Abstract:
A security system includes a security device with at least two factors of authentication. A method of operating a security system including displaying a pseudo code screen prior to display of an actual access code screen, the pseudo code screen identical to the actual access code screen.

Description:
CROSS REFERENCE TO RELATED APPLICATION 
       [0001]    This application claims the benefit of provisional application Ser. No. 62/210,512, filed Aug. 27, 2015. 
     
    
     BACKGROUND 
       [0002]    The present disclosure relates to a security system and, more particularly, to a security system that pairs an intrusion security device with a mobile device to facilitate SMS based notification and control. 
         [0003]    Intrusion security panels are electronic control devices that are primarily used to supervise residence and, office premises to report access events to a user and/or monitoring stations. These control panels are usually governed by relatively “simple to use” 4-10 digit access codes. The authorized user can thus readily enter the access code to disarm the system and disables all the sensors that report to the security panel. 
       SUMMARY 
       [0004]    A security system according to one disclosed non-limiting embodiment of the present disclosure can include a security device with at least two factors of authentication. 
         [0005]    A further embodiment of the present disclosure may include, wherein at least one factor of authentication includes proximity between the security device and an authorized mobile device. 
         [0006]    A further embodiment of any of the embodiments of the present disclosure may include, wherein at least one factor of authentication includes a communication between the security device and an authorized mobile device. 
         [0007]    A further embodiment of any of the embodiments of the present disclosure may include, wherein the communication between the security device and the authorized mobile device includes a fingerprint to the authorized mobile device. 
         [0008]    A further embodiment of any of the embodiments of the present disclosure may include, wherein the communication between the security device and the authorized mobile device includes a voiceprint to the authorized mobile device. 
         [0009]    A further embodiment of any of the embodiments of the present disclosure may include, wherein at least one factor of authentication includes a SMS between the security device and an authorized mobile device. 
         [0010]    A further embodiment of any of the embodiments of the present disclosure may include, wherein at least one factor of authentication includes a SMS from an authorized mobile device to a security device. 
         [0011]    A further embodiment of any of the embodiments of the present disclosure may include, wherein at least one factor of authentication includes display of a the pseudo code screen prior to display of an actual access code screen. 
         [0012]    A further embodiment of any of the embodiments of the present disclosure may include, wherein the pseudo code screen identical to the actual access code screen. 
         [0013]    A further embodiment of any of the embodiments of the present disclosure may include, wherein the pseudo code screen requires entry of a pseudo code for display of the actual access code screen. 
         [0014]    A further embodiment of any of the embodiments of the present disclosure may include, wherein the pseudo code has a different digit count compared to the access code. 
         [0015]    A further embodiment of any of the embodiments of the present disclosure may include, wherein the entry of the access code to the actual access code screen is required to disarm the security system. 
         [0016]    A further embodiment of any of the embodiments of the present disclosure may include a security panel including an input device, the input device in communication with the security device. 
         [0017]    A method of operating a security system, the method according to another disclosed non-limiting embodiment of the present disclosure can include displaying a pseudo code screen on a security device prior to display of an actual access code screen. 
         [0018]    A further embodiment of any of the embodiments of the present disclosure may include, wherein the pseudo code screen is identical to the actual access code screen. 
         [0019]    A further embodiment of any of the embodiments of the present disclosure may include displaying the actual access code screen in response to an authorized mobile device being within a predefined proximity to a security device. 
         [0020]    A further embodiment of any of the embodiments of the present disclosure may include displaying the actual access code screen in response to a SMS from an authorized mobile device. 
         [0021]    A further embodiment of any of the embodiments of the present disclosure may include requiring entering a pseudo code to the pseudo code screen to display of the actual access code screen 
         [0022]    A further embodiment of any of the embodiments of the present disclosure may include, wherein the pseudo code has a different digit number compared to the access code. 
         [0023]    A further embodiment of any of the embodiments of the present disclosure may include communicating with an authorized mobile device or central monitoring station in response to a predetermined number of incorrect entries into the pseudo code screen. 
         [0024]    A further embodiment of any of the embodiments of the present disclosure may include communicating with the authorized mobile device or central monitoring station via SMS. 
         [0025]    A further embodiment of any of the embodiments of the present disclosure may include communicating information related to the security device to the authorized mobile device 
         [0026]    A further embodiment of any of the embodiments of the present disclosure may include communicating a temporary access code to the authorized mobile device. 
         [0027]    A further embodiment of any of the embodiments of the present disclosure may include displaying a secret question screen in response to entry of the temporary access code. 
         [0028]    A further embodiment of any of the embodiments of the present disclosure may include disabling the security device in response to an incorrect entry to the secret question screen. 
         [0029]    A further embodiment of any of the embodiments of the present disclosure may include displaying the actual access code screen in response to an authorized mobile device being within a predefined proximity to a security device, the predefined proximity determined by GPS. 
         [0030]    A further embodiment of any of the embodiments of the present disclosure may include displaying the actual access code screen in response to an authorized mobile device being within a predefined proximity to a security device, the predefined proximity determined by triangulation. 
         [0031]    A further embodiment of any of the embodiments of the present disclosure may include displaying the actual access code screen in response to an authorized mobile device being within a predefined proximity to a security device, the predefined proximity determined from a periodic poll from the mobile device. 
         [0032]    A further embodiment of any of the embodiments of the present disclosure may include displaying the actual access code screen in response to an authorized mobile device being within a predefined proximity to a security device, then displaying the actual access code screen in response to a xml-based communication from the mobile device. 
         [0033]    The foregoing features and elements may be combined in various combinations without exclusivity, unless expressly indicated otherwise. These features and elements as well as the operation thereof will become more apparent in light of the following description and the accompanying drawings. It should be appreciated, however, the following description and drawings are intended to be exemplary in nature and non-limiting. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0034]    Various features will become apparent to those skilled in the art from the following detailed description of the disclosed non-limiting embodiment. The drawings that accompany the detailed description can be briefly described as follows: 
           [0035]      FIG. 1  is a schematic view of a security system according to one disclosed non-limiting embodiment; 
           [0036]      FIG. 2  is a block diagram of the security system; 
           [0037]      FIG. 3  is a schematic view of a pseudo access code screen identical to an actual access code screen for operation of the security system according one disclosed non-limiting embodiment; 
           [0038]      FIG. 4  is a schematic view of an actual access code screen identical to the pseudo access code screen for operation of the security system according to one disclosed non-limiting embodiment; 
           [0039]      FIG. 5  is a block diagram for an operational use case of the security system according to one disclosed non-limiting embodiment; 
           [0040]      FIG. 6  is a block diagram for an operational use case of the security system according to one disclosed non-limiting embodiment; 
           [0041]      FIG. 7  is a block diagram for an operational use case of the security system according to one disclosed non-limiting embodiment; 
           [0042]      FIG. 8  is a block diagram for an operational use case of the security system according to one disclosed non-limiting embodiment; 
           [0043]      FIG. 9  is a block diagram for an operational use case of the security system according to one disclosed non-limiting embodiment; and 
           [0044]      FIG. 10  is a block diagram illustrating overall operation of the security system according one disclosed non-limiting embodiment. 
       
    
    
     DETAILED DESCRIPTION 
       [0045]      FIG. 1  schematically illustrates a security system  20 . The security system  20  generally includes a security device  22  and one or more mobile devices  24 , e.g. a smartphone, in communication with the security device  22  such as via Short Message Service (SMS). It should be appreciated that the security device  22  may be a security panel or form a potion thereof. SMS is a text messaging service component for phone, Web, or mobile communication systems that facilitates exchange of short text messages. It should be still further appreciated that although particular systems are separately defined, each or any of the systems may be otherwise combined or separated via hardware and/or software. The communication may be conveyed to one or more networks. For example, the communication may be transmitted to the Internet and/or a cellular network. The network(s) may include infrastructure that may be organized to facilitate cloud computing. For example, cloud computing may include one or more servers, such as a primary message server, a backup message server, etc. 
         [0046]    The servers may be configured to process communications from the mobile device  24 . As part of the processing, the servers may validate or authenticate the mobile device  24  and/or a user, potentially based on an identifier associated with the authorized user or the mobile device  24 . The validation may alternatively or additionally be based on a location of the authorized user or the mobile device  24 . The location may be determined based on one or more location-based services or techniques, such as triangulation, global positioning system (GPS), etc. 
         [0047]    With reference to  FIG. 2 , the security device  22  generally includes a control module  40  with a processor  42 , a memory  44 , and an interface  46 . The processor  42  may be any type of microprocessor having desired performance characteristics. The memory  44  may include any type of computer readable medium that stores the data and executable instructions  48  described herein below. The executable instructions may be stored or organized in any manner and at any level of abstraction, such as in connection with one or more applications  48 , processes, routines, procedures, methods, etc. The memory  44  may also store data  50  that, for example, includes an access code validation engine  52 , a device identifier, or any other type of data. The access code validation engine  52  is the authorization code that disables sensors  30  reporting to the security device  22  to disarm the security system  20 . The processor  42  may execute the instructions stored in the memory  44  that are operative on the data  50 . The processor  42  may be coupled to the interface  46  that may include one or more of a keyboard or keypad, a touchscreen or touch panel, a display screen, a microphone, a speaker, etc. The interface  46  may also support a graphical user interface (GUI) and/or voice-to-text capabilities. The interface  46  and/or the mobile device  24  is operable to display a pseudo access code screen  60  ( FIG. 3 ) that is identical to an actual access code screen  62  ( FIG. 4 ) but is not in communication with the security device  22  access code validation engine  52 . That is, the security device  22  and/or the mobile device  24  may display the pseudo access code screen  60  and the actual access code screen  62  to receive an access code for further interaction with the security system  20 . 
         [0048]    When the pseudo access code screen  60  is displayed, a user may not be able to distinguish the pseudo access code screen  60  from the actual access code screen  62  and any correct/incorrect access code entered on the pseudo access code screen  60  will result in a failure. For an intruder the pseudo access code screen  60  will be seen as the access code screen and any of a brute force attack, a correct access code which was shoulder tapped, and/or an access code crack will not permit the intruder to break into the security control panel  22 . As will be further described below, the authorized user can access the actual access code screen  62  via proximity between the security device  22  and the one or more authorized mobile devices  24 , via SMS communication between the security device  22  and the one or more authorized mobile devices  24 , specific Bluetooth/NFC based authentication token, and/or other such authentication factor. 
         [0049]    With reference to  FIG. 5 , a method  100  for operation of the security system  20  is disclosed in terms of functional block diagrams. It should be appreciated that these functions may be enacted in either dedicated hardware circuitry or programmed software routines capable of execution in various microprocessor based electronics control embodiments. 
         [0050]    In one embodiment, the pseudo access code screen  60  is displayed (step  102 ) until the one or more authorized mobile devices  24  are within proximity to the security device  22  (step  104 ). That is, proximity to the security device  22  may be predefined as a threshold distance directly adjacent to the security device  22 . Predefined proximity to the security device  22  can be further determined by GPS, Triangulation, or from a Periodic poll from the smartphone application from authorized user mobile. Once the mobile device is in proximity, the smartphone/mobile app live/installed in the authorized user mobile can send an xml-based communication (different from SMS communication) to the security panel to get access to the actual access code screen. 
         [0051]    Once the security device  22  detects the authorized mobile device  24  (step  104 ), the actual access code screen  62  is displayed (step  106 ) such that the authorized user may enter the access code to disarm the system  20  (step  108 ). That is, detection of the authorized mobile device  24  is the first authentication factor, and entry of the access code to disarm the system  20  is a second authentication factor. 
         [0052]    Alternatively, or in addition, a third authentication factor may be utilized (step  110 ). In one example of a third authentication factor, the authorized user can send an SMS from the authorized mobile device  24  to the security device  22  while proximate the security device  22  to access the actual access code screen  62 . Alternatively, or in addition, the third authentication factor may beneficially utilize security features built in to the mobile device  24  such as a fingerprint scan, voice print, etc. Such a third authentication factor obviates the use of a stolen mobile device  24 , as even with the stolen mobile device  24 , the intruder cannot enter the proper third authentication factor, e.g., fingerprint scan, voice print, etc. 
         [0053]    With reference to  FIG. 6 , in another embodiment, a method  200  for operation of the security system  20  displays the pseudo code screen  60  (step  202 ) and requires the entry of a pseudo code, which is different from the access code utilized for the actual access code screen  62  (step  204 ). The authorized user has to enter the pseudo code in the pseudo access code screen  60  to reveal the actual access code screen  62 . The pseudo access code screen  60  may be identical to the actual access code screen  62 , so the intruder will be unable to recognize the difference between the pseudo access code screen  60  and actual access code screen  62 . Since the authorized user has enabled this setting, the authorized user is aware that the pseudo access code screen  60  is displayed, but for the intruder it will look like the actual access code screen. 
         [0054]    Once the pseudo code has been entered, the actual access code screen  62  is displayed (step  206 ) such that the authorized user may enter the access code to disarm the system  20  (step  208 ). It should be appreciated that the third authentication factor might also be utilized in this embodiment. 
         [0055]    Should an intruder enter the access code to the pseudo access code screen  60 , the security device  22  may just display a message, for example, “Invalid Access Code, Please Try Again.” Since the pseudo access code screen  60  is displaced, whatever the intruder enters—even the correct access code—results in the same message. The intruder will thus be unable to break into the security system  20  with any number of attempts. Further, after a predefined number of wrong attempts (step  210 ), the authorized user will be notified with SMS to the one or more authorized mobile devices  24  (step  212 ) to alert the authorized user and/or central monitoring station that an unauthorized access has been attempted. The authorized user or central monitoring station may then access the security device  22  remotely via SMS to, for example, lock the security device  22 , alert authorities, trigger an alarm, etc. ( FIG. 7 ). Alternatively, the security device  22  may be locked, alert authorities, trigger an alarm, etc., in response to a predetermined number of incorrect attempts. 
         [0056]    In this embodiment, the authorized user may selectively enable and disable the pseudo code setting, for example, when the authorized user is traveling out of town, while on normal days, the pseudo code setting can be disabled to avoid the necessity of always entering the two codes. Further, the pseudo access code may be a relatively simple derivative of the actual access code, for example, if the access code is “1234,” then the pseudo code can be “123” or “12345,” or other code which can be configured by the authorized user. In this example, the pseudo code will have a different digit count than the actual access code and thus be different than the actual access code, to avoid accidental access should the intruder try the 4 digit “1234” on the pseudo code screen  60  and then enter the actual access code screen  62  such that if the intruder enters “1234” believing the first entry failed, the intruder has then disabled the system, that is, inadvertently bypassed the pseudo code screen  60 . 
         [0057]    With reference to  FIG. 8 , in an example use case  300  for operation of the security system  20 , the authorized user forgets that the pseudo code setting is enabled, and fails to enter the proper pseudo code (step  302 ). In this use case, the authorized user fails to enter the proper pseudo code into the pseudo code screen  60  a multiple of times, for example, twice (step  304 ). In response, the security device  22  sends an SMS to the authorized device  24  to provide information such as a status of the security device  22  which may, for example, remind the authorized user that the pseudo code setting is enabled (step  306 ). This SMS may contain information to facilitate entry of the proper pseudo code (step  308 ) by the authorized user. 
         [0058]    Should the authorized user fail to enter the proper pseudo code into the pseudo code screen  60  a multiple of times (step  304 ) then again fails to enter the proper pseudo code in response to the SMS reminder (step  308 ), the system  20  sends an SMS to the authorized device  24  with a temporary access code (step  310 ). 
         [0059]    Next, in response to proper entry of the temporary access code (step  312 ), a secret question screen is displayed (step  314 ). The secret question may, for example, be mother&#39;s maiden name, city of birth, etc., that was previously set by the authorized user (step  316 ). Proper entry of the answer to the secret question by the authorized user (step  318 ), displays the access code screen  62  (step  320 ) for entry of the access code (step  322 ) to then disarm the system (step  324 ). Should an intruder who has stolen the mobile device  24  reach this step, the secrete question prevents intruder access and can then lock the security device for a desired time period ( FIG. 9 ). 
         [0060]    The real-time SMS notification facilitates increased security at no extra cost and readily handles brute force attack and access code cracking. The real-time SMS notification to the authorized user and the pseudo code facilitates more timely control via SMS based communication with the control panel  22  ( FIG. 10 ). Further, installer back end support is eliminated via SMS based communication for access code recovery to result in cost savings and an efficient method of administering user access code in an essentially self-contained manner. 
         [0061]    The elements disclosed and depicted herein, including in flow charts and block diagrams throughout the figures, imply logical boundaries between the elements. However, according to software or hardware engineering practices, the depicted elements and the functions thereof may be implemented on machines through computer executable media having a processor capable of executing program instructions stored thereon as a monolithic software structure, as standalone software modules, or as modules that employ external routines, code, services, and so forth, dynamically loaded or updated modules, or any combination of these, and all such implementations may be within the scope of the present disclosure. 
         [0062]    It should be appreciated that like reference numerals identify corresponding or similar elements throughout the several drawings. It should also be appreciated that although a particular component arrangement is disclosed in the illustrated embodiment, other arrangements will benefit herefrom. 
         [0063]    Although the different non-limiting embodiments have specific illustrated components, the embodiments are not limited to those particular combinations. It is possible to use some of the components or features from any of the non-limiting embodiments in combination with features or components from any of the other non-limiting embodiments. 
         [0064]    Although particular step sequences are shown, disclosed, and claimed, it should be appreciated that steps may be performed in any order, separated or combined unless otherwise indicated and will still benefit from the present disclosure. 
         [0065]    The foregoing description is exemplary rather than defined by the limitations within. Various non-limiting embodiments are disclosed herein, however, one of ordinary skill in the art would recognize that various modifications and variations in light of the above teachings will fall within the scope of the appended claims. It is therefore to be appreciated that within the scope of the appended claims, the disclosure may be practiced other than as specifically disclosed. For that reason the appended claims should be studied to determine true scope and content.