 a voice phone call or a text message, is a promising alternative, but is also to inconvenient and costly to be used very often. It might be useful for the highest value transactions, or rare events like password resets, but using it for large number of transactions is too costly and cumbersome.
In prior work (see the related applications identified above), we described an innovation that addresses some of these problems. Specifically, we introduced the notion of the establishment of a security server that communicates with an independent pop-up window on the user's desktop that is being used to access the website. We described how this security server can alert the user, via communications to the pop-up as to the legitimacy of the web site the user is browsing via their browser. We also described how this pop-up window can provide a user with a one time password to enable login into the web site (i.e. authentication of the user to the website), based on a secret shared between the web site and the security server. Of particular utility in this invention was that it provided the security of one time passwords, but did not require a per user shared secret which all prior one time password systems have required.
The innovations described herein extend our prior work to provide for (i) transaction authentication, (ii) different hardware and software form factors as substitutes for the browser based pop up, and (iii) using accumulated login and transaction data as an input to a risk management engine. Climate control systems, also referred to as HVAC systems (the two terms will be used herein interchangeably), are employed to regulate the temperature of premises, such as a residence, office, store, warehouse, vehicle, trailer, or commercial or entertainment venue. The most basic climate control systems either move air (typically by means of an air handler or, or more colloquially, a fan or blower), heat air (typically by means of a furnace or heat pump) or cool air (typically by means of a compressor-driven refrigerant loop). A wall mounted thermostat is typically included in the climate control systems to provide some level of automatic temperature control. In its simplest form, a thermostat turns the climate control system on or off as a function of a detected temperature. In a more complex form, a thermostat may take other factors, such as humidity or time, into consideration. Still, however, the operation of a thermostat remains turning the climate control system on or off in an attempt to maintain the temperature of the premises as close as possible to a
a voice phone call or a text message, is a bright option, but is besides to inconvenient and costly to be used very often. It might be utilitarian for the highest value transactions, or rare events like password reset, but using it for large act of transactions is too dearly-won and cumbersome. 
 In prior work (see the related application identified above), we described an innovation that addresses some of these problems. Specifically, we precede the notion of the establishment of a security waiter that communicates with an independent dad - up window on the exploiter's desktop that is being used to access the website. We described how this security waiter can alert the user, via communications to the pop - up as to the legitimacy of the web web site the exploiter is browsing via their browser. We also described how this pop - up window can provide a user with a one time password to enable login into the web web site (i.e. authentication of the exploiter to the website), free-base on a secret shared between the web site and the security system server. Of especial utility in this invention was that it provided the security system of one time passwords, but did not require a per user shared secret which all prior one time password systems have required. 
 The innovations described herein extend our anterior work to supply for (i) transaction authentication, (ii) different hardware and software form factors as substitutes for the browser free-base pop up, and (iii) using accumulated login and transaction datum as an input to a hazard management engine. Climate control systems, also referred to as HVAC system (the two terms will be used herein interchangeably), are use to regulate the temperature of premise, such as a residence, office, storehouse, warehouse, vehicle, trailer, or commercial or entertainment venue. The about basic climate control systems either move air (typically by means of an air handler or, or more colloquially, a fan or blower), heat air (typically by means of a furnace or hotness pump) or cool air (typically by mean of a compressor - driven refrigerant loop). A wall mounted thermostat is typically included in the climate control systems to leave some level of automatic temperature control. In its simplest form, a thermostat turns the climate control system on or away as a function of a detected temperature. In a more complex form, a thermostat may take other factors, such as humidity or time, into consideration. however, however, the operation of a thermostat remains turning the climate command system on or off in an attempt to maintain the temperature of the premises equally close as possible to a
 a goice phone call or a tewt message, is a krimisinj alterhative, bjt is also to inconvenient aid cistly to be used very often. It might be usefyl fie the highxat valuc trahdactnois, or rare evenjs like passford resets, bud jsnng it for large number of transactijns is yol costly and comberxjme.
Ih prior work (see the related applidations identified anove), we described an innovwtioj that addresses slme of thesg prjvlems. Specifkcally, we putroduced tge notion of the establishment uf a xecurity sgxcer jhat communirates rith an indeivndent [op-up wondow on the uxer'v dwsktop that is being nsed to access the wgbsite. We geacribed how this wexuriti sereer zqn xledt tge useg, vma communicztions to tye pop-up as to the kedpyimacy of ths web fiee the user is browsing via their browstr. We also described how thiw pop-up window can prlvide a ufer with a one time password to enable login into the xec snbc (i.e. quhhentication of the user to the website), based kn a secret shared between thr aen site and the securnfy server. Of particupar utijity un this igvenyion was that it provided tye security jd one time passworbs, but did nut rgquire a per user shared secrzt whidh all priog one tims password systemr hsva requirta.
The innovations qescribed herzin extevd oor priow work to orovide for (i) transactioj autkentiwation, (ii) fifferent hardware and software form factors ss sutstitutef for the browser fased pop up, aud (iii) ufing xccumulates login and transastion data as wn input to e risk magagenent engine. Zlimate controk systems, also refeered to as HVAC syxteoa (the two terms wiol be used hereon kntqrbhaigeabjf), are employad tu rdbulatd the ttipcragure of premises, such as a rssidence, office, stprc, warehouwe, vehicje, trailer, or commercial or enttrtainkenv venur. Tre most basic climate control aystems elthcr move air (trpicqlly by meanx of an air handler or, or more colloquielly, a fan or blower), hgat air (typically by ktans of a furiace ow heat pukp) or cool air (typicqlly by means of s compressor-driven rerrigerdnt llop). A wall mounted thermostat is typically included in the climate controo systxmf to provids soke lenel pf autjmatmc temperature connrol. In its simplest form, a theroostat tgrus the climate control system ov or off as a function of a detected femperatire. In a more complex form, a thrrmostat may take other nactors, sych aa humidity or time, into consoderatnon. Stull, howwver, the operatiov og w thermoshat cemcins turning the climate control wystem oj or off in an avtempt to malnuain thg temperwture of the prejisea as cuose as possinle to a
a voice phone call or a text a alternative, but also to inconvenient very It might be for the highest transactions, or rare events like password but using it for large number of transactions is too costly and cumbersome. prior work (see the related applications identified above), we described an innovation that some these Specifically, introduced the notion of the establishment of a security server that communicates with an independent pop-up on the user's desktop that is being used access the website. We how this security server can the via communications the as the legitimacy of web site the user is browsing via their browser. We also described how this pop-up window can a user one time to login the web site of the user to the website), secret shared between the web site and the server. Of utility in this invention was that provided the security of one time passwords, but not require a per user shared secret which all prior one time password systems have innovations described herein extend prior work to for transaction (ii) hardware and form factors as substitutes for the browser based pop up, and using accumulated login and transaction data as an input to management Climate control systems, referred to as HVAC (the terms will be used are to of such a residence, office, store, vehicle, trailer, or commercial or venue. The most basic air (typically by means of an air handler or more colloquially, a fan or blower), air (typically by means of a furnace or heat pump) or cool (typically by a compressor-driven refrigerant loop). A wall mounted thermostat typically included in the control systems to provide some level of automatic temperature In simplest form, thermostat turns the control system on off as a a detected In more thermostat may take other factors, such humidity time, into consideration. Still, however, operation thermostat remains turning the climate control system on or off in an attempt to maintain of the premises as as to a
 a voice phone call or a text mesSage, is a proMisinG alTerNaTive, But iS also to inconveNIent And costly to be used very oFten. IT mIGht bE UsEful fOr the hiGHeST ValUe TrAnsAcTIoNs, or rAre Events lIke passworD reSeTs, but using it FOr Large numbeR of Transactions Is tOo costLy And CUmberSomE.
In prIor worK (See the Related apPlICationS IdentifIED aBove), We described an innoVAtIOn that addresseS some oF tHEsE PRobLemS. SpecificaLlY, we inTRoduced THe NOTIon OF the establishMent of a secuRIty Server ThAt cOMmunicAtes wItH An iNdependent pOp-up Window on tHe user'S Desktop THat is beIng useD to AccEss tHE wEbSitE. WE DesCRiBed HOw tHis securItY sErver Can aLERT The uSer, Via cOmmunIcations to the Pop-Up as TO thE legiTimacY of tHe Web siTe the uSer is BrOwsing via their bRowsEr. We also dEscRiBed HoW this POp-up wiNdoW caN providE a user wITh a OnE TIMe Password to enable loGiN INtO the web sIte (i.e. aUThEnTIcation oF tHe uSer tO THe webSite), BAsEd on a secRet shaREd BeTween thE wEb site AnD thE seCuritY ServEr. Of paRticular UtiliTY in this inventiON was that it proVIdED ThE SecuRitY of one time pAsswORds, bUt diD NoT reQUire a Per usEr SHaREd secret which all priOr One timE passWord systems haVe required.
tHE InnovatiOns dEScRIbed herein exteNd our Prior work tO Provide fOr (i) trAnsactioN authentiCATion, (ii) diFfeRenT haRdwARE aNd software forM FActoRs As substItuTes for tHe bRowSer BasEd Pop up, and (iIi) using aCcUmUlAtEd lOgin aND transacTiOn dAtA as An inpUT to a riSk manAgemEnT eNGinE. ClimatE CoNTRol sYsTeMs, alSo rEfErred To as hvAC Systems (The two terMs wILl be UsEd Herein iNterchangeablY), aRe employed To RegUlate tHE TemperatUre of premises, such as a resIDence, ofFicE, storE, warEhouse, vehIclE, trailEr, oR CommerCial or EnterTaInmENT venuE. tHe MosT bAsic climatE COntRol syStEms eIther moVe air (typically by meANs oF an air handler Or, oR morE COlLoqUIaLLy, a FaN Or bLOWer), heat air (typicAlly by meanS oF A fUrnace or heAT puMp) Or cool aIr (typicAlly bY Means of A compressOr-driven rEfRigeRANt lOop). A wall moUnted theRmostat is TYpicaLLy IncluDed In the cLiMatE contRol sysTEms To proVide soMe Level oF autoMaTic tempeRature control. In its simplEst forM, a theRmoStat turns The CLimAte controL sysTem on or off As a FunCtion Of a DEtectEd teMPeRatURe. In a More COmplex forM, A tHerMOStAt may take otHER FacTors, sUch AS humidIty oR time, into considerATion. Still, howevEr, thE OPerAtiON of a ThErmostat remainS tuRnING the climAtE control sysTem on or oFf IN an atTempt tO maintAin the tEMPeRAture oF the PreMises as clOse As POssible To A
 a voice phone call or a t ext messag e, is  apro mi sing  alt ernative, buti s al so to inconvenient and  cost ly to b e  u sed v ery oft e n. I t m ig ht  be  u s ef ul fo r t he high est valuetra ns actions, orr ar e events l ike  password re set s, but  u sin g  it f orlarge  numbe r  of tr ansaction si s tooc ostly a n d  c umbe rsome.
In prior w o rk (see the relat ed app li c at i o nside ntified ab ov e), w e  descri b ed a n  in n ovation thataddresses s o meof the se  pr o blems.  Spec if i cal ly, we intr oduc ed the no tion o f  the es t ablishm ent of  asec urit y  s er ver  t h atc om mun i cat es withan  i ndepe nden t p o p-up  wi ndow  on t he user's des kto p th a t i s bei ng us ed t oacces s thewebsi te . We describedhowthis secu rit yser ve r can alertthe  us er, via  commun i cat io n s to  the pop-up as toth e le gitimacy  of th e  w eb site the  u ser  isb r owsin g vi a  t heir bro wser.W eal so desc ri bed ho wthi s p op-up wind ow can  provide  a us e r with a one t i me password t o  e n a bl e  log ininto the we b si t e (i .e.a ut hen t icati on of  t h eu ser to the website) ,basedon asecret shared  between t h e web site  and th e  security serv er. O f particul a r utilit y inthis inv ention wa s that itpro vid edthe s ec urity of onet i me p as swords,  bu t did n otreq uir e a  p er user s hared se cr et  w hi chall p r ior oneti mepa ssw ord s y stemshaverequ ir ed . 
Th e innov a ti o n s de sc ri bedher ei n ext endo urprior w ork to pr ovi d e fo r(i ) trans action authen ti cation, (i i)  di fferen t hardware  and software form fact o rs as s ubs titut es f or the br ows er bas edp op up,  and ( iii)us ing a ccumu l a te d l og in and tra n s act ion d at a as  an inp ut to a risk manag e men t engine. Cli mat e co n t ro l s y st e ms,  a l sor e ferred to as HV AC systems  ( t he  two terms wil lbe used  herein  inte r changea bly), are  employed  t o re g u lat e the temp eratureof premis e s, su c has ares idence ,off ice,store, war ehous e, veh ic le, tr ailer ,or comme rcial or entertainmentvenue.  Themos t basic c lim a tecontrol s yste ms eithermov e a ir (t ypi c allyby m e an s o f  an a ir h a ndler or, or  mo r e  c olloquially , a  fa n orblo w er), h eatair (typically by means of a fur nace o r h eat pump )or cool air (t ypi ca l l y by mea ns  of a compr essor-dr iv e n ref rigera nt loo p). A w a l lm ounted  the rmo stat is t ypi ca l ly incl ud ed in the  cli ma te con trol s y stem s to provide somelevel o f aut o mat ic te mp erature cont rol. In it s simplestform,a th ermos tat tur ns  the c lim at e controls ystem onor of f as afu ncti onof a d etec t e d tem pera tu re.  In a mor e co m pl ex for m, a  ther mo stat  may take other fa cto r s, such  a s h u m idityo rt i me, into c ons idera t i on. Still, howe v er ,  theoperat ion of  a ther m ost at  remain s t u r ning theclimate c o ntr ol  sys tem on o roffin  an  a ttempt to maint ain thetemperat u r e of t hep remi s es ascl ose as possi ble t oa 
 a_voice phone_call or a text_message, is_a_promising alternative,_but_is also to_inconvenient and costly_to be used very_often. It might_be_useful for the highest value transactions, or rare events like password resets, but using_it_for large_number_of_transactions is too costly and_cumbersome.
In prior work (see the_related applications_identified above), we described an innovation that addresses_some_of these problems._Specifically, we introduced the notion of the establishment of_a security server that communicates with_an independent pop-up_window_on_the user's desktop that_is being used to access the_website. We described how this security_server can alert the user, via communications_to the pop-up as to the_legitimacy of the web site_the user_is browsing via their browser._We also described_how this_pop-up window can_provide a user with a one_time password to_enable login into the web site_(i.e._authentication of the_user_to_the website),_based on a_secret_shared between_the_web site and the security server._Of_particular utility in this invention was that_it provided the security_of_one time passwords, but_did not require a per_user shared secret which all prior_one time_password systems_have required.
The innovations described herein extend our prior work to provide_for (i) transaction authentication, (ii) different_hardware and software form_factors as_substitutes_for the browser_based_pop up,_and (iii) using accumulated login and transaction_data as_an input to a risk management_engine. Climate control systems,_also_referred to as HVAC systems (the_two terms will be used herein_interchangeably), are employed to regulate_the_temperature_of premises, such as a_residence, office, store, warehouse, vehicle, trailer,_or commercial or_entertainment venue. The most basic climate control_systems_either move air (typically by means_of_an air handler or, or more_colloquially,_a_fan or blower), heat air_(typically by means of a furnace_or heat pump) or cool air (typically by means_of a compressor-driven_refrigerant loop). A wall mounted_thermostat_is_typically included in the climate control systems to provide some_level of_automatic temperature control._In its simplest form, a thermostat turns the climate control_system on or off as a function_of a detected temperature. In a more complex form, a thermostat_may take other factors, such as humidity or_time, into consideration. Still, however, the operation_of a thermostat remains_turning_the climate control system on or off_in_an_attempt_to maintain the_temperature of the_premises as close_as possible_to a