Transient asset management systems and methods

• US 9,773,363 B2
• Filed: 08/11/2015
• Issued: 09/26/2017
• Est. Priority Date: 08/11/2015
• Status: Active Grant

• Current Assignee: Schweitzer Engineering Laboratories, Incorporated
• Original Assignee: Schweitzer Engineering Laboratories, Incorporated
• Inventors: Robinson, Kylan T., Smith, Rhett, Masters, George W., Bradetich, Ryan
• Primary Examiner(s): Negron, Daniell L
• Application Number:
  US14/823,189
• Publication Number:
  US 20170046894A1
• Time in Patent Office: 777 Days
• Field of Search: None
• CPC Class Codes: G07C 2209/04 Access control involving a hierarchy in access rights
• CPC Class Codes: G07C 9/00174 Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys mechanical locks with electric permutation E05B49/00; arrangements for sensing or reading record carriers G06K7/00; electronic switching H03K17/00
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/0069 actuated in a predetermined sequence
• CPC Class Codes: G07C 9/00896 specially adapted for particular uses
• CPC Class Codes: G07C 9/32 in combination with an identity check
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

Systems and methods are disclosed that provide for managing transient assets used in connection with an access-controlled area of a distribution site of an electric power delivery system. In some embodiments, one or more users entering and access-controlled area may be identified via physical access control credentials provided to an associated access control system. Transient assets brought within an access-controlled area may be detected via one or more wired and/or wireless communication channels and may be associated with the one or more identified users located within the access-controlled area.

Claims

1. An access control system associated with an access-controlled area of a distributed site of an electric power delivery system, the system comprising:

a credential input interface configured to receive authentication credentials from one or more users, and configured to receive an indication that one or more users have exited the access-controlled area;

a communications interface configured to receive identification information from one or more proximately-located transient assets;

a processor communicatively coupled to the credential input interface and the communications interface;

a computer-readable storage medium communicatively coupled to the processor, the computer-readable storage medium storing instructions that when executed by the processor cause the processor to;

determine whether the authentication credentials received by the credential input interface are associated with one or more users having physical access rights to the access-controlled area;

generate, based on the determination, a control signal configured to implement an access control action by an access control device associated with the access-controlled area allowing physical access to the one or more users;

receive, in response to a first transient asset discovery process performed by the processor, identification information from the one or more proximately-located transient assets;

generate transient asset association information associating the one or more transient assets with the one or more users based on the identification information and the authentication credentials;

storing the transient asset association information on the computer-readable storage medium;

initiate a second transient asset discovery process based on receiving the indication;

receive, in response to the second transient asset discovery process, the identification information from the one or more proximately located transient assets; and

,

determine that the one or more transient assets are unattended.

2. The system of claim 1, wherein the one or more transient assets comprise at least one of a smartphone device, a tablet computing device, a laptop computing device, a storage device, and an electronically-tagged object.

3. The system of claim 1, wherein the authentication credentials comprise at least one of a personal identification number, a password, a passphrase, a response to a challenge, a pattern, information stored on a card, information stored on a security token, information stored on a hardware token, information stored on a software token, and biometric identification information.

4. The system of claim 1, wherein the communications interface comprises a wireless communications interface.

5. The system of claim 4, wherein the wireless communications interface comprises at least one of a near field communication interface, a radio-frequency identification interface, and a Bluetooth®

-enabled interface.

6. The system of claim 1, wherein the identification information comprises one or more media access control addresses associated with the one or more transient assets.

7. The system of claim 1, wherein the distributed site comprises at least one of a substation location, a utility box, and an equipment enclosure of the electric power delivery system.

8. The system of claim 1, wherein generating the transient asset association information further comprises determining one or more probabilities of association between the one or more transient assets and the one or more users.

9. The system of claim 1, wherein generating the transient asset association information is further based on historical associative information between the one or more transient assets and the one or more users.

10. The system of claim 1, wherein the computer-readable storage medium further stores instructions that when executed by the process cause the processor to:

generate a notification that the one or more transient assets are unattended;

transmit the notification to one or more mobile devices associated with the one or more users.

11. The system of claim 1, wherein the computer-readable storage medium further stores instructions that when executed by the processor cause the processor to:

generate a notification that the one or more transient assets are unattended; and

transmit the notification to a system associated with a supervisor of the one or more users.

12. The system of claim 1, wherein the computer-readable storage medium further stores instructions that when executed by the processor cause the processor to transmit the transient asset association information to a remote service provider system.

13. A method for managing transient assets brought within an access-controlled area of a distributed site of an electric power delivery system, the method comprising:

receiving, at a credential input interface, authentication credentials from one or more users;

determining that the received authentication credentials are associated with one or more users having physical access rights to the access-controlled area;

generating, based on the determination, a control signal configured to allow the one or more users physical access to the access-controlled area;

performing a first transient asset discovery process to identify one or more proximately-located transient assets;

receiving, in response to the first transient asset discovery process, identification information from the one or more proximately located transient assets;

generating transient asset association information associating the one or more transient assets with the one or more users based on the identification information and the authentication credentials;

storing the transient asset association information on a non-transitory computer-readable storage medium;

receiving, at the credential input interface, an indication that the one or more users have exited the access controlled area;

initiating a second transient asset discovery process based on receiving the indication;

receiving, in response to the second transient asset discovery process, identification information from the one or more proximately located transient assets;

determining that the one or more transient assets are unattended within the access-controlled area; and

,

generating a notification that the one or more transient assets are unattended.

14. The method of claim 13, wherein the one or more transient assets comprise at least one of a smartphone device, a tablet computing device, a laptop computing device, a storage device, and an electronically-tagged object.

15. The method of claim 13, wherein the authentication credentials comprise at least one of a personal identification number, a password, a passphrase, a response to a challenge, a pattern, information stored on a card, information stored on a security token, information stored on a hardware token, information stored on a software token, and biometric identification information.

16. The method of claim 13, wherein the identification information comprises one or more media access control addresses associated with the one or more transient assets.

17. The method of claim 13, wherein generating the transient asset association information further comprises determining one or more probabilities of association between the one or more transient assets and the one or more users.

18. The method of claim 13, wherein generating the transient asset association information is further based on historical associative information between the one or more transient assets and the one or more users.

19. The method of claim 13, wherein the method further comprises:

receiving, at the credential input interface, an indication that the one or more users have exited the access-controlled area;

performing a second transient asset discovery process to identify one or more proximately-located transient assets.

20. The method of claim 13, wherein the method further comprises transmitting the notification to one or more mobile devices associated with the one or more users.

21. The method of claim 13, wherein the method further comprises transmitting the notification to a system associated with a supervisor of the one or more users.

22. The method of claim 13, wherein the method further comprises transmitting the transient asset association information to a remote service provider system.