# US 12,008,097 B2 · Fire control system authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,008,097 B2 - Document ID: US12008097B2 - Status: Granted - Kind: B2 - Application number: 17/449,378 - Filed: 2021-09-29 - Published: 2022-03-31 - Granted: 2024-06-11 - Earliest claimed: 2020-09-30 - Assignees: Honeywell International Inc. - Applicants: Novar GmbH - Inventors: Henning Heister - Web page: https://patentgrep.com/patent/US12008097B2 ## CPC - G06F 21/31: User authentication - G06F 21/44: Program or device authentication - G06F 21/33: using certificates - G08B 25/08: using communication transmission lines {(G08B13/19658, G08B21/0286, G08B25/016 take precedence)} - H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)} - H04L 9/3247: {involving digital signatures} - H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]} - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/126: {the source of the received data} - H04W 12/06: Authentication - G06F 2221/2137: Time limited access, e.g. to a computer or data - H04L 2463/082: applying multi-factor authentication - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G08B: SIGNALLING SYSTEMS, e.g. PERSONAL CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Methods, systems, and devices for fire control system authentication are described herein. One method includes authenticating a user device to an authentication server, receiving, from the authentication server, an offline token, and authenticating the user device to a fire control panel using the offline token. ## Claims ### Claim 1 A method for fire control system authentication, comprising: authenticating a user device to an authentication server; receiving, from the authentication server, an offline token, wherein the offline token includes a role associated with a user of the user device, and wherein the role associated with the user of the user device indicates an ability for the user to modify configuration data of a fire control panel and devices of a fire control network to which the fire control panel belongs; and authenticating the user device to the fire control panel using the offline token. ### Claim 2 (depends on 1) The method of claim 1, wherein the fire control panel lacks an internet connection. ### Claim 3 (depends on 1) The method of claim 1, wherein authenticating the user device to the authentication server includes: receiving user credentials input to the user device; receiving, from the authentication server, an access token and an identification token responsive to a determination that the user credentials are valid. ### Claim 4 (depends on 3) The method of claim 3, wherein the method includes creating the offline token by the authentication server responsive to a successful validation of the access token and the identification token against the authentication server. ### Claim 5 (depends on 1) The method of claim 1, wherein the method includes storing the offline token by the user device. ### Claim 6 (depends on 1) The method of claim 1, wherein the offline token has an operational lifetime. ### Claim 7 (depends on 6) The method of claim 6, wherein the method includes: attempting to authenticate the user device to the fire control panel using the offline token; denying authentication of the user device to the fire control panel responsive to a determination that the offline token has exceeded its operational lifetime. ### Claim 8 (depends on 1) The method of claim 1, wherein the method includes signing the offline token with a digital certificate associated with an entity managing the fire control panel. ### Claim 9 A system for fire control system authentication, comprising: a user device; an authentication server; and a fire control panel; wherein: the authentication server is configured to send the user device an offline token responsive to authenticating the user device to the authentication server, wherein the offline token includes a role associated with a user of the user device, and wherein the role associated with the user of the user device indicates an ability for the user to modify configuration data of the fire control panel and devices of a fire control network to which the fire control panel belongs; the user device is configured to store the offline token; the fire control panel is configured to authenticate the user device using the offline token without a network connection; and the user device is configured to thereafter modify operations of the fire control panel. ### Claim 10 (depends on 9) The system of claim 9, wherein the offline token includes: a name associated with a user of the user device; an address associated with the user of the user device; an identifier associated with the user of the user device; and an entity employing the user of the user device. ### Claim 11 (depends on 9) The system of claim 9, wherein the role associated with the user of the user device indicates an ability for the user to modify a time setting associated with the fire control panel. ### Claim 12 (depends on 9) The system of claim 9, wherein the role associated with the user of the user device indicates an ability for the user to view an event log associated with the fire control panel. ### Claim 13 (depends on 9) The system of claim 9, wherein the offline token includes an indication of an ability for the user to designate an entity allowed to perform operations of the fire control panel. ### Claim 14 (depends on 9) The system of claim 9, wherein the fire control panel is configured to authenticate the user device via a network connection. ### Claim 15 (depends on 14) The system of claim 14, wherein the fire control panel is configured to verify the validity of the offline token via the network connection. ### Claim 16 A non-transitory machine-readable medium having instructions stored thereon which, when executed by a processor, cause the processor to: authenticate a user device to an authentication server; receive an offline token from the authentication server, wherein the offline token includes a role associated with a user of the user device, and wherein the role associated with the user of the user device indicates an ability for the user to modify configuration data of a fire control panel and devices of a fire control network to which the fire control panel belongs; store the offline token in memory; and authenticate the user device to the fire control panel absent an Internet connection using the offline token. ### Claim 17 (depends on 16) The medium of claim 16, including instructions to provide a notification associated with an operational lifetime of the offline token. ### Claim 18 (depends on 17) The medium of claim 17, wherein the operational lifetime of the offline token is seven days. ### Claim 19 (depends on 16) The medium of claim 16, wherein the user device is a smart phone.