Web-cloud hosted unified physical security system

• US 10,554,758 B2
• Filed: 06/06/2016
• Issued: 02/04/2020
• Est. Priority Date: 06/15/2015
• Status: Active Grant

• Current Assignee: BluB0X Security, Inc.
• Original Assignee: BluB0X Security, Inc.
• Inventors: Barry, Patrick J., Dyer, Sean Erik, Goldshmid, Simon
• Primary Examiner(s): Haile, Benyam
• Assistant Examiner(s): Littlejohn, Jr., Mancil
• Application Number:
  US15/174,198
• Publication Number:
  US 20160364927A1
• Time in Patent Office: 1,338 Days
• Field of Search: 340 31, 340 431, 340 52, 340 533, 340 1225, 340 1229, 340 124
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G08B 25/10 using wireless transmission systems G08B25/009 takes precedence
• CPC Class Codes: H04L 41/0253 using browsers or web-pages for accessing management information
• CPC Class Codes: H04L 41/06 Management of faults, events, alarms or notifications
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences

Abstract

A system comprises a web-cloud security subsystem that hosts, manages, and analyzes data related to a plurality of hosted applications that provide at least one of physical access control, surveillance, alarm management, visitor management, and elevator management; at least one physical security subsystem that exchanges data with a corresponding hosted application of the web-cloud security subsystem; and a real-time control and monitoring device that provides secure access of the web-cloud security subsystem.

Claims

1. A system, comprising:

a web-cloud security subsystem that hosts, manages, controls, analyzes, and autonomously responds to data related to a plurality of hosted applications stored in a web cloud—

that provide at least one of physical access control, surveillance, alarm management, intrusion management, visitor management, vendor management, incident management, biometric identity, credential management, and elevator management;

a plurality of physical security subsystems external to the web cloud and that each exchanges data with a corresponding hosted security cloud application of the plurality of hosted security cloud applications of the web-cloud security subsystem through a unique communication path, wherein the applications exchange data in a sequence from the physical security subsystems to the web-cloud security subsystems that includes a first data having a first priority prior to a second data having a second priority even though the sequence is out-of-order such that the first data occurred after the second data, including in response to an interruption in the data exchange;

a real-time control and monitoring device that provides a secure, communication with the web-cloud security subsystem, for accessing, viewing, analyzing, and controlling aspects of the entire system, including a combination of resources, industrial, logical, identity, access, and permission data; and

a temporal reference device that synchronizes with a common clock to provide a temporal reference that is shared by the hosted security cloud applications as a common web-cloud temporal reference.

2. The system of claim 1 wherein the physical security subsystem and web-cloud security subsystem are at least one of monitored and controlled and actuated in real time by the real-time control and monitoring device.

3. The system of claim 1 wherein the web-cloud security subsystem unifies the hosted security cloud applications and is accessed through a single browser interface.

4. The system of claim 1 wherein the web-cloud security subsystem notifies users of at least one of alarms and alerts via at least one of email, short message service (SMS), audio, and webpage electronic communications.

5. The system of claim 1 wherein the web-cloud hosted applications share a common web-cloud database.

6. The system of claim 1, wherein a web-cloud component resides in a hosted cloud and communicates with at least one of the device controller of the physical security subsystem or a device controlled by the device controller via at least one of an internet connection and a wireless connection and a cellular connection and a hardwire LAN connection.

7. The system of claim 1 wherein a web-cloud component resides in an onsite server and communicates with the at least one of the physical security controller and device via at least one of an internet connection and a wireless connection and a cellular connection and a hardwire LAN connection.

8. The system of claim 1 wherein a hosted application of the web-cloud subsystem that provides the visitor management that includes an asset management application that at least one of detects and tracks and records and reports on the at least one of presence and location and status of mobile assets.

9. The system of claim 1 wherein an input is generated that simulates a physical security device or controller input of the at least one physical security subsystem in such a manner as to emulate a physical input to said physical device or controller.

10. The system of claim 1 wherein a physical security device, in response to being virtually simulated by the web-cloud security subsystem, produces the same response as would have been produced by a physical interaction.

11. The system of claim 1 wherein a physical security device or a plurality of devices are simulated in at least one of a manual, periodic, aperiodic, intermittent or continuous manner to assess a compliant operation related to the at least one physical security subsystem.

12. The system of claim 1 wherein the at least one physical security subsystem comprises a plurality of security devices, each corresponding to at least one of the hosted cloud applications.

13. The system of claim 1, wherein the system provides a set of permissions that may span the entire web-cloud and physical security subsystems, or be restricted to limited aspects of the systems.

14. The system of claim 1 further comprising a device controller in at least one of the physical security device and the web-cloud security subsystem.

24. The system of claim 1, wherein the web-cloud security subsystem hosts, manages, and analyzes a watch-list application of the hosted applications stored in a web cloud, wherein the system includes an analytics system, and wherein the watch-list application communicates with the analytics system to activate surveillance analytics for identifying or tracking a watch-list member.

25. The system of claim 24, wherein the analytics system analyzes identifiers of watch-list members by generating a set of descriptors for each identity to be searched for performing a comparison between stored user records of watch-list members.

26. The system of claim 1, further comprising a plurality of sensors for collecting presence data for a virtual mustering application of the hosted applications, wherein the presence data is output to an analytics system of the web-cloud security subsystem, where it is aggregated and analyzed to compute an occupancy estimate.

27. The system of claim 1, wherein the real-time control and monitoring device further comprises a virtual controller that executes network virtualization processes for monitoring and controlling a portal absent an external controller.

28. The system of claim 1, wherein the real-time control and monitoring device further comprises a security device controller that exchanges commands with local devices of the physical security subsystem that extend the web cloud.

29. The system of claim 1, further comprising a virtual identity credential and feedback that is exchanged via a data path determined by a command from a user electronic device, the path extending between the user electronic device, the web could, and a device controller of the physical security subsystem.

30. The system of claim 1, wherein controlling aspects of the entire system includes the delegation of control rights of a system or part of a system to a designated, separate entity.

15. A system comprising:

a physical security subsystem external to a web cloud, comprising;

at least one of a physical security device and a device controller;

a web-cloud security subsystem;

wherein data is produced by the at least one physical security subsystem and the web-cloud security subsystem, wherein the web-cloud security subsystem includes a temporal reference device that synchronizes with a common clock to provide a temporal reference that is used as a common web-cloud temporal reference throughout the system, and wherein the web-cloud security subsystem stores the data in the web cloud, wherein applications exchange data in a sequence from the physical security subsystems to the web-cloud security subsystems that includes a first data having a first priority prior to a second data having a second priority even though the sequence is out-of-order such that the first data occurred after the second data, including in response to an interruption in the data exchange; and

at least one real-time control and monitoring device that provides a real-time, secure, bi-directional communication with the web-cloud security subsystem, for accessing, viewing, analyzing, and controlling aspects of the entire system, including a combination of resources, industrial, logical, identity, access, and permission data; and

analytics reside within at least one of the physical security device and device controller and the web-cloud security subsystem and analyze at least one of physical security device data and device controller data and web-cloud data.

16. The system of claim 15 wherein the data produced from at least one physical security device, is analyzed by at least one of onboard device analytics, device controller analytics, cloud based application analytics and cloud based system analytics.

17. The system of claim 15 wherein physical security device data and analyzed data are passed from the cloud based system to at least one of a device controller and the physical security device.

18. The system of claim 15 wherein the data exchanged within or between the physical security subsystem and web-cloud security subsystem is analyzed and a result of analysis induces at least one of a notification from the web-cloud security subsystem and the at least one physical security subsystem.

19. The system of claim 15 wherein the data exchanged within or between the physical security subsystem and web-cloud security subsystem is analyzed and result of analysis induces at least one of a change of state in the web-cloud security subsystem and at least one component of the at least one physical security subsystem.

20. The system of claim 15 wherein a configuration of at least one of the hosted applications and physical security device controllers and physical security device and physical security sensor is determined as a result of analyzed data.

21. The system of claim 15, wherein analytics residing within at least one of an physical security device and a physical security device controller and the hosted web-cloud detects when a system component is at least one of not operating within specification and is operating anomalously and is operating intermittently and in response at least one of generates an alert and generates a corrective action and generates a prediction of future performance.

22. A system for analyzing data for virtual mustering, comprising:

a physical security subsystem, comprising;

a sensor for detecting an occupant;

a plurality of physical security subsystems external to a web cloud and that communicates with the sensor to register the presence of the occupant;

a web-cloud security subsystem that receives data collected from the sensor, and includes occupancy estimate analytics that analyzes the data to compute an occupancy result, wherein the web-cloud security subsystem includes a temporal reference device that synchronizes with a common clock to provide a temporal reference that is used as a common web-cloud temporal reference throughout the system, the web-cloud security subsystem analyzing the data related to a plurality of hosted security cloud applications stored in the web cloud, each physical security subsystem exchanging data with a hosted security cloud application through a unique communication path, wherein the applications exchange data in a sequence from the physical security subsystems to the web-cloud security subsystems that includes a first data having a first priority prior to a second data having a second priority even though the sequence is out-of-order such that the first data occurred after the second data, including in response to an interruption in the data exchange; and

at least one real-time control and monitoring device that provides a real-time, secure, bi-directional communication with the web-cloud security subsystem, for accessing, viewing, analyzing, and controlling aspects of the entire system, including a combination of resources, industrial, logical, identity, access, and permission data.

23. A system, comprising:

a web-cloud security subsystem internal to a web cloud that hosts, manages, and analyzes data related to applications of at least one of physical access control, surveillance, alarm management, intrusion management, visitor management, vendor management, incident management, biometric identity, credential management, and elevator management, the web-cloud security subsystem including a plurality of hosted applications, including a temporal reference device that synchronizes with a common clock to provide a temporal reference that is shared by the hosted applications as a common web-cloud temporal reference;

at least one physical security subsystem external to the web cloud that exchanges data with a corresponding hosted application of the web-cloud security subsystem through a unique communication path, and including a plurality of physical security devices each constructed and arranged to communicate with a hosted application, wherein the web-cloud security subsystem comprises a detection system that automatically detects the presence of newly added physical security devices and configures the new devices in accordance with prescribed protocols, wherein the applications exchange data in a sequence from the physical security subsystems to the web-cloud security subsystems that includes a first data having a first priority prior to a second data having a second priority even though the sequence is out-of-order such that the first data occurred after the second data, including in response to an interruption in the data exchange; and

at least one real-time control and monitoring device that provides real-time, secure, bi-directional communication with the web-cloud security subsystem, for accessing, viewing, analyzing, and controlling aspects of the entire system, including a combination of resources, industrial, logical, identity, access, and permission data.