Secure enrolment of security device for communication with security server

A method for enabling surveillance communication between a network-enabled security device and a security server comprising:

• a. establishing a data connection with a computing device and
• i. transmitting from the security device to the computing device over the data connection between the security device and the computing device enrolment connection parameters with which to provide the computing device with network communication with an enrolment server;
• and
• ii. receiving at the security device over the data connection between the security device and the computing device an activation code from the computing device;
• b. establishing network communication with an enrolment server on a public network using a network protocol and transmitting to the enrolment server the activation code received from the computing device and a public encryption key from a public-private encryption key pair;
• c. receiving over the public network from the enrolment server surveillance connection parameters for establishing a connection with the security server;
• and
• d. establishing network communication between the security device and the security server using the surveillance connection parameters received from the enrolment server and transmitting to the security server security data signed with a private encryption key from the public-private encryption key pair.

An enrolment server for establishing a secure connection between a network-enabled security device and a security server to enable communication of encrypted security data from the security device to the security server, comprising:

• a. network interface hardware configured for communication over a data network;
• b. a processing device in communication with the network interface hardware and configured by program code stored in a computer-readable storage accessible by the processing device instructing the processing device to:
• i. establish a first network connection over the network interface hardware using a network communication protocol with a remote computing device;
• ii. process data received from the remote computing device over the first network connection to derive therefrom authentication data provided in the data received from the remote computing device;
• iii. perform an authentication of the first network connection on the basis of the authentication data;
• iv. upon authentication of the first connection, cause the network interface hardware to transmit to the computing device an activation code;
• v. establish a second network connection over the network interface hardware with the security device;
• vi. process data received from the security device over the second network connection to derive therefrom the activation code and a public encryption key of the security device provided in the data received from the security device;
• vii. perform a verification that the activation code received from the security device matches the activation code transmitted to the computing device, and upon successful verification that the activation code received from the security device matches the activation code transmitted to the computing device create in a computer-readable memory a consultable indication that the security device has been authenticated, wherein a security data transmission from the security device is authenticated by consulting the indication to confirm that the security device has been authenticated.

A network-enabled security device for securely transmitting security data to a security server over a public network comprising:

• a. network interface hardware configured for communication over a data network;
• b. processing logic in communication with the network interface hardware and configured to:
• i. establish a data connection with a computing device and:
• 1. transmit from the security device to the computing device over the data connection between the security device and the computing device enrolment connection parameters with which to provide the computing device with network communication with an enrolment server;
• and
• 2. receive at the security device over the data connection between the security device and the computing device an activation code from the computing device;
• ii. establish network communication over the network interface hardware with the enrolment server on the public network using a network protocol and transmit to the enrolment server the activation code received from the computing device and a public encryption key from a public-private encryption key pair;
• iii. process data received from the enrolment server over the public network at the network interface hardware to derive therefrom the connection parameters for establishing a connection with the security server provided in the data received from the enrolment server;
• and
• iv. establish network communication over the network interface hardware with the security server on flail the public network using a network protocol using the connection parameters received from the enrolment server and transmit to the security server the security data encrypted using the connection parameters.