System for integrating security and access for facilities and information systems

• US 7,752,652 B2
• Filed: 11/08/2007
• Issued: 07/06/2010
• Est. Priority Date: 07/16/2001
• Status: Expired due to Term

• Current Assignee: Lenel Systems International Incorporated (Honeywell International Inc.)
• Original Assignee: Lenel Systems International Incorporated (Honeywell International Inc.)
• Inventors: Regelski, Michael, Prokupets, Rudy
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): POLTORAK, PIOTR
• Application Number:
  US11/983,322
• Publication Number:
  US 20080083018A1
• Time in Patent Office: 971 Days
• Field of Search: None
• US Class Current: 726/2
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence

Abstract

A system for integrating security and access for facilities and information systems is provided including a computer server, information systems, and facility protection systems. The information systems and facility protection systems are coupled for communication to the computer server via a network. Facility protection systems represent an access control system for controlling entry/exit to areas of buildings, such as with badges or other ID Credentials and other systems, such as intrusion detection and fire systems, to provide protection in facility environments. Information systems each represent a computer system requiring user authorization, via computers or terminals capable of connecting thereto, to access information resources or network environments protected by the computer system. Information systems may also include information protection systems requiring user authorization for external access to other information systems. The computer server has a central database which stores at least information defining users and their access privileges to the information systems and to areas of facilities controlled by access control system. Each of the information systems and facility protection systems sends event data to the computer server when an event occurs on its respective system, and an event transaction processor in the computer server determines action(s), if any, to take in response to one or more received events and accordingly sends action data to other information systems and facility protection systems to instruct such systems to automatically respond to security risks representing by such events in real-time. Central management of users and their access privileges, and monitoring of events is further provided.

Claims

1. A security system for integrating security and access for facility protection systems and information systems in which each information system represents a computer system requiring user authorization at connected computers or terminals to access information resources or network environment protected by the information system, said security system comprising:

a computer system coupled for communication with one or more facility protection systems and one or more information systems, in which said computer system has memory storing at least user data and access privileges of users to said one or more information systems and said one or more facility protection systems, and said access privileges are capable of being assigned or updated when the user data is added, modified, or deleted in said memory; and

said computer system being capable of receiving event data from said one or more facility protection systems and said one or more information systems, and being operative to send action data in accordance with one or more of said received events for directing said one or more facility protection systems or said one or more information system to take one or more actions.

2. The system according to claim 1 wherein said one or more information systems are capable of being directed to take one or more actions in accordance with one or more said received events from at least one of said one or more facility protection systems.

3. The system according to claim 1 wherein at least one of said one or more facility protection systems controls user access to areas of a facility, and said access privileges for each of the users comprises at least authorization information for access to said one or more of said information systems, and information representing one of different levels of access to said areas of the facility.

4. The system according to claim 1 wherein said user data comprises information characterizing at least each of said users as being one of different types, in which said access privileges of each of the users are in accordance with said user data of the user.

5. The system according to claim 1 wherein at least one of said one or more facility protection systems controls user access to areas of a facility, and other of said facility protection systems comprise one or more of an intrusion detection system, a fire system, a building automation system, a personal safety system, or a digital video recording and surveillance system.

6. The system according to claim 1 wherein said facility protection systems comprise at least an access control system which controls user access to areas of a facility.

7. The system according to claim 6 wherein said access control system comprises one or more readers for reading ID credentials associated with each of the users to obtain information uniquely associated with each of the users, said access privileges of the users are associated with the information of each of the users, and said user data stored in memory of said computer system are not added, modified or deleted when said information is read by said one or more readers.

8. The system according to claim 7 wherein said ID credentials represent one or more of badges, smart cards, tokens, or biometric information.

9. The system according to claim 7 wherein said information for each of said ID credentials represents at least an identifier uniquely associated with the user of the ID credential.

10. A method for integrating security and access for at least one facility protection system and at least one information system comprising the steps of:

providing a computer system coupled for communication with said facility protection system and said information system in which said computer system has memory storing at least user data and access privileges of users to said information system and said facility protection system;

assigning or updating the access privileges in said memory when the user data is added, modified, or deleted in said memory;

sending to said computer system one or more events from one or more of said facility protection system and said information system; and

sending one or more actions from said computer system to one or more of said facility protection system and said information system in accordance with one or more of said events for directing said one or more of said facility protection system and said information system to take one or more actions.

11. The method according to claim 10 wherein said facility protection system represents an access control system which controls user access to areas of a facility.

12. The method according to claim 11 wherein said access control system comprises one or more readers, and said method further comprises:

reading ID credentials associated with each of the users by said one or more readers to obtain information uniquely associated with each of the users, said access privileges of the users are associated with the information of each of the users, and said user data stored in memory of said computer system are not added, modified or deleted when said information is read by said one or more readers.

13. The method according to claim 10 wherein said facility protection system represents one of a plurality of facility protection systems.

14. The method according to claim 13 wherein at least one of said plurality of facility protection systems controls user access to areas of a facility, and other of said facility protection systems comprise one or more of an intrusion detection system, a fire system, a building automation system, a personal safety system, or a digital video recording and surveillance system.

15. The method according to claim 10 wherein said information system represents a computer system requiring user authorization at connected computers or terminals to access information resources or network environment protected by the information system.

16. The method according to claim 10 wherein said information system represents one of a plurality of information systems.