Method, system and article for controlling safety equipment

Abstract

Examples described herein provide network-enabled control of a security device. The examples include determining that a client device has connected to a network, receiving a request from the client device to instruct a security device to perform an action, wherein the request includes a key, authenticating the key received from the request, and based on a determination that the client device is authorized to connect to the network and based on the authentication of the key, sending, by a network device, a signal to instruct the security device to perform the action.

Description

Background Art

[0001] In recent years, the Internet of Things (IoT) has attracted great attention in the industry. IoT is a networking feature that allows interconnected objects or devices to communicate with each other via the Internet. In addition, IoT-enabled mobile devices such as smartphones, laptops, and tablets have allowed users to gain secure access to a variety of information and services, such as bank accounts, virtual wallets, and health records, through the Internet.

[0002] The security system may include at least one security device. The security device is a physical device that can control access to or monitor at least one area associated with the security system. For example, a security system for a room may include a lock mounted on a door, which can control access from the door to the interior of the room. In addition, in such an example, the security system for the room may also include a camera mounted on the inner wall of the room, which can monitor the interior of the room. BRIEF DESCRIPTION OF THE DRAWINGS

[0003] The various features and advantages of the present invention will become apparent from the following description of examples of the invention given by way of example only, which description is made with reference to the accompanying drawings, in which

[0004] In the figure:

[0005] Figure 1 is a block diagram of an exemplary security system for network-enabled control of security devices.

[0006] Figure 2A and 2B is a flow chart of an example process for network-enabled control of a security device.

[0007] Figures 3A-3D An example of network-enabled control of a security device is shown.

[0008] Figure 4 is a block diagram of an example computer system in which various embodiments described herein may be implemented. DETAILED DESCRIPTION

[0009] The access card based security system may include at least one security device that may be controlled using at least one access card. In the access card based security system, the at least one access card may be, for example, a passive or active type, a magnetic type, a radio frequency identification (RFID) type, a contact or contactless type, a proximity type, or the like, or a combination thereof.

[0010] Recently, efforts have been made to develop security systems that use IoT-enabled mobile devices to control at least one security device. Compared to access card-based security systems, such IoT-based security systems provide at least the following advantages. First, IoT-based security systems may be less cumbersome than access card-based security systems. For example, although IoT-based security systems allow users to control security devices using IoT-enabled mobile devices such as smartphones, access card-based security systems require users to use separate access cards to control security devices. Such requirements for access card-based security systems may be cumbersome, especially when users must carry and track numerous other access cards, such as credit cards, reward cards, parking permits, etc. Second, IoT-based security systems may be less vulnerable to security threats than access card-based security systems. For example, although IoT-enabled mobile devices may include one or more access control measures (e.g., password protection, fingerprint scanners, facial scanners, retinal scanners, etc.), access cards generally do not include such access control measures. Therefore, for access card-based security systems, unauthorized users can easily access security devices using copied, lost, or stolen access cards. Furthermore, IoT-based security systems avoid the difficulty and inconvenience of having to replace and redistribute such duplicated, lost or stolen access cards.

[0011] Although IoT-based security systems offer great potential, existing solutions require users to send signals through IoT-enabled mobile devices to control security devices. To send this signal, existing solutions require IoT-enabled mobile devices to use a Or short-range RF communication technology such as near field communication (NFC) protocol establishes a communication link with the security device. These requirements of existing schemes create vulnerabilities in IoT-based security systems for at least the following reasons. First, such IoT-based security systems may not be closed-loop systems because the IoT-enabled mobile device must establish a communication link with the security device to control the security device, but at the same time, the IoT-enabled mobile device can also be connected to an external network (such as a cellular network, a Wi-Fi network, etc.). Therefore, a security breach of the IoT-enabled mobile device from an external network may lead to a vulnerability in the security device via the communication link between the IoT-enabled mobile device and the security device. Second, for such IoT-based security systems, eavesdropping, data corruption, interception attacks, and physical theft of the IoT-enabled mobile device may lead to unauthorized control of the security device.

[0012] To address these issues, examples described herein provide network-enabled control of a security device. In such an example, a security system may determine that a client device is connected to a network and receive a request from the client device to instruct a security device to perform an action, wherein the request includes a key. In such an example, the security system may authenticate the key received from the request and, based on a determination that the client device is authorized to connect to the network and based on authentication of the key, send a signal by a network device instructing the security device to perform the action.

[0013] In this way, the examples described herein can control security devices in a safer manner than existing solutions. For example, the signal indicating that the security device performs an action is sent by a network device, rather than by a mobile device supporting IoT, thereby avoiding the requirement that the mobile device supporting IoT establish a communication link with the security device to control the security device. Therefore, the examples described herein can be a closed-loop system in which the security device is less vulnerable to attacks from security threats from external networks. In addition, the examples described herein can improve the authentication of requests for controlling security devices from mobile devices supporting IoT by determining that the mobile device supporting IoT is authorized to connect to the network, and by authenticating the keys received from the request. In addition, the examples described herein are less susceptible to unauthorized control of security devices via eavesdropping, data corruption, interception attacks, and physical theft of mobile devices supporting IoT.

[0014] Now referring to the accompanying drawings, Figure 1 is a block diagram of an example security system 100 for network-enabled control of security devices 140. Figure 1 In the example of , the security system 100 may include an authentication device 110, a network device 120, a client device 130, and a security device 140. Figure 1 In the example of , the driver 112 and the firmware 114 can be executed on the authentication device 110, and the driver 122 and the firmware 124 can be executed on the network device 120. The driver 112 and the firmware 114 may include one or more instructions stored on at least one non-transitory machine-readable storage medium, which are executable by at least one processing resource. The driver 122 and the firmware 124 may include one or more instructions stored on at least one non-transitory machine-readable storage medium, which are executable by at least one processing resource.

[0015] exist Figure 1 In the example of FIG. 1 , communication links 102 , 104 , 106 , and 108 allow for communication between devices of security system 100 . Figure 1As shown, communication link 102 allows communication between authentication device 110 and client device 130, communication link 104 allows communication between authentication device 110 and network device 120, communication link 106 allows communication between network device 120 and client device 130, and communication link 108 allows communication between network device 120 and security device 140. In the examples described herein, communication between at least two devices of security system 100 may include sending or receiving signals (e.g., transmitting data) between at least two devices. In the examples described herein, communication between at least two devices of security system 100 may include direct or indirect communication between at least two devices.

[0016] In some examples, the communication links 102, 104, 106, and 108 may use any appropriate (multiple) data transmission protocols, including: at least one connection-oriented protocol, such as the Transmission Control Protocol (TCP); at least one connectionless protocol, such as the User Datagram Protocol (UDP), or the like; or a combination thereof. Those skilled in the art will appreciate that the communication links 102, 104, and 106 may use any (multiple) suitable types of (multiple) data transmission protocols now known or later developed. In some examples, one or more communication links 102, 104, and 106 may include: at least one wired link, such as a wire, cable, optical fiber, or the like; or a combination thereof. Alternatively, one or more communication links 102, 104, and 106 may include at least one wireless link, such as a Wi-Fi-based link, a cellular-based link, or the like, or a combination thereof. Alternatively, one or more communication links 102, 104, and 106 may include a combination of at least one wired link and at least one wireless link. Those skilled in the art will appreciate that one or more communication links 102, 104, and 106 may use any suitable type(s) of wired and / or wireless links now known or later developed. In some examples, communication link 108 may include at least one wireless link based on at least one RF communication technology, such as Low Energy, or the like, or a combination thereof. Those skilled in the art will appreciate that the communication link 108 may use any suitable type(s) of wireless link(s) now known or later developed.

[0017] exist Figure 1In an example of a security system 100, the security system 100 may register the client device 130. In such an example, the security system 100 may register the client device 130 using at least one server, computer, laptop, switch, router, another networking or computing device, or the like, or a combination thereof. In such an example, the security system 100 may register the client device 130 using at least one registration identifier. In the examples described herein, the at least one registration identifier may include a name, address, phone number, credit card number, a copy of a driver's license, a copy of a passport, a photo of the user, or the like, or a combination thereof.

[0018] exist Figure 1 In an example of the present invention, the client device 130 can be connected to at least one network associated with the security system 100. In such an example, the client device 130 can include an IoT-enabled mobile device. For example, the client device 130 can include a smart phone, a laptop computer, a tablet computer, or the like. In the examples described herein, the at least one network associated with the security system 100 can include, for example, a local area network (LAN), a virtual LAN (VLAN), a wireless local area network (WLAN), a virtual private network (VPN), the Internet, or the like, or a combination thereof.

[0019] In some examples, client device 130 may be registered by a registration interface of security system 100. In such examples, the registration interface may be connected to at least one network associated with security system 100. For example, the registration interface may include a webpage accessible by client device 130 and connected to a network associated with security system 100. In some examples, the registration interface may include one or more instructions executed on client device 130. For example, the registration interface may include an application that may be executed on client device 130. Those skilled in the art will appreciate that client device 130 may be registered via any suitable method(s) now known or later developed.

[0020] In some examples, client device 130 may include at least one access control measure. In the examples described herein, at least one access control measure of client device 130 may include password protection, a fingerprint scanner, a facial scanner, a retinal scanner, or the like, or a combination thereof.

[0021] exist Figure 1In an example of the present invention, the security device 140 may include at least one physical device that can control access to or monitoring of at least one area associated with the security system 100. In the examples described herein, the at least one physical device of the security device 140 may include a lock, a bolt, a lever, a latch, a magnet, a motion sensor, a heat sensor, an acoustic sensor, a camera, or the like, or a combination thereof. It will be understood that the security device 140 may include any suitable (multiple) physical devices now known or later developed that can control access to or monitoring of at least one area associated with the security system 100. In such an example, the security device 140 may be connected to at least one network associated with the security system 100.

[0022] exist Figure 1 In an example of the present invention, the authentication device 110 may determine whether the client device 130 is authorized to connect to at least one network associated with the security system 100. In some examples, the authentication device 110 may include at least one server, computer, portable computer, switch, router, another networking or computing device, or the like, or a combination thereof. In such an example, the authentication device 110 may be connected to at least one network associated with the security system 100. In such an example, the authentication device 110 may determine whether the client device 130 is authorized to connect to at least one network associated with the security system 100 using at least one networking protocol. In the examples described herein, the at least one networking protocol may include the Remote Authentication Dial-In User Service (RADIUS) protocol, the User Datagram Protocol (UDP), the Challenge Handshake Authorization Protocol (CHAP), the Point-to-Point Protocol (PPP), the Extensible Authentication Protocol (EAP), or the like, or a combination thereof. Those skilled in the art will appreciate that the client device 130 may use any (multiple) suitable type(s) of network protocols now known or later developed to determine whether the client device 130 is authorized to connect to at least one network associated with the security device 100.

[0023] In some examples, the authentication device 110 may generate at least one key associated with the client device 130. In the examples described herein, the at least one key may include at least one password, such as an alphanumeric password, or the like. In the examples described herein, the at least one key may include a public key infrastructure (PKI), public key cryptography, certificate-based authentication, secure socket layer (SSL) authentication, or the like, or a combination thereof. In the examples described herein, a hash function may be used to generate the at least one key. In the examples described herein, the at least one key may include at least one identification associated with the client device 130. In the examples described herein, the at least one identification associated with the client device 130 may be based on a media access control (MAC) address of the client device 130, a location associated with the client device 130, a date associated with the client device 130, a time associated with the client device 130, an access code received by the client device 130, or the like, or a combination thereof. In the examples described herein, the at least one identification associated with the client device 130 may be based on facial recognition associated with a user, a location associated with a user, a date associated with a user, a time associated with a user, or the like, or a combination thereof. In such an example, the at least one identification associated with the client device 130 may include at least one registration identification associated with the client device 130. In the examples described herein, the at least one key may include at least one dynamic key having at least one value that changes after a predetermined time period. In such an example, the at least one dynamic key may be based on the at least one identification associated with the client device 130. Those skilled in the art will appreciate that the at least one key associated with the client device 130 may include any suitable type(s) of keys known or later developed.

[0024] In some examples, the authentication device 110 may store at least one data item including at least one key associated with the client device 130 in a repository associated with at least the security system 100. In such an example, the at least one key associated with the client device 130 may be the same as the at least one key generated by the authentication device 110. In such an example, the at least one key associated with the client device 130 may correspond to the at least one key generated by the authentication device 110 but need not be the same as the at least one key generated by the authentication device 110. In such an example, the at least one data item may further include at least one credential associated with the client device 130. In the examples herein, the at least one credential may include a MAC address, a username, a password, or the like, or a combination thereof, of the client device 130. Those skilled in the art will appreciate that the at least one credential associated with the client device 130 may include any (multiple) suitable types of credentials now known or later developed. In such an example, the at least one repository associated with the security system 100 may include at least one non-transitory machine-readable storage medium. In such an example, the authentication device 110 may include at least one repository. In such an example, the authentication device 110 may communicate with the at least one repository via at least one network associated with the security system 100.

[0025] In some examples, client device 130 may store at least one data item including at least one key associated with client device 130 in at least one repository associated with security system 100. In such an example, at least one key associated with client device 130 may be the same as at least one key generated by authentication device 110. In such an example, at least one key associated with client device 130 may correspond to at least one key generated by authentication device 110 but need not be the same as at least one key generated by authentication device 110. In such an example, at least one data item may further include at least one credential associated with client device 130. In such an example, at least one repository associated with security system 100 may include at least one non-transitory machine-readable storage medium. In such an example, client device 130 may include at least one repository. In such an example, client device 130 may communicate with at least one repository via at least one network associated with security system 100.

[0026] exist Figure 1In an example, the authentication device 110 may receive a request from the client device 130 to instruct the security device 140 to perform an action. In such an example, the request may include one or more machine-readable instructions that may be executed by at least one processing resource of the authentication device 100. Those skilled in the art will appreciate that the request may be received at any suitable time(s) in any suitable format(s) now known or later developed. In such an example, the request may include at least one key associated with the client device 130, wherein the at least one key of the request is the same as or corresponds to at least one key stored in a repository associated with the client device 130. In an example, the at least one key received from the request may be the same as or corresponds to at least one key generated by the authentication device 110. Those skilled in the art will appreciate that the at least one key received from the request may include any suitable type(s) of keys now known or later developed. In such an example, the authentication device 110 may authenticate the at least one key received from the request.

[0027] exist Figure 1 In an example of , authentication device 110 may determine whether the request from client device 130 is valid. In such an example, authentication device 110 may deny the request based on the determination that the request is invalid. Further, in such an example, authentication device 110 may send a signal to network device 120 to instruct network device 120 to instruct security device 140 to perform the action based on the determination that the request is valid. In such an example, authentication device 110 may determine that the request is valid based on a determination that client device 130 is authorized to connect to at least one network associated with security system 100, or based on authentication of at least one key received from the request, or a combination thereof.

[0028] exist Figure 1 In an example, network device 120 may receive a signal from authentication device 110 that instructs network device 120 to instruct security device 140 to perform the action. In such an example, network device 120 may participate in any network data transmission operation, including but not limited to switching, routing, bridging, or a combination thereof. In such an example, network device 120 may include at least one wireless access point (WAP). In such an example, network device 120 may be connected to at least one network associated with security system 100.

[0029] exist Figure 1In an example of the present invention, the network device 120 may send a signal to control the security device 140. In such an example, the network device 120 may receive one or more instructions from the authentication device 110 to instruct the security device 140 to perform an action. In addition, in such an example, the network device 120 may send a signal to the security device 140 to instruct the security device 140 to perform the action. In such an example, the action may include locking, unlocking, opening, closing, enabling, disabling, turning on, shutting down, or reprogramming the security device 140, or the like, or a combination thereof. It will be understood by those of ordinary skill in the art that any suitable (multiple) actions now known or later developed may be performed to control the security device 140.

[0030] In this way, the security system 100 provides network-enabled control of the security device 140 in a more secure manner than existing solutions. For example, the security system 100 does not require the client device 130 to establish a communication link with the security device 140 to instruct the security device 140 to perform an action. Instead, the security system can send a signal for instructing the security device 140 to perform the action through the network device 120. Therefore, the security system 100 can instruct the security device 140 to perform an action using a more secure closed-loop system than existing solutions. Moreover, the security system 100 can improve the authentication of the request from the client device 130 to control the security device 140 by determining that the client device 130 is authorized to connect to the network and by authenticating the key received from the request. In addition, in the security system 100, the security device 140 is less vulnerable to attacks such as eavesdropping, data corruption, interception attacks, and physical theft of the client device 130 to gain unauthorized control.

[0031] Figure 2A and 2B Functionality 200 of a security system according to an example is shown. Functionality 200 may be implemented as a method or may be executed as one or more instructions on a machine (e.g., by at least one processor), wherein the one or more instructions are included in at least one machine-readable storage medium (e.g., a transient or non-transitory machine-readable storage medium). Although only twelve blocks are shown in functionality 200, functionality 200 may include other actions described herein. Moreover, some blocks shown in functionality 200 may be omitted without departing from the spirit and scope of the present disclosure. Functionality 200 may be implemented on a security system according to any of the examples herein.

[0032] As shown in block 205 , functionality 200 may include registering a client device.

[0033] In some examples, the client device can be registered by at least one device of the security system. In such an example, the client device can be registered by a registration device of the security system. In such an example, the registration device can be connected to at least one network associated with the security system. For example, in a hotel, a hotel receptionist can use a computer located at the hotel front desk to register a guest's smartphone for use at the hotel. In such an example, the computer can be connected to a network associated with the hotel security system.

[0034] In some examples, the client device can be registered through a registration interface. In such an example, the registration interface can be connected to at least one network associated with the security system. In such an example, the registration interface can include one or more instructions executed on the client device. For example, in a hotel example, a guest can register his or her smartphone using a website connected to a network associated with the hotel security system for use in the hotel. Alternatively, in a hotel example, a guest can register his or her smartphone by using a registration application installed on his or her smartphone, wherein the registration application can be connected to a network associated with the hotel security system.

[0035] In some examples, the client device may be registered by providing at least one registration identifier at a registration device, at a registration interface, or a combination thereof, or at any known or later developed suitable device or component. In such examples, the client device may send at least one registration identifier via at least one network associated with the security system. For example, in a hotel example, a guest may register his or her smartphone by uploading a digital photo of his or her face using a registration application installed on his or her smartphone. In such an example, a digital photo of the guest's face may be taken by using a camera device on the guest's smartphone.

[0036] In some examples, a client device can be registered by providing at least one credential associated with the client device. For example, in the hotel example, a guest can register his or her smartphone by entering a username and password in a registration application, where the username and password have been assigned to the guest by the hotel.

[0037] As shown at block 210 , functionality 200 may include generating a key associated with a client device.

[0038] In some examples, the key may be generated by at least one device of the security system. In such an example, the key may be generated by an authentication device. In such an example, the key may be generated using a hash function. In such an example, the key may include at least one identification associated with the client device. For example, in a hotel example, after a guest registers his or her smartphone for use at the hotel, the authentication device of the hotel security system may use a hash function and generate a key based on the MAC address of the guest's smartphone. In such an example, the key may also include information about the location of the hotel room assigned to the guest, and may include a digital photo of the guest's face uploaded during the guest's smartphone registration.

[0039] In some examples, generating a key associated with the client device may further include storing at least one data item including the key in at least one repository associated with the security system. In such examples, at least the data item may include at least one credential associated with the client device. For example, in the hotel example, the key, username, and password associated with the client device may be stored as data items in a storage medium of the authentication device.

[0040] In some examples, generating a key associated with the client device may include generating a dynamic key that includes at least one value that changes after a predetermined period of time. For example, in the hotel example, after a guest registers his or her smartphone for use in the hotel, the authentication device may generate a dynamic key that includes a value that changes as a function of time.

[0041] As indicated at block 215 , functionality 200 may include receiving a connection request from a client device to connect to a network.

[0042] In some examples, at least one device of the security system may receive a connection request. In such an example, the connection request may be received by an authentication device, a network device, or any other suitable device of the security system connected to a network. In such an example, the network may be at least one network associated with the security system. For example, in a hotel example, after a guest registers his or her smartphone for use at the hotel, the guest may submit a connection request using his or her smartphone to connect to the hotel's guest Wi-Fi network. In such an example, the authentication device receives the connection request via a network associated with the hotel's security system.

[0043] In some examples, the connection request may be received at the authentication device by receiving the connection request at a network device of the security system and then sending the connection request to the authentication device by the network device. For example, in a hotel example, the authentication device may receive a connection request from a guest's smartphone to connect to the hotel's guest Wi-Fi network by receiving the connection request on a WAP connected to a network associated with the hotel's security system and then sending the connection request to the authentication device by the WAP.

[0044] In some examples, the connection request received from the client device to connect to the network may further include at least one credential associated with the client device. For example, in the hotel example, the guest's connection request may include the MAC address of the guest's smartphone and the username and password assigned to the guest.

[0045] As indicated at block 220 , functionality 200 may include determining whether the client device is authorized to connect to the network.

[0046] In some examples, at least one device of the security device can determine whether the client device is authorized to connect to the network. In such examples, the authentication device can determine whether the client device is authorized to connect to the network. In such examples, the authentication device can determine whether at least one credential associated with the client device received from the connection request is associated with the client device. For example, in the hotel example, the authentication device can determine whether the guest's smartphone is authorized to connect to the guest Wi-Fi network by authenticating the MAC address of the guest's smartphone and the username and password received from the guest's connection request.

[0047] At block 220, if it is determined that the client device is not authorized to connect to the network, functionality 200 proceeds to block 225. At block 220, if it is determined that the client device is authorized to connect to the network, functionality 200 proceeds to block 230.

[0048] In some examples, at box 220, it is determined that the client device is not authorized to connect to the network by determining that at least one credential received from the connection request is not associated with the client device. In some examples, at box 220, it is determined that the client device is authorized to connect to the network by determining that at least one credential received from the connection request is associated with the client device. For example, in the hotel example, the authentication device can determine that the guest's smartphone is not authorized to connect to the guest Wi-Fi network by determining that at least one of the MAC address, username, and password received from the guest's connection request is not associated with the guest's smartphone. In addition, in the hotel example, the authentication device can determine that the guest's smartphone is authorized to connect to the guest Wi-Fi network by determining that the MAC address, username, and password received from the guest's connection request are associated with the guest's smartphone.

[0049] As indicated at block 225, functionality 200 may include rejecting the connection request.

[0050] In some examples, at least one device of the security system may deny the connection request. In such examples, the connection request may be denied by the authentication device. In some examples, the connection request may be denied based on a determination that the client device is not authorized to connect to the network. For example, in the hotel example, the authentication device may deny the guest's connection request based on a determination that the guest's smartphone is not authorized to connect to the guest Wi-Fi network.

[0051] In some examples, rejecting the connection request may further include sending, by the authentication device, a notification to the client device that the connection request has been rejected. In such examples, rejecting the connection request may include receiving, at a network device of the security system, one or more instructions from the authentication device notifying the client device that the connection request has been rejected, and then sending, by the network device, a notification to the client device that the connection request has been rejected. For example, in the example of a hotel, after the authentication device rejects the guest's connection request, a WAP connected to a network associated with the hotel's security system may receive one or more instructions from the authentication device to notify the guest's smartphone that the connection request has been rejected, and then the WAP may send a notification to the guest's smartphone that the guest's connection request has been rejected.

[0052] As shown at block 230 , functionality 200 may include sending a key to a client device.

[0053] In some examples, the key may be sent to the client device by at least one device of the security system. In such examples, the key may be sent to the client device by an authentication device. In some examples, sending the key to the client device may be based on a determination that the client device is authorized to connect to the network. For example, in the example of a hotel, the authentication device may send the key to the guest's smartphone based on a determination that the guest's smartphone is authorized to connect to the guest Wi-Fi network.

[0054] In some examples, the key may be sent to the client device by receiving the key from the authentication device at a network device of the security system and then sending the key to the client device by the network device. For example, in the hotel example, the key may be sent to the guest's smartphone by receiving the key from the authentication device over a WAP connected to a network associated with the hotel's security system and then sending the key to the guest's smartphone over the WAP.

[0055] In some examples, sending the key to the client device can further include storing at least one data item including the key in at least one repository associated with the security system. In such examples, the at least one data item can include at least one credential associated with the client device. For example, in the hotel example, the key, username, and password received from the guest's connection request can be stored as data items in a storage medium of the guest's smartphone.

[0056] As shown in block 235 , functionality 200 may include receiving a request from a client device to instruct the security device to perform an action.

[0057] In some examples, at least one device of the security system may receive a request from a client device to instruct the security device to perform the action. In such an example, the authentication device may receive the request from the client device. In such an example, the authentication device may receive the request from the client device by receiving the request at a network device, and then having the network device send the request to the authentication device. For example, in a hotel example, the authentication device may receive a request from a guest's smartphone to instruct the security device to perform the action. In such an example, the security device may include a support on the front door of the guest's assigned hotel room. The security lock and the request can include unlocking support Alternatively, in such an example, the security device may include a support device located inside the guest's assigned hotel room. A secure safe, and requests can include opening support Additionally, in the hotel example, the authentication device may receive the request from the guest's smartphone by receiving the request at a WAP connected to a network associated with the hotel's security system and then sending the request to the authentication device via the WAP.

[0058] In some examples, the request for indicating a security device may include a key associated with the client device. In such an example, the requested key may be the same as or correspond to the key sent to the client device at block 230. In such an example, the request may include at least one data item stored in at least one repository associated with the security system. For example, in the hotel example, a guest's request for indicating a security device may include a data item stored on a storage medium of the guest's smartphone, wherein the data item includes a key, a username, and a password received from the guest's connection request.

[0059] In some examples, the request to indicate a security device may include at least one identifier associated with the client device. For example, in the hotel example, the guest's request to indicate a security device may include information about the current location of the guest's smartphone. Additionally, in such an example, the guest's request may include an uploaded digital photo of the guest's face captured using a camera device on the guest's smartphone.

[0060] As indicated at block 240 , functionality 200 may include determining whether a request to instruct a secure device is valid.

[0061] In some examples, at least one device of the security system can determine whether a request for indicating a security device is valid. In such an example, the request can be determined to be valid by authenticating a key associated with the client device and received from the request by an authentication device. In such an example, the request can be determined to be valid by authenticating at least one data item received from the request by an authentication device. In such an example, authenticating the key received from the request includes comparing the key with at least one data item stored in at least one repository associated with the authentication device. For example, in a hotel example, determining whether a guest's request for indicating a security device is valid may include: by authenticating the key, username, and password received from the guest's request by an authentication device. In such an example, authenticating the key, username, and password received from the guest's request may include comparing the key, username, and password received from the guest's request with the data items stored in the storage medium of the authentication device.

[0062] In some examples, whether a request to indicate a security device is valid can be determined by authenticating at least one identifier associated with a client device received from the request. In such examples, authenticating at least one identifier received from the request can include comparing the at least one identifier with at least one data item stored in at least one repository associated with the security device. For example, in the example of a hotel, whether a request to indicate a guest's security device is valid can be determined by authenticating the guest's location and facial identity by an authentication device. In such an example, the guest's location and facial identity can be authenticated by comparing the guest's request with data items stored in a storage medium of the authentication device, the guest's request including information about the guest's assigned hotel room location and an uploaded digital photo of the user's face, the data item including information about the guest's assigned hotel room location and a digital photo of the user's face uploaded during registration of the guest's smartphone.

[0063] At block 240, if it is determined that the request to indicate a secure device is not valid, then function 200 proceeds to block 245. At block 220, if it is determined that the request to indicate a secure device is valid, then function 200 proceeds to block 250.

[0064] In some examples, at box 240, the request to indicate the security device is invalid by determining that a key received from the request is different from or does not correspond to a key of at least one data item stored in at least one repository associated with the security device. In some examples, at box 240, the request to indicate the security device is invalid by determining that at least one credential associated with the client device received from the request is different from or does not correspond to at least one credential in at least one data item. For example, in the hotel example, the request to indicate the security device is invalid by determining that at least one of the keys, usernames, and passwords received from the guest's request is different from at least one of the keys, usernames, and passwords of the data items stored on the storage medium of the authentication device by the authentication device.

[0065] In some examples, at block 240, a determination is made that the request indicating the security device is invalid by determining that at least one identification of the key received from the request is not identical to or does not correspond to at least one data item stored in at least one repository associated with the security device. For example, in the hotel example, a request from a guest indicating the security device may be determined to be invalid by determining that the guest's request is not identical to or does not correspond to data items stored on a storage medium of the authentication device, the guest's request including information about the current location of the guest's smartphone and an uploaded facial photo of the guest, the data items including information about the guest's hotel room location and a digital facial photo of the guest uploaded during registration of the guest's smartphone.

[0066] In some examples, at block 240, the request to indicate the security device is invalid by determining that the key received from the request has been deactivated. In such examples, the key received from the request can be deactivated after a predetermined time period, or based on at least one identifier associated with the client device, or a combination thereof. For example, in the hotel example, the request to indicate the security device is invalid by determining that at least one of the key, username, and password received from the guest's request has expired by the authentication device.

[0067] In some examples, at box 240, the request to indicate the security device is valid by determining that the key received from the request is the same as or corresponds to the key of at least one data item stored in at least one repository associated with the security device. In some examples, at box 240, the request to indicate the security device is valid by determining that at least one credential associated with the client device received from the request is the same as or corresponds to at least one credential in the at least one data item. For example, in the hotel example, the request to indicate the security device is valid by determining, by the authentication device, that the key, username, and password received from the request to indicate the security device of the guest are the same as the key, username, and password from the data item stored on the storage medium of the authentication device.

[0068] In some examples, at block 240, a request to indicate a security device is determined to be valid by determining that at least one identification of a key received from the request is the same as or corresponds to at least one data item stored in at least one repository associated with the security device. For example, in the hotel example, a request from a guest to indicate a security device is determined to be valid by determining that the guest's request is the same as or corresponds to a data item stored on a storage medium of the authentication device, the guest's request including information about the current location of the guest's smartphone and an uploaded facial photo of the guest, the data item including information about the guest's hotel room location and a digital facial photo of the guest uploaded during registration of the guest's smartphone.

[0069] In some examples, at block 240, the request to indicate the security device is valid by determining that the key received from the request is active. In such examples, the key received from the request may be valid for a predetermined time period, or based on at least one identifier associated with the client device, or a combination thereof. For example, in the hotel example, the request to indicate the security device is valid by determining that the key, username, and password received from the guest request are not expired by the authentication device.

[0070] As indicated at block 245, functionality 200 may include denying the request to indicate a secure device.

[0071] In some examples, at least one of the security devices may deny the request. In such an example, the authentication device may deny the request. In such an example, denying a request for an indicated security device may include receiving one or more instructions from an authentication device at a network device to instruct the network device to deny the request, and then sending a notification by the network device to the client device that the request has been denied. For example, in a hotel example, denying a request for a guest indicating a security device may include receiving one or more instructions from an authentication device on a WAP connected to a network associated with the hotel security system to deny the guest's request, and then sending a notification by the WAP to the guest's smartphone that the guest's request has been denied.

[0072] As indicated at block 250, function 200 may include sending, by the network device, a signal instructing the security device to perform the action.

[0073] In some examples, the signal for instructing the security device can be sent by: receiving one or more instructions for instructing the security device from the authentication device at the network device, and then sending the signal for instructing the security device to perform the action by the network device. For example, in the hotel example, sending the signal for instructing the security device may include: receiving one or more instructions for instructing the security device to perform the action from the authentication device at a WAP connected to a network associated with the hotel security system, and then sending the signal for instructing the security device to perform the action by the WAP.

[0074] In some examples, sending a signal by a network device to indicate a security device may include: sending a signal by at least one server, computer, portable computer, switch, router, another networking or computing device, etc. of the security system, or a combination thereof. For example, the signal for indicating a security device may be sent by an authentication device. For example, in the hotel example, sending a signal for indicating a security device may include: sending a signal by an authentication device to a security device to instruct the security device to perform an action.

[0075] In some examples, sending the signal to instruct the security device to perform the action may be based on a determination that the client device is authorized to connect to the network at block 220. In some examples, sending the signal to instruct the security device to perform the action may be based on a determination that the request to instruct the security device is valid at block 240. For example, in the hotel example, sending the signal to instruct the security device may be based on a determination that the guest's smartphone is authorized to connect to the hotel's guest Wi-Fi network and based on a determination that the guest's request to instruct the security device is valid.

[0076] As shown at block 255 , functionality 200 may include execution of an action by the security device.

[0077] In some examples, the action may include locking, unlocking, opening, closing, enabling, disabling, turning on, shutting down, or reprogramming the security device, or the like, or a combination thereof. Those skilled in the art will appreciate that any suitable action(s) now known or later developed may be performed to control the security device. For example, in the hotel example, the security device may include supporting The safety lock, where the action may include supporting Alternatively, in the hotel example, the security device may include a A safe, where the action may include opening the support Alternatively, in the hotel example, the security equipment may include support for The camera, where the action may include disabling support Camera.

[0078] As shown at block 260, function 200 may include a deactivation key.

[0079] In some examples, the key may be deactivated by at least one device of the security system. In such examples, the key may be deactivated by the authentication device. In such examples, deactivating the key may include removing at least one data item including the key from at least one repository associated with the security device. For example, in the hotel example, deactivating the key may include removing the data item from a storage medium of the authentication device by the authentication device. Additionally, in the hotel example, deactivating the key may include removing the data item from a storage medium of the client device by the client device.

[0080] In some examples, the key can be deactivated by receiving one or more instructions from a client device at the authentication device to instruct the authentication device to deactivate the key. In such an example, the key can be deactivated by receiving one or more instructions from the client device at a network device, and then sending the one or more instructions to the authentication device by the network device. In such an example, the key can be deactivated by receiving one or more instructions from the client device by at least one server, computer, portable computer, switch, router, another networking or computing device, or the like, or a combination thereof of the security device. For example, in the hotel example, deactivating the key may include: receiving an instruction from a guest's smartphone at a WAP connected to the hotel's security system to instruct the authentication device to remove a data item from a storage medium of the authentication device; and then sending the instruction to the authentication device by the WAP.

[0081] In some examples, the key can be deactivated after a predetermined time period, based on at least one identifier associated with the client device, or a combination thereof. For example, in the hotel example, the data item on the authentication device storage medium can be automatically removed after a predetermined time period (e.g., 24 hours) since the guest's smartphone last connected to the hotel's guest Wi-Fi network. In addition, in the hotel example, the data item on the storage medium of the guest's smartphone can be automatically removed after a predetermined time period (e.g., 24 hours) has passed since the guest's smartphone last connected to the hotel's guest Wi-Fi network.

[0082] In some examples, the key can be deactivated based on the determination that the client device has been deregistered. In such an example, the client device can be deregistered by at least one device of the security system. In such an example, the client device can be deactivated by a registration device, a registration device, a registration interface or a combination thereof, or at any suitable device or component known now or developed later. For example, in a hotel example, a hotel receptionist can deregister the guest's smartphone by using a computer located at the hotel front desk. Alternatively, in a hotel example, a guest can deregister his or her smartphone by using a registration application installed on his or her smartphone. Alternatively, in a hotel example, a guest can deregister his or her smartphone using a website connected to a network associated with a hotel security system. In addition, in a hotel example, based on the determination that the authentication device has deregistered the guest's smartphone, the authentication device can then remove the data item from the storage medium of the authentication device. In addition, in a hotel example, based on the determination that the authentication device has deregistered the guest's smartphone, the guest's smartphone can then remove the data item from the storage medium of the guest's smartphone.

[0083] In this way, function 200 provides network-enabled control of a security device in a more secure manner than existing solutions. For example, at box 250, function 200 does not need to establish a communication link between the client device and the security device to instruct the security device to perform an action. Instead, at box 250, function 200 may include a signal sent by the network device to instruct the security device to perform the action. Therefore, function 200 allows the use of a closed-loop system that is more secure than existing solutions to instruct the security device to perform an action. In addition, function 200 improves the authentication of a request from a client device to control a security device by determining at box 220 whether the client device is authorized to connect to a network associated with the security device, and by determining at box 240 whether the request to instruct the security device is valid. In addition, function 200 allows the security device to be less vulnerable to attacks by unauthorized control by eavesdropping, data corruption, interception attacks, and physical theft of client devices.

[0084] Figures 3A-3D is a block diagram of an example security system 300 for supporting network control of a security device 340. Figures 3A-3D In the example of FIG. 3 , the security system 300 includes an authentication device 310, a network device 320, a registered client device 330, and a security device 340. For ease of understanding, Figures 3A-3D Many aspects of security system 300 are omitted, but security system 300 may include any of the elements described above in conjunction with security system 100.

[0085] like Figure 3A As shown, the registered client device 330 can send a signal 306_1 to the network device 320 to communicate with the network device 320. In this example, the registered client device 330 can be registered by the security system 300. In this example, the signal 306_1 can be sent via at least one wireless link. In addition, the signal 306_1 can include a connection request from the registered client device 330 to connect to a network associated with the security system 300. In addition, the network device 320 can receive a connection request from the registered client device 330 to connect to the network via the signal 306_1.

[0086] like Figure 3A As shown, the network device 320 can send a signal 304_1 to the authentication device 310 to communicate with the authentication device 310. In this example, the signal 304_1 can be sent via at least one wireless link, at least one wired link, or a combination thereof. In addition, the signal 304_1 can include a connection request from a registered client device 330 to connect to the network. In addition, the authentication device 310 can receive a connection request from a registered client device 330 to connect to the network via the signal 304_1.

[0087] like Figure 3B As shown, the authentication device 310 can send a signal 304_2 to the network device 320 to communicate with the network device 320. In addition, based on the determination that the registered client device 330 is authorized to connect to the network, the authentication device 310 can send a signal 304_2 to the network device 320. In such an example, the signal 304_2 can be sent via at least one wireless link, at least one wired link, or a combination thereof. In addition, the signal 304_2 can include a key associated with the registered client device 330. In addition, the network device 320 can receive a key associated with the registered client device 330 via the signal 304_2.

[0088] like Figure 3BAs shown, the network device 320 can send a signal 306_2 to the registered client device 330 to communicate with the registered client device 330. In addition, the network device 320 can send the signal 306_2 to the registered client device 330 based on the determination that the registered client device 330 is authorized to connect to the network. In such an example, the signal 306_2 can be sent via at least one wireless link. In addition, the signal 306_2 can include a key associated with the registered client device 330. In addition, the registered client device 330 can receive the key associated with the registered client device 330 via the signal 306_2.

[0089] like Figure 3C As shown, the registered client device 330 can send a signal 306_3 to the network device 320 to communicate with the network device 320. In this example, the signal 306_3 can be sent via at least one wireless link. In addition, the signal 306_3 can include a request from the registered client device 330 to instruct the security device 340 to perform an action. The network device 320 can receive an instruction from the registered client device 330 to instruct the security device 340 to perform the action via the signal 306_3.

[0090] like Figure 3C As shown, the network device 320 can send a signal 304_3 to the authentication device 310 to communicate with the authentication device 310. In such an example, the signal 304_3 can be sent via at least one wireless link, at least one wired link, or a combination thereof. In addition, the signal 304_3 can include a request from the registered client device 330 to instruct the security device 340 to perform the action. In addition, the authentication device 310 can receive a request from the registered client device 330 to instruct the security device 340 to perform the action via the signal 304_3.

[0091] like Figure 3D As shown, the authentication device 310 can send a signal 304_4 to the network device 320 to communicate with the network device 320. In addition, based on the determination that the request is valid, the authentication device 310 can send a signal 304_4 to the network device 320. In such an example, the signal 304_4 can be sent via at least one wireless link, at least one wired link, or a combination thereof. In addition, the signal 304_4 can include one or more instructions for instructing the security device 340 to perform the action. In addition, the network device 320 can receive one or more instructions for instructing the security device 340 to perform the action via the signal 304_4.

[0092] like Figure 3DAs shown, the network device 320 can send a signal 308 to the security device 340 to communicate with the security device 340. In addition, the signal 308 can include one or more instructions for instructing the security device 340 to perform the action. In such an example, the signal 308 can be sent via at least one wireless link based on at least one RF communication technology. In addition, the network device 320 can send the signal 308 to the security device 340 based on the determination that the request is valid and based on the determination that the registered client device 330 is authorized to connect to the network. In addition, the security device 340 can receive one or more instructions for performing the action via the signal 308, and the security device 340 can perform the action.

[0093] In this way, Figures 3A-3D The security system 300 allows network-enabled control of the security device 340 in a more secure manner than existing solutions. For example, the security system 300 does not require the registered client device 330 to establish a communication link with the security device 340 to instruct the security device 340 to perform the action. Instead, the security device 300 can be sent a signal 308 by the network device 320 to instruct the security device 340 to perform the action. Therefore, the security system 300 can instruct the security device 340 to perform an action based on a closed-loop system that is more secure than existing solutions. Moreover, the security system 300 can improve the authentication of the request for controlling the security device 340 from the registered client device 330 by determining that the registered client device 330 is authorized to connect to the network associated with the security system 300, and by authenticating the key received from the request. In addition, the security device 340 is less vulnerable to attacks of unauthorized control by eavesdropping, data corruption, interception attacks, and physical theft of the registered client device 330.

[0094] Figure 4 4 is a block diagram of an example computer system 400 in which various embodiments described herein may be implemented. Computer system 400 includes: a bus 405 or other communication mechanism for transmitting information; and at least one hardware processor 410 coupled to bus 405 for processing information. At least one hardware processor 410 may be, for example, at least one general-purpose microprocessor.

[0095] The computer system 400 also includes a main memory 415, such as a random access memory (RAM), cache, other dynamic storage device, or the like or a combination thereof, coupled to the bus 405 for storing information and one or more instructions to be executed by the at least one processor 410. The main memory 415 may also be used to store temporary variables or other intermediate information during execution of the one or more instructions executed by the at least one processor 410. Such one or more instructions, when stored on a storage medium accessible to the at least one processor 410, render the computer system 400 into a special-purpose machine that is customized to perform the operations specified in the one or more instructions.

[0096] The computer system 400 further includes a read only memory (ROM) 420 or other static storage device coupled to the bus 405 for storing static information and one or more instructions for the at least one processor 410. At least one storage device 425, such as a magnetic disk, optical disk, or USB thumb drive (flash drive), or the like, or a combination thereof, may be provided and coupled to the bus 405 to store information and one or more instructions.

[0097] The computer system 400 may further include a display 430 coupled to the bus 405 for displaying graphical output to a user. The computer system 400 may further include an input device 435 coupled to the bus 405 to provide input from a user, such as a keyboard, camera, microphone, or the like, or a combination thereof. The computer system 400 may further include a cursor control 440 coupled to the bus 405 to provide input from a user, such as a mouse, pointer, stylus, or the like, or a combination thereof.

[0098] Computer system 400 may further include at least one network interface 445, such as a network interface controller (NIC), a network adapter, or the like, or a combination thereof, coupled to bus 405 for connecting computer system 400 to at least one network.

[0099] Generally, as used herein, the words "component", "system", "database", etc. may refer to logic embodied in hardware or firmware, or to a collection of software instructions that may have input and / or output points, which are written in programming languages ​​such as, for example, Java, C, or C++. Software components may be compiled and linked into executable programs, installed in dynamic link libraries, or may be written in interpretive programming languages ​​such as, for example, BASIC, Perl, or Python. It should be understood that software components may be called from other components or from themselves, and / or may be called in response to detected events or interrupts. Software components configured to be executed on a computing device may be provided on a computer-readable medium, such as a compact disc, a digital video disc, a flash drive, a disk, or any other tangible medium, or may be provided as a digital download (which may be initially stored in a compressed or installable format that requires installation, decompression, or decryption prior to execution). Such software code may be stored in part or in whole on a memory device of an executing computing device to be executed by the computing device. Software instructions may be embedded in firmware such as an EPROM. It will also be understood that hardware components may include connected logic units, such as gates and flip-flops, and / or may include programmable units, such as programmable gate arrays or processors.

[0100] The computer system 400 may implement the techniques described herein using custom hardwired logic, one or more ASICs or FPGAs, firmware, and / or program logic that, in conjunction with the computer system, enables the computer system 400 to be or be programmed to be a special purpose machine. According to one embodiment, the techniques herein are performed by the computer system 400 in response to at least one processor 410 executing one or more sequences of one or more instructions contained in the main memory 415. Such one or more instructions may be read into the main memory 415 from another storage medium such as at least one storage device 425. Execution of the sequences of one or more instructions contained in the main memory 415 causes the at least one processor 410 to perform the process steps described herein. In alternative embodiments, hardwired circuitry may be used in place of or in combination with software instructions.

[0101] As used herein, the term "Wi-Fi" is intended to cover any type of wireless communication that complies with the Institute of Electrical and Electronics Engineers (IEEE) 802.11 standard, whether 802.11ac, 802.11ax, etc. The term "Wi-Fi" is currently published by the Wi-Fi Alliance. Any product tested and approved as "Wi-Fi Certified" (registered trademark) by the Wi-Fi Alliance can be certified to interoperate with each other, even if they come from different manufacturers. Users of "Wi-Fi Certified" products can use any brand of WAP with any other brand of certified client hardware. However, in general, any Wi-Fi product using the same radio frequency (e.g., 5GHz of 802.11ac) can be used with any other product, even if such a product is not "Wi-Fi Certified". The term "Wi-Fi" is further intended to cover future versions and / or variations of the aforementioned communication standards. Each of the aforementioned standards is incorporated herein by reference.

[0102] As used herein, the term "Bluetooth" is intended to encompass any device that complies with Any type of wireless communication that complies with at least one of the Bluetooth low energy specifications. As used herein, the term "Bluetooth low energy" is intended to cover any type of wireless communication that complies with Any type of wireless communication that uses at least one of the low energy specifications. The Bluetooth SIG currently publishes the terms "Bluetooth" and "Bluetooth Low Energy".

[0103] As used herein, the term "ZigBee" is intended to encompass The term "ZigBee" is currently published by the ZigBee Alliance. As used herein, the term "Z-Wave" is intended to encompass wireless communications that conform to Z-Wave. Any type of wireless communication using at least one of the following protocols. Zensys currently markets the term "Z-Wave".

[0104] As used herein, the term "WAP" generally refers to at least one reception point for any convenient wireless access technology that is known or may later become known. A WAP is generally used as an electronic device adapted to allow a wireless device to connect to a wired network via various communication standards. For example, a WAP may allow a wireless device to connect to a wired network via at least one of the IEEE 802.11 standards. However, the term WAP is not intended to be limited to WAPs based on IEEE 802.11. A WAP may include any necessary hardware components (not shown) to perform the invention disclosed herein, including but not limited to: a processor, a memory, a display device, an input device, a communication device, etc.

[0105] As used herein, the term "non-transitory medium" and similar terms refer to any electronic, magnetic, optical or other physical storage device containing or storing executable instructions. Non-transitory media may include non-volatile media and / or volatile media. Non-volatile media include, for example, optical disks or magnetic disks. Volatile media include, for example, dynamic memory. Common forms of non-transitory machine-readable media include, for example, floppy disks, foldable disks, hard disks, solid-state drives, tapes or any other magnetic data storage media, CD-ROMs, any other optical data storage media, any physical media with hole patterns, RAM, PROM and EPROM, FLASH-EPROM, NVRAM, any other memory chips or cassettes, and networked versions thereof.

[0106] Non-transitory media are distinct from, but may be used in conjunction with, transmission media. Transmission media participate in the transmission of information between non-transitory media. Examples of transmission media include coaxial cables, copper wire, and optical fiber. Transmission media may also take the form of acoustic or light waves, such as those generated during radio wave and infrared data communications.

[0107] As used herein, the term "or" may be interpreted in an inclusive or exclusive sense. Furthermore, descriptions of resources, operations, or structures in the singular should not be understood to exclude the plural. Unless otherwise expressly stated or otherwise understood in the context of use, conditional language, such as "may," "might," "can," or "could," is generally intended to convey that certain embodiments include and other embodiments do not include certain features, elements, and / or steps.

[0108] Unless otherwise expressly stated, the terms and phrases used in this document and their variations should be interpreted as open-ended, rather than restrictive. As the aforementioned example, the term "including" should be understood to mean "including but not limited to" and the like. The term "example" is used to provide an illustrative example of the item being discussed, rather than an exhaustive or limiting list thereof. The term "one" or "an" should be understood to mean "at least one", "one or more", and the like. In some cases, the presence of broad words and phrases such as "one or more", "at least", "but not limited to" or other similar phrases should not be understood to mean that narrower situations are expected or required where such broad phrases may not be present.

[0109] Although the present technology may be susceptible to various modifications and alternative forms, the examples discussed above are shown only by way of example. It should be understood that these technologies are not intended to be limited to the specific examples disclosed herein. In fact, the present technology includes all substitutions, modifications and equivalents that fall within the true spirit and scope of the appended claims.

Claims

1. A system comprising: Authentication equipment, including: at least one processing resource; and at least one non-transitory machine-readable storage medium comprising instructions executable by at least one processing resource to: determining that the client device is authorized to connect to a network associated with the authentication device; receiving, from the client device, a request to instruct a security device to perform an action, wherein the request includes a key; authenticating the key received from the request; and Based on the determination that the client device is authorized to connect to the network and based on the authentication of the key, a first signal is sent to a network device, wherein the first signal instructs the network device to instruct the security device to perform the action.

2. The system of claim 1, wherein the instructions include instructions executable to: Based on the determination that the client device is authorized to connect to the network, the key is sent to the client device prior to receiving the request.

3. The system according to claim 1, further comprising: The network device, wherein the network device comprises: at least one processing resource; and At least one non-transitory machine-readable storage medium comprising instructions executable by at least one processing resource to: receiving the first signal from the authentication device; and Based on the first signal, a second signal is sent to the safety device, wherein the second signal instructs the safety device to perform the action.

4. The system of claim 3, wherein the network device comprises instructions executable by at least one processing resource to: Based on the determination by the authentication device that the client device is authorized to connect to the network: receiving the key from an authorizing device; and Prior to receiving the request, the key is sent to the client device. The system of claim 3 , wherein the second signal comprises a ZigBee based signal. The system of claim 1 , wherein the first signal comprises a Wi-Fi based signal.

7. The system of claim 1, wherein the security device comprises a ZigBee-enabled security lock.

8. The system of claim 1, the instructions for authenticating the key comprising instructions executable by the at least one processing resource to: It is determined that the key is the same as a key in at least one entry in the repository.

9. A system according to claim 1, wherein the key includes at least one identifier, and the at least one identifier is based on the location of the client device, an access code received by the client device, facial recognition associated with a user, a location associated with the user, a date associated with the user, a time associated with the user, or a combination thereof.

10. The system of claim 1, wherein the key comprises at least one value that changes after a predetermined period of time.

11. A method for controlling a security device, the method being performed by an authentication device and comprising: determining that the client device is authorized to connect to a network associated with the authentication device; receiving, from the client device, a request to instruct the security device to perform an action, wherein the request includes a key; authenticating the key received from the request; Based on the determination that the client device is authorized to connect to the network and based on the authentication of the key, a signal is sent by a network device instructing the security device to perform the action.

12. The method according to claim 11, further comprising: Based on the determination that the client device is authorized to connect to the network, the key is sent to the client device prior to receiving the request. The method of claim 11 , wherein the signal comprises a ZigBee based signal.

14. The method according to claim 11, further comprising: Based on the determination that the client device is authorized to connect to the network: receiving the key at the network device; as well as The key is sent by the network device to the client device before receiving the request.

15. The method of claim 11, wherein the security device comprises a ZigBee-enabled security lock.

16. The method of claim 11, wherein authenticating the key comprises: It is determined that the key is associated with an entry in a repository.

17. A method according to claim 11, wherein the key includes at least one identifier, and the at least one identifier is based on the location of the client device, an access code received by the client device, facial recognition associated with a user, a location associated with the user, a date associated with the user, a time associated with the user, or a combination thereof.

18. The method of claim 11, wherein the key comprises at least one value that changes after a predetermined period of time.

19. An article comprising at least one non-transitory machine-readable storage medium comprising instructions executable by at least one processing resource to: determining that the client device is authorized to connect to a network associated with the authentication device; receiving, from the client device, a request to instruct a security device to perform an action, wherein the request includes a key; authenticating the key received from the request; Based on the determination that the client device is authorized to connect to the network, and based on the authentication of the key: receiving a first signal at a network device, the first signal being used to instruct the network device to instruct the security device to perform the action, and The network device sends a second signal, where the second signal is used to instruct the security device to perform the action.

20. The article of claim 19, wherein the first signal comprises a Wi-Fi based signal and the second signal comprises a ZigBee based signal.

Images