Integrated visualization of security information for an individual

• US 7,145,457 B2
• Filed: 07/09/2004
• Issued: 12/05/2006
• Est. Priority Date: 04/18/2002
• Status: Expired due to Fees

• Current Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Original Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Inventors: Abrams, Howard A., Spitz, Charles F.
• Primary Examiner(s): TRIEU, VAN THANH
• Application Number:
  US10/887,972
• Publication Number:
  US 20050099288A1
• Time in Patent Office: 879 Days
• Field of Search: 340/572.1, 340/572.4, 340/572.7, 340/539.1, 340/539.11, 340/539.13, 340/539.19, 340/539.26, 340/505, 340/10.01, 340/286.02, 381/115, 707/3, 715/745
• US Class Current: 340/572.1
• CPC Class Codes: G06K 17/00 Methods or arrangements for effecting co-operative working between equipments covered by two or more of main groups G06K1/00 - G06K15/00, e.g. automatic card files incorporating conveying and reading operations
• CPC Class Codes: G07C 1/10 together with the recording, indicating or registering of other data, e.g. of signs of identity
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence

Abstract

A security method including receiving data from devices and normalizing the received data based on uniquely identified objects.

Claims

1. A security method comprising:

receiving equipment usage data indicating access to a network asset, the equipment usage data associated with a uniquely identified object;

receiving physical access data identifying the physical location of the uniquely identified object from at least one physical security device; and

normalizing said received equipment usage data and physical access data based on the uniquely identified object; and

storing the equipment usage data and physical access data in a record associated with the uniquely identified object.

2. The security method of claim 1 further comprising:

statistically evaluating at least one of the equipment usage data and physical access data; and

using the statistically evaluated data to determine if predetermined rules have been broken.

3. The security method of claim 1, wherein the at least one physical security device comprises a badge reader at an access point.

4. The security method of claim 1, wherein the equipment usage data comprises data indicating usage by a user of a piece of equipment selected from the group consisting of a telephone, a computer, a fax machine, and a copy machine.

5. The security method of claim 1, wherein the uniquely identified object comprises a person, and wherein said normalizing comprises:

identifying the person associated with the equipment usage data and physical access data; and

correlating the equipment usage data and physical access data based on the identified person.

6. The security method of claim 5, wherein said uniquely identified object comprises a particular individual, the equipment usage data relates to usage by the particular individual of a computer, and the physical security device comprises a badge reader.

7. The method of claim 1, further comprising accessing a database, in response to receiving at least one of the equipment usage data and the physical access data, to find personnel information associated with a person.

8. The method of claim 7, further comprising:

receiving a user command; and

in response to the user command, generating a report summarizing the equipment usage data and the physical access data.

9. A security monitoring system comprising:

a network asset operable to transmit equipment usage data associated with a uniquely identified object;

at least one physical security device operable to transmit physical access data identifying the physical location of the uniquely identified object; and

a processor operable to;

receive the equipment usage data and physical access data; and

normalize the equipment usage data and physical access data based on the uniquely identified object; and

a database for storing the equipment usage data and physical access data in a record associated with the uniquely identified object.

10. The security monitoring system of claim 9 wherein the processor is further operable to:

statistically evaluate at least one of the equipment usage data and physical access data; and

use the statistically evaluated data to determine if predetermined rules have been broken.

11. The security monitoring system of claim 9, wherein the at least one physical security device comprises a badge reader at an access point.

12. The security monitoring system of claim 9, wherein the equipment usage data comprises data indicating usage by a user of the network asset, the network asset selected from the group consisting of a telephone, a computer, a fax machine, and a copy machine.

13. The security monitoring system of claim 9, wherein the uniquely identified object comprises a person, and wherein the processor is further operable to:

identify the person associated with the equipment usage data and physical access data; and

correlate the equipment usage data and physical access data based on the identified person.

14. The security monitoring system of claim 9, wherein:

the uniquely identified object comprises a particular individual;

the network asset comprises a computer and the equipment usage data relates to usage by the particular individual of the computer; and

the physical security device comprises a badge reader.

15. Logic for providing security within an enterprise, the logic encoded in a medium and operable to:

receive equipment usage data indicating access to a network asset, the equipment usage data associated with a uniquely identified object;

receive physical access data identifying the physical location of the uniquely identified object from at least one physical security device; and

normalize said received equipment usage data and physical access data based on the uniquely identified object; and

store the equipment usage data and physical access data in a record associated with the uniquely identified object.

16. The logic of claim 15 further operable to:

statistically evaluate at least one of the equipment usage data and physical access data; and

use the statistically evaluated data to determine if predetermined rules have been broken.

17. The logic of claim 15, wherein the logic is operable to receive the physical access data from a physical security device comprising a badge reader at an access point.

18. The logic of claim 15, wherein the logic is operable to receive equipment usage data comprising data indicating usage by user of a piece of equipment selected from the group consisting of a telephone, a computer, a fax machine, and a copy machine.

19. The logic of claim 15, wherein the uniquely identified object comprises a person, and wherein the logic is further operable to:

identify the person associated with the equipment usage data and physical access data; and

correlate the equipment usage data and physical access data based on the identified person.

20. The logic of claim 15, wherein the uniquely identified object comprises a particular individual, the equipment usage data relates to usage by the particular individual of a computer, and the physical security device comprises a badge reader.