# Patent

## Title
Systems and methods for building and using a false alarm predicting model to determine whether to alert a user and/or relevant authorities about an alarm signal from a security system

## Abstract

Systems and methods for building and using a false alarm predicting model to determine whether to alert a user and/or relevant authorities about an alarm signal from a security system are provided. Such systems and methods can include a learning module receiving the alarm signal and additional information associated with the alarm signal, using the false alarm predicting model to process a combination of the alarm signal and the additional information to determine whether the combination represents a false alarm or a valid alarm, and transmitting a status signal indicative of whether the combination represents the false alarm or the valid alarm to an automated dispatcher module, and the automated dispatcher module using the status signal to automatically determine whether to alert the user and/or the relevant authorities about the alarm signal.

## Background
RELATED APPLICATIONS
This application is a continuation of U.S. patent application Ser. No. 16/942,709, filed on Jul. 29, 2020, now U.S. Pat. No. 11,282,374, which is a continuation of U.S. patent application Ser. No. 16/543,786, filed on Aug. 19, 2019, now U.S. Pat. No. 10,762,773, the contents of each are hereby incorporated by reference.


TECHNICAL FIELD
The present invention relates generally to security systems. More particularly, the present invention relates to systems and methods for building and using a false alarm predicting model to determine whether to alert a user and/or relevant authorities about an alarm signal from a security system.
BACKGROUND
Known security systems utilize a cloud server to process alarm signals and distribute the alarm signals to a central monitoring station for review and transmission of alert signals to users and/or relevant authorities when needed. However, known security systems often produce a high number of false alarms that consume bandwidth when transmitted and must be screened by live technicians at the central monitoring station, thereby greatly increasing costs associated with operating the central monitoring station.
For example, when the cloud server receives an alarm signal from a security system, the cloud server identifies the central monitoring station associated with the security system and transmits an unfiltered version of the alarm signal to the central monitoring station. Then, the central monitoring station processes the alarm signal by placing the alarm signal in a queue and retrieving associated customer information. When an operator becomes available, the central monitoring station removes the alarm signal and the associated customer information from the queue and presents the alarm signal and the associated customer information to the operator for review. In an attempt to identify any false alarms, the operator may contact a user of the security system via a primary phone number and/or a backup phone number to solicit user input indicative of whether the alarm signal is a valid alarm. Then, the operator will contact the relevant authorities when he or she confirms that the alarm signal likely corresponds to the valid alarm or fails to confirm that the alarm signal corresponds to a false alarm.
Unfortunately, the above-described systems and methods consume more bandwidth than is necessary for valid alarms and a lot of time that the operator could otherwise spend addressing the alarm signals known to be valid. Therefore, there is a need and an opportunity for improved systems and methods.



BRIEF DESCRIPTION OF THE DRAWINGS
FIG. 1 is a block diagram of a system in accordance with disclosed embodiments;
FIG. 2 is a block diagram of a system in accordance with disclosed embodiments;
FIG. 3 is a block diagram of a system in accordance with disclosed embodiments;
FIG. 4 is a block diagram of a system in accordance with disclosed embodiments;
FIG. 5 is a block diagram of a system in accordance with disclosed embodiments; and
FIG. 6 is a flow diagram of a method in accordance with disclosed embodiments.



DETAILED DESCRIPTION
While this invention is susceptible of an embodiment in many different forms, specific embodiments thereof will be described herein in detail with the understanding that the present disclosure is to be considered as an exemplification of the principles of the invention. It is not intended to limit the invention to the specific illustrated embodiments.
Embodiments disclosed herein can include systems and methods that use artificial intelligence and machine learning to determine what security actions to execute and when to execute those security actions responsive to an alarm signal from a security system by fusing security system sensor data, situational awareness/contextual data, user preference data, and the like. For example, systems and methods disclosed herein can determine whether to push a security notification to a mobile application of a user, call or refrain from calling the user via a primary phone number and/or a backup phone number, and/or call or dispatch relevant authorities to a secured area.
In accordance with disclosed embodiments, systems and methods disclosed herein can build and use a false alarm predicting model to process alarm signals from the security system to (1) maximize a likelihood that false alarms are identified before otherwise being transmitted to the user and/or the relevant authorities and (2) enable use of an automated dispatcher module to directly report the alarm signals to the user and/or the relevant authorities. For example, a learning module can use the false alarm predicting model to process an alarm signal from the security system and, responsive thereto, generate a status signal. The automated dispatcher module can process the status signal to automatically determine whether to alert the user and/or the relevant authorities about the alarm signal.
In some embodiments, the false alarm predicting model can be managed by the learning module. For example, in some embodiments, the learning module can receive the alarm signal from the security system and additional information associated with the alarm signal, use the false alarm predicting model to process a combination of the alarm signal and the additional information to determine whether the combination represents a false alarm or a valid alarm, and transmit the status signal indicative of whether the combination represents the false alarm or the valid alarm to the automated dispatcher module. Then, the automated dispatcher module can use the status signal to automatically determine whether to alert the user and/or the relevant authorities about the alarm signal.
In some embodiments, all or parts of the automated dispatcher module can be co-located with the learning module on a cloud server and/or a control panel of the security system as either a single integrated processing module or multiple distinct processing modules. However, in some embodiments, all or parts of the automated dispatcher module and the learning module can be located on separate components that are in communication with each other. For example, all or parts of the learning module can be located on the control panel, and all or parts of the automated dispatcher module can be located on the cloud server. Similarly, all or parts of the learning module can be located on the cloud server, and all or parts of the automated dispatcher module can be located on the control panel, or all or parts of the learning module can be located on the cloud server, and all or parts of the automated dispatcher module can be located on another server that is separate and distinct from the cloud server and the control panel.
In any embodiment, each of the automated dispatcher module and the learning module can include a respective transceiver device and a respective memory device, each of which can be in communication with respective control circuitry, one or more respective programmable processors, and respective executable control software as would be understood by one of ordinary skill in the art. In some embodiments, the respective executable control software of each of the automated dispatcher module and the learning module can be stored on a transitory or non-transitory computer readable medium, including, but not limited to local computer memory, RAM, optical storage media, magnetic storage media, flash memory, and the like, and some or all of the respective control circuitry, the respective programmable processors, and the respective executable control software of each of the automated dispatcher module and the learning module can execute and control at least some of the methods described herein.
In accordance with disclosed embodiments, the security system can protect a geographic area, and in some embodiments, the additional information can include weather data from a time associated with the alarm signal, movement data associated with the geographic area during the time associated with the alarm signal, a location of users of the security system during the time associated with the alarm signal, and/or incident reports relevant to the geographic area.
In some embodiments, the learning module can transmit an identification of the security system to the automated dispatcher module with the status signal, and responsive to receiving the status signal, the automated dispatcher module can identify and execute a customized response protocol associated with the security system. Then, the automated dispatcher module can determine whether a response to executing the customized response protocol is indicative of the false alarm or the valid alarm to automatically determine whether to alert authorities about the alarm signal. For example, in some embodiments, the customized response protocol can include identifying one or more devices associated with the security system, such as a mobile device of the user, and transmitting a notification signal indicative of the alarm signal to those devices. In such embodiments, the response to executing the customized response protocol can include receiving user input indicating that the alarm signal is the false alarm or the valid alarm or failing to receive any user input. In such embodiments, the automated dispatcher module can treat failing to receive any user input as indicative of the alarm signal being the valid alarm.
In some embodiments, the learning module can build the false alarm predicting model by parsing historical data from a historical time period. For example, in some embodiments, the learning module can parse a plurality of alarm signals from the historical time period, a plurality of additional information from the historical time period, feedback signals indicative of a plurality of false alarms from the historical time period, and feedback signals indicative of a plurality of valid alarms from the historical time period to build the false alarm predicting model.
In some embodiments, the false alarm predicting model can include a global model used to assess a validity of alarms from a plurality of security systems that protect a plurality of geographic areas. In such embodiments, the plurality of alarm signals from the historical time period can originate from the plurality of security systems. With the global model, in some embodiments, the plurality of additional information from the historical time period can include the weather data from the time associated with one of the plurality of alarm signals from the historical time period, the movement data associated with one of the plurality of geographic areas during the time associated with the one of the plurality of alarm signals from the historical time period, the location of the users of one of the plurality of security systems during the time associated with the one of the plurality of alarm signals from the historical time period, and/or the incident reports relevant to one of the plurality of geographic areas.
Additionally or alternatively, in some embodiments, the false alarm predicting model can include a local model used to assess the validity of alarms from a single security system that protects a single geographic area. In such embodiments, the plurality of alarm signals from the historical time period can originate from the single security system. With the local model, in some embodiments, the plurality of additional information from the historical time period can include the weather data from the time associated with one of the plurality of alarm signals from the historical time period, the movement data associated with the single geographic area during the time associated with the one of the plurality of alarm signals from the historical time period, the location of the users of the single security system during the time associated with the one of the plurality of alarm signals from the historical time period, and/or the incident reports relevant to the single geographic area. However, with the local model, in some embodiments, the plurality of alarm signals from the historical time period can originate from the plurality of security systems as described in connection with the global model to initially build the local model, and in these embodiments, the local model can be updated based on events related to only the single security system.
In some embodiments, the user can define specific parameters that are used to build the local model. For example, in some embodiments, the user can define a length of the historical time period from which the plurality of alarm signals are used to build the false alarm predicting model. Additionally or alternatively, in some embodiments, the user can specify other customized parameters that limit which of the plurality of alarm signals from the historical time period are used to build the false alarm predicting model. For example, the other customized parameters can include a defined geographic area, a type of the plurality of alarm signals, or other parameters that can limit which of the plurality of alarm signals from the historical time period are used to build the false alarm predicting model. In embodiments in which the other customized parameters include the defined geographic area, the plurality of alarm signals from the historical time period used to build the false alarm predicting model can include only those of the plurality of alarm signals that occurred within the defined geographic area. Similarly, in embodiments in which the other customized parameters include the type of the plurality of alarm signals, the plurality of alarm signals from the historical time period used to build the false alarm predicting model can include only those of the plurality of alarm signals that match the type, for example, a window alarm signal or a door alarm signal.
Additionally or alternatively, in some embodiments, the learning module can build the false alarm predicting model by recognizing patterns in the historical data. For example, in some embodiments, the learning module can identify first patterns of the plurality of alarm signals from the historical time period and the plurality of additional information from the historical time period that result in the feedback signals indicative of the plurality of false alarms from the historical time period. Similarly, the learning module can recognize second patterns of the plurality of alarm signals from the historical time period and the plurality of additional information from the historical time period that result in the feedback signals indicative of the plurality of valid alarms from the historical time period. Then, in operation, the learning module can compare the combination of the alarm signal and the additional information to the first patterns and the second patterns to determine whether the combination represents the false alarm or the valid alarm.
Furthermore, in some embodiments, the learning module can update the false alarm predicting model for increased accuracy at future times. For example, in some embodiments, the learning module can receive feedback signals indicating whether the combination of the alarm signal and the additional information represents the false alarm or the valid alarm and can use those feedback signals to update the false alarm predicting model for the increased accuracy at the future times.
In some embodiments, any of the feedback signals described herein can include user input explicitly identifying the alarm signal or the plurality of alarm signals from the historical time period as the valid alarm or the false alarm. Additionally or alternatively, in some embodiments, any of the feedback signals described herein can include information related to actions executed in response to the alarm signal or the plurality of alarm signals from the historical time period that are indicative of the valid alarm or the false alarm.
For example, in some embodiments, the information related to the actions executed that are indicative of the false alarm can include a dispatcher of a central monitoring station refraining from notifying the authorities about the alarm signal or the plurality of alarm signals from the historical time period or a report from the authorities identifying the false alarm after surveying the geographic area associated with the security system from which the alarm signal or the plurality of alarm signals from the historical time period originated. For example, the report from the authorities identifying the false alarm can include a description of the authorities walking around the geographic area and identifying nothing unusual or identifying a window or a door being open because of weather, not any presence of an intruder. Similarly, in some embodiments, the information related to the actions executed that are indicative of the valid alarm can include the dispatcher of the central monitoring station notifying the authorities about the alarm signal or the plurality of alarm signals from the historical time period or a report from the authorities identifying the valid alarm after surveying the geographic area associated with the security system from which the alarm signal or the plurality of alarm signals from the historical time period originated.
The learning module can receive the information related to the actions executed that are indicative of the false alarm or the valid alarm in a variety of ways. For example, in some embodiments, the learning module can automatically receive and parse the information related to the actions executed that are indicative of the false alarm or the valid alarm directly or via another module. Additionally or alternatively, in some embodiments, the learning module can manually receive the information related to the actions executed that are indicative of the false alarm or the valid alarm from an operator of the central monitoring station, from the user, or the relevant authorities.
In some embodiments, the learning module can identify a score to determine whether the combination of the alarm signal and the additional information represents the false alarm or the valid alarm. For example, the score can be indicative of a likelihood or a probability that the combination represents the false alarm or the valid alarm. In some embodiments, the score can be based on an amount by which the alarm signal and the additional information match the plurality of alarm signals from the historical time period and the plurality of additional information from the historical time period, and in some embodiments, the alarm signal and/or the additional information can be automatically or manually assigned different weights for such a matching comparison. Furthermore, the learning module can transmit the score to the automated dispatcher module, for example, with the status signal. Then, the automated dispatcher module can compare the score to a threshold value to automatically determine whether to alert the user and/or the relevant authorities about the alarm signal. When such a comparison and/or the score indicates that the automated dispatcher module should alert the user and/or the relevant authorities, the automated dispatcher module can automatically alert the user and/or the relevant authorities about the alarm signal without human intervention.
In some embodiments, the score can include a simple numerical value that can be deciphered by a human user as indicating that the combination of the alarm signal and the additional information represents the false alarm or the valid alarm. However, in some embodiments, the score can include a range of values with a calculated distribution (e.g. Gaussian) that indicates whether the combination of the alarm signal and the additional information represents the false alarm or the valid alarm. In such embodiments, the automated dispatcher module can include a cumulative distribution function that indicates when the automated dispatcher module should alert the user and/or the authorities, and in some embodiments, a sensitivity of the automated dispatcher module to the score can be automatically or manually adjusted based on the user preference data, such as days of the week or when the user is out of town.
Additionally or alternatively, in some embodiments, the learning module can make a binary determination as to whether the combination of the alarm signal and the additional information represents the false alarm or the valid alarm and transmit the binary determination to the automated dispatcher module with the status signal. In such embodiments, when the binary determination indicates that the combination represents the valid alarm, the automated dispatcher module can automatically alert the user and/or the relevant authorities about the alarm signal without human intervention.
Various embodiments for how the automated dispatcher module can alert the user and/or the relevant authorities are contemplated. For example, in some embodiments, the automated dispatcher module can insert the notification signal indicative of the alarm signal and demographic data associated with the alarm signal directly into a dispatch system for the relevant authorities. In some embodiments, some or all of the demographic data can be retrieved from a database of the cloud server using an identifier of the security system that sent the alarm signal to the cloud server. Additionally or alternatively, in some embodiments, some or all of the demographic data can be received from the security system with the alarm signal.
Additionally or alternatively, in some embodiments, the automated dispatcher module can call the user and/or the relevant authorities using voice emulation systems to report the alarm signal. Additionally or alternatively, in some embodiments, the automated dispatcher module can transmit an instruction signal to the mobile device of the user with instructions to contact the relevant authorities.
In some embodiments, the learning module can also transmit the status signal to a central monitoring station for processing thereof. For example, in some embodiments, the status signal can include the score that is indicative of the likelihood or the probability that the combination of the alarm signal and the additional information represents the false alarm or the valid alarm, and the central monitoring station can use the score to process and prioritize the alarm signal. For example, in some embodiments, when the score is indicative of a high likelihood of the alarm signal being the false alarm, the central monitoring station can deprioritize the alarm signal by, for example, placing the alarm signal at an end of a queue behind other alarm signals more likely to be valid. Additionally or alternatively, in some embodiments, a sensitivity of the central monitoring station to the score can be automatically or manually adjusted based on a price or level of service that the central monitoring station provides to the user.
Additionally or alternatively, in some embodiments, the learning module can transmit the alarm signal to the central monitoring station for processing thereof only when the status signal is indicative of a high likelihood of the alarm signal being the valid alarm. For example, in embodiments in which the learning module identifies the score that is indicative of the likelihood or the probability that the combination represents the false alarm or the valid alarm, the learning module can transmit the alarm signal to the central monitoring station when the score meets or exceeds the threshold value. However, in embodiments in which the learning module outputs the binary determination as to whether the combination of the alarm signal and the additional information represents the false alarm or the valid alarm, the learning module can transmit the alarm signal to the central monitoring station when the binary determination indicates that the alarm signal is the valid alarm.
FIG. 1, FIG. 2, FIG. 3, FIG. 4, and FIG. 5 are block diagrams of systems 20A, 20B, 20C, 20D, 20E in accordance with disclosed embodiments. As seen in FIG. 1, FIG. 2, FIG. 3, FIG. 4, and FIG. 5, the systems 20A, 20B, 20C, 20D, 20E can include a learning module 24, an automated dispatcher module 26, a security system 28 that protects a region R, a user device 30 associated with the security system 28, an external information source 32, and a dispatch system 34. As further seen in FIG. 1, FIG. 2, FIG. 3, FIG. 4, and FIG. 5, the user device 30 and the external information source 32 can communicate with the learning module 24, and the automated dispatcher module 26 can communicate with the dispatch system 34. In some embodiments, the user device 30 can include a mobile device of a user of the security system 28, and in some embodiments, the external information source 32 can include a weather service, an emergency services database, and the like.
In some embodiments, each of the learning module 24 and the automated dispatcher module 26 can include a respective transceiver device and a respective memory device in communication with respective control circuitry, one or more respective programmable processors, and respective executable control software as would be understood by one of ordinary skill in the art. In some embodiments, the respective executable control software of each of the learning module 24 and the automated dispatcher module 26 can be stored on a transitory or non-transitory computer readable medium, including, but not limited to local computer memory, RAM, optical storage media, magnetic storage media, flash memory, and the like, and some or all of the respective control circuitry, the respective programmable processors, and the respective executable control software of each of the learning module 24 and the automated dispatcher module 26 can execute and control at least some of the methods described herein.
As seen in FIG. 1, in some embodiments, both the learning module 24 and the automated dispatcher module 26 can be located on or be part of a cloud server 22. However, as seen in FIG. 2, in some embodiments, the automated dispatcher module 26 can be located on or be part of another server 36. Alternatively, as seen in FIG. 3, in some embodiments, both the learning module 24 and the automated dispatcher module 26 can be located on or be part of a control panel 22. However, as seen in FIG. 4, in some embodiments, the learning module 24 can be located or be part of the cloud server 22, and the automated dispatcher module 26 can be located on or be part of the control panel 38. Conversely, as seen in FIG. 5, in some embodiments, the automated dispatcher module 26 can be located on or be part of the cloud server 22, and the learning module 24 can be located on or be part of the control panel 38.
FIG. 6 is a flow diagram of a method 100 in accordance with disclosed embodiments. As seen in FIG. 6, the method 100 can include the learning module 24 receiving an alarm signal from the security system 28 and receiving additional information associated with the alarm signal from the security system 28 and/or from the external information source 32, as in 102. Then, the method 100 can include the learning module 24 using a false alarm predicting model to process a combination of the alarm signal and the additional information to determine whether the combination represents a false alarm or a valid alarm, as in 104, and transmitting a status signal indicative of whether the combination represents the false alarm or the valid alarm to the automated dispatcher module 26, as in 106.
After receiving the status signal, the method 100 can include the automated dispatcher module 26 determining whether the status signal indicates that the automated dispatcher module 26 should alert the user and/or relevant authorities about the alarm signal, as in 108. When the status signal fails to indicate that the automated dispatcher module 26 should alert the user and/or the relevant authorities, the method 100 can include taking no further action, as in 110. However, when the status signal indicates that the automated dispatcher module 26 should alert the user and/or the relevant authorities, the method 100 can include the automated dispatcher module 26 initiating an appropriate action as in 112, for example, by alerting the relevant authorities by inserting a notification signal indicative of the alarm signal and demographic data associated with the alarm signal directly into the dispatch system 34.
Although a few embodiments have been described in detail above, other modifications are possible. For example, the logic flows described above do not require the particular order described or sequential order to achieve desirable results. Other steps may be provided, steps may be eliminated from the described flows, and other components may be added to or removed from the described systems. Other embodiments may be within the scope of the invention.
From the foregoing, it will be observed that numerous variations and modifications may be effected without departing from the spirit and scope of the invention. It is to be understood that no limitation with respect to the specific system or method described herein is intended or should be inferred. It is, of course, intended to cover all such modifications as fall within the spirit and scope of the invention.

## Claims

1. A method comprising:
a learning module receiving an alarm signal and additional information associated with the alarm signal;
the learning module using a false alarm predicting model to process a combination of the alarm signal and the additional information to determine whether the combination represents a false alarm or a valid alarm; and
the learning module using the determination as to whether the combination represents the false alarm or the valid alarm to update the false alarm predicting model for increased accuracy at future times.

2. The method of claim 1 further comprising:
the learning module receiving the alarm signal from a security system that protects a geographic area,
wherein the additional information includes weather data from a time associated with the alarm signal, movement data associated with the geographic area during the time associated with the alarm signal, a location of users of the security system during the time associated with the alarm signal, or incident reports relevant to the geographic area.

3. The method of claim 1 further comprising:
the learning module receiving feedback signals indicating whether the combination represents the false alarm or the valid alarm; and
the learning module using the feedback signals in addition to the determination as to whether the combination represents the false alarm or the valid alarm to update the false alarm predicting model for increased accuracy at future times.

4. The method of claim 1 further comprising:
the learning module parsing a plurality of alarm signals from a historical time period, a plurality of additional information from the historical time period, first feedback signals indicative of a plurality of false alarms from the historical time period, and second feedback signals indicative of a plurality of valid alarms from the historical time period to build the false alarm predicting model.

5. The method of claim 4 wherein the plurality of alarm signals originate from a plurality of security systems that protect a plurality of geographic areas, and wherein the plurality of additional information includes weather data from a time associated with one of the plurality of alarm signals, movement data associated with one of the plurality of geographic areas during the time associated with the one of the plurality of alarm signals, a location of users of one of the plurality of security systems during the time associated with the one of the plurality of alarm signals, or incident reports relevant to one of the plurality of geographic areas.

6. The method of claim 4 further comprising:
the learning module building the false alarm predicting model by recognizing first patterns of the plurality of alarm signals and the plurality of additional information that result in the first feedback signals and recognizing second patterns of the plurality of alarm signals and the plurality of additional information that result in the second feedback signals; and
the learning module comparing the combination to the first patterns and the second patterns to determine whether the combination represents the false alarm or the valid alarm.

7. The method of claim 4 further comprising:
the learning module identifying a score to determine whether the combination represents the false alarm or the valid alarm,
wherein the score is indicative of a likelihood that the combination represents the false alarm or the valid alarm, and
wherein the score is a based on an amount by which the alarm signal and the additional information match the plurality of alarm signals and the plurality of additional information.

8. The method of claim 7 further comprising:
transmitting the score to an automated dispatcher module;
the automated dispatcher module comparing the score to a threshold value to automatically determine whether to alert the user or the relevant authorities about the alarm signal; and
when the score indicates that the automated dispatcher module should alert the relevant authorities about the alarm signal, the automated dispatcher module inserting a notification signal indicative of the alarm signal and demographic data associated with the alarm signal directly into a dispatch system for the relevant authorities.

9. The method of claim 1 further comprising:
the learning module making a binary determination as to whether the combination represents the false alarm or the valid alarm; and
when the binary determination indicates that the combination represents the valid alarm, an automated dispatcher module inserting a notification signal indicative of the alarm signal and demographic data associated with the alarm signal directly into a dispatch system for the relevant authorities.

10. The method of claim 1 further comprising:
the learning module receiving the alarm signal from a security system that protects a geographic area;
the learning module transmitting an identification of the security system to an automated dispatcher module with a status signal;
responsive to receiving the status signal, the automated dispatcher module identifying and executing a customized response protocol associated with the security system; and
the automated dispatcher module determining whether a response to executing the customized response protocol is indicative of the false alarm or the valid alarm to automatically determine whether to alert authorities about the alarm signal.

11. A system comprising:
a learning module; and
a security system that protects a geographic area, the learning module in communication with the security system,
wherein the learning module receives an alarm signal and additional information associated with the alarm signal, uses a false alarm predicting model to process a combination of the alarm signal and the additional information to determine whether the combination represents a false alarm or a valid alarm, and uses the determination as to whether the combination represents the false alarm or the valid alarm to update the false alarm predicting model for increased accuracy at future times and
wherein, when the learning module determines that the combination represents the valid alarm, the learning module generates a notification signal indicative of the alarm signal and demographic data associated with the additional information.

12. The system of claim 11 wherein the learning module receives the alarm signal from the security system that protects the geographic area, and wherein the additional information includes weather data from a time associated with the alarm signal, movement data associated with the geographic area during the time associated with the alarm signal, a location of users of the security system during the time associated with the alarm signal, or incident reports relevant to the geographic area.

13. The system of claim 11 wherein the learning module receives feedback signals indicating whether the combination represents the false alarm or the valid alarm and uses the feedback signals to update the false alarm predicting model for increased accuracy at future times.

14. The system of claim 11 wherein the learning module parses a plurality of alarm signals from a historical time period, a plurality of additional information from the historical time period, first feedback signals indicative of a plurality of false alarms from the historical time period, and second feedback signals indicative of a plurality of valid alarms from the historical time period to build the false alarm predicting model.

15. The system of claim 14 wherein the plurality of alarm signals originate from a plurality of security systems that protect a plurality of geographic areas, and wherein the plurality of additional information includes weather data from a time associated with one of the plurality of alarm signals, movement data associated with one of the plurality of geographic areas during the time associated with the one of the plurality of alarm signals, a location of users of one of the plurality of security systems during the time associated with the one of the plurality of alarm signals, or incident reports relevant to one of the plurality of geographic areas.

16. The system of claim 14 wherein the learning module builds the false alarm predicting model by recognizing first patterns of the plurality of alarm signals and the plurality of additional information that result in the first feedback signals and recognizing second patterns of the plurality of alarm signals and the plurality of additional information that result in the second feedback signals, and wherein the learning module compares the combination to the first patterns and the second patterns to determine whether the combination represents the false alarm or the valid alarm.

17. The system of claim 14 wherein the learning module identifies a score to determine whether the combination represents the false alarm or the valid alarm, wherein the score is indicative of a likelihood that the combination represents the false alarm or the valid alarm, and wherein the score is a based on an amount by which the alarm signal and the additional information match the plurality of alarm signals and the plurality of additional information.

18. The system of claim 17 wherein the learning module transmits the score to an automated dispatcher module, and wherein the automated dispatcher module compares the score to a threshold value to automatically determine whether to alert the user or relevant authorities about the alarm signal and, when the score indicates that the automated dispatcher module should alert the relevant authorities about the alarm signal, inserts a notification signal indicative of the alarm signal and demographic data associated with the additional information directly into a dispatch system for relevant authorities.

19. The system of claim 11 wherein the learning module makes a binary determination as to whether the combination represents the false alarm or the valid alarm, and wherein, when the binary determination indicates that the combination represents the valid alarm, the learning module generates the notification signal indicative of the alarm signal and demographic data associated with the additional information.

20. The system of claim 11 wherein the learning module receives the alarm signal from the security system that protects the geographic area and transmits an identification of the security system to an automated dispatcher module with a status signal, and wherein, responsive to receiving the status signal, the automated dispatcher module identifies and executes a customized response protocol associated with the security system and determines whether a response to executing the customized response protocol is indicative of the false alarm or the valid alarm to automatically determine whether to alert authorities about the alarm signal.