Cooperative biometrics abnormality detection system (C-BAD)

• US 20030217024A1
• Filed: 05/14/2002
• Published: 11/20/2003
• Est. Priority Date: 05/14/2002
• Status: Active Grant

• Current Assignee: The Right Problem LLC
• Original Assignee: Robert William Kocher
• Inventors: Kocher, Robert William
• Granted Patent: US 7,028,018 B2
• Time in Patent Office: Days
• US Class Current: 706/47
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/556 involving covert channels, i.e. data leakage between processes inhibiting the analysis of circuitry or operation with measures against power attack G06F21/755
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G08B 29/24 Self-calibration, e.g. compensating for environmental drift or ageing of components
• CPC Class Codes: H04L 63/302 gathering intelligence information for situation awareness or reconnaissance

Abstract

The Cooperative Biometrics Abnormality Detection (C-BAD) system is a network of sensors that track personnel throughout physical locations, communications, and computer systems. These systems are then linked to a central computer that contains detailed information on the individual, and rule-based risk, relationship, and abnormality models that will deter, detect, and document possible insiders. It is only at this point that C-BAD will then objectively report suspicious activities to a supervisory team for further investigation. (C-BAD) This System replaces previous current labor-intensive, subjective analysis, which has proven to be a weak deterrent and fraught with human error. C-BAD uses a full spectrum of sensors that identify personnel through the use of contact, contactless, biometrics, smart cards, or a combination of any one of these. The C-BAD central monitoring computer contains an inference engine based on artificial intelligence or a rule-based system, which reviews databases and furnished information.

Claims

1. An integrated sensor and information system comprising:

a central computer system with rule-based software;

said central computer containing models selected from a group consisting of abnormality, normality, personnel risks, security compartments, event reporting, external event resolution, investigation procedures, external resolution, external relationships resolution, and archiving repository;

personnel identification sensors selected from the group consisting of contactless sensors, proximity sensors, tokens, keys, cards, and biometrics;

a communication network to link said sensors to said central computer;

said personnel identification sensors configured as physical access sensors selected from the group consisting of hallways sensors, floors and areas sensors, safes, and cabinets sensors, internal and external doors sensors; and

said personnel identification sensors configured as information access sensors selected from the group consisting of computers, printers, files, and copy or duplication commands.

2. The integrated sensor and information system of claim 1, wherein said personnel identification sensors are configured as communications access sensors selected from the group consisting of classified and unclassified telephones, intranet, Internet, fax, video, and other methods of communication.

3. The integrated sensor and information system of claim 1, wherein said computer receives input from an external personnel relationship database.

4. The integrated sensor and information system of claim 1, wherein said computer receives input from an external personnel events database.

5. The integrated sensor and information system of claim 1, wherein said sensors consist of multiple biometric sensors.

6. The integrated sensor and information system of claim 1, wherein said central computer contains an artificial intelligent inference engine.

7. The integrated sensor and information system of claim 1, wherein said computer contains a rule-based expert system.

8. The method of detecting organizational internal threats comprising the steps of monitoring a sensor suite of physical access, information access sensors, and communications sensors, where as the monitoring system has a rule based, artificial intelligent system to indicate abnormalities in pattern, procedures or activities and notifies an investigation team for abnormality resolution.

9. The method of detecting organizational internal threats of claim 8 wherein said sensors are biometrics sensors.