloud that vary in real-time, sometimes dramatically. The nature and extent of these variations typically depends on the type of business associated with the user.
It is noteworthy that any hardware platform suitable for performing the processing described herein is suitable for use with the technology. The terms “computer-readable storage medium” and “computer-readable storage media” as used herein refer to any medium or media that participate in providing instructions to a CPU for execution. Such media can take many forms, including, but not limited to, non-volatile media, volatile media and transmission media. Non-volatile media include, for example, optical, magnetic, and solid-state disks, such as a fixed disk. Volatile media include dynamic memory, such as system random-access memory (RAM). Transmission media include coaxial cables, copper wire and fiber optics, among others, including the wires that comprise one embodiment of a bus. Transmission media can also take the form of acoustic or light waves, such as those generated during radio frequency (RF) and infrared (IR) data communications. Common forms of computer-readable media include, for example, a floppy disk, a flexible disk, a hard disk, magnetic tape, any other magnetic medium, a CD-ROM disk, digital video disk (DVD), any other optical medium, any other physical medium with patterns of marks or holes, a RAM, a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a Flash memory, any other memory chip or data exchange adapter, a carrier wave, or any other medium from which a computer can read.
Various forms of computer-readable media may be involved in carrying one or more sequences of one or more instructions to a CPU for execution. A bus carries the data to system RAM, from which a CPU retrieves and executes the instructions. The instructions received by system RAM can optionally be stored on a fixed disk either before or after execution by a CPU.
Computer program code for carrying out operations for aspects of the present technology may be written in any combination of one or more programming languages, including an object oriented programming language such as JAVA, SMALLTALK, C++ or the like and procedural programming languages, such as the “C” programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet Service Provider).
The corresponding structures, materials, acts, and equivalents of all means or step plus function elements in the claims below are intended to include any structure, material, or act for performing the function in combination with other claimed elements as specifically claimed. The description of the present technology has been presented for purposes of illustration and description, but is not intended to be exhaustive or limited to the invention in the form disclosed. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the invention. Exemplary embodiments were chosen and described in order to best explain the principles of the present technology and its practical application, and to enable others of ordinary skill in the art to understand the invention for various embodiments with various modifications as are suited to the particular use contemplated.
Aspects of the present technology are described above with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer readable medium that can direct a computer, other programmable data processing apparatus, or other devices to function in a particular manner, such that the instructions stored in the computer readable medium produce an article of manufacture including instructions which implement the function/act specified in the flowchart and/or block diagram block or blocks.
The computer program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other devices to cause a series of operational steps to be performed on the computer, other programmable apparatus or other devices to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide processes for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks.
The flowchart and block diagrams in the Figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present technology. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems that perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
The description of the present technology has been presented for purposes of illustration and description, but is not intended to be exhaustive or limited to the invention in the form disclosed. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the invention. Exemplary embodiments were chosen and described in order to best explain the principles of the present technology and its practical application, and to enable others of ordinary skill in the art to understand the invention for various embodiments with various modifications as are suited to the particular use contemplated.
This application is a continuation of U.S. patent application Ser. No. 16/112,409, filed Aug. 24, 2018, and issued Sep. 8, 2020 as U.S. Pat. No. 10,769,931, which is a continuation-in-part of U.S. patent application Ser. No. 15/369,655, filed Dec. 5, 2016 and issued Apr. 9, 2019 as U.S. Pat. No. 10,255,792, which is a continuation of U.S. patent application Ser. No. 14/283,132, filed May 20, 2014 and issued Apr. 25, 2017 as U.S. Pat. No. 9,633,547, the disclosures of which are incorporated by reference for all purposes.
Number | Name | Date | Kind |
---|---|---|---|
5323444 | Ertz et al. | Jun 1994 | A |
5425085 | Weinberger et al. | Jun 1995 | A |
5463595 | Rodhall et al. | Oct 1995 | A |
5519769 | Weinberger et al. | May 1996 | A |
5596625 | LeBlanc | Jan 1997 | A |
5598460 | Tendler | Jan 1997 | A |
5796736 | Suzuki | Aug 1998 | A |
5999611 | Tatchell et al. | Dec 1999 | A |
6023724 | Bhatia et al. | Feb 2000 | A |
6128481 | Houde et al. | Oct 2000 | A |
6148190 | Bugnon et al. | Nov 2000 | A |
6201856 | Orwick et al. | Mar 2001 | B1 |
6202169 | Razzaghe-Ashrafi et al. | Mar 2001 | B1 |
6266397 | Stoner | Jul 2001 | B1 |
6377938 | Block et al. | Apr 2002 | B1 |
6487197 | Elliott | Nov 2002 | B1 |
6594246 | Jorgensen | Jul 2003 | B1 |
6615264 | Stoltz et al. | Sep 2003 | B1 |
6661340 | Saylor et al. | Dec 2003 | B1 |
6690932 | Barnier et al. | Feb 2004 | B1 |
6697358 | Bernstein | Feb 2004 | B2 |
6714545 | Hugenberg et al. | Mar 2004 | B1 |
6775267 | Kung et al. | Aug 2004 | B1 |
6778517 | Lou et al. | Aug 2004 | B1 |
6778528 | Blair et al. | Aug 2004 | B1 |
6781983 | Armistead | Aug 2004 | B1 |
6914900 | Komatsu et al. | Jul 2005 | B1 |
6934258 | Smith et al. | Aug 2005 | B1 |
7113090 | Saylor et al. | Sep 2006 | B1 |
7124506 | Yamanashi et al. | Oct 2006 | B2 |
7127043 | Morris | Oct 2006 | B2 |
7127506 | Schmidt et al. | Oct 2006 | B1 |
7154891 | Callon | Dec 2006 | B1 |
7280495 | Zweig et al. | Oct 2007 | B1 |
7295660 | Higginbotham et al. | Nov 2007 | B1 |
7342925 | Cherchali et al. | Mar 2008 | B2 |
7376124 | Lee et al. | May 2008 | B2 |
7394803 | Petit-Huguenin et al. | Jul 2008 | B1 |
7599356 | Barzegar et al. | Oct 2009 | B1 |
7733859 | Takahashi et al. | Jun 2010 | B2 |
7844034 | Oh et al. | Nov 2010 | B1 |
8098798 | Goldman et al. | Jan 2012 | B2 |
8140392 | Altberg et al. | Mar 2012 | B2 |
8180316 | Hwang | May 2012 | B2 |
8208955 | Nelson | Jun 2012 | B1 |
8331547 | Smith et al. | Dec 2012 | B2 |
8350694 | Trundle et al. | Jan 2013 | B1 |
8515021 | Farrand et al. | Aug 2013 | B2 |
8577000 | Brown | Nov 2013 | B1 |
8634520 | Morrison et al. | Jan 2014 | B1 |
8837698 | Altberg et al. | Sep 2014 | B2 |
8988232 | Sloo et al. | Mar 2015 | B1 |
9087515 | Tsuda | Jul 2015 | B2 |
9147054 | Beal et al. | Sep 2015 | B1 |
9179279 | Zussman | Nov 2015 | B2 |
9225626 | Capper et al. | Dec 2015 | B2 |
9386148 | Farrand et al. | Jul 2016 | B2 |
9386414 | Mayor et al. | Jul 2016 | B1 |
9426288 | Farrand et al. | Aug 2016 | B2 |
9521069 | Gillon et al. | Dec 2016 | B2 |
9560198 | Farrand et al. | Jan 2017 | B2 |
9633547 | Farrand et al. | Apr 2017 | B2 |
9667782 | Farrand et al. | May 2017 | B2 |
9787611 | Gillon et al. | Oct 2017 | B2 |
9826372 | Jeong | Nov 2017 | B2 |
9905103 | Hsieh | Feb 2018 | B2 |
9929981 | Gillon et al. | Mar 2018 | B2 |
10009286 | Gillon et al. | Jun 2018 | B2 |
10116796 | Im et al. | Oct 2018 | B2 |
10135976 | Farrand et al. | Nov 2018 | B2 |
10158584 | Gillon et al. | Dec 2018 | B2 |
10192546 | Piersol et al. | Jan 2019 | B1 |
10255792 | Farrand et al. | Apr 2019 | B2 |
10263918 | Gillon et al. | Apr 2019 | B2 |
10297250 | Blanksteen et al. | May 2019 | B1 |
10341490 | Im et al. | Jul 2019 | B2 |
10469556 | Frame et al. | Nov 2019 | B2 |
10553098 | Hart et al. | Feb 2020 | B2 |
10706703 | Barr | Jul 2020 | B1 |
10728386 | Farrand et al. | Jul 2020 | B2 |
10769931 | Krein et al. | Sep 2020 | B2 |
10771396 | Osterlund et al. | Sep 2020 | B2 |
10818158 | Farrand et al. | Oct 2020 | B2 |
10911368 | Gillon et al. | Feb 2021 | B2 |
11032211 | Gillon | Jun 2021 | B2 |
11151862 | Farrand et al. | Oct 2021 | B2 |
11171875 | Osterlund et al. | Nov 2021 | B2 |
20010053194 | Johnson | Dec 2001 | A1 |
20020016718 | Rothschild et al. | Feb 2002 | A1 |
20020035556 | Shah et al. | Mar 2002 | A1 |
20020037750 | Hussain et al. | Mar 2002 | A1 |
20020038167 | Chirnomas | Mar 2002 | A1 |
20020057764 | Salvucci et al. | May 2002 | A1 |
20020085692 | Katz | Jul 2002 | A1 |
20020130784 | Suzuki et al. | Sep 2002 | A1 |
20020133614 | Weerahandi et al. | Sep 2002 | A1 |
20020140549 | Tseng | Oct 2002 | A1 |
20020165966 | Widegren et al. | Nov 2002 | A1 |
20030027602 | Han et al. | Feb 2003 | A1 |
20030058844 | Sojka et al. | Mar 2003 | A1 |
20030099334 | Contractor | May 2003 | A1 |
20030119492 | Timmins et al. | Jun 2003 | A1 |
20030133443 | Klinker et al. | Jul 2003 | A1 |
20030141093 | Tirosh et al. | Jul 2003 | A1 |
20030158940 | Leigh | Aug 2003 | A1 |
20030164877 | Murai | Sep 2003 | A1 |
20030184436 | Seales et al. | Oct 2003 | A1 |
20030189928 | Xiong | Oct 2003 | A1 |
20040001512 | Challener et al. | Jan 2004 | A1 |
20040010472 | Hilby et al. | Jan 2004 | A1 |
20040010569 | Thomas et al. | Jan 2004 | A1 |
20040017803 | Lim et al. | Jan 2004 | A1 |
20040059821 | Tang et al. | Mar 2004 | A1 |
20040062373 | Baker | Apr 2004 | A1 |
20040086093 | Schranz | May 2004 | A1 |
20040090968 | Kimber et al. | May 2004 | A1 |
20040105444 | Korotin et al. | Jun 2004 | A1 |
20040160956 | Hardy et al. | Aug 2004 | A1 |
20040235509 | Burritt et al. | Nov 2004 | A1 |
20050027887 | Zimler et al. | Feb 2005 | A1 |
20050036590 | Pearson et al. | Feb 2005 | A1 |
20050053209 | D'Evelyn et al. | Mar 2005 | A1 |
20050074114 | Fotta et al. | Apr 2005 | A1 |
20050078681 | Sanuki et al. | Apr 2005 | A1 |
20050089018 | Schessel | Apr 2005 | A1 |
20050097222 | Jiang et al. | May 2005 | A1 |
20050105708 | Kouchri et al. | May 2005 | A1 |
20050141485 | Miyajima et al. | Jun 2005 | A1 |
20050169247 | Chen | Aug 2005 | A1 |
20050180549 | Chiu et al. | Aug 2005 | A1 |
20050222820 | Chung | Oct 2005 | A1 |
20050238034 | Gillespie et al. | Oct 2005 | A1 |
20050238142 | Winegarden | Oct 2005 | A1 |
20050246174 | DeGolia | Nov 2005 | A1 |
20050259637 | Chu et al. | Nov 2005 | A1 |
20050282518 | D'Evelyn et al. | Dec 2005 | A1 |
20050287979 | Rollender | Dec 2005 | A1 |
20060007915 | Frame | Jan 2006 | A1 |
20060009240 | Katz | Jan 2006 | A1 |
20060013195 | Son et al. | Jan 2006 | A1 |
20060052918 | McLeod et al. | Mar 2006 | A1 |
20060059238 | Slater et al. | Mar 2006 | A1 |
20060071775 | Otto et al. | Apr 2006 | A1 |
20060092011 | Simon et al. | May 2006 | A1 |
20060114894 | Cherchali et al. | Jun 2006 | A1 |
20060140352 | Morris | Jun 2006 | A1 |
20060156251 | Suhail et al. | Jul 2006 | A1 |
20060167746 | Zucker | Jul 2006 | A1 |
20060187898 | Chou et al. | Aug 2006 | A1 |
20060187900 | Akbar et al. | Aug 2006 | A1 |
20060206933 | Molen et al. | Sep 2006 | A1 |
20060243797 | Apte et al. | Nov 2006 | A1 |
20060251048 | Yoshino et al. | Nov 2006 | A1 |
20060258341 | Miller et al. | Nov 2006 | A1 |
20060259767 | Mansz et al. | Nov 2006 | A1 |
20060268828 | Yarlagadda | Nov 2006 | A1 |
20060268848 | Larsson et al. | Nov 2006 | A1 |
20070030161 | Yang | Feb 2007 | A1 |
20070032220 | Feher | Feb 2007 | A1 |
20070036314 | Kloberdans et al. | Feb 2007 | A1 |
20070037560 | Yun et al. | Feb 2007 | A1 |
20070037605 | Logan | Feb 2007 | A1 |
20070041517 | Clarke et al. | Feb 2007 | A1 |
20070049342 | Mayer et al. | Mar 2007 | A1 |
20070054645 | Pan | Mar 2007 | A1 |
20070061363 | Ramer et al. | Mar 2007 | A1 |
20070061735 | Hoffberg et al. | Mar 2007 | A1 |
20070067219 | Altberg et al. | Mar 2007 | A1 |
20070071212 | Quittek et al. | Mar 2007 | A1 |
20070118750 | Owen et al. | May 2007 | A1 |
20070121593 | Vance et al. | May 2007 | A1 |
20070121596 | Kurapati et al. | May 2007 | A1 |
20070132844 | Katz | Jun 2007 | A1 |
20070133757 | Girouard et al. | Jun 2007 | A1 |
20070135088 | Alessandro | Jun 2007 | A1 |
20070153776 | Joseph et al. | Jul 2007 | A1 |
20070165811 | Reumann et al. | Jul 2007 | A1 |
20070183407 | Bennett et al. | Aug 2007 | A1 |
20070203999 | Townsley et al. | Aug 2007 | A1 |
20070223455 | Chang et al. | Sep 2007 | A1 |
20070238472 | Wanless | Oct 2007 | A1 |
20070255702 | Orme | Nov 2007 | A1 |
20070283430 | Lai et al. | Dec 2007 | A1 |
20070298772 | Owens et al. | Dec 2007 | A1 |
20080016556 | Selignan | Jan 2008 | A1 |
20080036585 | Gould | Feb 2008 | A1 |
20080049748 | Bugenhagen et al. | Feb 2008 | A1 |
20080075248 | Kim | Mar 2008 | A1 |
20080075257 | Nguyen et al. | Mar 2008 | A1 |
20080084975 | Schwartz | Apr 2008 | A1 |
20080089325 | Sung | Apr 2008 | A1 |
20080097819 | Whitman, Jr. | Apr 2008 | A1 |
20080111765 | Kim | May 2008 | A1 |
20080118039 | Elliot et al. | May 2008 | A1 |
20080125095 | Mornhineway et al. | May 2008 | A1 |
20080125964 | Carani et al. | May 2008 | A1 |
20080144625 | Wu et al. | Jun 2008 | A1 |
20080144884 | Habibi | Jun 2008 | A1 |
20080159515 | Rines | Jul 2008 | A1 |
20080166992 | Ricordi et al. | Jul 2008 | A1 |
20080168145 | Wilson | Jul 2008 | A1 |
20080196099 | Shastri | Aug 2008 | A1 |
20080200142 | Abdel-Kader et al. | Aug 2008 | A1 |
20080205386 | Purnadi et al. | Aug 2008 | A1 |
20080225749 | Peng et al. | Sep 2008 | A1 |
20080247401 | Bhal et al. | Oct 2008 | A1 |
20080293374 | Berger | Nov 2008 | A1 |
20080298348 | Frame et al. | Dec 2008 | A1 |
20080309486 | McKenna et al. | Dec 2008 | A1 |
20080310599 | Purnadi et al. | Dec 2008 | A1 |
20080313297 | Heron et al. | Dec 2008 | A1 |
20080316946 | Capper et al. | Dec 2008 | A1 |
20090026280 | Liao et al. | Jan 2009 | A1 |
20090097474 | Ray et al. | Apr 2009 | A1 |
20090106318 | Mantripragada et al. | Apr 2009 | A1 |
20090135008 | Kirchmeier et al. | May 2009 | A1 |
20090168755 | Peng et al. | Jul 2009 | A1 |
20090172131 | Sullivan | Jul 2009 | A1 |
20090175165 | Leighton | Jul 2009 | A1 |
20090186596 | Kaltsukis | Jul 2009 | A1 |
20090213999 | Farrand et al. | Aug 2009 | A1 |
20090224931 | Dietz et al. | Sep 2009 | A1 |
20090240586 | Ramer et al. | Sep 2009 | A1 |
20090253428 | Bhatia et al. | Oct 2009 | A1 |
20090261958 | Sundararajan et al. | Oct 2009 | A1 |
20090264093 | Rothschild | Oct 2009 | A1 |
20090295572 | Grim, III et al. | Dec 2009 | A1 |
20090303042 | Song et al. | Dec 2009 | A1 |
20090319271 | Gross | Dec 2009 | A1 |
20100003960 | Ray et al. | Jan 2010 | A1 |
20100034121 | Bozionek | Feb 2010 | A1 |
20100046530 | Hautakorpi et al. | Feb 2010 | A1 |
20100046731 | Gisby et al. | Feb 2010 | A1 |
20100077063 | Amit et al. | Mar 2010 | A1 |
20100098034 | Tang et al. | Apr 2010 | A1 |
20100098058 | Delangis | Apr 2010 | A1 |
20100098235 | Cadiz et al. | Apr 2010 | A1 |
20100114896 | Clark et al. | May 2010 | A1 |
20100136982 | Zabawskyj et al. | Jun 2010 | A1 |
20100158223 | Fang et al. | Jun 2010 | A1 |
20100191829 | Cagenius | Jul 2010 | A1 |
20100195805 | Zeigler et al. | Aug 2010 | A1 |
20100215153 | Ray et al. | Aug 2010 | A1 |
20100220840 | Ray et al. | Sep 2010 | A1 |
20100229452 | Suk | Sep 2010 | A1 |
20100246781 | Bradburn | Sep 2010 | A1 |
20100261448 | Peters | Oct 2010 | A1 |
20100277307 | Horton et al. | Nov 2010 | A1 |
20100302025 | Script | Dec 2010 | A1 |
20110013591 | Kakumaru | Jan 2011 | A1 |
20110047031 | Weerasinghe | Feb 2011 | A1 |
20110054689 | Nielsen et al. | Mar 2011 | A1 |
20110111728 | Ferguson et al. | May 2011 | A1 |
20110140868 | Hovang | Jun 2011 | A1 |
20110151791 | Snider | Jun 2011 | A1 |
20110170680 | Chislett et al. | Jul 2011 | A1 |
20110183652 | Eng et al. | Jul 2011 | A1 |
20110208822 | Rathod | Aug 2011 | A1 |
20110265145 | Prasad et al. | Oct 2011 | A1 |
20110286462 | Kompella | Nov 2011 | A1 |
20110320274 | Patil | Dec 2011 | A1 |
20120009904 | Modi et al. | Jan 2012 | A1 |
20120010955 | Ramer et al. | Jan 2012 | A1 |
20120027191 | Baril et al. | Feb 2012 | A1 |
20120035993 | Nangia | Feb 2012 | A1 |
20120036576 | Iyer | Feb 2012 | A1 |
20120047442 | Nicolaou et al. | Feb 2012 | A1 |
20120092158 | Kumbhar et al. | Apr 2012 | A1 |
20120092171 | Hwang et al. | Apr 2012 | A1 |
20120099716 | Rae et al. | Apr 2012 | A1 |
20120166582 | Binder | Jun 2012 | A1 |
20120167086 | Lee | Jun 2012 | A1 |
20120177052 | Chen et al. | Jul 2012 | A1 |
20120178404 | Chin et al. | Jul 2012 | A1 |
20120180122 | Yan et al. | Jul 2012 | A1 |
20120213094 | Zhang et al. | Aug 2012 | A1 |
20120265528 | Gruber et al. | Oct 2012 | A1 |
20120284778 | Chiou et al. | Nov 2012 | A1 |
20120320905 | Ilagan | Dec 2012 | A1 |
20120329420 | Zotti et al. | Dec 2012 | A1 |
20130018509 | Korus | Jan 2013 | A1 |
20130024197 | Jang et al. | Jan 2013 | A1 |
20130035774 | Warren et al. | Feb 2013 | A1 |
20130052982 | Rohde et al. | Feb 2013 | A1 |
20130053005 | Ramer et al. | Feb 2013 | A1 |
20130070928 | Ellis et al. | Mar 2013 | A1 |
20130111589 | Cho | May 2013 | A1 |
20130136241 | Dillon et al. | May 2013 | A1 |
20130154822 | Kumar et al. | Jun 2013 | A1 |
20130162160 | Ganton et al. | Jun 2013 | A1 |
20130162758 | Shin | Jun 2013 | A1 |
20130214925 | Weiss | Aug 2013 | A1 |
20130229282 | Brent | Sep 2013 | A1 |
20130267791 | Halperin et al. | Oct 2013 | A1 |
20130272219 | Singh et al. | Oct 2013 | A1 |
20130276084 | Canard et al. | Oct 2013 | A1 |
20130288639 | Varsavsky Waisman-Diamond | Oct 2013 | A1 |
20130293368 | Ottah et al. | Nov 2013 | A1 |
20130336174 | Rubin et al. | Dec 2013 | A1 |
20140011470 | D'Amato et al. | Jan 2014 | A1 |
20140022915 | Caron et al. | Jan 2014 | A1 |
20140038536 | Welnick | Feb 2014 | A1 |
20140059066 | Koloskov | Feb 2014 | A1 |
20140066063 | Park | Mar 2014 | A1 |
20140084165 | Fadell et al. | Mar 2014 | A1 |
20140085093 | Mittleman et al. | Mar 2014 | A1 |
20140101082 | Matsuoka et al. | Apr 2014 | A1 |
20140120863 | Ferguson et al. | May 2014 | A1 |
20140129942 | Rathod | May 2014 | A1 |
20140156279 | Okamoto et al. | Jun 2014 | A1 |
20140169274 | Kweon et al. | Jun 2014 | A1 |
20140172953 | Blanksteen | Jun 2014 | A1 |
20140181865 | Koganei | Jun 2014 | A1 |
20140199946 | Flippo et al. | Jul 2014 | A1 |
20140206279 | Immendorf | Jul 2014 | A1 |
20140207929 | Hoshino et al. | Jul 2014 | A1 |
20140222436 | Binder et al. | Aug 2014 | A1 |
20140253326 | Cho et al. | Sep 2014 | A1 |
20140266699 | Poder et al. | Sep 2014 | A1 |
20140273912 | Peh et al. | Sep 2014 | A1 |
20140273979 | Van Os et al. | Sep 2014 | A1 |
20140280870 | Shrivastava et al. | Sep 2014 | A1 |
20140306802 | Hibbs, Jr. | Oct 2014 | A1 |
20140310075 | Ricci | Oct 2014 | A1 |
20140334645 | Yun et al. | Nov 2014 | A1 |
20140358666 | Baghaie et al. | Dec 2014 | A1 |
20150065078 | Mejia et al. | Mar 2015 | A1 |
20150071450 | Boyden et al. | Mar 2015 | A1 |
20150082451 | Ciancio-Bunch | Mar 2015 | A1 |
20150086001 | Farrand et al. | Mar 2015 | A1 |
20150087280 | Farrand et al. | Mar 2015 | A1 |
20150088514 | Typrin | Mar 2015 | A1 |
20150089032 | Agarwal et al. | Mar 2015 | A1 |
20150100167 | Sloo et al. | Apr 2015 | A1 |
20150117624 | Rosenshine | Apr 2015 | A1 |
20150138333 | DeVaul et al. | May 2015 | A1 |
20150145693 | Toriumi et al. | May 2015 | A1 |
20150177114 | Kapoor et al. | Jun 2015 | A1 |
20150192914 | Slupik | Jul 2015 | A1 |
20150200973 | Nolan | Jul 2015 | A1 |
20150221207 | Hagan | Aug 2015 | A1 |
20150229770 | Shuman et al. | Aug 2015 | A1 |
20150242932 | Beguin et al. | Aug 2015 | A1 |
20150244873 | Boyden et al. | Aug 2015 | A1 |
20150255071 | Chiba | Sep 2015 | A1 |
20150262435 | Delong et al. | Sep 2015 | A1 |
20150281450 | Shapiro et al. | Oct 2015 | A1 |
20150302725 | Sager et al. | Oct 2015 | A1 |
20150327039 | Jain | Nov 2015 | A1 |
20150334227 | Whitten et al. | Nov 2015 | A1 |
20150339912 | Farrand et al. | Nov 2015 | A1 |
20150358795 | You et al. | Dec 2015 | A1 |
20150379562 | Spievak et al. | Dec 2015 | A1 |
20150381563 | Seo et al. | Dec 2015 | A1 |
20160006837 | Reynolds et al. | Jan 2016 | A1 |
20160012702 | Hart et al. | Jan 2016 | A1 |
20160021506 | Bonge, Jr. | Jan 2016 | A1 |
20160036751 | Ban | Feb 2016 | A1 |
20160036962 | Rand | Feb 2016 | A1 |
20160066011 | Ro et al. | Mar 2016 | A1 |
20160078750 | King et al. | Mar 2016 | A1 |
20160105847 | Smith et al. | Apr 2016 | A1 |
20160117684 | Khor et al. | Apr 2016 | A1 |
20160142758 | Karp et al. | May 2016 | A1 |
20160150024 | White | May 2016 | A1 |
20160151603 | Shouldice et al. | Jun 2016 | A1 |
20160173693 | Spievak et al. | Jun 2016 | A1 |
20160219150 | Brown | Jul 2016 | A1 |
20160232774 | Noland et al. | Aug 2016 | A1 |
20160248847 | Saxena et al. | Aug 2016 | A1 |
20160260431 | Newendorp et al. | Sep 2016 | A1 |
20160260436 | Lemay et al. | Sep 2016 | A1 |
20160269882 | Balthasar et al. | Sep 2016 | A1 |
20160277573 | Farrand et al. | Sep 2016 | A1 |
20160300260 | Cigich et al. | Oct 2016 | A1 |
20160315909 | von Gravrock et al. | Oct 2016 | A1 |
20160323446 | Farrand et al. | Nov 2016 | A1 |
20160330069 | Nordmark | Nov 2016 | A1 |
20160330108 | Gillon et al. | Nov 2016 | A1 |
20160330319 | Farrand et al. | Nov 2016 | A1 |
20160330770 | Lee et al. | Nov 2016 | A1 |
20160373372 | Gillon et al. | Dec 2016 | A1 |
20170021802 | Mims | Jan 2017 | A1 |
20170024995 | Gu et al. | Jan 2017 | A1 |
20170034044 | Gillon et al. | Feb 2017 | A1 |
20170034045 | Gillon et al. | Feb 2017 | A1 |
20170034062 | Gillon et al. | Feb 2017 | A1 |
20170034081 | Gillon et al. | Feb 2017 | A1 |
20170084164 | Farrand et al. | Mar 2017 | A1 |
20170104875 | Im et al. | Apr 2017 | A1 |
20170186309 | Sager et al. | Jun 2017 | A1 |
20170188216 | Koskas et al. | Jun 2017 | A1 |
20170270569 | Altberg et al. | Sep 2017 | A1 |
20170272316 | Johnson et al. | Sep 2017 | A1 |
20170293301 | Myslinski | Oct 2017 | A1 |
20170339228 | Azgin et al. | Nov 2017 | A1 |
20180005125 | Fadell et al. | Jan 2018 | A1 |
20180061213 | Morehead | Mar 2018 | A1 |
20180075540 | Bernard et al. | Mar 2018 | A1 |
20180152557 | White et al. | May 2018 | A1 |
20180182380 | Fritz et al. | Jun 2018 | A1 |
20180182389 | Devaraj et al. | Jun 2018 | A1 |
20180262441 | Gillon et al. | Sep 2018 | A1 |
20180302334 | Osterlund et al. | Oct 2018 | A1 |
20180324105 | Gillon et al. | Nov 2018 | A1 |
20180365026 | Jernigan et al. | Dec 2018 | A1 |
20180365969 | Krein et al. | Dec 2018 | A1 |
20180375927 | Nozawa | Dec 2018 | A1 |
20190014024 | Koshy | Jan 2019 | A1 |
20190028587 | Unitt et al. | Jan 2019 | A1 |
20190044641 | Trundle | Feb 2019 | A1 |
20190045058 | Im et al. | Feb 2019 | A1 |
20190052752 | Farrand et al. | Feb 2019 | A1 |
20190190942 | Drummond | Jun 2019 | A1 |
20190206227 | Farrand et al. | Jul 2019 | A1 |
20190222993 | Maheshwari et al. | Jul 2019 | A1 |
20190385435 | Farrand et al. | Dec 2019 | A1 |
20200004989 | Lockhart, III et al. | Jan 2020 | A1 |
20200105082 | Joao | Apr 2020 | A1 |
20200126388 | Kranz | Apr 2020 | A1 |
20200143663 | Sol | May 2020 | A1 |
20200168073 | Hart et al. | May 2020 | A1 |
20200186644 | White et al. | Jun 2020 | A1 |
20200219378 | Farrand et al. | Jul 2020 | A1 |
20200322283 | Osterlund et al. | Oct 2020 | A1 |
20200380851 | Farrand et al. | Dec 2020 | A1 |
20210288917 | Gillon et al. | Sep 2021 | A1 |
20210312790 | Farrand et al. | Oct 2021 | A1 |
Number | Date | Country |
---|---|---|
2949211 | Feb 2019 | CA |
2954351 | Apr 2020 | CA |
2924631 | Oct 2021 | CA |
2187574 | May 2010 | EP |
3050287 | Aug 2016 | EP |
3146516 | Mar 2017 | EP |
3167340 | May 2017 | EP |
3295620 | Mar 2018 | EP |
3050287 | Dec 2018 | EP |
3585011 | Dec 2019 | EP |
3585011 | Apr 2021 | EP |
3295620 | Oct 2021 | EP |
WO2015041738 | Mar 2015 | WO |
WO2015179120 | Nov 2015 | WO |
WO2016007244 | Jan 2016 | WO |
WO2016182796 | Nov 2016 | WO |
WO2018044657 | Mar 2018 | WO |
Entry |
---|
“International Search Report” and “Written Opinion of the International Searching Authority,” Patent Cooperation Treaty Application No. PCT/US2014/044945, dated Nov. 7, 2014, 12 pages. |
“International Search Report” and “Written Opinion of the International Searching Authority,” Patent Cooperation Treaty Application No. PCT/US2015/029109, dated Jul. 27, 2015, 12 pages. |
“International Search Report” and “Written Opinion of the International Searching Authority,” Patent Cooperation Treaty Application No. PCT/US2015/034054, dated Nov. 2, 2015, 15 pages. |
Life Alert. “Life Alert's Four Layers of Protection, First Layer of Protection: Protection at Home.” https://web.archive.org/web/20121127094247/http://www.lifealert.net/products/homeprotection.html. [retrieved Oct. 13, 2015], 4 pages. |
“International Search Report” and “Written Opinion of the International Searching Authority,” Patent Cooperation Treaty Application No. PCT/US2016/030597, dated Jun. 30, 2016, 12 pages. |
“Extended European Search Report,” European Patent Application No. 14845956.3, dated Feb. 16, 2017, 8 pages. |
“Office Action,” Canadian Patent Application No. 2949211, dated Aug. 16, 2017, 4 pages. |
“Office Action,” Canadian Patent Application No. 2954351, dated Oct. 27, 2017, 3 pages. |
“International Search Report” and “Written Opinion of the International Searching Authority,” Patent Cooperation Treaty Application No. PCT/US2017/048284, dated Nov. 8, 2017, 8 pages. |
“Extended European Search Report,” European Patent Application No. 15796148.3, dated Jan. 8, 2018, 8 pages. |
“Office Action,” European Patent Application No. 14845956.3, dated Apr. 9, 2018, 4 pages. |
“Extended European Search Report,” European Patent Application No. 15818258.4, dated Feb. 26, 2018, 8 pages. |
“Notice of Allowance,” European Patent Application No. 14845956.3, dated Jul. 11, 2018, 7 pages. |
“Notice of Allowance”, Canadian Patent Application No. 2949211, dated Jul. 31, 2018, 1 page. |
“Office Action,” Canadian Patent Application No. 2954351, dated Aug. 22, 2018, 4 pages. |
“Partial Supplementary European Search Report,” European Patent Application No. 16793194.8, dated Nov. 19, 2018, 10 pages. |
“Extended European Search Report,” European Patent Application No. 16793194.8, dated Feb. 26, 2019, 9 pages. |
“Notice of Allowance”, Canadian Patent Application No. 2954351, dated Aug. 27, 2019, 1 page. |
“Extended European Search Report,” European Patent Application No. 19187593.9, dated Nov. 13, 2019, 8 pages. |
Takahashi et al. “A Hybrid FEC Method Using Packet-Level Convolution and Reed-Solomon Codes,” IEICE Transaction on Communications, Communications Society, vol. E89-B, No. 8, Aug. 1, 2006. pp. 2143-2151. |
“Office Action,” European Patent Application No. 15796148.3, dated Jan. 29, 2020, 6 pages. |
“Office Action,” European Patent Application No. 15818258.4, dated Jan. 31, 2020, 5 pages. |
“Office Action,” European Patent Application No. 16793194.8, dated Jun. 9, 2020, 4 pages. |
“Office Action,” Canadian Patent Application No. 2924631, dated Jul. 14, 2020, 5 pages. |
Smarter Home Life: “Hello Bixby Samsung Launches 5th Virtual Assistant Platform, SmartThings—embedded Wi-Fi router,” [online], [retrieved on Jun. 18, 2020], Retrieved from the Internet: <URL: https://smarterhomelife.com/everything/2017/3/30/hello-bixby-samsung-launches-5th-virtual-assistant-platform-smartthings-embedded-wi-fi-router>. |
“Notice of Allowance”, European Patent Application No. 15818258.4, dated Oct. 2, 2020, 7 pages. |
“Notice of Allowance”, European Patent Application No. 19187593.9, dated Oct. 27, 2020, 7 pages. |
“Office Action”, European Patent Application No. 15796148.3, dated Dec. 8, 2020, 4 pages. |
Christensen et al., “Voice-enabled IT transformation The new voice technologies”, IBM Systems Journal, vol. 46, No. 4, 2007, 13 pages. |
Das et al., “An automated speech-language therapy tool with interactive virtual agent and peer-to-peer feedback”, IEEE, 2017, 6 pages. |
Iannizzotto et al., “A Vision and Speech Enabled, Customizable, Virtual Assistant for Smart Environments”, IEEE, 2018, 7 pages. |
“Increased usability with virtual assistants by storing original audio when confidence is below a threshold level”, IP.com, Jan. 13, 2020, 3 pages. |
Michaud, “Observations of a New Chatbot Drawing Conclusions from Early Interactions with Users”, IEEE Computer Society, 2018, 8 pages. |
Rogoff, “Voice activated GUI—the next user interface”, IEEE, 2001, 4 pages. |
Zhang et al., “Dangerous Skills Understanding and Mitigating Security Risks of Voice-Controlled Third-Party Functions on Virtual Personal Assistant Systems”, IEEE Symposium on Security and Privacy, 2019, 16 pages. |
“Office Action”, European Patent Application No. 15818258.4, dated Feb. 10, 2021, 4 pages. |
“Office Action”, Canada Patent Application No. 3072813, dated Apr. 21, 2021, 3 pages. |
“Notice of Allowance”, Canada Patent Application No. 2924631, dated May 18, 2021, 1 page. |
“Notice of Allowance”, Eurooean Patent Application No. 16793194.8, dated May 28, 2021, 7 pages. |
“Office Action”, Canada Patent Application No. 3072813, dated Nov. 1, 2021, 4 pages. |
Number | Date | Country | |
---|---|---|---|
20200250957 A1 | Aug 2020 | US |
Number | Date | Country | |
---|---|---|---|
Parent | 16112409 | Aug 2018 | US |
Child | 16855948 | US | |
Parent | 14283132 | May 2014 | US |
Child | 15369655 | US |
Number | Date | Country | |
---|---|---|---|
Parent | 15369655 | Dec 2016 | US |
Child | 16112409 | US |