Fault tolerant security system, method and apparatus

• US 7,644,299 B2
• Filed: 03/02/2007
• Issued: 01/05/2010
• Est. Priority Date: 03/02/2007
• Status: Expired due to Fees

• Current Assignee: Proprietary Controls Systems Corp. (TTIK, Inc.)
• Original Assignee: Proprietary Controls Systems Corp. (TTIK, Inc.)
• Inventors: Kosaka, Mas
• Primary Examiner(s): McCarthy; Christopher S
• Application Number:
  US11/713,342
• Publication Number:
  US 20080216156A1
• Time in Patent Office: 1,040 Days
• Field of Search: 705/18, 902/3, 902/4, 902/5
• US Class Current: 714/4.1
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

A security system comprises a host system, a plurality of master controllers and a plurality of sub-controllers, wherein each sub-controller is assigned a specific master controller as well as alternate master controllers for communication access upon failure of the primary master controller. The host, master controller and sub-controllers are all coupled by a series of primary communication networks and paths and have multiple alternative communication network paths which function should there be a failure of the primary communication network. The host system comprises system and application software, data storage devices and communication ports to support the application requirements of the master controller, sub-controller network and access control devices attached thereto necessary to support a fault tolerant network. The system is configured with backup communication networks between the components so that upon failure of one or more components or communication paths the function of the failed component or path is assumed by alternative predesignated components or paths such that the operations of the system is not interrupted.

Claims

1. A security system, comprising:

a host system, the host system comprising;

application software;

a plurality of communication ports; and

a storage database containing access and security information;

a plurality of master controllers, each master controller having a plurality of communication ports; and

a plurality of sub-controllers, each sub-controller comprising a plurality of communication ports, each sub-controller being assigned to a specific master controller and having designated alternate master controllers assigned for backup communication;

the host system, plurality of master controllers and sub-controllers all being coupled by a network in communication with the communication ports;

wherein the plurality of master controllers comprise a first master controller and at least a second master controller;

wherein the plurality of sub-controllers comprise a first sub-controller and at least a second sub-controller; and

wherein the plurality of communication ports comprise a primary communication port and at least a secondary communication port on each of the master controllers and sub-controllers, wherein the first master controller is assigned to a first sub-controller and communicates with the first sub-controller via primary communication ports, and wherein the second master controller communicates with the second sub-controller via primary communication ports, and the primary and secondary communication ports are each configured to incorporate different communication modalities from the communication modalities of the primary communication ports, pre-selected secondary communication ports assuming communication between designated master controllers and sub-controllers upon the malfunction of a primary communication port; and

the primary communication ports and the secondary communication ports are configured to incorporate a communication modality selected from the group consisting of a LAN, wireless, wireless LAN, and power over Ethernet.

2. The security system of claim 1, further comprising one or more additional host systems, wherein a secondary host system is configured to activate upon the failure of a primary host system or any of the one or more additional host systems.

3. The security system of claim 1 having multiple access control devices, wherein each sub-controller has one or more access control devices coupled thereto.

4. The security system of claim 1 further comprising an access control device, the access control device being associated with a pre-assigned sub-controller.

5. The security system of claim 4, wherein the access control device further comprises a reader configured to receive user provided identification information, the user provided identification information being compared to stored user provided identification information for access authorization.

6. The security system of claim 5 wherein the stored user provided identification information is resident in a memory portion of the host system, a master controller or a sub-controller in communication with the access control device.

7. The security system of claim 5 wherein the reader is configured to receive user identification information from a card inserted in the reader or in proximity of the reader.

8. The security system of claim 5 wherein the readers is configured to obtain user identification information from user provided cards selected from the group consisting of magnetic strip cards, bar code bearing cards, proximity cards, smart cards and RF cards, user carried signal generating devices, and biometric characteristics of the user ascertainable by the reader.

9. The security system of claim 1, wherein the each of the master controllers and sub-controllers comprise:

access management software; and

a memory storage device containing at least that portion of the access and security information stored in the host storage database required to operate access control devices which are in primary or backup communication therewith.