Interactive key control system and method of managing access to secured locations

• US 7,861,314 B2
• Filed: 12/10/2009
• Issued: 12/28/2010
• Est. Priority Date: 08/10/2000
• Status: Expired due to Term

• Current Assignee: Shield Security Systems LLC
• Original Assignee: Shield Security Systems LLC
• Inventors: McMillin, Leslie S., Serani, Scott M., Blish, Charles D. III
• Primary Examiner(s): SMITHERS, MATTHEW
• Application Number:
  US12/634,832
• Publication Number:
  US 20100115626A1
• Time in Patent Office: 383 Days
• Field of Search: 702/64
• US Class Current: 726/27
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G07C 2209/04 Access control involving a hierarchy in access rights
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10T 70/65 Central control

Abstract

A security system associated with places physically protected by corresponding security mechanisms used to gain physical entry to the places by security mechanism users is managed using a searchable database that stores information on a plurality of places, a plurality of security mechanisms, and a plurality of security mechanism users. Program code provides access to the searchable database and interacts with database users using an Internet-accessible web site. The program code further authenticates each database user attempting to connect to the searchable database, and after authentication, interactively communicates a plurality of screens to database users, where each screen includes only hotlinks associated with security management operations for which those database users are authorized such that the screens do not include any hotlinks associated with security management operations for which the database users are not authorized.

Claims

1. An apparatus configured to manage a security system associated with places physically protected by corresponding locks and physical keys used by key users to gain physical entry to the places via the locks, the apparatus configured to access at least one searchable database that stores information on a plurality of places, a plurality of physical keys, and a plurality of key users, the apparatus comprising:

at least one processor; and

program code configured to be executed by the at least one processor to provide access to the at least one searchable database by a plurality of database users by;

interacting with database users using an Internet-accessible web site;

authenticating each database user attempting to connect to the at least one searchable database over the Internet through the web site by receiving a password from such database user and comparing the received password to a stored password associated with such database user;

after authenticating a first database user among the plurality of database users, interactively communicating a plurality of screens to the first database user over the Internet, wherein each of the plurality of screens includes at least one hotlink configured to initiate a security management operation responsive to input directed thereto by the first database user, including communicating screens with hotlinks associated with security management operations for which the first database user is authorized such that the screens communicated to the first database user do not include any hotlinks associated with security management operations for which the first database user is not authorized; and

in response to input from the first database user and directed to a selected hotlink on one of the plurality of screens, performing a first security management operation associated with the selected hotlink, wherein performing the first security management operation includes searching the at least one searchable database and generating a custom search result screen for display to the first database user, the custom search result screen including information retrieved from the at least one searchable database and at least one hotlink to configured to perform a second security management operation that is related to the first security management operation.

2. The apparatus of claim 1, wherein the first security management operation searches the at least one searchable database for a physical key, and wherein the program code is configured to generate the custom search result screen by generating hotlinks on the custom search result screen that link to additional data for each place and each key user associated with the physical key.

3. The apparatus of claim 1, wherein the first security management operation searches the at least one searchable database for a key user, and wherein the program code is configured to generate the custom search result screen by generating hotlinks on the custom search result screen that link to additional data for each place and each physical key associated with the key user.

4. The apparatus of claim 1, wherein the first security management operation searches the at least one searchable database for a place, and wherein the program code is configured to generate the custom search result screen by generating hotlinks on the custom search result screen that link to additional data for each physical key and each key user associated with the place.

5. An apparatus configured to manage a security system associated with places physically protected by corresponding security mechanisms used to gain physical entry to the places by security mechanism users, the apparatus configured to access at least one searchable database that stores information on a plurality of places, a plurality of security mechanisms, and a plurality of security mechanism users, the apparatus comprising:

at least one processor; and

program code configured to be executed by the at least one processor to provide access to the at least one searchable database by a plurality of database users by;

interacting with database users using an Internet-accessible web site;

authenticating each database user attempting to connect to the at least one searchable database over the Internet through the web site by receiving a password from such database user and comparing the received password to a stored password associated with such database user;

after authenticating a first database user among the plurality of database users, interactively communicating a plurality of screens to the first database user over the Internet, wherein each of the plurality of screens includes at least one hotlink configured to initiate a security management operation responsive to input directed thereto by the first database user, including communicating screens with hotlinks associated with security management operations for which the first database user is authorized such that the screens communicated to the first database user do not include any hotlinks associated with security management operations for which the first database user is not authorized; and

in response to input from the first database user and directed to a selected hotlink on one of the plurality of screens, performing the security management operation associated with the selected hotlink, wherein performing the security management operation includes updating the at least one searchable database to associate a security mechanism from among the plurality of security mechanisms with at least one of a place among the plurality of places and a security mechanism user among the plurality of security mechanism users.

6. The apparatus of claim 5, wherein the program code is configured to interactively communicate the plurality of screens to the first database user by generating a custom screen for the first database user based upon access rights associated with the first database user.

7. The apparatus of claim 5, wherein the program code is configured to interactively communicate the plurality of screens to the first database user by selecting a screen variation from among a plurality of screen variations based upon access rights associated with the first database user.

8. The apparatus of claim 7, wherein a first screen variation among the plurality of screen variations allows data to be viewed and altered, and wherein a second screen variation among the plurality of screen variations allows the data to be viewed but not altered.

9. The apparatus of claim 5, wherein the program code is further configured to, in response to input from the first database user and directed to a second selected hotlink on one of the plurality of screens, perform a second security management operation associated with the second selected hotlink, the second security management operation configured to create a screen variation for use by at least one database user by setting privileges for a plurality of fields.

10. The apparatus of claim 9, wherein the second security management operation is further configured to define at least one data delimiter privilege when creating the screen variation.

11. The apparatus of claim 5, wherein the program code is configured to allow the first database user to perform functions including viewing, adding, modifying, and deleting information in the at least one searchable database.

12. The apparatus of claim 5, wherein the stored information on the security mechanisms further comprises information on tangible security items.

13. The apparatus of claim 5, wherein the stored information on the security mechanisms further comprises information on intangible security items.

14. The apparatus of claim 5, wherein the program code is further configured to, in response to input from the first database user and directed to a second selected hotlink on one of the plurality of screens, perform a second security management operation associated with the second selected hotlink, the second security management operation configured to generate a screen including information related to one of the security mechanisms which has been found.

15. The apparatus of claim 5, wherein the program code is further configured to, in response to input from the first database user and directed to a second selected hotlink on one of the plurality of screens, perform a second security management operation associated with the second selected hotlink, the second security management operation configured to generate a screen including information related to one of the security mechanisms which has been lost or stolen.

16. The apparatus of claim 5, wherein the program code is further configured to maintain the information in the at least one searchable database in a real time mode.

17. The apparatus of claim 5, wherein the program code is further configured to maintain current and historical data on each of the places, the security mechanisms, and the security mechanism users.

18. The apparatus of claim 5, wherein the program code is configured to update the at least one searchable database in real time in response to input from the first database user such that an update to information stored in the at least one searchable database by the first database user is accessible to a second database user upon updating of the at least one searchable database.

19. An apparatus configured to manage a security system associated with places physically protected by corresponding security mechanisms used to gain physical entry to the places by security mechanism users, the apparatus configured to access at least one searchable database that stores information on a plurality of places, a plurality of security mechanisms, and a plurality of security mechanism users, the at least one searchable database storing an association between a first place, a first security mechanism and a first security mechanism user to indicate that the first security mechanism is in the possession of the first security mechanism user and is used to access the first place, the apparatus comprising:

at least one processor; and

program code configured to be executed by the at least one processor to provide access to the at least one searchable database by a plurality of database users by;

interacting with database users using an Internet-accessible web site;

authenticating each database user attempting to connect to the at least one searchable database over the Internet through the web site by receiving a password from such database user and comparing the received password to a stored password associated with such database user;

after authenticating a first database user among the plurality of database users, interactively communicating a plurality of screens to the first database user over the Internet, wherein each of the plurality of screens includes at least one hotlink configured to initiate a security management operation responsive to input directed thereto by the first database user, including communicating screens with hotlinks associated with security management operations for which the first database user is authorized such that the screens communicated to the first database user do not include any hotlinks associated with security management operations for which the first database user is not authorized;

in response to input from the first database user and directed to a selected hotlink on one of the plurality of screens, and based upon an authorization for the first database user, generating a screen that displays information from the at least one searchable database that is associated with the first security mechanism, and that allows the first database user to access information associated with the first place in association with displaying the information associated with the first security mechanism, and prohibits the first database user from accessing information associated with the first security mechanism user; and

in response to input from a second database user among the plurality of database users and after authenticating the second database user, and based upon an authorization for the second database user, generating a screen that displays information associated with the first security mechanism, and that allows the second database user to access information associated with the first security mechanism user in association with displaying the information associated with the first security mechanism, and prohibits the second Database User from accessing information associated with the first place.

20. A non-transitory computer readable medium, the non-transitory computer readable medium including program code stored thereon and configured to be executed by at least one processor to manage a security system associated with places physically protected by corresponding security mechanisms used to gain physical entry to the places by security mechanism users, the program code apparatus configured to access at least one searchable database that stores information on a plurality of places, a plurality of security mechanisms, and a plurality of security mechanism users, the program code further configured to provide access to the at least one searchable database by a plurality of database users by:

interacting with database users using an Internet-accessible web site;

authenticating each database user attempting to connect to the at least one searchable database over the Internet through the web site by receiving a password from such database user and comparing the received password to a stored password associated with such database user;

after authenticating a first database user among the plurality of database users, interactively communicating a plurality of screens to the first database user over the Internet, wherein each of the plurality of screens includes at least one hotlink configured to initiate a security management operation responsive to input directed thereto by the first database user, including communicating screens with hotlinks associated with security management operations for which the first database user is authorized such that the screens communicated to the first database user do not include any hotlinks associated with security management operations for which the first database user is not authorized; and

in response to input from the first database user and directed to a selected hotlink on one of the plurality of screens, performing the security management operation associated with the selected hotlink, wherein performing the security management operation includes updating the at least one searchable database to associate a security mechanism from among the plurality of security mechanisms with at least one of a place among the plurality of places and a security mechanism user among the plurality of security mechanism users.

21. A method of managing a plurality of database users in a security system associated with places physically protected by corresponding security mechanisms used to gain physical entry to the places by security mechanism users, the method comprising:

accessing at least one searchable database that stores information on a plurality of places, a plurality of security mechanisms, and a plurality of security mechanism users;

responding to requests from the plurality of database users over the Internet through an Internet-accessible web site;

authenticating each database user attempting to connect to the at least one searchable database over the Internet through the web site by receiving a password from such database user and comparing the received password to a stored password associated with such database user;

after authenticating a first database user among the plurality of database users, interactively communicating a plurality of screens to the first database user over the Internet, wherein each of the plurality of screens includes at least one hotlink configured to initiate a security management operation responsive to input directed thereto by the first database user, including communicating screens with hotlinks associated with security management operations for which the first database user is authorized such that the screens communicated to the first database user do not include any hotlinks associated with security management operations for which the first database user is not authorized; and

in response to input from the first database user and directed to a selected hotlink on one of the plurality of screens, performing the security management operation associated with the selected hotlink, wherein performing the security management operation includes updating the at least one searchable database to associate a security mechanism from among the plurality of security mechanisms with at least one of a place among the plurality of places and a security mechanism user among the plurality of security mechanism users.

22. The method of claim 21, wherein interactively communicating the plurality of screens to the first database user includes generating a custom screen for the first database user based upon access rights associated with the first database user.

23. The method of claim 21, wherein interactively communicating the plurality of screens to the first database user includes selecting a screen variation from among a plurality of screen variations based upon access rights associated with the first database user.

24. The method of claim 23, wherein a first screen variation among the plurality of screen variations allows data to be viewed and altered, and wherein a second screen variation among the plurality of screen variations allows the data to be viewed but not altered.

25. The method of claim 21, further comprising, in response to input from the first database user and directed to a second selected hotlink on one of the plurality of screens, performing a second security management operation associated with the second selected hotlink, the second security management operation configured to create a screen variation for use by at least one database user by setting privileges for a plurality of fields.

26. The method of claim 25, wherein the second security management operation is further configured to define at least one data delimiter privilege when creating the screen variation.

27. The method of claim 21, further comprising, in response to input from the first database user and directed to a second selected hotlink on one of the plurality of screens, performing a second security management operation associated with the second selected hotlink, the second security management operation configured to generate a screen including information related to one of the security mechanisms which has been found.

28. The method of claim 21, further comprising, in response to input from the first database user and directed to a second selected hotlink on one of the plurality of screens, performing a second security management operation associated with the second selected hotlink, the second security management operation configured to generate a screen including information related to one of the security mechanisms which has been lost or stolen.

29. The method of claim 21, further comprising maintaining the information in the at least one searchable database in a real time mode.

30. The method of claim 21, further comprising maintaining current and historical data on each of the places, the security mechanisms, and the security mechanism users.

31. The method of claim 21, further comprising updating the at least one searchable database in real time in response to input from the first database user such that an update to information stored in the at least one searchable database by the first database user is accessible to a second database user upon updating of the at least one searchable database.

32. The method of claim 21, wherein the plurality of security mechanisms includes a physical key, wherein the first security management operation searches the at least one searchable database for the physical key, and wherein generating the custom search result screen includes generating hotlinks on the custom search result screen that link to additional data for each place and each security mechanism user associated with the physical key.

33. The method of claim 21, wherein the plurality of security mechanisms includes at least one physical key, wherein the first security management operation searches the at least one searchable database for a security mechanism user, and wherein generating the custom search result screen includes generating hotlinks on the custom search result screen that link to additional data for each place and each physical key associated with the security mechanism user.

34. The method of claim 21, wherein the plurality of security mechanisms includes at least one physical key, wherein the first security management operation searches the at least one searchable database for a place, and wherein generating the custom search result screen includes generating hotlinks on the custom search result screen that link to additional data for each physical key and each security mechanism user associated with the place.