Dynamic security system

• US 20030177370A1
• Filed: 03/16/2002
• Published: 09/18/2003
• Est. Priority Date: 03/16/2002
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Smith, Mark T.
• Granted Patent: US 7,222,239 B2
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G07C 2009/0096 Electronic keys comprising a non-biometric sensor
• CPC Class Codes: G07C 9/21 having a variable access code
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards

Abstract

A security system involving a user includes a token attachable to the user. The token is associated with the user while attached to the user. The association is automatically discontinued when the token is detached from the user.

Claims

1. A security system involving a user, the system comprising:

a token attachable to the user;

the token being associated with the user while attached to the user;

the association being automatically discontinued when the token is detached from the user.

2. The system of claim 1, wherein the token includes an attachment sensor for determining when the token is detached from the user.

3. The security system of claim 1, wherein the token includes data storage for storing security information, the token expunging the security information when the token is detached from the user;

whereby the association is discontinued when the security information is expunged.

4. The system of claim 3, wherein the token is attached to the user before the security information is stored;

and wherein the association between the token and the user is created when the security information is stored.

5. The system of claim 3, wherein the token includes a transceiver for transmitting and receiving at least some of the security information.

6. The system of claim 1, wherein the token includes a biometric sensor for obtaining identification information about the user.

7. The system of claim 1, wherein the token includes means for authenticating the user.

8. The system of claim 1, wherein the token includes at least one context sensor.

9. The system of claim 1, wherein the token includes:

an attachment sensor;

a processor; and

data storage;

the processor storing security information in the data storage after the sensor indicates that the token has been attached to the user;

the processor expunging the security information from the data storage when the sensor detects that the body has been removed from the user.

10. The system of claim 1, further comprising access control means for an asset, the means not allowing the user to access the asset if a security path between the user, the token, and the means is not established.

11. The system of claim 10, wherein a leg of the security path is established while the token communicates at least some of the security information with the access control means.

12. The system of claim 11, wherein a leg of the security path is established while the token is attached to the user.

13. The system of claim 1, further comprising means for accessing security information about the user, and sending the security information to the token.

14. The system of claim 13, wherein the token generates a one-time use encryption key and sends the key to the means;

and wherein the means uses the key to encrypt the security information and send the encrypted security information to the token.

15. The system of claim 1, further comprising control access means for receiving at least some security information from the token;

and means for receiving at least some security information from the control access means, making a control access decision, and supplying the control access decision to the control access means.

16. The system of claim 1, wherein the token includes data storage for storing security information, the security information indicating a security violation condition, and wherein the token expunges the security information when the condition is detected;

whereby the association is discontinued when the security information is expunged.

17. Apparatus controlling a user'"'"'s access to an asset, the apparatus comprising:

first means for detecting attachment and detachment of the apparatus to the user; and

second means for storing information about the user'"'"'s access, the information stored after the first means indicates that the apparatus has been attached;

the second means expunging the information when the first means detects that the token has been detached.

18. A security system comprising:

a token including an attachment sensor and data storage, the token storing security information after the sensor indicates attachment to a user, the token expunging the security information when the sensor detects detachment from the user; and

an access control device for an asset, the means not allowing the user to access the asset if a security path between the user, the token, and the access control device is not established.

19. A method of using a token to secure a user, the method comprising.

forming an information-related association between the token and the user when the token is attached to the user;

sensing when the token is removed from the user; and

immediately and automatically breaking the association when removal is sensed.

20. A security method involving a person, an agent, and a data storage device;

the method comprising;

securing the data storage device to the person;

storing security information in the data storage device after the data storage device has been secured to the person;

allowing the person to access the agent while the token is secured to the person; and

denying the person access to the agent after the data storage device has been removed from the person.

21. A device for securing a user, the device comprising:

a body securable to the user;

a sensor for detecting when the body is unsecured from the user;

a processor; and

data storage;

the processor storing security information related to the user in the data storage when the sensor detects that the body is secured to the user;

the processor expunging the security information from the data storage when the sensor detects that the body has been removed from the user.

22. The device of claim 21, further comprising a biometric sensor for obtaining identification information about the user.

23. The device of claim 21, further comprising a transmitter for transmitting at least some of the security information.

24. The device of claim 23, wherein the security information is transmitted over a secure channel.

25. The device of claim 21, wherein the processor also generates a one-time use key for encryption of security information.

26. The device of claim 21, further comprising sensors for obtaining context information, the context information being evaluated against the security information.

27. The device of claim 21, further comprising a transmitter for transmitting a tracking signal.