Apparatus and method of controlling a security system

1. A method of controlling a security system by a computer device, comprising:

receiving, at a processor of the computer device, device metadata associated with a device in communication with a wireless communication access point;

determining, by the processor of the computer device, that the device metadata comprises matched device metadata based on a match with one of a plurality of previously-identified device metadata in a historical database that stores the plurality of previously-identified device metadata in association with one or more of a plurality of security breach events, and wherein each of the plurality of previously-identified device metadata is further associated with a corresponding one of a plurality of security breach probability values;

determining, by the processor of the computer device, that the matched device metadata corresponds with a security breach probability value of the plurality of security breach probability values that exceeds a security breach probability threshold;

generating an alert in response to determining that the matched device metadata corresponds with a security breach probability value that exceeds a security breach probability threshold; and

sending the alert to a security system device, wherein the alert is configured to initiate a security function.

2. The method of claim 1 , further comprising:

controlling the security system device, in response to the alert, to perform the security function.

3. The method of claim 2 , wherein the security function includes at least one of tracking movement of the device, capturing an image in a location of the device, transmitting a notification to the device, or transmitting a notification to another security system device.

4. The method of claim 1 , wherein receiving the device metadata associated with the device includes receiving one or any combination of a medium access control address, a Wi-Fi-specific identifier, a fingerprint of a set of information transmitted by the device, or a device-specific identifier.

5. The method of claim 1 , further comprising:

collecting a plurality of security breach event information corresponding to each of plurality of security breach events, wherein each of the plurality of security breach event information includes or is associated with a corresponding one of the plurality of previously-identified device metadata;

inputting the plurality of previously-identified device metadata and the plurality of security breach event information into a security breach probability determination model; and

generating, by the security breach probability determination model, each of the plurality of security breach probability values corresponding to each of the plurality of previously-identified device metadata.

6. The method of claim 5 , wherein the security breach probability determination model takes into account, for each of the plurality of previously-identified device metadata, at least one of a security breach count, a device location relative to an event location of a security breach event location, a movement path of the device, a repeated device movement pattern, a device direction of movement, or a corresponding identified device.

7. An apparatus for controlling a security system by a computer device, comprising:

a memory; and

a processor configured to:

receive device metadata associated with a device in communication with a wireless communication access point;

determine that the device metadata comprises matched device metadata based on a match with one of a plurality of previously-identified device metadata in a historical database that stores the plurality of previously-identified device metadata in association with one or more of a plurality of security breach events, and wherein each of the plurality of previously-identified device metadata is further associated with a corresponding one of a plurality of security breach probability values;

determine that the matched device metadata corresponds with a security breach probability value of the plurality of security breach probability values that exceeds a security breach probability threshold;

generate an alert in response to determine that the matched device metadata corresponds with a security breach probability value that exceeds a security breach probability threshold; and

send the alert to a security system device, wherein the alert is configured to initiate a security function.

8. The apparatus of claim 7 , wherein the processor is further configured to:

control the security system device, in response to the alert, to perform the security function.

9. The apparatus of claim 8 , wherein the security function includes at least one of tracking movement of the device, capturing an image in a location of the device, transmitting a notification to the device, or transmitting a notification to another security system device.

10. The apparatus of claim 7 , wherein to receive the device metadata associated with the device includes to receive one or any combination of a medium access control address, a Wi-Fi-specific identifier, a fingerprint of a set of information transmitted by the device, or a device-specific identifier.

11. The apparatus of claim 7 , wherein the processor is further configured to:

collect a plurality of security breach event information corresponding to each of plurality of security breach events, wherein each of the plurality of security breach event information includes or is associated with a corresponding one of the plurality of previously-identified device metadata;

input the plurality of previously-identified device metadata and the plurality of security breach event information into a security breach probability determination model; and

generate, by the security breach probability determination model, each of the plurality of security breach probability values corresponding to each of the plurality of previously-identified device metadata.

12. The apparatus of claim 11 , wherein the security breach probability determination model takes into account, for each of the plurality of previously-identified device metadata, at least one of a security breach count, a device location relative to an event location of a security breach event location, a movement path of the device, a repeated device movement pattern, a device direction of movement, or a corresponding identified device.

13. A non-transitory computer-readable medium comprising stored instructions of controlling a security system by a computer device, executable by a processor to:

receive, at a processor of the computer device, device metadata associated with a device in communication with a wireless communication access point;

determine, by the processor of the computer device, that the device metadata comprises matched device metadata based on a match with one of a plurality of previously-identified device metadata in a historical database that stores the plurality of previously-identified device metadata in association with one or more of a plurality of security breach events, and wherein each of the plurality of previously-identified device metadata is further associated with a corresponding one of a plurality of security breach probability values;

determine, by the processor of the computer device, that the matched device metadata corresponds with a security breach probability value of the plurality of security breach probability values that exceeds a security breach probability threshold;

generate an alert in response to determine that the matched device metadata corresponds with a security breach probability value that exceeds a security breach probability threshold; and

send the alert to a security system device, wherein the alert is configured to initiate a security function.

14. The method of claim 1 , wherein the historical database associates each security breach event with the received device metadata for each device within a zone of the security breach event when the event was detected.

15. The method of claim 1 , wherein the security breach event is theft of merchandise.