System and method for credential management and administration

• US 9,047,715 B2
• Filed: 12/06/2011
• Issued: 06/02/2015
• Est. Priority Date: 08/02/2011
• Status: Active Grant

• Current Assignee: Alan Amron
• Original Assignee: Ecredentials
• Inventors: Amron, Alan
• Primary Examiner(s): BROWN, VERNAL U
• Application Number:
  US13/311,548
• Publication Number:
  US 20140055231A1
• Time in Patent Office: 1,274 Days
• Field of Search: 340/10.1, 340/5.6, 340/12.5, 235/375
• US Class Current: 1/1
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards

Abstract

A credential management and administration system and method by which the documented eligibility of persons to receive benefits, services, access to premises or events, and the like is centrally administered. In one embodiment, credentials are distributed to the individuals electronically, via communication network, to respective portable device having a corresponding display. Each display is configured to visually present certain qualifying information that is updated at periodic intervals. Alternatively, the qualifying information may be presented via wireless means to a suitable receiver proximate the location where services are delivered.

Claims

1. A non transitory computer-readable storage medium encoded with computer-executable instructions which, when executed by a processor, perform a method for configuring a portable electronic device as part of a credential management system, comprising:

associating at a credential administration server, a first portable electronic device, identifiable by a unique identifier, with a first user and at least one of a location or a service subject to access restrictions;

obtaining first visual symbol information, at the credential administration server, for use by the first portable electronic device in iniating display of a first machine discernable image to be presented as an access credential by the first user during a first specified time interval, the first time interval being specified to have a duration of between 30 to 6000 seconds;

for visible display of the first machine discernable image by the first portable device during the first time interval, initiating wireless transmission of the obtained first visual symbol information to the first portable electronic device;

obtaining second visual symbol information, at the credential administration server, for use by the first portable electronic device in initiating display of a second machine discernable image to be presented as an access credential by the first user during a second specified time interval, the second time interval being specified to have a duration of between 30 to 6000 seconds; and

for visible display of the second machine discernable image by the first portable electronic device upon expiration of the first time interval, initiating wireless transmission of the obtained second visual symbol information to the first portable electronic device.

2. The computer-readable storage medium according to claim 1, wherein computer instructions stored therein, when executed by a processor, further perform a step of associating, at the credential administration server, the first visual symbol information with the first user during the first time interval.

3. The computer-readable storage medium according to claim 2, wherein computer instructions stored therein, when executed by a processor, further perform a step of associating, at the credential admininistration server, the second visual symbol information with the first user during the second time interval.

4. The computer-readable storage medium according to claim 3, wherein computer instructions stored therein, when executed by a processor, further perform a step of associating, at the credential administration server, the first visual symbol information with the first user during the second time interval, thereby facilitating authentication of the first user if the second visual symbol information is not received by the first portable electronic device.

5. The computer-readable storage medium according to claim 1, wherein computer instructions stored therein, when executed by a processor, specify that the first time interval and the second time interval are of equal duration.

6. The computer readable storage medium according to claim 1, wherein computer instructions stored therein, when executed by a processor, further perform a step of randomly selecting, at the credential administration server, the first and second time intervals such that they are of unequal duration.

7. The computer-readable storage medium according to claim 1, wherein the first portable electronic device includes a processor, a power source, and a display for visually reproducing the first and second machine discernable images.

8. The computer-readable storage medium according to claim 7, wherein computer instructions stored therein, when executed by a processor, further perform a step of transmitting a generation instruction to the first portable electronic device, the first portable electronic device being responsive to each generation instruction received to locally generate a corresponding bar code as the machine discernable image.

9. The computer-readable storage medium according to claim 1, wherein computer instructions stored therein, when executed by a processor, further perform receiving and storing, at the credential administration server, administrator input specifying at least one of an identity of an event to be attended by the first user, an event logo, an employer logo, an employer identification, first and last names of the first user, or areas of a facility to which the first user is authorized for entry during an event.

10. The computer-readable storage medium according to claim 9, wherein computer instructions stored therein, when executed by a processor, further perform transmitting, to the first portable device, information representative of at least one of an identity of an event to be attended by the first user, an event logo, an employer logo, an employer identification, first and last names of the first user, or areas of a facility to which the first user is authorized for entry during an event.

11. The computer readable storage medium according to claim 1, wherein the first portable electronic device is one of a smartphone, a tablet computer, a personal digital assistant, and a special purpose device having a display, memory and processor and wherein the unique identifier is one of an internet protocol (IP) address, a telephone number, an electronic serial number, and an RFID identifier.

12. The computer-readable storage medium according to claim 1, wherein computer instructions stored therein, when executed by a processor, further perform receiving from the first portable electronic device, information specifying at least one of the unique identifier, an event to be attended by the first user, and first and last names of the first user.

13. The computer-readable storage medium according to claim 7, wherein the first portable electronic device is one of a smartphone, a tablet computer, a personal digital assistant, and a special purpose device having a display, memory and processor and wherein the unique identifier is one of an internet protocol (IP) address, a telephone number, an electronic serial number, and an RFID identifier.

14. The computer-readable storage medium according to claim 1, wherein computer instructions stored therein, when executed by a processor, further perform

associating at a credential administration server a second portable electronic device, identifiable by a unique identifier, with a second user and at least one of a location or a service subject to access restrictions;

obtaining third visual symbol information, at the credential administration server, for use by the second portable electronic device in initiating display of a third machine discernable image to be presented by the second user as an access credential during the first time interval;

for visible display of the third machine discernable image by the second portable device during the first time interval, initating wireless transmission of the obtained third visual symbol information to the second portable electronic device;

obtaining fourth visual symbol information, at the credential administration server, for use by the second portable electronic device in initiating display of a fourth machine discernable image to be presented by the second user as an access credential during the second time interval; and

for visible display of the fourth machine discernable image by the second portable device commencing at expiration of the first time interval, initiating wireless transmission of the fourth visual symbol to the second portable electronic device.

15. The computer-readable storage medium according to claim 14, wherein computer instructions stored therein, when executed by a processor, further perform a step of associating, at the credential administration server, the third visual symbol information with the second user during the first time interval.

16. The computer-readable storage medium according to claim 15, wherein computer instructions stored therein, when executed by a processor, further perform a step of associating, at the credential administration server, the third visual symbol information and the fourth visual symbol information with the second user during the second time interval, thereby facilitating authentication of the second user during the second time interval in the event the fourth visual symbol information is not received by the second portable electronic device.

17. The computer-readable storage medium according to claim 14, wherein obtaining each of said first and said second visual symbol information includes generating first bar code information and second bar code information, respectively and wherein obtaining each of said third and said fourth visual symbol information includes generating third and fourth bar code information, respectively, thereby facilitating display of a respectively different bar code by each portable electronic device during each corresponding time interval.

18. The computer-readable storage medium according to claim 1, wherein obtaining each of said first and said second visual symbol information includes generating first bar code information and second bar code information, respectively, thereby facilitating display of a different bar code by the first portable electronic device during each corresponding time interval.

19. A method for configuring a plurality of portable electronic devices having a memory, a transceiver, and a display, using a credential management system, comprising:

associating at a credential administration server a first portable electronic device, identifiable by a unique identifier, with a first user and at least one of a location or a service subject to access restrictions;

obtaining first visual symbol information, at the credential administration server, for use by the first portable electronic device in initiating display of a first machine discernable image to be presented as an access credential by the first user during a first specified time interval, the first time interval being specified to have a duration of between 30 to 6000 seconds;

providing instructions executable by the first portable electronic device for causing display of the first machine discernable image by the first portable device during the first time interval;

wirelessly transmitting the first visual symbol information to the first portable electronic device;

obtaining second visual symbol information, at the credential administration server, for use by the first portable electronic device in initiating display of a second machine discernable image to be presented as an access credential by the first user during a second specified time interval, the second time interval being specified to have a duration of between 30 to 6000 seconds;

providing instructions executable by the first portable electronic device for causing display of the second machine discernable image by the first portable device during the second time interval commencing at expiration of the first time interval, and

wirelessly transmitting the second visual symbol information to the first portable electronic device.

20. The method according to claim 19, further comprising a step of associating, at the credential administrative server, the first visual symbol information with the first user during the first time interval.

21. The method according to claim 20, further comprising a step of associating, at the credential administration server, the second visual symbol information with the first user during the second time interval.

22. The method according to claim 20, further comprising a step of associating, at the credential administration server, the first visual symbol information with the first user during the second time interval, thereby facilitating authentication of the first user during the second interval if the second computer-readable visual symbol is not received by the first portable electronic device.

23. The method according to claim 19, wherein the first time interval and the second time interval are of equal duration.

24. The method according to claim 19, further including a step of randomly selecting, at the credential administration server, each of the first and second time intervals such that they are of unequal duration.

25. The method according to claim 19, wherein each of the first and second visual symbols are bar codes, the method further including a step of initiating, from the credential administration server, transmission of a generation instruction to the first portable electronic device and the first portable electronic device being responsive to each generation instruction received to locally generate and display a corresponding bar code as the machine discernable image.

26. The method according to claim 19, further including a step of receiving and storing, at the credential administration server, administrator input specifying at least one of an identity of an event to be attended by the first user, an event logo, an employer logo, an employer identification, first and last names of the first user, or areas of a facility to which the first user is authorized for entry during an identified event.

27. The method according to claim 26, further including a step of transmitting, to the first portable device, information representative of at least one of an identity of an event to be attended by the first user, an event logo, an employer logo, an employer identification, first and last names of the first user, or areas of a facility to which the first user is authorized for entry during an identified event.

28. The method according to claim 26, wherein the first portable electronic device is one of a smartphone, a tablet computer, a personal digital assistant, and a special purpose device having a display, memory and processor and wherein the unique identifier is one of an internet protocol (IP) address, a telephone number, an electronic serial number, and an RFID identifier.

29. The method according to claim 28, further including a step of receiving from the first portable electronic device, information specifying at least one of the unique identifier, an event to be attended by the first user, and first and last names of the first user.

30. The method according to claim 19, wherein the first portable electronic device is one of a smartphone, a tablet computer, a personal digital assistant, and a special purpose device having a display, memory and processor and wherein the unique identifier is one of an internet protocol (IP) address, a telephone number, an electronic serial number, and an RFID identifier.

31. The method according to claim 19, further including:

associating at a credential administration server a second portable electronic device, identifiable by a unique identifier, with a second user and at least one of a location or a service subject to access restrictions;

obtaining third visual symbol information, at the credential administration server, for use by the second portable electronic device in initiating display of a third machine discernable image to be presented as an access credential by the second user during the first specified time interval;

providing instructions executable by the second portable electronic device for causing display of the third machine discernable image by the second portable device during the first time interval;

wirelessly transmitting the third visual symbol information to the second portable electronic device;

obtaining fourth visual symbol information, at the credential administration server, for use by the second portable electronic device in initiating display of a fourth machine discernable image to be presented as an access credential by the second user during the second specified time interval;

providing instructions executable by the second portable electronic device for causing display of the fourth machine discernable image by the second portable device during the second time interval commencing at expiration of the first time interval, and

wirelessly transmitting the fourth visual symbol information to the second portable electronic device.

32. The method according to claim 31, further including a step of associating, at the credential administration server, the third visual symbol with the second user during the first time interval.

33. The method according to claim 32, further including a step of associating, at the credential administration server, the third visual symbol and the fourth visual symbol with the second user during the second time interval, thereby facilitating authentication of the second user during the second interval in the event the third visual symbol is not received by the second portable electronic device.

34. The method according to claim 31, further including a step of facilitating authentication of a candidate portable electronic device displaying a machine discernable image as a credential by determining, in a first determining step, whether the candidate portable electronic device is identifiable by a unique ID associated with an authorized user;

and determining, in a second determining step, whether the machine discernable displayed by the candidate portable electronic device corresponds to a visual symbol valid for an authorized user during a current time interval.

35. The method according to claim 34, wherein if the candidate portable electronic device is identifiable by a unique ID associated with the first user and the received data is representative of a visual symbol valid during a current time interval, updating a record associated with the first user to reflect at least one of the time, date, location and event where the first portable electronic device was presented as a credential.

36. The method according to claim 35, further including a step of communicating an acceptance decision to a remote terminal accessible by personnel to whom the candidate portable electronic device was presented.

37. The method according to claim 34, wherein if the candidate portable electronic device is identifiable by a unique ID associated with the first user and the received data is representative of a visual symbol valid during a current time interval or an immediately preceding time interval associated with the first user, updating a record associated with the first user to reflect at least one of the time, date, location and event where the first portable electronic device was presented as a credential.

38. The method according to claim 34, wherein if the candidate portable electronic device is not identifiable by a unique ID associated with an authorized user or if the received data is not representative of a visual symbol valid during a current time interval and associated with any authorized user, communicating a rejection decision to a remote terminal accessible by personnel to whom the candidate portable electronic device was presented.

39. The method according to claim 19, wherein the first portable electronic device includes a global positioning satellite (GPS) receiver operative to obtain positional data and a corresponding cellular network transceiver for establishing a telecommunications link with a cellular network to thereby transmit position data for monitoring a location within a facility to which the first user has gained access using the first portable electronic device as a credential, said method further including a step of storing a record of locations visited by the first user while the first user is present at the facility.

40. The method according to claim 39, further including a step of generating a report graphically presenting an average time spent, at respectively specified locations within a facility, by users presenting a portable electronic device as a credential.

41. A method for configuring portable electronic devices each having a memory, a transceiver, and a display, using a credential management system, comprising:

obtaining first information corresponding to a first machine discernable image to be used by a first user during a specified first time interval of specified duration;

providing first instructions executable by a first portable electronic device associated with the first user for causing presentation of the first machine discernable image by the first portable device during the first time interval;

wirelessly transmitting the first information to the first portable electronic device;

obtaining second information corresponding to a second machine discernable image to be used by the first user during a second specified time interval of specified duration;

providing second instructions executable by the portable electronic device for automatically causing presentation of the second machine discernable image by the first portable device during the second time interval commencing at expiration of the first time interval;

wirelessly transmitting the second symbol information to the first portable electronic device; and

transmitting over a communication network from a credential administrative server, data to be displayed by the first portable device during the first and second time intervals and together with each machine discernable image, the data including

an assigned seating location, an event start time, an event date, and names of competing teams, or

an identity of an issuing authority, or

an identity of a transportation carrier, a departure date, a departure time, and a gate assignment;

whereby the first portable device is caused, by execution of the first instructions, to cease presenting the first machine discernable image at expiration of the first time interval, and

whereby the first portable device is caused, by execution of the second instructions, to commence presenting the second machine discernable image, at initiation of the second time interval.

42. The method of claim 41, further including a step of updating data to be displayed by the first portable device by transmitting, from the credential administrative server, at least one of a changed seating assignment, a changed gate assignment, and a changed departure time.

43. The method of claim 42, further including a step of transmitting one of an e-mail and a text message to a user of the first portable device as notification of any transmission of updating data.

44. The method of claim 41, wherein each of the first and the second machine discernable image is a respective bar code displayed continuously during the first interval and the second interval, respectively.

45. The method of claim 41, further including a step of collecting, from each respective portable electronic device, data corresponding to time spent by a corresponding user at one or more locations within a facility and to which the corresponding user has gained access after using a corresponding portable electronic device as a credential to enter the facility.

46. The method of claim 45, further including a step of generating a report graphically presenting average time spent, by respective socio-demographic groups of users who presented a portable electronic device as a credential to gain access to an event, at the one or more specified locations.