Distributed events in an access control system

• US 9,807,161 B2
• Filed: 09/16/2013
• Issued: 10/31/2017
• Est. Priority Date: 09/16/2013
• Status: Active Grant

• Current Assignee: Axis AB (Canon Inc.)
• Original Assignee: Axis AB (Canon Inc.)
• Inventors: Angelsmark, Ola, Smitt, Per
• Primary Examiner(s): Vu, Viet
• Assistant Examiner(s): Edwards, James
• Application Number:
  US14/028,198
• Publication Number:
  US 20150081785A1
• Time in Patent Office: 1,506 Days
• Field of Search: None
• CPC Class Codes: G06F 16/00 Information retrieval; Database structures therefor; File system structures therefor
• CPC Class Codes: G06F 9/542 Event management; Broadcasting; Multicasting; Notifications
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks

Abstract

A method disclosed may include storing event data in a physical access control system originating from a first device of a plurality of security devices in a first data area of a memory. The method may include storing event data originating from devices other than the first device in a second data area. The method may include removing the event data from the first data area to prevent the first data area from occupying more than a first memory space and removing the event data from the second data area to prevent the second data area from occupying more than a second memory space. The method may include distributing the event data from the first data area to the other devices through a network interface.

Claims

1. A system comprising:

a plurality of devices connected in a distributed peer-to-peer network, wherein each device of the plurality of devices includes;

a memory including a consensus data area and a non-consensus data area, wherein the plurality of devices are connected in the distributed peer-to-peer network to distribute data in the consensus data area and data in the non-consensus data area,

wherein the non-consensus data area includes a first data area and a second data area,

wherein the first data area is configured to store first event data originating from the device that corresponds to the memory and not from other devices of the plurality of devices, and the second data area is configured to store second event data originating from the other devices,

wherein the first data area is configured to occupy at most a first maximum memory space and the second data area is configured to occupy at most a second maximum memory space, and

wherein the first event data reports events that have occurred and the second event data reports events that have occurred; and

a processor to;

change data in the consensus data area and change data in the non-consensus data area, wherein the processor requires a quorum to change data in the consensus data area and does not require a quorum to change data in the non-consensus data area,

determine whether the first data area has reached the first maximum memory space and whether the second data area has reached the second maximum memory space,

remove the stored first event data having originated from the device that corresponds to the memory from the first data area to prevent the first data area from occupying more than the first maximum memory space when the processor determines that the first data area has reached the first maximum memory space,

remove the stored second event data having originated from the other devices from the second data area to prevent the second data area from occupying more than the second maximum memory space when the processor determines that the second data area has reached the second maximum memory space, and

distribute the first event data to the other devices through a network interface and receive second event data from the other devices through the network interface to store in the second data area.

2. The system of claim 1,

wherein each processor in more than one of the plurality of devices is configured to distribute the first event data to other devices in the peer-to-peer network, and

wherein each processor in more than one of the plurality of devices is configured to distribute the second event data to other devices in the peer-to-peer network.

3. The system of claim 2, wherein the processor is configured to:

determine if the device is busy;

stop distribution of the first event data to the other devices through the peer-to-peer network when the processor determines that the device is busy, and;

continue to store the first event data originating from the device in the first data area when the processor determines that the device is busy.

4. The system of claim 3, wherein the processor is configured to:

determine that another one of the devices is associated with a subscription to the first event data; and

send the first event data to the other one of the devices when the processor determines the device is busy and when the processor determines that the other one of the devices is associated with a subscription to the first event data.

5. The system of claim 3, wherein the processor is configured to determine whether the device is busy based on an amount of traffic in the network passing a first threshold, based on the load of the processor passing a second threshold, or based on a number of events being processed by the processor passing a third threshold.

6. The system of claim 3,

wherein the first data area includes a volatile memory area and a non-volatile memory area;

and

wherein the processor is configured to store the first event data in the volatile memory area when the processor determines that the device is busy and move the first event data to the non-volatile memory when the processor determines that the device is no longer busy.

7. The system of claim 3,

wherein when the processor determines that the device is busy, the processor is configured to continue to distribute data in the consensus data area while stopping to distribute data in the non-consensus data area;

wherein the processor is configured to determine that the first data area has reached the first maximum memory space when the first data area is full, near full, or more than full; and

wherein the processor is configured to determine that the second data area has reached the second maximum memory space when the second data area is full, near full, or more than full.

8. The system of claim 1,

wherein the first maximum memory space is larger than the second maximum memory space, and

wherein the first event data reports events that have occurred at the device and the second event data reports events that have occurred at the other devices of the plurality of devices.

9. The system of claim 8,

wherein the plurality of devices include a plurality of system units in a physical access control system (PACS),

wherein one of the system units includes a controller and a peripheral device,

wherein the first event data that reports events that have occurred at the system unit includes:

an indication that a reader device received a credential when the peripheral device is a reader device, or

an indication that a camera detected motion when the peripheral device is a camera, and

wherein the processor is configured to compare the first event data and the second event data to rules and issue an alarm based on the comparison.

10. The system of claim 1,

wherein the processor is configured to remove the first event data that is oldest from the first data area to prevent the first data area from occupying more than the first maximum memory space, and

wherein the processor is configured to remove the second event data that is oldest from the second data area to prevent the second data area from occupying more than the second maximum memory space.

11. The system of claim 1, wherein the processor is configured to stop distributing the first or second event data to another one of the devices when an indication is received through the network interface from the other one of the devices to stop distributing the first or second event data to the other one of the devices.

12. The system of claim 1,

wherein the consensus data area includes a database of user credentials for users to access a physical area.

13. The method of claim 1,

storing a database of user credentials for users to access a physical area in the consensus data area.

14. A device comprising:

a memory including a consensus data area and a non-consensus data area, wherein the device is configured to be connected in a distributed peer-to-peer network to distribute data in the consensus data area and data in the non-consensus data area,

wherein the non-consensus data area includes a first data area and a second data area,

wherein the first data area is configured to store first event data originating from the device and not originating from one or more other devices connected in the peer-to-peer network with the device, and

wherein the second data area is configured to store second event data originating from the one or more other devices connected in the peer-to-peer network with the device,

wherein the first data area is configured to occupy at most a first maximum memory space and the second data area is configured to occupy at most a second maximum memory space, and

wherein the first event data reports events that have occurred and the second event data reports events that have occurred; and

a processor to;

change data in the consensus data area and change data in the non-consensus data area, wherein the processor requires a quorum to change data in the consensus data area and does not require a quorum to change data in the non-consensus data area,

determine whether the first data area has reached the first maximum memory space and whether the second data area has reached the second maximum memory space,

remove the stored event data having originated from the device from the first data area to prevent the first data area from occupying more than the first maximum memory space when the processor determines that the first data area has reached the first maximum memory space,

remove the stored event data from the second data area to prevent the second data area from occupying more than the second maximum memory space when the processor determines that the first data area has reached the first maximum memory space, and

distribute, through a network interface, the first event data to the other devices and receive, through the network interface, the second event data from the other devices to store in the second data area.

15. The device of claim 14,

wherein the processor is configured to distribute the first event data to the one or more other devices in the peer-to-peer network,

wherein the processor is configured to distribute the second event data to the one or more other devices in the peer-to-peer network, and

wherein the first maximum memory space is larger than the second maximum memory space.

16. The device of claim 15,

wherein the device is a system unit in a physical access control system (PACS), wherein the system unit includes a controller and a peripheral device,

wherein the first event data reports events that have occurred at the system unit and the second event data reports events that have occurred at the one or more other devices in the peer-to-peer network, and

wherein the first event data that reports events that have occurred at the system unit includes:

an indication that a reader device received a credential when the peripheral device is a reader device, or an indication that a camera detected motion when the peripheral device is a camera.

17. The device of claim 15, wherein the processor is configured to:

determine if the device is busy and determine that another one of the devices is associated with a subscription to the first event data;

stop distribution of the first event data to the other devices through the peer-to-peer network when the processor determines that the device is busy,

continue to store the first event data originating from the device in the first data area when the processor determines that the device is busy,

send the first event data to the other one of the devices when the processor determines that the device is busy and that the other one of the devices is associated with a subscription to the first event data.

18. The device of claim 17, wherein the processor is configured to determine if the device is busy based on an amount of traffic in the peer-to-peer network passing a first threshold, based on the load of the processor passing a second threshold, or based on a number of events being processed by the processor passing a third threshold.

19. The device of claim 14,

wherein the processor is configured to compare first event data and the second event data to rules and issue an alarm based on the comparison,

wherein the processor is configured to remove the first event data that is oldest from the first data area to prevent the first data area from occupying more than the first maximum memory space, and

wherein the processor is configured to remove the second event data that is oldest from the second data area to prevent the second data area from occupying more than the second maximum memory space.

20. The device of claim 14,

wherein the consensus data area includes a database of user credentials for users to access a physical area.

21. A method comprising:

storing first event data originating from a first device of a plurality of devices, and not originating from devices other than the first device, in a first data area of a memory,

wherein the memory includes a consensus data area and a non-consensus data area,

wherein the plurality of devices are connected in a distributed peer-to-peer network to distribute data in the consensus data area and data in the non-consensus data area,

wherein the non-consensus data area includes the first data area and a second data area,

wherein the first data area is configured to occupy at most a first maximum memory space, wherein the first event data reports events that have occurred;

storing second event data originating from the devices other than the first device in the second data area, wherein the second data area is configured to occupy at most a second maximum memory space, and wherein the second event data reports events that have occurred;

changing data in the consensus data area, wherein changing the data in the consensus data area requires a quorum, and changing data in the non-consensus data area, wherein changing the data in the non-consensus data area does not require a quorum;

determining whether the first data area has reached the first maximum memory space and determining whether the second data area has reached the second maximum memory space;

removing the first event data from the first data area to prevent the first data area from occupying more than the first maximum memory space when determined that the first data area has reached the first maximum memory space;

removing the second event data from the second data area to prevent the second data area from occupying more than the second maximum memory space when determined that the second data area has reached the second maximum memory space; and

distributing the first event data to the other devices through a network interface and receiving the second event data from the other devices through the network interface to store in the second data area.

22. The method of claim 21,

wherein the first maximum memory space is larger than the second maximum memory space,

wherein the first device is a system unit in a physical access control system (PACS), wherein the system unit includes a controller and a peripheral device,

wherein the first event data reports events that have occurred at the system unit and the second event data reports events that have occurred at the devices other than the first device, and

wherein the first event data that reports events that have occurred at the system unit includes:

an indication that a reader device received a credential when the peripheral device is a reader device, or an indication that a camera detected motion when the peripheral device is a camera.

23. The method of claim 21,

removing the first event data that is oldest from the first data area to prevent the first data area from occupying more than the first maximum memory space, and

removing the second event data that is oldest from the second data area to prevent the second data area from occupying more than the second maximum memory space.

24. The method of claim 23, further comprising:

determining if the device is busy and determining that another one of the devices is associated with a subscription to the first event data;

stopping the distribution of the first event data to the other devices through the peer-to-peer network when determined that the device is busy,

continuing to store the first event data originating from the device in the first data area when determined that the device is busy,

sending the first event data to the other one of the devices when determined that the device is busy and that the other one of the devices is associated with a subscription to the first event data.