Method and apparatus for surveillance system peering

• US 9,071,626 B2
• Filed: 10/16/2012
• Issued: 06/30/2015
• Est. Priority Date: 10/03/2008
• Status: Active Grant

• Current Assignee: Ascvid IP Holdings LLC
• Original Assignee: VidSys Incorporated
• Inventors: Morris, Stephen Jeffrey, Bolton, Steven Arnold, Campbell, Donald
• Primary Examiner(s): Previl, Daniel
• Application Number:
  US13/652,712
• Publication Number:
  US 20130057384A1
• Time in Patent Office: 987 Days
• Field of Search: 340/5.74, 340/5.8, 340 581- 586, 340/825.36, 340/7.46, 340/7.52, 340/10.32, 340/10.42, 340/7.61
• US Class Current: 1/1
• CPC Class Codes: G08B 13/19656 Network used to communicate with a camera, e.g. WAN, LAN, Internet
• CPC Class Codes: G08B 25/006 Alarm destination chosen according to type of event, e.g. in case of fire phone the fire service, in case of medical emergency phone the ambulance
• CPC Class Codes: G08B 25/085 using central distribution transmission lines
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes

Abstract

A security installation positions a peering ability with a peer installation by establishing a peering agreement to define the conditions constituting a situation for which peering applies, and identifies the resources and assets which will be shared, as well as the duration of the peering, typically until the resolution of the exigent situation or circumstances that prompted the peering. Peering selectively couples security installations for monitoring a particular upon determining that a situation responsive to mediation has occurred within an area monitored by the security installation for monitoring an area. The security installation initiates a peering invitation to a peer installation, in which the peer installation is configured to share resources with the security installation for mitigating the cause of the situation. The resulting peered access provides communication between the peer installation and the security installation, the access being temporary and conditional on the exigency of the determined situation.

Claims

1. A method for scalable sharing of security assets comprising:

identifying a plurality of security assets from contributors, the contributors each owning security assets that are selectively enabled for access by a subscriber;

receiving an indication of shareability for each asset contributed by the contributor;

designating a subset of the identified security assets as a group for remote access;

receiving a delegation to authorize a subscriber for access to the security asset, delegating further including identifying an agent, the agent having authority to designate access to contributed security assets, the subscriber responsive to receiving, from the identified agent, a token operative to provide access to the security asset; and

authorizing the subscriber for access to the designated group of security assets, the group having collective access by the authorized subscriber.

2. The method of claim 1 wherein each security asset is responsive to a token, the token transferred to the subscriber by the agent upon agent approval.

3. The method of claim 1 wherein the agent has authority to designate access to contributed security assets of a contributor, further comprising:

designating an agent for granting access to a security asset by a subscriber;

transferring, from the designated agent, a token operative to grant access to the security asset to the subscriber; and

receiving an indication of the token prior to permitting the subscriber to access the security asset.

4. The method of claim 3 wherein the token is a ticket indicative of the agent, the security asset, and the subscriber granted access, the ticket transferable to a plurality of subscribers by the agent.

5. The method of claim 3 wherein the token is electronically transferable and authenticatable, the token responsive to electronic transmission from the agent to the subscriber, the security asset responsive to the token for permitting remote access by an authenticated subscriber identified by the token.

6. The method of claim 1 wherein the subscribers receive access to security assets from an agent authorized to permit access to the security asset;

the agents having authority to designate access to contributed security assets based on the assent of the contributor of the security asset.

7. The method of claim 1 wherein the contributor owns exclusive control over the security assets contributed.

8. A repository of security assets, comprising:

a set of information repositories for storing;

an identity of security assets configured for gathering security information;

subscribers that receive access to the security assets;

contributors that own the security assets that may be enabled for access by subscribers, each contributor designating a subset of owned security assets that are selectively enabled for access by the subscribers;

an indication of shareability for each designated asset contributed by the contributor; and

agents having authority to designate access to the contributed security assets to the subscribers on behalf of the contributors;

a token, the token issued by an agent to a subscriber for designating access to a security asset, the token indicative of the security asset and the accessing subscriber;

rules indicative of conditions under which the subscribers may invoke the designated access to the security assets; and

logic responsive to requests for the stored security assets, subscribers, contributors, agent and rules, the logic responsive to receiving a delegation to authorize a subscriber for access to the security asset, the group having collective access by the authorized subscriber.

9. The repository of claim 8 wherein the set of information repositories is responsive to requests for tokens, the token electronically transferable and authenticatable, the token responsive to electronic transmission from the agent to the subscriber, the security asset responsive to the token for permitting remote access by an authenticated subscriber identified by the token.

10. The repository of claim 8 wherein the set of information repositories includes a registration server for storing information including an identity of the contributors, subscribers, and assets and an agent database storing only tokens under control of the agent and the subscriber, contributor and asset to which the tokens correspond.

11. A system for controlling access to shared security assets comprising:

a server for identifying a plurality of security assets from contributors, each contributor designating a subset of the identified security assets for remote access;

an agent having authority to designate access to the contributed security assets to the subscribers on behalf of the contributors; and

a plurality of tokens, each security asset responsive to a token, the token transferred to the subscriber by the agent upon agent approval, further comprising

establishment of a first trust relation from the contributor to the agent, the first trust relation for permitting access to a particular security asset, and a second trust relation from the agent to the subscriber,

the second trust relation for affording access to the security asset by the subscriber, wherein the contributor is not privy to the second trust relation.

12. The system of claim 11 further comprising a group defined by a subset of the identified security assets, the group having collective access by the authorized subscriber, wherein each agent corresponds to a group, the agent designating the security assets of the group to the subscribers.

13. The system of claim 12 further comprising at least one security installation, the security installation defined by at least one geographic site related by a common ownership or control structure, the security installation having centralized control over the group and being a contributor of the security assets of the group.

14. The system of claim 13 wherein the contributors own security assets that are selectively enabled for access by subscribers, the set of repositories operable to:

receive, from the contributors, an indication of shareability for each asset contributed; and

transmit, to the agents, a delegation to authorize a subscriber for access to the security asset.

15. The system of claim 13 further comprising a registration server for storing information including an identity of the contributors, subscribers, and assets and an agent database storing only tokens under control of the agent and the subscriber, contributor and asset to which the tokens correspond.

16. The system of claim 11 wherein the first and second trust relations are an electronically authenticateable relation, and the token is effected by electronic transmission from the agent to the subscriber for enabling usage of the corresponding security resource.

17. The system of claim 11 wherein the agent has visibility of security assets of tokens delegated to the agent, and does not have visibility of other security assets of the delegating contributor.

18. The system of claim 11 wherein the contributor has visibility of an identity of contributed security resources, and does not have visibility of distribution of tokens corresponding to the contributed security assets.