Service oriented security device management network

• US 20060282886A1
• Filed: 06/09/2006
• Published: 12/14/2006
• Est. Priority Date: 06/09/2005
• Status: Abandoned Application

• Current Assignee: Lockheed Martin Corporation (Martin Marietta Corporation)
• Original Assignee: Lockheed Martin Corporation (Martin Marietta Corporation)
• Inventors: Gaug, Mark
• Application Number:
  US11/449,657
• Publication Number:
  US 20060282886A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A service oriented security device management system is disclosed. The management system may include a control center coupled to a network, a service oriented security device network interface coupled to a network and a security device interface module coupled to a security device. The control center may include a business logic rules module configured to determine a need to provide or consume a service and a service oriented architecture messaging module configured to send a message requesting a service and to send a message responding to a request for service. The security device interface module may include a service oriented architecture communications module configured to communicate with the service oriented architecture messaging module of the at least one control center via the network and a business rules engine coupled to the service oriented architecture communications module. The security device interface module may include a functional software module coupled to the business rules engine and a translator software module coupled to the business rules engine.

Claims

1. An interface for coupling a security device to a service oriented management network, the interface comprising:

a service oriented security device network interface module configured to provide system access protection for the security device and message routing for each security device coupled to the interface; and

a security device interface module coupled to the service oriented security device network interface module, the security device interface module including;

a service oriented architecture communications module coupled to the service oriented security device network interface module;

a rule engine coupled to a database and the service oriented architecture communications module;

at least one functional software module couple to the rule engine and configured to provide a security device service; and

at least one translator software module coupled to the rule engine and to the security device and configured to translate data or commands in a control center format into a format suitable for use in the security device, wherein the rule engine is configured to control the routing of an internal message to the at least one functional software module or the at least one translator software module based on a script, and

wherein the interface is configured to automatically couple additional security devices to the service oriented management network and automatically remove a security device from the service oriented management network.

2. The interface of claim 1, wherein the security device is disposed in an airport.

3. The interface of claim 1, wherein the interface is disposed within the security device.

4. The interface of claim 1, wherein the interface is disposed in an external device capable of network communications with the security device.

5. The interface of claim 1, wherein the security device service is selected from one of a property management service, a hardware inventory service, a software inventory service, a software distribution service, a configuration management service, a remote diagnostic service, an alarm notification service, an alarm escalation service, a data archiving service, a remote access service, a user authentication service, an auditing service, a command signal routing service, a remote configuration service, a threat image insertion management service, a security device screener accuracy scoring service, a staged storage service, security device performance interpretation and reporting service, a remote viewing service, a threat data management service, a security device threat library update service, a screener performance measurement and efficiency reporting service, a communication service, a remote passenger information database linking service, an image linking service, a software update service, a remote control service, a security device command and control service, a diagnostic gathering service, a remote training service, an information storing and queuing service, a security device configuration service, a report generation service, a remote desktop sharing service, a security device utilization reporting service, a security device performance reporting service, a central command center data communication service, an operator keystroke capturing and reporting service, a remote restart service, a screener tracking and time keeping service, a traveler identification information gathering and comparison service, and a data encryption service.

6. A security device management system comprising:

at least one control center coupled to a network, the control center including;

a business logic rules module configured to determine a need to provide or consume a service; and

a service oriented architecture messaging module configured to send a message requesting a service and to send a message responding to a request for service;

at least one service oriented security device network interface coupled to the network; and

at least one security device interface module coupled to the at least one service oriented security device network interface, the at least one security device interface module including;

a service oriented architecture communications module configured to communicate with the service oriented architecture messaging module of the at least one control center via the network;

a business rules engine coupled to the service oriented architecture communications module;

at least one functional software module coupled to the business rules engine; and

at least one translator software module coupled to the business rules engine.

7. The security device management system of claim 6, wherein the at least one service oriented security device network interface and the at least one security device interface module are each configured to automatically couple one or more security devices to the network.

8. The security device management system of claim 6, wherein the at least one security device interface module further includes a module for adding a newly connected security device to the security device management system.

9. The security device management system of claim 6, wherein additional capabilities may be added to the at least one control center by adding a service oriented object to the at least one control center and modifying a script in the business logic rules module.

10. The security device management system of claim 6, wherein additional capabilities may be added to the at least one security device interface module by adding a service oriented object to the at least one security device interface module and modifying a script in the business rules engine.

11. The security device management system of claim 6, wherein the system is configured to monitor the status of at least one security device and collect information associated with the at least one security device using a service oriented architecture to establish communications between the control center and the at least one security device.

12. The security device management system of claim 6, wherein the system is configured to automatically remove a security device from the network.

13. A method of managing a network of security devices using a service oriented architecture, the method comprising:

identifying at least one security device and associating at least one individually addressable network object with the at least one security device;

providing a service including the at least one individually addressable network object and a business rule engine having at least one script; and

monitoring the at least one security device from at least one control center by using the service provided by the at least one individually addressable network object and the at least one script.

14. The method of claim 13, further comprising a service discovery mechanism such that the at least one control center and the at least one security device may obtain a listing of services available.

15. The method of claim 13, further comprising providing an automatic introduction mechanism such that when a new security device is added to the network of security devices, its location and identity may be automatically retrieved by the at least one control center using a service oriented messaging system.

16. The method of claim 13, further comprising removing a compromised or defective service or security device from the network.

17. A security device monitoring node for use in a service oriented architecture, the security device monitoring node adapted to associate at least one individually addressable network object with at least one security device, to provide a service including the at least one individually addressable network object and a business rule engine having at least one script, and to permit the at least one security device to be monitored from a control center by using the service provided by the at least one individually addressable network object and the at least one script.

18. The security device monitoring node of claim 17, wherein the service is selected from one of a property management service, a hardware inventory service, a software inventory service, a software distribution service, a configuration management service, a remote diagnostic service, an alarm notification service, an alarm escalation service, a data archiving service, a remote access service, a user authentication service, an auditing service, a command signal routing service, a remote configuration service, a threat image insertion management service, a security device screener accuracy scoring service, a staged storage service, security device performance interpretation and reporting service, a remote viewing service, a threat data management service, a security device threat library update service, a screener performance measurement and efficiency reporting service, a communication service, a remote passenger information database linking service, an image linking service, a software update service, a remote control service, a security device command and control service, a diagnostic gathering service, a remote training service, an information storing and queuing service, a security device configuration service, a report generation service, a remote desktop sharing service, a security device utilization reporting service, a security device performance reporting service, a central command center data communication service, an operator keystroke capturing and reporting service, a remote restart service, a screener tracking and time keeping service, a traveler identification information gathering and comparison service, and a data encryption service.