Security badge for automated access control and secure data gathering

• US 5,960,085 A
• Filed: 04/14/1997
• Issued: 09/28/1999
• Est. Priority Date: 04/14/1997
• Status: Expired due to Term

• Current Assignee: Southwest Technology Innovations LLC
• Original Assignee: Carlos De La Huerga
• Inventors: De La Huerga, Carlos
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/834,634
• Time in Patent Office: 897 Days
• Field of Search: 380/4, 380/9, 380/23, 380/24, 380/25, 380/49, 380/50, 380/59, 380/30, 235/379, 235/380, 235/382, 395/186, 395/187.01, 395/188.01, 340/825.31, 340/825.34, 340/825.54, 342/42, 342/44
• US Class Current: 340/5.61
• CPC Class Codes: A61J 1/1437 Locking means requiring key or combination to open the container
• CPC Class Codes: A61J 2205/60 using magnetic or electronic identifications, e.g. chips, RFID, electronic tags
• CPC Class Codes: A61J 2205/70 Audible labels, e.g. for pre-recorded info or messages
• CPC Class Codes: A61J 7/0084 for multiple medicaments
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 10/65 stored on portable record carriers, e.g. on smartcards, RFID tags or CD
• CPC Class Codes: G16H 20/13 delivered from dispensers
• CPC Class Codes: G16H 40/20 for the management or administration of healthcare resources or facilities, e.g. managing hospital staff or surgery rooms

Abstract

A system utilizing a personal identification badge to collect data and to provide access to a computer terminal. The personal identification badge includes circuitry and transceiver components for transmitting identification information and exchanging other digital information with a computer terminal and other compatible devices. The personal identification badge establishes a wireless communication link with a computer terminal to allow a user to logon to the terminal. When a user leaves the computer terminal, the communication link is terminated, causing the computer terminal to lock the keyboard, blank the monitor, and/or logoff the user if the communication link is not restored within a sufficient time period. The personal identification badge includes means for encrypting and signing digital information. Adapted for use within a hospital, the system provides further means for establishing an affiliation between a personal identification badge and a patient, for collecting digital information from electronic devices that record or gather data regarding the status of a patient, for digitizing and recording dictation spoken into the personal identification badge, and for modifying the digital information so collected to conform to standards, such as those of a Java applet or the hypertext markup language, for interactive display on a universal display browser.

Claims

1. A method of initiating and maintaining access between a person having a mobile transceiver and data buffering device and an electronic system containing information and connected to a compatible transceiver device, said method comprising the steps of:

a. authenticating said mobile transceiver and data buffering device with said electronic system;

b. upon successful completion of said authenticating step, initiating access by one of at least said person and said mobile transceiver and data buffering device to said electronic system;

c. intermittently generating recommitment signals in said electronic system; and

d. receiving said recommitment signal in said mobile transceiver and data buffering device and transmitting a recommitment response signal to said electronic system in response thereto, thereby maintaining access to said electronic system.

2. The method according to claim 1, further comprising the step of terminating access to said electronic system if said electronic system does not receive said recommitment response signal after one of at least a first preset time period and a first preset number of unanswered recommitment signals.

3. The method according to claim 1, further comprising the step of suspending access to said electronic system if said electronic system does not receive said recommitment response signal after one of at least a first preset time period and a first preset number of unanswered recommitment signals.

4. The method claim 3, wherein the step of suspending access to said electronic system is implemented by interrupting input to and output from a computer terminal in communication with said electronic system.

5. The method according to claim 3, further comprising the step of restoring access to said electronic system if said electronic system does receive said recommitment response signal after one of at least a first preset time period and a first preset number of unanswered recommitment signals but before one of at least a greater second preset time period and a greater second preset number of unanswered recommitment signals.

6. The method according to claim 5, further comprising the step of terminating access to said electronic system if said electronic system does not receive said recommitment response signal after one of at least said second preset time period and said second preset number of unanswered recommitment signals.

7. The method of claim 2 or claim 6, wherein said electronic system comprises a computer network including a computer terminal having temporary storage.

8. The method of claim 7, further comprising the step of conditioning access upon said person'"'"'s entry of a password.

9. The method of claim 7, further comprising the steps of enlarging the connection between said computer terminal and said computer network when access is initiated and restricting the connection between said computer terminal and said computer network when access to said electronic system is terminated.

10. The method of claim 7, further comprising the step of removing any said information remaining in said temporary storage of said computer terminal provided that access to said computer network is terminated.

11. The method of claim 7, wherein said electronic system and said mobile transceiver and data buffering device employ public key cryptography.

12. The method of claim 7, further comprising the step of providing access through an interactive browser interface on said computer terminal.

13. A mobile transceiver and data buffering device for staff and data authentication and capable of sharing digital information with a compatible transceiver device, said transceiver and data buffering device comprising:

a. a processor;

b. means associated with said processor for receiving an interrogation signal transmitted over a wireless medium from said compatible transceiver device;

c. means associated with said processor for transmitting an authenticating response over a wireless medium to said compatible transceiver device, said authenticating response being responsive to said interrogation signal;

d. means associated with said processor for receiving intermittent recommitment signals generated by said said compatible transceiver device; and

e. means associated with said processor for transmitting a recommitment response signal to said compatible transceiver device in response thereto, thereby maintaining access to said compatible transceiver device.

14. A controlled-access information system comprising:

a. a mobile transceiver and data buffering device for staff and data authentication, said transceiver and data buffering device comprising;

a processor;

means associated with said processor for receiving an interrogation signal transmitted over a wireless medium from a compatible transceiver device;

means associated with said processor for transmitting an authenticating response over a wireless medium to said compatible transceiver device, said authenticating response being responsive to said interrogation signal;

means associated with said processor for receiving intermittent recommitment signals generated by said said compatible transceiver device; and

means associated with said processor for transmitting a recommitment response signal to said compatible transceiver device in response thereto; and

b. a compatible transceiver device connected to said information system and in communication with said mobile transceiver and data buffering device.

15. The controlled-access information system of claim 14, further comprising means for terminating access to said information system if said information system does not receive said recommitment response signal after one of at least a first preset time period and a first preset number of unanswered recommitment signals.

16. The controlled-access information system of claim 14, further comprising means for suspending access to said information system if said information system does not receive said recommitment response signal after one of at least a first preset time period and a first preset number of unanswered recommitment signals.

17. The controlled-access information system of claim 16, further comprising means for restoring access to said information system if said information system does receive said recommitment response signal after one of at least a first preset time period and a first preset number of unanswered recommitment signals but before one of at least a greater second preset time period and a greater second preset number of unanswered recommitment signals.

18. The controlled-access information system of claim 17, further comprising means for terminating access to said information system if said information system does not receive said recommitment response signal after one of at least said second preset time period and said second preset number of unanswered recommitment signals.

19. The controlled-access information system of claim 15 or claim 18, wherein said information system comprises a computer network including a computer terminal having a data storage device.

20. The controlled-access information system of claim 19, further comprising means for accepting entry of a password.

21. The controlled-access information system of claim 19, further comprising means for enlarging the connection between said computer terminal and said computer network when access is initiated and restricting the connection between said computer terminal and said computer network when access to said information system is terminated.

22. The controlled-access information system of claim 21, wherein said mobile transceiver and data buffering device weighs less than five kilograms and is substantially suitable for attachment to an article of apparel.

23. The controlled-access information system of claim 19, further comprising means in said mobile transceiver and data buffering device for digitally signing communications to be transmitted to said data storage device through said transmission means.

24. A mobile transceiver and data buffering device for staff and data authentication and communication with a plurality of smart devices, said mobile transceiver and data buffering device comprising:

a. means for identifying a wearer of said mobile transceiver and data buffering device;

b. a memory for storing information;

c. means for receiving information carried on a wireless medium for storage to said memory, whereby said plurality of smart devices may communicate with said mobile transceiver and data buffering device;

d. means for transmitting information from said memory over a wireless medium, whereby said mobile transceiver and data buffering device may communicate with said plurality of smart devices;

e. means for identifying a first smart device in proximity with said transceiver and data buffering device;

f. means for automatically extracting information from said first smart device;

g. means for transmitting said information to a data storage device with which said mobile transceiver and data buffering device is in proximity, whereby information contained in a smart device is uploaded substantially automatically to said mobile transceiver and data buffering device, and later downloaded to said data storage device.

25. The mobile transceiver and data buffering device of claim 24, wherein said plurality of smart devices comprise devices selected from the group consisting of computers, instruments, monitors, and treatment devices in a hospital.

26. The mobile transceiver and data buffering device of claim 24, wherein said data storage device comprises a computer terminal.

27. The mobile transceiver and data buffering device of claim 26, wherein said information is associated in said mobile transceiver and data buffering device with a circumstance selected from the group consisting of the date when said information was transmitted to said mobile transceiver and data buffering device, the time when said information was transmitted to said mobile transceiver and data buffering device, the identity of a patient with which said first smart device was associated, and the identity of said wearer of said mobile transceiver and data buffering device.

28. The mobile transceiver and data buffering device of claim 27, further comprising means for generating a message to said smart device indicative of the circumstance with which said information is associated.

29. The mobile transceiver and data buffering device of claim 26, further comprising:

means for alerting the wearer to impending receipt of information from said first smart device;

means for permitting the wearer to indicate acceptance of said information from said first smart device.

30. The mobile transceiver and data buffering device of claim 29, further comprising means of digitally signing data records to be transmitted to said data storage device through said transmission means, whereby said data storage device is enabled to authenticate said mobile transceiver and data buffering device as the source of said information.

31. The mobile transceiver and data buffering device of claim 26, wherein said information is received from said first smart device by said transceiver and data buffering device and formatted for storage as a data record in a standardized format.

32. The mobile transceiver and data buffering device of claim 31, wherein said standardized format is the hypertext markup language.