Intrusion Detection Device for IP Security System Communication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

IP-connected security systems are vulnerable to internet attacks, which can disrupt communication with central monitoring stations, posing significant threats to physical security as these attacks often go unnoticed and can lead to dire consequences, especially when combined with physical breaches.

Innovation Solution

An intrusion detection device is coupled to primary and secondary communication devices in the security system, which detects internet attacks and switches communication to the secondary device, ensuring continuous communication with the central monitoring station, even during denial-of-service attacks, by using a firewall and packet sensors to identify and respond to anomalies.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If the security system uses a primary IP communication device to transmit data to the central monitoring station, then communication efficiency and system functionality are improved, but the system becomes vulnerable to IP attacks and denial-of-service attacks that can disrupt or shut down communication

Engineering Contradiction:
Improvecommunication efficiencyVSAvoidcommunication reliability
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The communication system is segmented into multiple independent communication devices (primary IP communication device and secondary communication device). The intrusion detection device divides the communication path into separate segments, allowing the system to switch between segments when one is compromised, thus maintaining communication reliability while preserving the efficiency benefits of IP-based communication.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

An intrusion detection device is introduced as an intermediary component between the security system and the communication devices. This intermediary monitors network traffic, detects IP attacks and denial-of-service attacks, and controls the switching between communication devices, thereby protecting the communication reliability without sacrificing productivity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Device complexity

If the security system has a single IP address and gateway router, then the system structure is simple and easy to manage, but the system becomes susceptible to IP attacks that can shut down communication and compromise security

Engineering Contradiction:
Improvesystem structure simplicityVSAvoidvulnerability to IP attacks
Core Design Contradiction:
Device complexityVSObject-affected harmful factors

Solution Approach 1:

The single IP address and gateway router configuration is segmented into multiple communication devices with different communication protocols. The primary IP communication device handles normal operations, while the secondary communication device serves as a backup that can be activated if the primary is compromised, thereby reducing vulnerability to IP attacks without significantly increasing structural complexity.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The secondary communication device is prepared in advance as a backup communication path. When an IP attack is detected, the system can immediately switch to the pre-configured secondary device, preventing the attack from compromising security. This preliminary preparation of alternative communication paths mitigates the harmful effects of IP attacks.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If the security system relies solely on IP packetized data transmission, then routine updates and digital sensor integration are enabled, but the system loses the ability to detect and respond to IP attacks in real-time

Engineering Contradiction:
Improvesystem update capabilityVSAvoidattack detection capability
Core Design Contradiction:
Adaptability or versatilityVSDifficulty of detecting and measuring

Solution Approach 1:

The intrusion detection device serves as an intermediary that sits between the IP communication devices and the security system. It specifically monitors IP packet traffic for signs of attacks while allowing routine updates and sensor data transmission to continue uninterrupted. This intermediary layer enables both adaptability for system updates and real-time attack detection.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The intrusion detection device continuously monitors network traffic and provides real-time feedback about potential attacks. When anomalies are detected, the system can respond by switching communication paths or blocking attack traffic, thereby maintaining the ability to detect and respond to attacks while preserving the benefits of IP-based updates and sensor integration.

Inventive Principle:
Principle #23Feedback

Data Source

PatentEP1833227B1Intrusion detection in an IP connected security system
Publication Date: 2012.11.28 HONEYWELL INTERNATIONAL INC
  • EP1833227B1 patent drawingFigure 1
  • EP1833227B1 patent drawingFigure 2
  • EP1833227B1 patent drawingFigure 3

AI summary

An intrusion detection device and method in an IP connected security system is disclosed. An intrusion detection device (240) is coupled to primary and secondary communication devices (215,225) of a security system so that when an Internet attack is detected, communication between the security system and a central monitoring station (250) occurs over the secondary communication device (225) rather than the primary communication device (215). The invention preserves communication between the security system and the central monitoring station even when a denial of service type attack is occurring so that physical premise security is uncompromised.