System and methods for an IoT based hybrid network to secure infrastructure assets

Abstract

A system for monitoring an infrastructure asset includes a field monitoring unit (FMU) comprising a mobile router configured to communicate with a cellular network and a gateway in operative communication with the mobile router and configured to wirelessly communicate via an internet-of-things wide-area network (IOT-WAN) with a plurality of sensors deployed at a plurality of infrastructure asset locations. An IOT-WAN server is configured to communicate with the cellular network and to receive IOT-WAN programming input configured to control one or more operational parameters of the IOT-WAN. An application server in operative communication with the IOT-WAN server and configured to receive application programming input.

Description

SYSTEM AND METHODS FOR AN IOT BASED HYBRID NETWORK TO SECUREINFRASTRUCTURE ASSETSTECHNICAL FIELD

[0001] The present application relates to intemet-of-things (loT) based hybrid networks to secure infrastructure assets and to related apparatuses, methods, systems, and techniques.BACKGROUND

[0002] A number of proposals have been made for securing infrastructure assets. Extant proposals suffer from a number of disadvantages, drawbacks, limitations, and shortcomings, including those respecting infrastructure footprint, efficiency, limited functionality, flexibility, modifiability, cost, performance, and others. There remains a significant unmet need for the apparatuses, methods, systems, and techniques disclosed herein.DISCLOSURE OF EXAMPLE EMBODIMENTS

[0001] For the purposes of clearly, concisely, and exactly describing example embodiments of the present disclosure, the manner, and process of making and using the same, and to enable the practice, making and use of the same, reference will now be made to certain example embodiments, including those illustrated in the figures, and specific language will be used to describe the same. It shall nevertheless be understood that no limitation of the scope of the invention is thereby created, and that the invention includes and protects such alterations, modifications, and further applications of the example embodiments as would occur to one skilled in the art.SUMMARY OF THE DISCLOSURE

[0002] Some embodiments include apparatuses for an internet-of-things (loT) based hybrid networks to secure infrastructure assets. Some embodiments include unique processes for an intemet-of-things (loT) based hybrid networks to secure infrastructure assets. Some embodiments include unique systems including an internet-of-things (loT) based hybrid networks to secure infrastructure assets. Further embodiments, forms, objects, features, advantages, aspects, and benefits shall become apparent from the following description and drawings.BRIEF DESCRIPTION OF THE DRAWINGS

[0003] Fig. 1 is a partially schematic diagram illustrating certain aspects of an example system according to the present disclosure.

[0004] Fig. 2 is a partially schematic diagram illustrating certain aspects of an example system according to the present disclosure.

[0005] Fig. 3 is a partially schematic diagram illustrating certain aspects of an example system according to the present disclosure.

[0006] Fig. 4 is a partially schematic diagram illustrating certain aspects of an example system according to the present disclosure.DETAILED DESCRIPTION OF EXAMPLE EMBODIMENTS

[0007] For the purposes of clearly, concisely, and exactly describing example embodiments of the present disclosure, the manner, and process of making and using the same, and to enable the practice, making and use of the same, reference will now be made to certain example embodiments, including those illustrated in the figures, and specific language will be used to describe the same. It shall nevertheless be understood that no limitation of the scope of the invention is thereby created, and that the invention includes and protects such alterations, modifications, and further applications of the example embodiments as would occur to one skilled in the art.

[0008] Referring now to the Figs, and with initial reference to Fig. 1, there is illustrated and example system 100 for monitoring an infrastructure asset according to one embodiment of the present disclosure. System 100 includes a field monitoring unit (FMU) 107. In the illustrated example one FMU 107 is depicted. It shall be appreciated that in various forms system 100 may comprise a plurality of FMU. It shall be appreciated that a number of infrastructure assets may be monitored by FMU 107 including a public utility system or components thereof, for example, one or more aerial, terrestrial, or even subterranean assets, for example, of a water supply system or components thereof, a gas supply system or components thereof, and / or an electrical supply system or components thereof.

[0009] FMU 107 comprises a mobile router 120 configured to communicate with a cellular network 180. In the illustrated example mobile router 120 includes a plurality of transceivers 122, 124 configured to send and receive mobile wireless communications over a plurality of communication channels. In other embodiments, mobile router 120 may be configured and provided in various other forms as will occur to one of skill in the art with the benefit and insight of the present disclosure.

[0010] FMU 107 further comprises an IOT-WAN gateway 130 in operative communication with the mobile router 120 and a transceiver 116. IOT-WAN gateway 130 is configured to wirelessly communicate via transceiver 116 with an intemet-of-things wide-area network (IOT-WAN) 190 with a plurality of sensors 191, 193, 195, 197 deployed at a plurality of infrastructure asset locations 189. Transceiver 116 may also be configured and operable to communicate with and via one or more other transceivers 114 of FMU 107. The sensors may have uniquely assigned identification numbers. Likewise components of FMU 107 that analyze,process, or receive signals from the sensors may have corresponding unique ID numbers. As illustrated in Fig. 4, for example, a signal from sensor 191 may be assigned ID1 when analyzed, processed, or received by a component 191’ of FMU 107. Similarly signal from sensor 192 may be assigned ID2 when analyzed, processed, or received by a component 192’ of FMU 107.

[0011] In some embodiments, I0T-WAN gateway 130 may be configured as a LoRaWAN according to International Telecommunication Union (ITU) Recommendation Y.4480. Some such embodiments may be configured to communicate over the US915 frequency band. In other embodiments, I0T-WAN gateway 130 may be configured in other forms as will occur to one of skill in the art with the benefit and insight of the present disclosure.

[0012] In the illustrated example, the plurality of infrastructure asset locations 189 include a hatch 192, a manhole cover 194, a fastener 196, a cabinet 198, and potentially other infrastructure assets denoted by ellipsis 199. It shall be appreciated other embodiments may comprise infrastructure asset locations including various other infrastructure assets or combinations of infrastructure assets as will occur to one of skill in the art with the benefit and insight of the present disclosure.

[0013] In the illustrated example, the infrastructure assets provided at the plurality of infrastructure asset locations 189 comprise a plurality of sensors 191, 193, 195, 197 associated with the infrastructure assets. Such sensors may comprise contact sensors and / or tilt sensors configured to indicate a state of one or more of hatch 192, manhole cover 194, fastener 196, or a door or other structure of cabinet 198.

[0014] In the illustrated example, FMU 107 is configured as a mountable enclosure 110 containing mobile router 210 and I0T-WAN gateway 130. The mountable enclosure 110 is mounted on a light pole 102 including a LET light 104 supplied with power by an AC power supply 106. In other embodiments, the mountable enclosure 110 may be mounted on other structures including, a dedicated pole, a building, or other vertically-extending ground-anchored structures as will occur to one of skill in the art with the benefit and insight of the present disclosure.

[0015] In the illustrated example, FMU 107 is configured to tap power of the AC power system 106 and includes a power switch 142 operatively coupled with the AC power system 106 and a power plug assembly 146 which are operatively coupled with and configured to supply power to the components of FMU 107. In other embodiments, FMY 107 may be powered by adedicated power supply such as an on-board power supply including a battery and solar cell configured to charge the battery, a separate dedicated external power supply cable, or other types of power supplies as will occur to one of skill in the art with the benefit and insight of the present disclosure.

[0016] In the illustrated example, FMU 107 comprises an externally visible strobe light 112 and a strobe controller 144 configured to control operation of strobe light 112. FMU 107 further comprises a 118 camera in operative communication with and configured to provide one or more video signals to I0T-WAN gateway 130. In other embodiments, FMU 107 may comprise other devices configured and operable to provide human perceptible alerts or output, for example, a siren, speaker, other types of emergency lights, or other devices as will occur to one of skill in the art with the benefit and insight of the present disclosure.

[0017] With additional reference to Fig. 2, there are illustrated further aspects of system 100 including an I0T-WAN server 210 which is configured and operable to communicate with the cellular network 180 and with I0T-W AN gateway 130 via cellular network and 180 and mobile router 120 and one or more of it associated transceivers 122, 124. I0T-WAN server 210 is further configured and operable to receive I0T-WAN programming input 212 (or other network programming input) configured to control one or more operational parameters of the I0T-WAN 190. I0T-WAN server 210 is further configured and operable to provide system maintenance output 214 which may be utilized in connection with diagnostic and maintenance operations of system 100. Restricted conditional access to I0T-WAN server 210 may be implemented and provided with respect to I0T-WAN programming input 212 and system maintenance output 214 with such access being restricted to an authority responsible for the I0T-WAN server 210, IOT- WAN gateway 130 and other components of FMU 107.

[0018] An application server 220 is in operative communication with I0T-WAN server 210 and is configured and operable to receive application programming input 222 and provide the same to IPT WAN Server 210. Restricted conditional access to application server 220 may be implemented and provided with respect to application programming input 222 with such access being restricted to an authority responsible for the I0T-WAN server 210, 10T-WAN gateway 130 and other components of FMU 107.

[0019] A network server 230 is operatively coupled with I0T-WAN server 210 and is configured and operable to communicate with I0T-WAN server 210. In some embodiments,network server 230 may be configured and operable to communicate with IOT-WAN server 210 using a remote procedure call (RPC) architecture wherein the network server 230 may request certain asset monitoring operations (for example, access to a video feed of camera 118, access to an operational status of strobe light 112, access to data or information of one or more of a plurality of sensors such as sensors 191, 193, 191, 197, or access to other asset monitoring information, also referred to herein as organic asset information) without access to or knowledge of the underlying architecture and operation of IOT-WAN server 210, IOT-WAN gateway 130, FMU 107, IOT- WAN 190, and / or or other aspects of system 100.

[0020] An asset owner access system 236 (such as a laptop, server, mobile device, or other computer) is operatively coupled with and configured to communicate with network server 230 via a secure access channel 232 to receive organic asset information therefrom. Restricted conditional access to network server 230 may be implemented and provided with respect to asset owner access system 236 with such access being restricted to an owner of an asset being monitored by FMU 107 (or another FMU of system 100) such as one or more assets at one or more of the plurality of asset locations 187.

[0021] A monitoring service system 240 including a monitoring service device 242 (such as a laptop, server, mobile device, or other computer) provided at a remote is operatively coupled with and configured to communicate with network server 230 via a secure access channel 234 to receive organic asset information therefrom. It shall be appreciated that such organic asset information may comprise, for example, video such as a video feed from camera 118 of FMU 107 or another camera of system 100, one or more of door open / closed status, strobe light / status, temperature, relative humidity and battery capacity information of FMU 107 or another FMU of system 100.

[0022] Monitoring service system 240 may comprise a camera monitoring interface 244 which may include a display screen 246 configured and operable to display organic asset information in a human perceptible form. Monitoring service system 240 may also be in communication with services system 290 (for example, a police system, a private security system, a fire department system, and emergency medical services system, or a central dispatch system such as a 911 or other dispatch system) to communicate requests for security service intervention in response to organic asset information and may securely share organic asset information with services system 290 via a secure access channel 236. In this manner organic asset information maysecurely be provided with a monitoring system which is configured as a centralized municipal video monitoring system.

[0023] As illustrated in Figs. 3 and 4 various components of system 100 may comprise unique IP addresses (denoted generally as IP1, IP2, IP3, IP4, IP5, IP6, IP7 etc.). Additionally, components without IP addresses may comprise unique ID numbers (denoted generally as ID1, ID2, ID3, ID4, etc.). It shall be appreciated that a number of the IP addresses (for example, IP1, IP2, IP3 as well as additional IP addresses in some embodiments) may comprise private network addresses or non-public IP addresses not directly accessible from the public internet.

[0024] As further illustrated in Figs. 3 and 4, application programming input 222 may comprise automated decision making application programming input 308. Furthermore, automated decision making application programming input 308 may be is configured or executable to control a response to input received from one or more of the plurality of sensors, for example, using an artificial intelligence (Al) agent implemented on or in connection with I0T-WAN server 210. The Al agent may be further configured and operable to process an alarm associated with one or more of the plurality of sensors and to instruct operation of a component of the FMU, for example, operation of a camera, a strobe light, or other equipment of or associated with the FMU.

[0025] One or more Al agents implemented on or in connection with IOT-WAN server 210 may be further configured and operable to interface with owner access system 236 via server 230, one or more components of monitoring service system 240 such as monitoring service device 242, and / or one or more components of services system 290. Such interfacing may comprise one or more supervisor-in-loop instances to impose conditions or gates on the one or more Al agents taking a given action. For example, the one or more Al agents may communicate a recommendation (for example, recommend contacting fire department based on organic asset information such as temperature, smoke detector state, video feed and / or other sensed or detected information assessed by the one or more Al agents) in combination with the aforementioned organic asset information to network asset owner access system 236 and / or one or more components of monitoring service system 240 such as monitoring service device 242. One or more supervisory agents present at one or both of owner access system 236 and / or one or more components of monitoring service system 240 such as monitoring service device 242 (for example a human supervisor-in-loop or a second Al agent supervisor-in-loop) may assess the received recommendation and independently judge whether to act on the recommendation, and may executeor authorize execution of the recommendation.

[0026] As illustrated in Fig. 4, some embodiments of FMU 107 may include control circuity 160 include an addressable outlet 164 (assigned ID 5) for sending on / off signal(s) to a camera input / output (VO) for selectably turning camera 118 on or off. The addressability of outlet 164 provides an additional independent mechanism for turning camera 118 on or off.

[0027] While example embodiments of the disclosure have been illustrated and described in detail in the drawings and foregoing description, the same is to be considered as illustrative and not restrictive in character, it being understood that only certain example embodiments have been shown and described and that all changes and modifications that come within the spirit of the claimed inventions are desired to be protected. It should be understood that while the use of words such as preferable, preferably, preferred or more preferred utilized in the description above indicates that the feature so described may be more desirable, it nonetheless may not be necessary and embodiments lacking the same may be contemplated as within the scope of the invention, the scope being defined by the claims that follow. In reading the claims, it is intended that when words such as “a,” “an,” “at least one,” or “at least one portion” are used there is no intention to limit the claim to only one item unless specifically stated to the contrary in the claim. When the language “at least a portion” and / or “a portion” is used the item can include a portion and / or the entire item unless specifically stated to the contrary.

Claims

CUAIMSWhat is claimed is:

1. A system for monitoring an infrastructure asset, the system comprising: a field monitoring unit (FMU) comprising a mobile router configured to communicate with a cellular network and a gateway in operative communication with the mobile router and configured to wirelessly communicate via an internet-of-things wide-area network (IOT-WAN) with a plurality of sensors deployed at a plurality of infrastructure asset locations; an IOT-WAN server configured to communicate with the cellular network and to receive IOT-WAN programming input configured to control one or more operational parameters of the IOT-WAN; and an application server in operative communication with the IOT-WAN server and configured to receive application programming input.

2. The system of embodiment 1, wherein the FMU is configured as a mountable enclosure containing the mobile router and the IOT-WAN gateway, the mountable enclosure being mountable on one of a pole, a building, or another vertically-extending ground-anchored structure.

3. The system of embodiment 2, wherein the FMU is mounted on a light pole.

4. The system of embodiment 2, wherein the FMU is configured to tap power of a lighting system mounted on the light pole.

5. The system of any of the preceding embodiments, wherein the FMU comprises a strobe light and a strobe controller configured to control operation of the strobe light.

6. The system of any of the preceding embodiments, wherein the FMU comprises a camera in operative communication with and configured to provide video to the gateway.

7. The system of any of the preceding embodiments, comprising the plurality of sensors.

8. The system of embodiment 7, wherein the plurality of sensors comprise at least one of a contact sensor and a tilt sensor configured to indicate a state of one or more of a cabinet, a door, a fastener, a hatch, and a manhole cover.

9. The system of any of the preceding embodiments, wherein the I0T-WAN is configured as a LoRaWAN according to International Telecommunication Union (ITU) Recommendation Y.4480.

10. The system of any of the preceding embodiments, wherein the I0T-WAN server is in operative communication with a network server configured to receive network programming input.

11. The system of embodiment 10, wherein the network server is configured to provide conditional access by an owner of the infrastructure asset.

12. The system of embodiment 10, wherein the gateway, the mobile router, the I0T-WAN server, and the network server are configured to provide secure video access to a monitoring system.

13. The system of embodiment 12, wherein the video comprises a video feed from a camera of the FMU.

14. The system of embodiment 12, wherein the gateway, the mobile router, the IOT-WAN server, and the network server are configured to provide one or more of door open / closed status, strobe light / status, temperature, relative humidity and battery capacity information to the monitoring system.

15. The system of embodiment 12, wherein the monitoring system is configured as a centralized municipal video monitoring system.

16. The system of any of the preceding embodiments, wherein the application programming input comprises automated decision making application programming.

17. The system of embodiment 16, wherein the automated decision making application programming is configured or executable to control a response to input received from one or more of the plurality of sensors.

18. The system of any of the preceding embodiments, wherein the infrastructure asset comprises a public utility system.

19. The system of embodiment 18, wherein the public utility system comprises one or more subterranean assets.

20. The system of embodiment 18, wherein the public utility system comprises one or more of a water supply system and a gas supply system, and an electrical supply system.

Images