Carrier Corporation

Otis Elevator Company

United Technologies Research Center

Shila, Devu Manikantan

Devu Manikantan Shila

Adriaan Larmuseau

Adam Kuenzi

Yuri Novozhenets

Vijaya Ramaraju Lakamraju

Nicholas Charles Soldner

Kunal Srivastava

Teems E Lovett

Penghe Geng

Ankit Tiwari

Paul A Simcik

Pedro Fernandez-Orellana

Michael Garfinkel

Veronica Adetola

Alan Marchiori

Deepak Kumar Mehta

Menouer Boubekeur

Paul C O'Neill

Arthur T Grondine

Alie El-Din Mady

Emeka P Eyisi

Shirish Kumar Singh

Younes Hamdaoui

Lingyu Ren

Mahmoud El Chamie

Fragkiskos Koufogiannis

A method of mobile based user authentication includes storing a plurality of categories of data associated with user activity with a mobile device carried or worn by a user. The method also includes analyzing the plurality of categories of data over a recent period of time to determine a user trust score based on a historical period of time, the historical period of time greater than the recent period of time. The method further includes granting access to an access controlled environment if the user trust score is within a predetermined score range.

System and method of mobile based user authentication for an access controlled environment

A system includes a processor, a storage medium, a data file, blockchain application, a lock assembly, and a digital key. The data file is stored in the storage medium, and is applied by the blockchain application. The data file includes a plurality of linked blocks, each including a respective transaction data of a plurality of transaction data. Each one of the plurality of transaction data includes a respective event and a time stamp. The blockchain application is stored in the storage medium, executed by the processor, and is configured to output an authorization based on a current grant event of a transaction data of the plurality of transaction data. The digital key is adapted to operate the lock assembly, wherein at least one of the lock assembly and the digital key is configured to receive the authorization in order for the digital key to operate the lock assembly.

Blockchain supported smart lock system

A method for building a robust classifier against evasion attacks includes receiving an application, identifying one or more features of the application, and determining a first confidence score for a first version of the application including a first set of features and determining a second confidence score for a second version of the application including a second set of features, the first set of features is different than the second set of features. The method also includes determining a difference between the first confidence score and the second confidence score, and comparing the difference with a convergence threshold. The method includes, based on the comparison, determining whether the first confidence score exceeds a confidence score threshold, and generating a report based on determining the first confidence score exceeds the confidence score threshold.

System and method to build robust classifiers against evasion attacks

A system for detecting malicious operation of a building system includes a power characteristic input connected to a plurality of power characteristic sensors, a processor and a memory. The memory stores instructions for operating at least a physics model detection, a machine learning model detection and a combination module. The physics model detection includes multiple predefined expected power characteristics and is configured to detect an anomaly when at least one power characteristic received at the power characteristic input deviates from a corresponding predefined expected power characteristic of the predefined expected power characteristics. The machine learning model includes a machine learning system configured to learn a set of expected normal power characteristics and detect the anomaly when at least one power characteristic received at the power characteristic input deviates from the learned set of expected normal power characteristics. The combination module is configured to output an alert to at least one technician in response to at least one of the physics model and the machine learning model detecting the anomaly.

System and method for detecting malicious activities and anomalies in building systems

A method of training a gesture-based access control system includes repetitiously performing an intentional gesture indicative of an intentional gesture type by a user of a mobile device. The intentional gesture is representative of an intent of the user to gain access. The application then forms a model of the selected intentional gesture type from the repetitious performances of the intentional gesture. The model is configured to be applied by the software-based application to confirm future performances of the intentional gesture.

Modeling of preprogrammed scenario data of a gesture-based, access control system

An assignable realestate system includes a processor, a storage medium, a wireless device including a digital key, a lock assembly for access to realestate, a data file, and a blockchain application. The data file is stored in the medium, and includes a plurality of linked blocks. Each block includes a respective asset transaction data of a plurality of asset transaction data with each data being time stamped. The blockchain application is stored in the medium and executed by the processor. The blockchain application is configured to apply the data file to determine a current asset transaction data of the plurality of asset transaction data and output an authorization signal to the lock assembly associated with the device for access to the realestate.

Realestate as tradable digital assets through blockchain integration

A blockchain maintenance record system for managing maintenance records of a system, the blockchain maintenance record system including: a part identification tag configured to be located on a part; an application operable through a mobile computing device, the mobile computing device being configured to read the part identification tag, wherein the application is configured to perform operations including; determining a part identity of the part by reading the part identification tag; detecting a location of the system; organizing the part identity of the part and the location of the part into a maintenance data package receipt; and uploading the maintenance data package receipt into a blockchain network.

Creation of a blockchain for maintenance records using identification tags

A method of utilizing blockchain to verify maintenance data of a system including: determining a part identity of a part of a system; detecting a location of the system; detecting a time stamp depicting when maintenance was performed on the part of the system; organizing the part identity of the part, the location of the part, and the time stamp into a maintenance data package receipt; and uploading the maintenance data package receipt into a blockchain network.

Creation of a blockchain for maintenance records

A method and system for implementing security patches on a computer system is disclosed. The method includes finding one or more security patches; analyzing one of the one or more security patches to find one or more localized security fixes within the one or more security patches; and transforming a security patch within the one or more security patches into a honey patch that is configured to report security violations.

Automatic decoy derivation through patch transformation

Methods, systems and computer program products for intrusion detection are provided. Aspects include receiving, by a processor, internet of things (IoT) device data from each of a plurality of IoT devices, wherein the IoT device data comprises operational data and non-operational data associated with each of the plurality of IoT devices. A security model is built for the plurality of IoT devices based at least in part on the IoT device data, wherein the security model comprises one or more IoT device data ranges. The plurality of IoT devices are monitored to identify a potential intrusion in any of the plurality of IoT devices based at least in part on the IoT device data exceeding any of the one or more IoT device data ranges.

Cyber security framework for internet-connected embedded devices

A passive authenticating system includes a mobile device in communication with at least one of a multiple of access controls, the mobile device operable to determine a path trajectory of a user to authenticate the user based at least in part on the path trajectory then permit passive access to a particular access control.

System and method for authenticating user based on path location

A magnetic strip card includes a partial encrypted card payload encrypted with a long shared key to provide a final encrypted payload. A method for encoding the magnetic strip card includes encrypting a card payload with a code key of a access controls with a short key of the access control to generate a partial encrypted payload and encrypting the partial encrypted payload with a long shared key to provide a final encrypted payload.

Onion layer encryption scheme for secure multi-access with single card

According to one or more embodiments, a system and method for authorizing a user securing an elevator call in a building is provided. For example, the method includes receiving, at a mobile device, a secure authorization token that includes an expiration time, connecting the mobile device to a backend system using the secure authorization token from the mobile device, verifying, using the backend system, an authenticity of the secure authorization token from the mobile device based on at least the expiration time, generating, at the backend system, a secure access token and a random number in response to the authenticity of the secure authorization token being verified, and receiving, at the mobile device, the secure access token and the random number for use making elevator call requests.

Anonymous and ephemeral tokens to authenticate elevator calls

A mobile-based equipment service system includes a remote server, a mobile device, and at least one equipment controller. The mobile device includes a user interface, and is configured to send a user authentication message, initiated by a user via the user interface, to the remote server. The remote server is configured to verify the user via the user authentication message and once verified, send an encrypted blob to the mobile device in response to the user authentication message. At least one equipment controller is configured to receive and decrypt the encrypted blob from the mobile device.

Growing community of inventors

West Hartford, CT, United States of America

Devu Manikantan Shila