WO2020221844A1

WO2020221844A1 - Disarm node and security monitoring system including such a node

Info

Publication number: WO2020221844A1
Application number: PCT/EP2020/061993
Authority: WO
Inventors: Peter FRANSSON; David LJUNGMAN; Henrik MÅRTENSSON
Original assignee: Verisure Sàrl
Priority date: 2019-05-02
Filing date: 2020-04-30
Publication date: 2020-11-05
Also published as: EP3963555A1; PE20220651A1; AU2020265397A1; CL2021002845A1; DE102019111345A1; IL287675A

Abstract

A disarm node for arming and disarming a security monitoring system for a building or a secured space within a building, the system including: a central unit for controlling, arming and disarming the security monitoring system; the disarm node having a user interface to receive a user input to arm or disarm the system, and a radio frequency transmitter to transmit, in consequence of the user input, an arm or a disarm request to the central unit, the user interface including: a set of status indicators to indicate visually the current status of the security monitoring system, the set including a first status indicator to indicate the existence of a disarm state, a second status indicator to indicate a partially armed state, and a third status indicator to indicate a fully armed state, the status indicators having associated status selectors to enable a user to initiate a change to the status of the security monitoring system; a translucent faceplate behind which is provided a keypad comprising a plurality of keys to enable a PIN or passcode to be entered, and including illumination means to illuminate the keypad; and a controller to control operation of the disarm node; wherein the controller is configured to activate the illumination means of the keypad only when entering a PIN or passcode is appropriate, so that the keys of the keypad are visible through the faceplate whenever entering a PIN or passcode is appropriate, the faceplate being effective to conceal the presence of the keypad when the illumination means are inactivated, and the controller is configured to react to keypad key activation only when the illumination means of the keypad is activated.

Description

Disarm node and security monitoring system including such a node.

Technical field

The present invention relates to a disarm node for arming and disarming a security monitoring system for a building or a secured space within a building, and to a security monitoring system including such a disarm node.

Background

Security monitoring systems for monitoring premises typically provide a means for detecting the presence and/or actions of people at the premises, and reacting to detected events. Commonly such systems include sensors to detect the opening and closing of doors and windows, movement detectors to monitor spaces for signs of movement, microphones to detect sounds such as breaking glass, and image sensors to capture still or moving images of monitored zones. Such systems may be self-contained, with alarm indicators such as sirens and flashing lights that may be activated in the event of an alarm condition being detected. Such installations typically include a central unit, generally mains powered, that is coupled to the sensors, detectors, cameras, etc. (“nodes”), and which processes received notifications and determines a response. The central unit may be linked to the various nodes by wires, but increasingly is instead linked wirelessly, rather than by wires, since this facilitates installation and may also provide some safeguards against sensors/detectors effectively being disabled by disconnecting them from the central unit. Similarly, for ease of installation and to improve security, the nodes of such systems are typically battery powered rather than mains powered.

As an alternative to self-contained systems, a security monitoring system may include an installation at a premises, domestic or commercial, that is linked to a Central Monitoring Station (CMS) where typically human operators manage the responses required by different alarm and notification types. In such centrally monitored systems, the central unit at the premises installation typically processes notifications received from the nodes in the installation, and notifies the Central Monitoring Station of only some of these, depending upon the settings of the system and the nature of the detected events. In such a configuration, the central unit at the installation is effectively acting as a gateway between the nodes and the Central Monitoring Station. Again, in such installations the central unit may be linked by wires, or wirelessly, to the various nodes of the installation, and these nodes will typically be battery rather than mains powered.

In both these types of systems, the central unit is typically responsible for arming and disarming the system but may not be located close to an entrance door. When the house owner returns to the monitored premises where the monitoring system is in an armed state, the system must be disarmed fairly quickly, for example within 30 seconds of opening an entrance door. If the central unit is not located close to the entrance door, it may be difficult for the owner to reach the central unit and enter the disarm code - which may typically be 4 to 6 characters or digits, in time. This obviously poses an even greater challenge for the elderly or infirm. For this reason it is known to provide a unit close to the entrance door by means of which the owner can disarm the system. Such a unit, which may be termed a disarm node, may be provided inside the protected premises close to each main entrance, but in other installations only the single main entrance will be provided with a disarm node. The disarm node will typically be fixed, for example to a wall or other surface of the premises, close to the relevant entrance to the building or protected space.

With many security monitoring system installations users get into the habit of using a disarm node rather than a central unit both to arm and disarm the system. Indeed, in many security monitoring systems the central unit may not have a keypad or similar. Many security monitoring systems support a partially armed state, in addition to a disarmed and fully armed state. The partially armed state is typically designed for use when the occupant of the protected premises is within the protected premises but wants the perimeter of the premises still to be monitored by the security monitoring system - such a partially armed state may be termed “armed at home”, and is distinguished from the fully armed“armed away” state by not triggering to an alarm state on detecting movement within the monitored premises but instead only triggering in the event that the perimeter is breached, that is the opening of a door or window giving access to the protected space is detected - i.e. the detection of intrusion. Some security monitoring systems may support multiple variants of this general“armed home” approach, with different zones being defined within the monitored premises and an alarm condition being triggered in the event of presence detection in one or more of the zones but not in others, or with presence detection anywhere within the monitored premises not triggering an alarm condition. For example, a security monitoring system may support two distinct“armed at home” states - the first for when the occupants are likely to be moving throughout the premises, e.g. both upstairs and downstairs, and a second for use at night, after the occupants have retired to bed and are not expected to be moving within, for example, the downstairs rooms.

With security monitoring system installations that support one or more partially armed states in addition to the fully armed and disarmed states, it is of course necessary for a user of the system to be able to switch the monitoring system between the different states, and in particular between the fully armed state and a partially armed state, and back again. It is also important for the user to be able to disarm the system in the event that they accidentally trigger an alarm state, for example by opening an exterior door while the system is an armed at home state - as often happens in the morning when a user opens a door to retrieve milk, a newspaper or post, from the doorstep or porch.

It is known to provide disarm nodes with keypads by means of which a user must enter a typically a four to six-digit access code to arm, disarm, or change the state of the security monitoring system. A disadvantage of needing to use a keypad to arm, disarm, or change the state of the security monitoring system is that users may be confused and enter their numerical code before activating a state-change control, or otherwise get the“instruction flow” wrong, so that even when the correct access code is entered there will be no state change. So, for example, if a monitoring system is in the disarmed state, a user may enter a passcode and forget to perform the process step to indicate a desire to change state to fully armed. The user will think that the/she has set the armed state, but in fact having entered the passcode out of sequence , he/she has not changed the state of the monitoring system at all. On returning to the monitored premises, the user may again enter the correct passcode to“disarm” the system, thinking that he/she is entering to an armed at home state, but because the system wasn’t armed when she/he left the house entering the passcode again produces no change of state. A user may repeatedly “arm” and “disarm” their security monitoring system in this way, oblivious to the fact that it remains disarmed all the while. Also of course, many people find it difficult to remember even four-digit PIN codes, and even more people struggle to remember 6-digit passcodes. For such people it can be difficult to live with a monitoring system that requires a 6-digit passcode to be entered for every state change and to disarm the system. In particular, users tend to stop using armed at home states because they find that they are constantly triggering false alarms which are reported to the central monitoring station - and which result in the user having to deal with calls from CMS operators. As a result, users quickly tend to stop using armed at home states, and may even be reluctant to arm the system at all. The problem is so great that typically the vast majority of alarm calls to a CMS are false alarms triggered by registered users of alarm installations. Users may also fail to achieve their goal of changing the state of a security monitoring system even though they enter the correct passcode, and that is because they fail to perform some preliminary step before entering the passcode. For example, the system may require the user to activate the disarm node before selecting the desired target state, and only then entering the passcode. So even those users who use a written record of their passcode to enable them to enter the correct passcode may not actually achieve the desired change of system state. Such users also tend quickly to stop using armed at home states, and may even become reluctant to use the security monitoring system at all.

A popular alternative to relying on passcodes is to provide a physical token that needs to be presented to a reader, built into the disarm node and/or the central unit, to effect state changes and to disarm the system. Using such an approach typically frees the user from having to remember correctly a 4 or 6-digit passcode to control the monitoring system, which is obviously attractive. But problems arise when a user is not carrying the physical token. For example, in the morning a user may come downstairs wearing a bathrobe and open the door to retrieve the milk delivery, triggering an alarm because the monitoring system was in an armed at home state. Not carrying the physical token in her bathrobe, the user is unable to disarm the system quickly enough - so the monitoring system will call the central monitoring system, which will require the user to explain to the CMS operator that the alarm is only a false alarm. So although the use of physical tokens to arm/disarm and change the state of security monitoring systems avoids the need to remember a long passcode, it doesn’t prevent users triggering false alarms - and as a consequence users of such systems also tend not to make use of armed at home settings.

It would be desirable to provide a disarm node that made it easier for users to achieve desired state changes, and in particular to reduce the risk of false alarms being triggered when the system is in a partially armed state.

Summary of the invention

According to a first aspect, the present invention provides a disarm node for arming and disarming a security monitoring system for a building or a secured space within a building, the system including: a central unit for controlling, arming and disarming the security monitoring system; the disarm node having a user interface to receive a user input to arm or disarm the system, and a radio frequency transmitter to transmit, in consequence of the user input, an arm or a disarm request to the central unit, the user interface including: a set of status indicators to indicate visually the current status of the security monitoring system, the set including a first status indicator to indicate the existence of a disarm state, a second status indicator to indicate a partially armed state, and a third status indicator to indicate a fully armed state, the status indicators having associated status selectors to enable a user to initiate a change to the status of the security monitoring system; a translucent faceplate behind which is provided a keypad comprising a plurality of keys to enable a PIN or passcode to be entered, and including illumination means to illuminate the keypad; and a controller to control operation of the disarm node; wherein the controller is configured to activate the illumination means of the keypad only when entering a PIN or passcode is appropriate, so that the keys of the keypad are visible through the faceplate whenever entering a PIN or passcode is appropriate, the faceplate being effective to conceal the presence of the keypad when the illumination means are inactivated, and the controller is configured to react to keypad key activation only when the illumination means of the keypad is activated.

By concealing the keypad and only making it visible only when entry of a PIN or passcode is appropriate, users are not misled into trying to enter a PIN or passcode - to change state, for example, when some other type of input is required. This reduces the risk of a user believing that they have successfully changed the state of the system when in fact there has been no state change.

Preferably the disarm node is battery rather than mains powered. Preferably too the disarm node does not include a display screen, thereby facilitating long battery life even when low-cost alkaline cells are used.

Preferably, the keypad is a capacitance sensing device, for example one using projected capacitive technology. This permits the use of a rigid faceplate and may largely avoid the need to include moving parts in the disarm node, both of which can contribute to enabling long product life.

Preferably, the controller is configured to implement a low energy consumption state in which the keypad illumination and the status indicators are all extinguished. This reduces energy consumption, thereby contributing to extended battery life. Such a controller may be configured to activate the status indicator for the current status of the security monitoring system in response to any of: a signal from a proximity sensor, a signal received from the central unit, or actuation of one of the status selectors. In this way, a visual indication of status is provided whenever a user is likely to be present. Where the keypad is a capacitance sensing device, the controller may conveniently be configured to use the keypad as the proximity sensor to detect user presence.

Preferably, each status selector is collocated with its associated status indicator. This not only permits design of a compact device, but can also help to reduce user confusion as to which part of the device to touch or press to indicate a desire to change system status. Conveniently, the status selectors may use capacitance sensing technology - which facilitates the integration/collocation of a status selector with a status indicator, as well as helping to increase design lifetime. Preferably, disarm nodes according to the first aspect may comprise a near field communication antenna located behind the faceplate. The presence of an NFC antenna makes possible interaction with other NFC-enabled devices such as fobs, phones, watches, etc, for use in arming or disarming the system. By locating the antenna behind the faceplate, NFC performance may be improved especially with respect to NFC devices presented to (touched on) the faceplate. Preferably the controller of such disarm nodes is configured to respond to a near field communication event received through the near field communication antenna by transmitting data received in the event to the central unit of the security monitoring system.

With disarm nodes according to the first aspect, and their just-described variants, when the security monitoring system is in the disarmed state the disarm node controller may be configured to activate the illumination means of the keypad in the event that the selector for either the partially armed or fully armed states is actuated, but not to activate the illumination means of the keypad in the event that the selector for the disarm state is actuated. In this way, the user is given a visual “prompt” to enter a passcode or PIN when appropriate but is not given such a “prompt” when it is not appropriate. This can help guide the user to enter the passcode or PIN only when appropriate, encouraging the user to follow the correct “flow” for arming the system.

With disarm nodes according to the first aspect, and their just-described variants, when the security monitoring system is in the armed or partially armed state the disarm node controller may be configured to activate the illumination means of the keypad in the event that the selector for the disarm state is actuated but not to activate the illumination means of the keypad in the event that the selector of the current state of the system is actuated. The disarm node controller may be configured, when the security monitoring system is in the armed state to activate the illumination means of the keypad in the event that the selector for the partially armed state is actuated. In this way, the user is given a visual“prompt” to enter a passcode or PIN when appropriate but is not given such a“prompt” when it is not appropriate. This can help guide the user to enter the passcode or PIN only when appropriate, encouraging the user to follow the correct“flow” for disarming the system. Preferably, in disarm nodes according to the first aspect, and their just- described variants, the faceplate is made of glass. In this way the disarm node may be made durable, reducing the risk that repeated touches from key fobs or tags (and possibly of metallic keys attached to such a fob or tag) will quickly produce a weathered and“tired” surface on the visible face of the device. The use of a glass faceplate is also generally compatible with the use of capacitance sensing keypad technology.

According to a second aspect, the present invention provides a security monitoring system for a building or a secured space within a building, the system including: a central unit for controlling, arming and disarming the security monitoring system; a door sensor to detect the opening of a door giving access to the building or the secured space; the disarm node having a user interface to receive a user input to arm or disarm the system, and a radio frequency transmitter to transmit, in consequence of the user input, an arm or a disarm request to the central unit; the central unit having a radio frequency transceiver; the central unit being configured: in response to receiving a door opening indication/message from the door sensor, to: start an entry period timer; transmit a wake up instruction to the disarm node; and in the event that the security monitoring system is not disarmed before expiry of the entry period, to cause the security monitoring system to enter an alarm state; wherein the user interface of the disarm node includes: a set of status indicators to indicate visually the current status of the security monitoring system, the set including a first status indicator to indicate the existence of a disarm state, a second status indicator to indicate a partially armed state, and a third status indicator to indicate a fully armed state, the status indicators having associated status selectors to enable a user to initiate a change to the status of the security monitoring system; a translucent faceplate behind which is provided a keypad comprising a plurality of keys to enable a PIN or passcode to be entered, and including illumination means to illuminate the keypad; and a controller to control operation of the disarm node; wherein the controller is configured to activate the illumination means of the keypad only when entering a PIN or passcode is appropriate, so that the keys of the keypad are visible through the faceplate whenever entering a PIN or passcode is appropriate, the faceplate being effective to conceal the presence of the keypad when the illumination means are inactivated, and the controller is configured to react to keypad key activation only when the illumination means of the keypad is activated.

Preferably the disarm node controller is configured to respond to receiving the wake up instruction by illuminating the status indicator corresponding to the current state of the security monitoring system. In this way, a visual indication of status is provided whenever a user is likely to be present

In security monitoring systems according to the second aspect, the disarm node may further comprises a near field communication antenna located behind the faceplate, and the system further comprises a NFC-enabled keyfob to enable the security monitoring system to be armed or disarmed without the necessity of entering a PIN or passcode. This permits the use on an NFC enabled keyfob to arm and disarm the system, removing the need for a user to remember correctly a passcode or PIN in order to arm or disarm the system. In such systems, the controller of the disarm node may be configured to respond to a near field communication event received through the near field communication antenna by transmitting data received in the event to the central unit of the security monitoring system, and the central unit may be configured to:

check whether the data received in the NFC event include a keyfob identity known to the central unit;

disarm the system from the partially or fully armed state in the event that a known keyfob identity is found; and

to transmit a message to the disarm node to cause the disarm node to illuminate the status indicator for the disarm state without activating the illumination means of the keypad.

Embodiments of the invention will now be described, by way of example only, with reference to the accompanying drawings, in which:

Figure 1 is an overview of a security monitoring system according to a first aspect of the invention;

Figure 2 is a schematic drawing showing a stylised building in which a security monitoring system according to an embodiment of the invention is installed;

Figure 3 is a schematic drawing showing features of elements of the security monitoring system according to an embodiment of the invention;

Figure 4 A and 4B are perspective views showing exterior features of a disarm node according to an embodiment of the invention;

Figure 4C is a view showing an arrangement of capacitance sensing elements and indicators in an embodiment of the present invention; and

Figures 5A and 5B show various interior features of a disarm node according to an embodiment of the invention.

Specific description

Figure 1 is an overview of a security monitoring system according to a first aspect of the invention. The Figure shows a rough plan view of a domestic dwelling 1 10, which may be a building such as a house or a secured space, such as an apartment, in a building and which is protected by a security monitoring system 100. The dwelling has a front door 120, which is a main entrance giving access to the entrance hall 125 of the building or the secured space. The door 120 is fitted with a door sensor 130 to detect the opening of the door. The door sensor 130 is typically, but not necessarily, a magnetically triggered switch which is fitted to the opening side of the door, opposite to the hinge side. The door sensor 130 includes an RF transmitter, not shown, that transmits an entry violation signal to a central unit 140 of the monitoring system 100 in the event that the door is opened. In this installation, the central unit 140 is mounted under the stairs 150 that lead to an upper floor. The central unit includes at least one first RF transceiver to receive transmissions from the door sensor and other nodes of the system. The central unit communicates with a Central Monitoring Station 150 either through a wired connection via a wired data link 160 to a broadband connection 170 within the premises to the internet 180, or wirelessly, typically using a second transceiver. The central unit may also communicate using a Wi-Fi connection, for example to a Wi-Fi access point that gives access to the Internet over a broadband or other data link. The first RF transceiver(s) for communication with the nodes of the system will typically use an ISM (Industrial Scientific and Medical) band, such as the 868MFIz band in Europe. The first RF transceiver(s) may also support Bluetooth. The second transceiver, for communication with the Central Monitoring Station 150 may also be able to use an ISM band, such as the 868 MFIz band in Europe, but may also be able to use a mobile (PLMN) network such as GSM 3G, 4G, or UMTS. Preferably the central unit 140 has several ways of communicating with the Central Monitoring Station 150, so that even if one route is jammed or otherwise unavailable, the central unit is still able to report to, and receive communications from, the Central Monitoring Station.

The residence of Figure 1 includes several rooms 190, 200, 210, in addition to the entrance hall 125. Rooms 190 and 200 lead off the entrance hall, and have windows 240 but no external doors. Typically all of the windows will be provided with one or more sensors 245 to detect window opening, glass breakage, tampering or the like. Room 210 is a combined kitchen and dining room which has an external door 220, which is also fitted with a door sensor 230. The kitchen dining room 210 also has a row of sliding and folding glazed doors 250 for which door sensors 260 are also provided.

As is conventional, the system also includes motion detectors, such as PIR detectors 290 to monitor all or selected ones of the rooms or spaces within the building, some or all of which may have associated image capture devices such as video cameras. The system may also include one or more microphones to detect, and capture, sounds such as breaking glass, and other sensors to detect the opening of internal doors, the occurrence of flooding, the incidence of fire or smoke, etc. In the hall 125, close to the front door 120, a disarm node 270 is mounted on a wall. The disarm node 270 has a user interface, including a keypad to receive a user input to disarm the system, and a radio frequency transmitter, not shown, to transmit, in consequence of the user input, a disarm instruction to the central unit 140. A similar disarm node 280 is also mounted on a wall of the kitchen 210 near to the back door 220. Although the doors 250 also give access to the secured space, and are provided with one or more door sensors to detect when they are opened, no corresponding disarm node is provided for them. This is because the sliding doors 250 are normally kept bolted on the inside, so that there is no expectation that an occupier or resident will ever enter the building through these doors when the security and monitoring system is armed. As such, any entry through those doors when the system is armed is likely to be an unauthorised entry. Similarly, it may be that the back door is always bolted on the inside when the house is left unoccupied, so that there is no expectation of a legitimate entrance through the back door when the security monitoring system is armed - in which case, the disarm node 280 for the back door may not be provided. Conversely, the owner may want to arm the system whenever she works in her back garden, which is accessed via the back door 220 - so that it is useful to provide a disarm node in the kitchen by the back door. Indeed, a gardening owner might find it very attractive to be able to disarm the system from the kitchen rather than having to walk to the central unit 140, as this would reduce the likelihood that mud from the garden would be walked through to the hall, for example.

The system is arranged so that it can be disarmed from the armed state by using the disarm node adjacent to or near the door through which the protected space was entered. Once the door sensor is triggered, detecting the opening of a door, it transmits an RF signal to the central unit, including an identifier for the door sensor - so that the central unit can distinguish between signals received from door sensors at different doors. In response to receiving a door opening indication/message from a door sensor, the central unit starts an entry period timer - which sets a time window within which the system must be disarmed, failing which, the central unit will cause the security monitoring system to enter an alarm state. Entering an alarm state may involve the sounding of alarms and flashing lights in or at the premises. If the alarm installation is connected to a central monitoring station, the central unit will generally signal the alarm state to the Central Monitoring Station - which may lead to human intervention, video scanning, audio monitoring, etc.

In order to disarm the system, conventionally a code may need to be entered into the system, either at the central station, or at a disarm node. If there is more than one disarm node, the central unit may use knowledge of the proximity of particular disarm nodes and particular door sensors to permit disarm only from the disarm node adjacent the door sensor that transmitted the door open signal. The disarm nodes include a physical keypad to enable a user to enter an appropriate disarm code, and also include visual indicators to indicate progress and current system status.

The disarm nodes also each include a near field communication (NFC) antenna and transceiver for communication with an NFC-enabled device, such as a fob, a mobile phone, a watch, etc. (hereinafter referred to as a key fob or just fob) to enable the system to be armed and disarmed by bringing the NFC-enabled device within a few centimetres of the disarm node.

The or each key fob has a fob identity that is registered with the central unit, and a transceiver to receive signals from a disarm node and to transmit signals to the central unit. The operation of the system will now be described with reference to Figures 2, and 3.

Figure 2 shows a stylised building in which a security monitoring system according to an embodiment of the invention is installed. The installation includes a central unit 140, and a door 50 giving access to the building has a door sensor 130 to detect the opening of the door 50. Adjacent the door 50 and inside the secured space is a disarm node 270. The disarm node is preferably secured to the structure of the building so that its location with respect to the door 50 is fixed and the association between the particular door sensor and the disarm node. The property’s owner/resident 66 has a key fob 300 which can be used to enable the monitoring system to be armed or disarmed without the need to enter a PIN or passcode. The key fob has an identity that is registered with the central unit, and there may be more than one such fob, each with a unique identifier which is registered with the central unit and stored in its memory.

Figure 3 shows the main components of various devices of the security monitoring system and that may be involved in arming and, more particularly, disarming the system. The central unit 140 includes a processor 300 with an associated memory 310 which stores, among other things, identities for the key fobs that are registered to the system, identities for the door sensors and disarm nodes of the system together with an association between each disarm node and the door sensor for the access door closest to the relevant disarm node. These identities and associations are stored in a database 315 within the memory 310. The central unit includes at least one RF transceiver 320, with associated antenna 322, for communication with the various nodes and sensors of the monitoring system. Typically, there will be a second transceiver 330 as shown , also with an associated antenna 332, for communication with the central monitoring station 150, as a backup or alternative to a wired data connection to the Internet via a network interface 340. The antennas of the various transceivers will typically all be internal to the central unit. The processor 300 is connected to, and controls, the memory 310, transceivers 320, 330 and the network interface 340. The central unit generally draws power from the domestic power supply ( generally referred to as a mains power supply) which feeds a power supply 350 within or associated with the central unit. The central unit also includes a backup battery power supply which automatically becomes operational in the event that the external power supply fails. The internal battery power supply is based on rechargeable cells 360 that are kept continuously topped up by the power supply 350. The central unit may also include a user interface 325, including a display 326, a keypad or keyboard 327, a loudspeaker 328, and a microphone 329. The keypad or keyboard may be a provided by making the display a touch-sensitive display, or as a unit distinct from the display. The central unit may be arranged to accept through the keypad or keyboard a code or codes to arm and disarm the system. The central unit may also include a near field communication (NFC) antenna and a corresponding NFC chip or equivalent circuitry which can be used, for example, to detect the presence of a “disarm dongle” provided to the user of the system and which is capable of communicating with the central unit using Near Field Communication. The key fobs may also be provided with an NFC antenna and chip or equivalent circuitry, so that they can be used as“disarm dongles” with the central unit and with NFC-enabled disarm nodes.

The disarm node 270 includes a processor 370 with an associated memory 380 that stores an ID of the disarm node. The disarm node also includes a user interface 385 comprising indicators, e.g. LEDs, 500, and a keypad, 510. A transceiver 520, with an associated antenna 522 (which will typically be internal, rather than external as illustrated), is controlled by the processor 370, and is used for communicating with the central unit 140 and the key fob 300. The transceiver will typically be configured to operate in the 868MHz ISM bands (or equivalent available ISM bands in countries outside Europe). The disarm node includes a battery power supply 525, and in general this will be the only power supply as typically it is preferred not to have to connect disarm nodes to the mains power supply. A loudspeaker 530 is provided so that audible messages and instructions can be given to a user at the disarm node. These audible messages and instructions may be automated ones, generated by the central unit or by the disarm node itself, but additionally the loudspeaker 530 can be used to relay messages from a central monitoring station 150. The disarm node may also store audio files for these messages and instructions on its internal memory, to avoid problems caused by the use of a low-bandwidth channel (e.g. an 868MHz RF channel) between the central unit and the disarm node. A disarm node storing such audio files may then receive instructions from the central unit to play out particular messages and do so using the stored audio files. For example, the loudspeaker may be used to provide a disarm success or failure message. The disarm node may also store audio files for these messages and instructions on its internal memory, to avoid problems caused by the use of a low-bandwidth channel (e.g. an 868MFIz RF channel) between the central unit and the disarm node. A disarm node storing such audio files may then receive instructions from the central unit to play out particular messages and do so using the stored audio files. Conveniently, the disarm node also includes a microphone 535 to permit a user at the disarm node to hold a conversation with a human operative in, for example, a central monitoring station 150, or even with the emergency services - for example if patched through by the central monitoring station. As an alternative, the disarm node may not include a microphone but a co-located external microphone provided to enable a user to speak to operatives in the Central Monitoring Station or the emergency services. Preferably, the disarm node 270 is secured to the building protected by the security monitoring system, for example attached to an internal wall at a height convenient for user operation - for example fixed at a height between 1 metre and 1 .5 metres from the floor.

The system is arranged to permit the system to be armed and disarmed from a disarm node. The disarm node also includes a Near Field Communication antenna and chip 372 to enable a disarm dongle, such as an NFC-enabled fob, to be used to disarm or arm the system by bringing the dongle within a few centimetres of the disarm node - e.g. by bringing the fob into contact with the disarm node.

The disarm node may also be configured to encrypt its radio transmissions, and to decrypt received signals, so that secure communications with the central unit are possible. The encryption may be based on a secret shared between the central unit and the disarm node.

The detector to detect the opening of the door is here illustrated as a door sensor 130. The door sensor 130 includes a processor 550, with an associated memory 555 which stores an identifier for the door sensor, a transceiver 560, with an associated internal antenna 562, connected to, and controlled by the processor 550, for communication with the central unit, all powered by a battery power supply 570. As with the disarm node, typically the battery power supply 570 will be the only power supply for the door sensor. The door sensor includes in addition a switch, for example a pair of contacts, 575, that are controlled by the opening and closing of the door with which the door sensor is associated. Typically, the contacts 575 respond to the presence of a magnetic field provided by a magnet 580. The magnet is typically attached to the leaf of the door, while the contacts are typically secured to the frame of the door. The contacts 575 may be closed in the presence of the magnetic field, opening when the contacts and the magnet are moved apart as the door opens, or they may be open in the presence of the magnetic field, closing when the field is taken away as the door is opened. Alternatives, such as Flail effect sensors, or an optical sensing arrangement, can be used in place of magnetically controlled contacts. But, because the door sensor is battery powered, the sensor arrangement is preferably one that consumes no or very little power in the resting (door closed) state - which makes the use of magnetically controlled contacts attractive.

As an alternative, in systems according to embodiments of the invention,“door sensor” functionality may be provided by another kind of sensor - such a movement detector (e.g. PIR sensor), floor pressure pad, or the like, located at or adjacent a door, so that signals from the relevant sensor indicate the passage of someone through a doorway and hence the opening of the door.

The key fob 300 includes a processor 600, with an associated memory 605 that stores an identifier for the fob, a transceiver 610, and a battery 615 that provides power to the processor and the transceiver. Transceiver 610 is typically a conventional polling transceiver designed for low power consumption. Such a polling transceiver, when in a resting state, periodically powers just the front end of its receiver circuit to listen for polling signals. If a polling signal is detected, possibly subject to some power level minimum, the rest of the receiver circuit is energised to receive transmissions. Such a polling transceiver may listen for no more than about 100 - 125 ms each second, unless polling signals are detected.

The transceiver, of whatever kind, is controlled by the processor and enables radio communication with the central unit 140 and the disarm node 270. The key fob may also include one or more buttons 620 which a user can use to issue commands or responses. The key fob may also include one or more visual indicators 625, for example one or more LEDs, to indicate a status, to confirm a button press, or the like. A single multi-coloured indicator, such as an LED, may be used to provide multiple different indications while keeping component count low and enabling the key fob dimensions to be made compact.

The key fob is preferably configured to encrypt its radio transmissions, and to decrypt received signals, so that secure communications with the central unit are possible. The encryption may be based on a secret shared between the central unit and the key fob.

The disarm node 270 will now be further described, and details of the its user interface given, with reference to Figure 4.

Figure 4a is a perspective view of the exterior of a disarm node 270 according to an embodiment of the invention. The disarm node in this example has a generally rectangular body with a faceplate 410 covering the majority of the front face 400 of the body - although in other embodiments the faceplate may be co extensive with the front face, so that it covers it completely, or may cover the front face completely except for a small margin on one or more of the edges of the front face. In the example shown, three status indicators, 420, 422, 424, are located in the front face of the body above the top edge of the faceplate 410.

The faceplate is made of a translucent material which conceals the numerals of an underlying keypad unless the keypad is illuminated. The keypad uses capacitive sensing, so the faceplate is made of a dielectric material such as plastic or glass. It is preferred to use glass for the faceplate not only because it tends to have better dielectric properties for use with a capacitive sensing keypad, but also because of its durability - as users are likely to attach their key fob controller 300 to keys, so that when they use the NFC functionality of the key fob to arm or disarm the security monitoring system they are likely to touch the fob on the faceplate, with a strong likelihood that keys attached to the fob may scrape against the faceplate. If the faceplate is made of a plastics material, over time repeated contact with keys is likely to result in scuffing to the surface of the faceplate, which is unattractive. Conveniently, the glasses that are used for the cover glasses for smartphones and tablet computers are very tough even when around 1 to 2mm thick, or less. These glasses tend to be alkali-aluminosilicate glasses, examples of which are Panda Glass from the Chinese manufacturer Tunghsu, and Gorilla Glass from Corning. The faceplate may be rendered translucent by applying a surface coating or surface treatment to its reverse surface - that is the surface facing the body of the disarm node, rather than the surface exposed to user contact. For example, the glass may be given a coating of a suitable paint or lacquer, typically in several layers. The coating may be applied over the whole rear surface of the faceplate, with fewer layers applied to the icons/numbers that are to appear illuminated in use.

The three status indicators include a disarm indicator, 420, a partially-armed indicator, 422, and a fully-armed indicator, 424. The external case that defines the exterior shape of the disarm node 270 is preferably made of an opaque plastics material in which a transparent window is formed , for example as an opening formed during the moulding of the case, for each of the status indicators. Behind each window is a status indicator light, typically an LED. Preferably the lights for the status indicators are of different colours. For example, the disarm indicator 420 may be white, the partial arm indicator 422 may be orange, and the fully armed indicator 424 may be red, although obviously other colours could be chosen. To give flexibility, the lights may be LEDs whose colour can be controlled.

In the example shown in Figure 4, the status selector associated with each of the status indicators, 420, 422, 424, is located behind the relevant status indicator, so that a user makes a status selection by touching the status indicator. Alternatively, the status selectors could be located adjacent the relevant status indicator and a suitable visual cue provided on the exterior of the case - for example, providing a zone of a colour contrasting with that of the rest of the front face of the case, and/or by providing a physical feature, such as a depression or cup to receive a fingertip of a user, at the site of each of the status selectors.

Figure 4B is a similar perspective view of the exterior of the disarm node 270 of Figure 4A showing the keypad in its illuminated state, in which state symbols for each of the keys of the keypad are displayed. In this example, the keypad has 1 1 keys, 0-9, 430, plus <, 432, which functions as a“clear all” key which can be used to take the user back to the starting point. In addition, the Figure also shows a“dot display”, 440, comprising a plurality, e.g. six indicator lights which can be used to inform a user of progress - for example during the inputting of a PIN or access code, the indicator lights are illuminated one by one in sequence as each digit is entered (so that the disarm node is provided with an indicator light for each one of the characters of the PIN or access code, at least). By using LEDs whose colour can be changed, the dot display can be used to provide feedback and otherwise inform the user of events and conditions.

Figure 4C shows an arrangement of keypad sensors and indicator lights visible on a pcb within the disarm node when the front cover of the node is removed. For each of the status selectors, and for each character of the keypad, a capacitance sensing arrangement 450 is provided. Although represented as being square in shape, the capacitance sensing arrangements may be circular in practice. Within each of the capacitance sensing arrangements is an indicator light, e.g. an LED, 460. Also shown are the plurality of lights, 470, of the dot display 440, which will typically be LEDs. Figure 5A shows a vertical section of an embodiment of a disarm node from front to back. In this example, the faceplate 410 is shown as extending for the full height of the front face of the device. Behind the faceplate, shown as a dark line, is the front cover 400 of the device. The capacitance sensing arrangements 450, and the dot display are mounted on a PCB 480. Also shown are batteries of the battery power supply 525, and the loudspeaker 530.

Figure 5B illustrates the arrangement of various antennas, and certain other features, within the disarm node 270. The NFC antenna 590 , which is formed on the reverse side of the PCB 480, generally echoes the outline of the case of the disarm node, and is formed adjacent the edges of the PCB. Using the available space in this way provides practically the largest NFC antenna possible, which helps to maximise its detection range. Also shown are a sub-GHz antenna 595, and an antenna for BLE, each of which is conveniently positioned adjacent an edge of the PCB 480. The PCB 480 also carries the electronics to operate the capacitance sensing of the keypad including the status selectors, those for near field communication, a driver for the LEDS, and a BLE chip. The necessary chips and other components are typically all mounted on the opposite side of the PCB to the LEDs and capacitance sensing arrangements.

Operation of the disarm node will now be described. When the security monitoring system is in the disarmed state, the keypad illumination will be inactive, as shown in Figure 4A, so that the keypad is not visible. The disarm status indicator 420 will be illuminated unless the disarm node is in a power-saving node in which all indicator lights are powered down. Because the disarm node is battery powered, it is generally preferable to configure it to enter a power-saving mode within a short time of completion of a state change, unless presence is detected in some way (possibly through BLE, NFC, or capacitive sensing).

If the disarm node is in a power saving node, no indicator lights will be

illuminated, whatever the status of the system. When the user’s hand approaches the front face of the disarm node, the capacitive sensing arrangements 450 will sense this, the status indicator for the current system status will illuminate. If the system is disarmed, and a user wants to arm the system fully (“Arm Away”), the user will touch the status selector 424. This will cause the fully armed status indicator 424 and the keypad to illuminate, but because the status has not yet changed the status indicator 424 will flash while the current status indicator, disarmed 420, will continue to be illuminated but not be flashing. The touching of the status selector 424 may also start a timer within which the arming process must be completed before the disarm node reverts to displaying merely the current status - for example, a timer of 30 seconds duration may be set.

The illumination of the keypad prompts the user to enter the PIN or passcode. As each digit of the PIN or passcode is entered, the system may be configured to illuminate one of the lights of the dot display. The colour of the dot display may also be set to be the same as the colour of the status indicator 424 for the fully armed state. With each key activation, the disarm node transmits the key selection to the central unit or the disarm node may simply transmit the full sequence of characters once the set number of characters has been selected. Communication with the central unit from the disarm node are encrypted using for example a secret shared between them.

If the user enters the correct passcode or PIN, the central unit will arm the system (subject to the running of an“exit timer” during which movement in the monitored area, and opening/closing of an entry/exit door will not trigger the alarm - so that the user who armed the system can exit the monitored space without triggering the alarm) and send a“change of state” message, in this case a“fully armed” message to the disarm node to cause the disarm node to illuminate the fully armed status indicator 424 continuously rather than flashing, and to extinguish the disarmed status indicator 420. On entry of the correct passcode/PIN, the central unit will start exit timer, to enable the user to exit the secured space without triggering an alarm state.

If the user enters the wrong passcode, the central unit will send a“wrong code” message to the disarm node, causing the disarm node either to output an audio message to that effect via the loudspeaker, or to cause the dot display to flash repeatedly for some seconds, or preferably both. The status of the security monitoring system remains unchanged. The system may be configured to give a user more than one chance to enter the correct code within the allotted time, or it may allow only one attempt before extinguishing the flashing fully armed status indicator 424 and extinguishing the keypad illumination so that the user can no longer attempt PIN or passcode entry.

The system is preferably configured to enter a locked state after a certain number of failed state change attempts - for example after three attempts to enter the passcode/PIN the central unit may prevent further state changes for a brief period of a few minutes or more, and send an appropriate message to the disarm node to cause the disarm node to make an audio announcement to the effect that the system will be locked for the relevant period. In addition, the disarm node may activate the dot display - e.g. activating all of the lights of the dot display, in red for example, and then extinguish these one by one steadily over the duration of the locked period. Once the locked period is over, the user is once again able to select one of the other statuses and to attempt to enter the correct passcode / PIN.

If the system is in an armed state, all the indicator lights will be extinguished shortly after any state change. If an entrance door associated with a disarm node is opened, the relevant door sensor will detect the event and transmit a signal to this effect, including the ID of the door sensor. The signal from the door sensor will be detected by the central unit. The central unit will then use the door sensor ID included in that signal to identify the relevant disarm node. The central unit will then broadcast an alert signal, including the ID of the relevant disarm node. On receiving the alert signal including its own ID, the disarm node with illuminate the status indicator for the current status - either partially armed 422, for“armed home”, or fully armed, 424, for“armed away”. The system may also be configured to cause the current status indicator to flash under these circumstances. Immediately, or after a brief delay of some seconds, the disarm node may also output a voiced announcement to the effect that the system is aware of the entry (“ we are watching and listening !”) and that the person needs to identify themselves. This can be done by entering the correct PIN/ passcode through the keypad of the disarm node, or by presenting an appropriate fob or tag (i.e. one which is registered with the central unit - the central unit checking the fob id which is forwarded by the disarm node whenever a fob is brought into range of the disarm node: if the forwarded id matches a registered id, the central unit sends an appropriate success message to the disarm node) to the disarm node - e.g. by using NFC functionality in the key tag and disarm node by bring the former into contact with the latter. If neither of these actions is completed before expiry of the entry timer, the central unit will cause the security monitoring system to enter an alarm state - and, if the security monitoring system is associated with a central monitoring station, CMS, will send a message to this effect to the CMS. If the system is in the partially armed state, i.e. armed home, and the user wants to disarm the system, the user must first touch the disarm status selector 420. This will cause the disarm status indicator 420 to flash, while the partially armed status indicator 422 continues to be illuminated steadily, and will cause the keypad to be illuminated. The user can either present a suitable fob (whose identity is checked by the central unit, and if the identity matches one already registered the central unit will disarm the system and send a success message to the disarm node to cause it to turn off the partially armed status indicator 422 and to illuminate the disarmed status indicator 420 ) or enter the appropriate PIN or passcode. If the correct PIN or passcode is entered, the central unit will disarm the system and send a success message to the disarm node to cause it to turn off the partially armed status indicator 422 and to illuminate the disarmed status indicator 420. Similarly, if the system is in the partially armed state, i.e. armed home, and the user wants to fully arm the system prior to leaving the monitored premises, the user must first touch the fully armed status selector 424. This will cause the fully armed status indicator 424 to flash, while the partially armed status indicator 422 continues to be illuminated steadily, and will cause the keypad to be illuminated. The user can again either use a registered key tag to identify themselves to the central unit, or enter the correct passcode or PIN through the keypad. If successful, the central unit will change the status of the system from partially armed to fully armed, and will send an appropriate message to the disarm node to cause the disarm node to extinguish the partially armed status indicator 422, and to illuminate the fully armed status indicator 424 steadily. The user will then have, for example 30 seconds to leave the premises.

Alternatively, the system may be configured to enable a user to disarm the system from the partially armed state simply by presenting a registered fob to the disarm node. If the disarm node is in a low power state, with no illumination, presentation of an NFC-enabled fob will cause the disarm node to“wake” causing the status indicator for the current status to be illuminated. If the user doesn’t actuate a status selector for one of the other statuses, the system may be configured to assume that the user wants to disarm the system. The data from the NFC event with the fob will be transmitted by the disarm node to the central unit. If the fob is one registered with the central unit, the central unit will disarm the system and broadcast a success/status change message including the disarm node’s ID to cause the disarm node to extinguish the status indicator for the partially armed state and to illuminate that for the disarmed state. Under these circumstances there is no need for the disarm node to illuminate the keypad.

Thus it can be seen that the user interface defined by the status indicators, status selectors and keypad is configured to guide a user through the arming and disarming processes in such a way as to reduce the likelihood that a user will believe that they have armed the system despite making no state change. The user interface also prevents the user from entering a PIN or access code unless the system is in a state where entry of a PIN or passcode is appropriate. By activating the illumination means of the keypad only when entering a PIN or passcode is appropriate, so that the keys of the keypad are only visible through the faceplate whenever entering a PIN or passcode is appropriate, users are much less tempted to try to enter a PIN or passcode at the wrong time. To be able to see the keypad, a user must first attempt to change the state of the system by actuating a state selector corresponding to a state other than the current state of the system. Only if the user operates one of the other state selectors will the keypad be visible, and activation of the other state selector will also cause the state indicator for the chosen target state to be illuminated. If that is not the target state that the user actually wanted, the user merely has either to use the“back” key or wait for the disarm node to revert to its resting state. Then, activating the correct target status selector will enable the user to make the desired state change by entering the PIN or passcode, or by presenting a fob that is registered with the central unit.

The selective presentation of a keypad only when appropriate is enabled without the use of a display, which is significant both in terms of cost reduction but also in terms of reducing power consumption - something which is very important in a device which will typically be powered by non-rechargeable alkaline cells (for reasons of cost) and which is expected to have a minimum 5-year battery life.

Systems according to embodiments of the invention may be configured to accept as fobs other devices such as smart phones, smart watches, or other wearable devices that are NFC enabled and registered with the central unit, or similarly by using BLE functionality in the device and the disarm node, provided that the relevant device is registered with the central unit. Preferably, RF communication between the central unit and the nodes and sensors of security monitoring systems according to embodiments of the invention use the industrial, scientific, and medical (ISM) radio bands, such as in Europe the 868MHz band. Within the 868 MHz band are several sub-bands dedicated to“non- specific SRD” which are of interest.

Claims

1. A disarm node for arming and disarming a security monitoring system for a building or a secured space within a building, the system including:

a central unit for controlling, arming and disarming the security monitoring system;

the disarm node having a user interface to receive a user input to arm or disarm the system, and a radio frequency transmitter to transmit, in consequence of the user input, an arm or a disarm request to the central unit,

the user interface including:

a set of status indicators to indicate visually the current status of the security monitoring system, the set including a first status indicator to indicate the existence of a disarm state, a second status indicator to indicate a partially armed state, and a third status indicator to indicate a fully armed state, the status indicators having associated status selectors to enable a user to initiate a change to the status of the security monitoring system;

a translucent faceplate behind which is provided a keypad comprising a plurality of keys to enable a PIN or passcode to be entered, and including illumination means to illuminate the keypad; and a controller to control operation of the disarm node;

wherein

the controller is configured to activate the illumination means of the keypad only when entering a PIN or passcode is appropriate, so that the keys of the keypad are visible through the faceplate whenever entering a PIN or passcode is appropriate, the faceplate being effective to conceal the presence of the keypad when the illumination means are inactivated, and the controller is configured to react to keypad key activation only when the illumination means of the keypad is activated.

2. The disarm node as claimed in claim 1 , wherein the keypad is a capacitance sensing device.

3. The disarm node as claimed in claim 2, wherein the keypad uses projected capacitive technology.

4. The disarm node as claimed in any one of the preceding claims, wherein the controller is configured to implement a low energy consumption state in which the keypad illumination and the status indicators are all extinguished.

5. The disarm node as claimed in claim 4, wherein the controller is configured to activate the status indicator for the current status of the security monitoring system in response to any of: a signal from a proximity sensor, a signal received from the central unit, or actuation of one of the status selectors.

6. The disarm node of claim 5 as dependent on claim 2 or claim 3, wherein the controller is configured to use the keypad as the proximity sensor to detect user presence.

7. The disarm node as claimed in any one of the preceding claims, wherein each status selector is collocated with its associated status indicator.

8. The disarm node as claimed in claim 7, wherein the status selectors use capacitance sensing technology.

9. The disarm node as claimed in any one of the preceding claims, further comprising a near field communication antenna located behind the faceplate.

10. The disarm node as claimed in claim 9, wherein the controller is configured to respond to a near field communication event received through the near field communication antenna by transmitting data received in the event to the central unit of the security monitoring system.

1 1 . The disarm node as claimed in any one of the preceding claims, wherein when the security monitoring system is in the disarmed state the controller is configured to activate the illumination means of the keypad in the event that the selector for either the partially armed or fully armed states is actuated, but not to activate the illumination means of the keypad in the event that the selector for the disarm state is actuated.

12. The disarm node as claimed in any one of the preceding claims, wherein when the security monitoring system is in the armed or partially armed state the controller is configured to activate the illumination means of the keypad in the event that the selector for the disarm state is actuated but not to activate the illumination means of the keypad in the event that the selector of the current state of the system is actuated.

13. The disarm node as claimed in claim 12, wherein when the security monitoring system is in the armed state the controller is configured to activate the illumination means of the keypad in the event that the selector for the partially armed state is actuated.

14. The disarm node as claimed in any one of the preceding claims, wherein the faceplate is made of glass.

15. A security monitoring system for a building or a secured space within a building, the system including:

a door sensor to detect the opening of a door giving access to the building or the secured space;

the disarm node having a user interface to receive a user input to arm or disarm the system, and a radio frequency transmitter to transmit, in consequence of the user input, an arm or a disarm request to the central unit;

the central unit having a radio frequency transceiver;

the central unit being configured:

in response to receiving a door opening indication/message from the door sensor, to:

(i) start an entry period timer;

(ii) transmit a wake up instruction to the disarm node; and

(iii) in the event that the security monitoring system is not disarmed before expiry of the entry period, to cause the security monitoring system to enter an alarm state;

wherein the user interface of the disarm node includes: a set of status indicators to indicate visually the current status of the security monitoring system, the set including a first status indicator to indicate the existence of a disarm state, a second status indicator to indicate a partially armed state, and a third status indicator to indicate a fully armed state, the status indicators having associated status selectors to enable a user to initiate a change to the status of the security monitoring system;

wherein the controller is configured to activate the illumination means of the keypad only when entering a PIN or passcode is appropriate, so that the keys of the keypad are only visible through the faceplate when entering a PIN or passcode is appropriate, the faceplate being effective to conceal the presence of the keypad when the illumination means are inactivated, and the controller is configured to react to keypad key activation only when the illumination means of the keypad is activated.

16. The security monitoring system of claim 15, wherein the disarm node controller is configured to respond to receiving the wake up instruction by illuminating the status indicator corresponding to the current state of the security monitoring system.

17. The security monitoring system of claim 15 or claim 16, wherein the disarm node further comprises a near field communication antenna located behind the faceplate, and the system further comprises a NFC-enabled keyfob to enable the security monitoring system to be armed or disarmed without the necessity of entering a PIN or passcode.

18. The security monitoring system of claim 17, wherein the controller of the disarm node is configured to respond to a near field communication event received through the near field communication antenna by transmitting data received in the event to the central unit of the security monitoring system, and wherein the central unit is configured to: check whether the data received in the NFC event include a keyfob identity known to the central unit;

19. A node for arming or disarming a security monitoring system for a building or a secured space within a building :

the node having a user interface to configured to be selectively activated to receive an arm or a disarm input from a user, and a radio frequency transmitter to transmit an arm or a disarm request to the system,

the user interface including:

a translucent faceplate behind which is provided a keypad to enable a PIN or code to be entered, and including illumination means to illuminate the keypad; the node being configured to selectively activate the illumination means such that the keypad is visible through the faceplate, the node being configured to activate the illumination means of the keypad only when the interface is configured to receive an input from a user.