WO2010106474A1 - Systems and methods for managing access control devices - Google Patents
Systems and methods for managing access control devices Download PDFInfo
- Publication number
- WO2010106474A1 WO2010106474A1 PCT/IB2010/051067 IB2010051067W WO2010106474A1 WO 2010106474 A1 WO2010106474 A1 WO 2010106474A1 IB 2010051067 W IB2010051067 W IB 2010051067W WO 2010106474 A1 WO2010106474 A1 WO 2010106474A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- configuration data
- access control
- access
- mode
- data
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/20—Individual registration on entry or exit involving the use of a pass
- G07C9/27—Individual registration on entry or exit involving the use of a pass with central registration
Definitions
- the present invention relates to access control, and more particularly to systems and methods for managing access control devices.
- some embodiments include access control devices themselves, and/or software operable on access control devices or other devices.
- Embodiments of the invention have been particularly developed for allowing the efficient implementation of a threat level across an access control environment. Although the invention is described hereinafter with particular reference to such applications, it will be appreciated that the invention is applicable in broader contexts.
- Commissioning refers to a process whereby the devices are initialized to operate within a common access control environment.
- Configuration refers to a process whereby configuration data is downloaded to the individual devices, thereby to allow those devices to function appropriately. For example, configuration data affects how a device will respond to an access request from a user.
- One embodiment provides an access control device including: a processor for allowing the execution of software instructions, including software instructions for processing data indicative of access requests on the basis of an applied set of configuration data and selectively allowing or denying the respective requests; a memory module coupled to the processor, the memory module storing data indicative of the software instructions and configuration data, wherein the configuration data stored by the device includes a plurality of uniquely applicable sets of configuration data, wherein each set, when applied, causes the device to function in accordance with a respective mode of operation; and a communications interface that is configured for receiving data indicative of a command to change modes of operation, wherein in response to the command the software instructions cause the device to cease applying a current set of configuration data and commence applying a different set of configuration data identified by the command.
- One embodiment provides a method performable by an access control device, the method including: applying a first set of configuration data stored locally at the access control device, the first set of configuration data, when applied, causing the device to function in a first mode of operation; whilst functioning in the first mode of operation, processing data indicative of access requests on the basis of the first set of configuration data; receiving data indicative of a command to change to a second mode of operation; in response to the command, ceasing application of the first set of configuration data and commencing application of a second set of configuration data, wherein the second set of configuration data is also stored locally at the access control device, the second set of configuration data, when applied, causing the device to function in the second mode of operation; and whilst functioning in the second mode of operation, processing data indicative of access requests on the basis of the second set of configuration data.
- One embodiment provides access control system including: a plurality of access control devices as described herein; and a central server in communication with the plurality of access control devices via a network, wherein the central server is configured to provide to the plurality of devices data indicative of a command to change modes of operation, wherein in response to the command, the devices each cease applying a current set of configuration data and commence applying a different set of configuration data identified by the command.
- One embodiment provides a method for controlling an access control environment, wherein the access control environment includes a plurality of access control devices as described herein, the method including providing to the devices data indicative of a command to change modes of operation, wherein in response to the command the software instructions cause the device to cease applying a current set of configuration data and commence applying a different set of configuration data identified by the command, wherein the different set of configuration data is locally stored at the devices.
- One embodiment provides a hardware component configured device configured to perform a method as described herein.
- One embodiment provides a computer program product configured device configured to perform a method as described herein.
- One embodiment provides a carrier medium carrying computer executable code that, when executed on one or more processors, cause the performance of a method as described herein.
- FIG. 1 schematically illustrates an access control environment according to one embodiment.
- FIG. 2 schematically illustrates an access control device according to one embodiment.
- FIG. 3A schematically illustrates an access control environment according to one embodiment.
- FIG. 3B schematically illustrates an access control environment according to one embodiment.
- FIG. 4 illustrates a method according to one embodiment.
- an access control device is configured to function on the basis of an applied set of configuration data. For example, the manner in which the device processes an access request is dependent on the configuration data.
- a device according to an embodiment of the present invention is configured to locally maintain a plurality of uniquely applicable sets of configuration data. Each set, when applied, causes the device to function in accordance with a respective mode of operation.
- the device is configured to change which set of configuration data is applied in response to a predetermined command, thereby allowing the device to shift between modes of operation relatively quickly and without the need to download additional configuration data.
- the modes of operation correspond to threat levels, and the use of such access control devices allows a change in threat level to be applied across an access control environment quickly and with minimal bandwidth requirements.
- FIG. 1 schematically illustrates an access control environment 101 according to one embodiment.
- Environment 101 includes connected access control devices 102 to 104 and disconnected access control devices 105 to 107.
- the primary point of difference between the connected access control devices and the disconnected access control devices is that the former are connected to a network 108 (such as a TCP/IP or other network), whilst the latter are not. All of the access control devices have been commissioned for operation within environment 101, and provided configuration data to allow such operation.
- An administration server 110 is also connected to network 108, and the connected access control devices are able to communicate with this administration server over the network. In this manner, server 110 is able to communicate with connected devices 105 to 107.
- server 110 is schematically illustrated as a single component, in some cases it is defined by a plurality of distributed networked components.
- each of access control devices 102 to 107 include similar hardware and software components, and each that device is configured to progress between a connected state and a disconnected state depending on whether or not a connection to network 108 and central server is available.
- the access control devices are designed, from a hardware perspective, to allow/deny control to a variety of different locations or functionalities.
- the term "access control device” refers generally to any device having an access control functionality. That is, any device with which a user interacts to gain access to a physical region or virtual functionality. Common examples include devices that control locking mechanisms on doors or other barriers.
- An access control device includes either or both of hardware and software components.
- FIG. 2 illustrates an exemplary access control device 201 according to one embodiment.
- Device 201 is configured for integration into an access control environment such as environment 101 of FIG. 1.
- Device 201 includes a processor 202 coupled to a memory module 203.
- Memory module 203 carries software instructions 204 which, when executed on processor 202, allow device 201 to perform various methods and functionalities described herein, which in themselves also provide embodiments of the present invention.
- device 201 is configured for selectively granting access through a door 207 having a locking mechanism 208. When in a locked state, this mechanism prevents access through the door, and when in an unlocked state, permits access through the door.
- processor 201 is coupled to an access signal interface 209 which selectively provides to locking mechanism 208 signals for unlocking and/or unlocking the door (in some cases the door retimes to a default locked state automatically, without need for an explicit "lock" signal). Whether or not the locked state is default depends on the configuration data applied at a particular point in time, although for the present example it is considered that the locked state is default, and unlocking of the door requires allowance of an access request.
- a user wishing to gain access through door 207 makes an access request via device 201.
- this access request is initiated when the user presents (indicated by arrow 211) an access card to a card reader 210, which is also coupled to processor 201.
- processor 202 Upon presentation of the access card, processor 202 performs an authentication/authorization process, influenced by configuration data, to determine whether or not access should be granted (i.e. the access request allowed).
- interface 209 provides to mechanism 208 a signal thereby to progress mechanism 208 to the unlocked state for a predefined period of time, typically the order of a few seconds, before returning to the locked state. If the authentication process is unsuccessful, mechanism 208 remains in the locked state, and access is denied.
- card reader 210 varies between embodiments depending on the nature of access card that is used in a given access control environment.
- access cards are in the form of smartcards
- reader 210 is a smartcard reader.
- alternate components are provided for the same purpose, including the likes of magnetic card readers, proximity readers, biometric readers, keypads, and so on.
- multiple readers are present, such as a smartcard reader in combination with a biometric reader (for instance an iris scanner).
- Device 201 additionally includes a communications interface 212, such as a wired or wireless Ethernet networking interface, or the like. This allows device 201 to communicate with remote components, such as a central server (at least when the device operates in a connected state). In this regard, device 201 is configured to receive a control signal 213 from a central server, or other networked component.
- a communications interface 212 such as a wired or wireless Ethernet networking interface, or the like. This allows device 201 to communicate with remote components, such as a central server (at least when the device operates in a connected state).
- device 201 is configured to receive a control signal 213 from a central server, or other networked component.
- An access control device operates on the basis of configuration data. That is, the manner in which the device operates is dependent on the configuration data applied at a given point in time.
- software instructions 204 include software instructions for processing data indicative of access requests, and this processing is performed on the basis of an applied set of configuration data.
- a given access request might be allowed based on one applied set of configuration data, but denied were another set of configuration data to be applied.
- This configuration data also influences other functionalities of the access control device.
- an access control device maintains only a single set of configuration data.
- configuration data is downloaded during an initial configuration of a device, and updated configuration data is downloaded to the device over time as required.
- multiple sets of configuration data are downloaded to a device, with one being applied and the others remaining dormant in memory. This allows for a change in device configuration without a need to download new configuration data; the applied set is simply interchanged for one of the dormant sets.
- a set of configuration data includes a plurality of aspects of data, optionally including one or more of the aspects of data outlined below:
- Visit Access card rules for example some sets of configuration data block authorization for visitor access cards
- supervisor requirements for example some sets of configuration data require a supervisor present before access is granted
- minimum occupancy requirements for example requiring a minimum number of authorized persons to enter/exit/remain with a zone at any given point in time.
- Scheduling settings include, for example, scheduling matters, such as where a device adopts a certain default locked/unlocked state during one time period, and another default locked/unlocked state during a different time period. Scheduling settings may also affect settings directly relevant to the processing of access requests, for example by causing these to be varied over time.
- configuration data in some cases causes a device to provide a signal to a surveillance system when predefined criteria are met.
- memory module 203 stores configuration data including a plurality of uniquely applicable sets of configuration data.
- the term “plurality” refers to "two or more”. That is, there may be two sets of configuration data, or more than two sets of configuration data.
- configuration data set 220 there are several sets of configuration data: configuration data set 220 and configuration data sets 221 to 224.
- set 220 is identified as the "active" configuration data (that which is applied) and sets 221 to 224 as “dormant” (that which is not applied).
- Sets of configuration data are "uniquely applicable” in the sense that only one set is able to be applied at any given time, with other stored sets remaining dormant in memory.
- FIG. 2 illustrates only a small number of sets of dormant configuration data, there may be other sets of dormant configuration data stored in memory module 203 or elsewhere in device 201.
- Each set of configuration data when applied, causes the device to function in accordance with a respective mode of operation.
- the configuration data includes an n ⁇ set of configuration data that, when applied, causes the device to function in an n ⁇ mode of operation. For example:
- Communications interface 212 is configured for receiving data indicative of a command to change modes of operation.
- software instructions 104 cause device 201 to cease applying a current set of configuration data and commence applying a different set of configuration data identified by the command.
- the communications interface is configured for receiving data indicative of a command to change to a second mode of operation, and in response to the command the software instructions cause the device to cease applying the first set of configuration data and commence applying the second set of configuration data.
- such a command causes a specified one of sets 221 to 224 to become active, and set 220 to become dormant in memory.
- data indicative of a command to change modes of operation varies between embodiments. In some cases this data references a mode of operation to be adopted, in other cases it references a set of configuration data to be applied, and in other cases it refers to a threat level (or other criteria) to be applied.
- the data is in some embodiments transmitted over the network to connected access control devices as a TCP/IP signal or the like.
- each set of configuration data corresponds to a respective "threat level”.
- the term "threat level” is used to describe a high-level security assessment.
- the US Department of Homeland Security implements a "threat level” system via their Homeland Security Advisory System. This system uses the following criteria:
- the Homeland Security Advisory System is a color-coded terrorism threat advisory scale.
- the different levels trigger specific actions by federal agencies and state and local governments, and they affect the level of security at some airports and other public facilities.
- threat level is descriptive only, relating to the general concept of a tiered system whereby security or other concerns are categorized at a high-level and in an objective manner.
- a set of configuration data is defined for each threat level, and the resulting sets of configuration data downloaded to the individual access control devices. At any given time, one set of configuration data is applied (preferably corresponding to the current threat level) and the other sets remain dormant in memory.
- an access control device stores in memory:
- a first set of configuration data when applied, causes the software instructions process data indicative of access requests in accordance with a first threat level.
- n 1 set of configuration data, when applied, causes the software instructions process data indicative of access requests in accordance with an n ⁇ threat level.
- a threat level advisory service 301 provides data indicative of a threat level, or change in a threat level. This data is provided to the central server 302 of an access control system. In some embodiments the data is provided by an automated electronic process (for example an automated notification), whist in other cases the data is initially provided electronically via a notification (for example through a news agency, email, or the like), and subsequently manually entered into the central server.
- an automated electronic process for example an automated notification
- a notification for example through a news agency, email, or the like
- the central server When the central server receives data indicative of a change in threat level, it provides a signal to all connected access control devices 303 with which it compatibly interacts.
- access control devices 303 there are “n” access control devices 303, and each maintains configuration data for at least three threat levels, being set 304 A for "threat level A", set 304B for "threat level B", and set 304C for "threat level C”.
- set 304A (corresponding to threat level A) is applied.
- threat level advisory service 301 provides to server 302 data indicative of a change to threat level B.
- server 302 provides to each of devices 303 an instruction to apply set 304B, and those devices apply that set as shown in FIG. 3B.
- data set 304A might differ between devices, for example where those devices behave differently for a given threat level. For example, one device might control access to an area that is restricted to certain personnel during a given threat level, whilst another device might control access to an area that is restricted to other certain personnel during that same threat level. This is optionally managed via system wide configuration, as described below.
- a threat level configuration module 310 being a software-based component allowing a user to define configuration data corresponding to threat levels.
- This module is, as illustrated, operable on central server 302. However, in another embodiment it is operable on a machine in communication with server 302. In some embodiments the module executes on a processor of server 302, although a user interface is presented on a remote terminal via a browser-based implementation or the like.
- module 310 provides a user interface for allowing a user to select between a plurality of threat levels, and adjust various parameters for each of those threat levels. For example, a user is able to select a GUI object corresponding to a particular threat level, and via that object access various menus and options for allowing modification of parameters for that threat level.
- the threat levels are optionally provided with default parameters.
- module 310 allows a user to set up configuration data for a plurality of threat levels on a system-wide level. That is, rather than manually defining individual sets of configuration data for each individual access control device, module 310 provides an interface for defining the meaning of threat levels on a system wide basis, and from that automatically defines the actual sets of configuration data for the individual devices.
- FIG. 4 illustrates a method for configuring threat levels in an access control environment according to one embodiment. This method is described in terms of a configuration module method, which is indicative of processes performed by the configuration module, and a user method, which is indicative of actions undertaken by a human user.
- the configuration module presents an initial user interface, which allows a user to select between one of a plurality of threat levels. These may be predefined, or available for user creation.
- a user selects a threat level at step 402, and the configuration module presents a modification interface for that threat level at step 403.
- the modification interface provides various prompts, menus and/or and fields for allowing the user to modify various parameters for a threat level.
- the presently considered parameters are:
- Behavior parameters These define how a given access control device should behave under a given threat level. For example, this may include settings such as allow/block visitor cards, supervision requirements, minimum occupancy requirements, default door states (locked/unlocked), authentication needs, authorization settings, camera recording settings, and so on.
- Access right parameters These define which cardholders/categories of cardholders have access to a given door (i.e. can traverse a given access control device) for the relevant threat level.
- the user decides which parameter to modify at step 404, and optionally modifies name and description at 405 (leading to a name/description update at 406), behavior parameters at 407 (leading to a behavior parameter update at 408), or access right parameters at 409 (leading to a access right parameter update at 410). Whichever of these is selected, the method progresses to decision 411, where the user decides whether or not to modify other parameters, based on which the method either loops to step 404, or progresses to decision 412. At decision 412, the user decides whether configuration is complete, and either selects another threat level at 402, or provides and indication (explicit or implicit) that configuration is complete.
- the configuration module defines configuration data for download to the individual control devices at step 414. This is downloaded to the devices at step 415, using one of the various known methodologies for downloading configuration data to access control devices. For example, this may include network transfer, download to portable media for provision to disconnected devices, and so on. [0060] Once the configuration data is downloaded, the devices initially adopt a specified default threat level. It will be appreciated that a simple command is all that is required to progress the devices to a different threat level.
- an access control environment often includes disconnected devices, being access control devices that are not connected to the central server via a network.
- the above disclosure deals with a situation where threat level changes are communicated via a command provided via the network. It will be appreciated that other approaches are required to communicate such a command to disconnected devices. Some exemplary approaches for achieving that goal are discussed below.
- a relatively rudimentary approach is to simply manually deliver the command to disconnected devices, for example by presenting a smartcard or other carrier substrate (e.g. USB device) to the individual devices, or by connecting a portable computational platform (e.g. notebook computer, PDA, smartphone or the like) and uploading the command directly.
- a smartcard or other carrier substrate e.g. USB device
- a portable computational platform e.g. notebook computer, PDA, smartphone or the like
- a more advanced (and less resource intensive) approach is to use ordinary user interactions to propagate a command.
- smartcards are used for the purpose of providing access requests.
- timestamped threat level information is maintained on smartcards, and devices are configured to read from each smartcard timestamped data indicative of a threat level.
- the device selectively either:
- threat levels cause devices to make additional modifications to smartcards. For example, various categories of user may have their cards cancelled, so that they can not be used in future.
- processor may refer to any device or portion of a device that processes electronic data, e.g., from registers and/or memory to transform that electronic data into other electronic data that, e.g., may be stored in registers and/or memory.
- a "computer” or a “computing machine” or a “computing platform” may include one or more processors.
- the methodologies described herein are, in one embodiment, performable by one or more processors that accept computer-readable (also called machine-readable) code containing a set of instructions that when executed by one or more of the processors carry out at least one of the methods described herein.
- Any processor capable of executing a set of instructions (sequential or otherwise) that specify actions to be taken are included.
- a typical processing system that includes one or more processors.
- Each processor may include one or more of a CPU, a graphics processing unit, and a programmable DSP unit.
- the processing system further may include a memory subsystem including main RAM and/or a static RAM, and/or ROM.
- a bus subsystem may be included for communicating between the components.
- the processing system further may be a distributed processing system with processors coupled by a network. If the processing system requires a display, such a display may be included, e.g., an liquid crystal display (LCD) or a cathode ray tube (CRT) display. If manual data entry is required, the processing system also includes an input device such as one or more of an alphanumeric input unit such as a keyboard, a pointing control device such as a mouse, and so forth.
- the processing system in some configurations may include a sound output device, and a network interface device.
- the memory subsystem thus includes a computer-readable carrier medium that carries computer-readable code (e.g., software) including a set of instructions to cause performing, when executed by one or more processors, one of more of the methods described herein.
- computer-readable code e.g., software
- the software may reside in the hard disk, or may also reside, completely or at least partially, within the RAM and/or within the processor during execution thereof by the computer system.
- the memory and the processor also constitute computer-readable carrier medium carrying computer-readable code.
- a computer-readable carrier medium may form, or be includes in a computer program product.
- the one or more processors operate as a standalone device or may be connected, e.g., networked to other processor(s), in a networked deployment, the one or more processors may operate in the capacity of a server or a user machine in server-user network environment, or as a peer machine in a peer-to-peer or distributed network environment.
- the one or more processors may form a personal computer (PC), a tablet PC, a set-top box (STB), a Personal Digital Assistant (PDA), a cellular telephone, a web appliance, a network router, switch or bridge, or any machine capable of executing a set of instructions (sequential or otherwise) that specify actions to be taken by that machine.
- PC personal computer
- PDA Personal Digital Assistant
- machine or “device” shall also be taken to include any collection of machines that individually or jointly execute a set (or multiple sets) of instructions to perform any one or more of the methodologies discussed herein.
- At least one embodiment of various methods described herein is in the form of a computer-readable carrier medium carrying a set of instructions, e.g., a computer program that are for execution on one or more processors, e.g., one or more processors that are part of building management system.
- a computer-readable carrier medium carrying computer readable code including a set of instructions that when executed on one or more processors cause the a processor or processors to implement a method.
- aspects of the present invention may take the form of a method, an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects.
- the present invention may take the form of carrier medium (e.g., a computer program product on a computer-readable storage medium) carrying computer-readable program code embodied in the medium.
- the software may further be transmitted or received over a network via a network interface device. While the carrier medium is shown in an exemplary embodiment to be a single medium, the term "carrier medium" should be taken to include a single medium or multiple media (e.g., a centralized or distributed database, and/or associated caches and servers) that store the one or more sets of instructions.
- carrier medium shall also be taken to include any medium that is capable of storing, encoding or carrying a set of instructions for execution by one or more of the processors and that cause the one or more processors to perform any one or more of the methodologies of the present invention.
- a carrier medium may take many forms, including but not limited to, non-volatile media, volatile media, and transmission media.
- Non-volatile media includes, for example, optical, magnetic disks, and magneto-optical disks.
- Volatile media includes dynamic memory, such as main memory.
- Transmission media includes coaxial cables, copper wire and fiber optics, including the wires that comprise a bus subsystem. Transmission media also may also take the form of acoustic or light waves, such as those generated during radio wave and infrared data communications.
- carrier medium shall accordingly be taken to included, but not be limited to, solid-state memories, a computer product embodied in optical and magnetic media, a medium bearing a propagated signal detectable by at least one processor of one or more processors and representing a set of instructions that when executed implement a method, a carrier wave bearing a propagated signal detectable by at least one processor of the one or more processors and representing the set of instructions a propagated signal and representing the set of instructions, and a transmission medium in a network bearing a propagated signal detectable by at least one processor of the one or more processors and representing the set of instructions.
- any one of the terms comprising, comprised of or which comprises is an open term that means including at least the elements/features that follow, but not excluding others.
- the term comprising, when used in the claims should not be interpreted as being limitative to the means or elements or steps listed thereafter.
- the scope of the expression a device comprising A and B should not be limited to devices consisting only of elements A and B.
- Any one of the terms including or which includes or that includes as used herein is also an open term that also means including at least the elements/features that follow the term, but not excluding others. Thus, including is synonymous with and means comprising.
- Coupled when used in the claims, should not be interpreted as being limitative to direct connections only.
- the terms “coupled” and “connected,” along with their derivatives, may be used. It should be understood that these terms are not intended as synonyms for each other.
- the scope of the expression a device A coupled to a device B should not be limited to devices or systems wherein an output of device A is directly connected to an input of device B. It means that there exists a path between an output of A and an input of B which may be a path including other devices or means.
- Coupled may mean that two or more elements are either in direct physical or electrical contact, or that two or more elements are not in direct contact with each other but yet still co-operate or interact with each other.
Abstract
Described herein are systems and methods for managing access control devices. In overview, an access control device is configured to function on the basis of an applied set of configuration data. For example, the manner in which the device processes an access request is dependent on the configuration data. A device according to an embodiment of the present invention is configured to locally maintain plurality of uniquely applicable sets of configuration data. Each set, when applied, causes the device to function in accordance with a respective mode of operation. The device is configured to change which set of configuration data is applied in response to a predetermined command, thereby allowing the device to shift between modes of operation relatively quickly and without the need to download additional configuration data. In some cases, the modes of operation correspond to threat levels, and the use of such access control devices allows a change in threat level to be applied across an access control environment quickly and with minimal bandwidth requirements.
Description
SYSTEMS AND METHODS FOR MANAGING ACCESS CONTROL DEVICES
FIELD OF THE INVENTION
[0001] The present invention relates to access control, and more particularly to systems and methods for managing access control devices. In particular, some embodiments include access control devices themselves, and/or software operable on access control devices or other devices.
[0002] Embodiments of the invention have been particularly developed for allowing the efficient implementation of a threat level across an access control environment. Although the invention is described hereinafter with particular reference to such applications, it will be appreciated that the invention is applicable in broader contexts.
BACKGROUND
[0003] Any discussion of the prior art throughout the specification should in no way be considered as an admission that such prior art is widely known or forms part of common general knowledge in the field.
[0004] It is known to use a large number of access control devices in an access control environment. Before each individual access control device is able to function as part of the access control environment, those individual devices need to be commissioned and configured. Commissioning refers to a process whereby the devices are initialized to operate within a common access control environment. Configuration refers to a process whereby configuration data is downloaded to the individual devices, thereby to allow those devices to function appropriately. For example, configuration data affects how a device will respond to an access request from a user.
[0005] From time-to-time, there may be a desire to modify configuration data on some or all of the access control devices within an access control environment and, in this regard, there are various known approaches for transferring new configuration data to those devices. For example, it is often possible to transfer such configuration data from a central server to the individual devices via a network, such as a TCP/IP network. Other approaches include the use of portable computers and the like.
[0006] Transferring configuration data can be a time and resource intensive task, and this can lead to complications in situations where there is a desire to make a change across an entire access control environment on an expeditious basis.
[0007] It follows that there is a need in the art for improved systems and methods for managing access control devices.
SUMMARY
[0008] It is an object of the present invention to overcome or ameliorate at least one of the disadvantages of the prior art, or to provide a useful alternative.
[0009] One embodiment provides an access control device including: a processor for allowing the execution of software instructions, including software instructions for processing data indicative of access requests on the basis of an applied set of configuration data and selectively allowing or denying the respective requests; a memory module coupled to the processor, the memory module storing data indicative of the software instructions and configuration data, wherein the configuration data stored by the device includes a plurality of uniquely applicable sets of configuration data, wherein each set, when applied, causes the device to function in accordance with a respective mode of operation; and a communications interface that is configured for receiving data indicative of a command to change modes of operation, wherein in response to the command the software instructions cause the device to cease applying a current set of configuration data and commence applying a different set of configuration data identified by the command.
[0010] One embodiment provides a method performable by an access control device, the method including: applying a first set of configuration data stored locally at the access control device, the first set of configuration data, when applied, causing the device to function in a first mode of operation; whilst functioning in the first mode of operation, processing data indicative of access requests on the basis of the first set of configuration data; receiving data indicative of a command to change to a second mode of operation; in response to the command, ceasing application of the first set of configuration data and commencing application of a second set of configuration data, wherein the second set of configuration data is also stored locally at the access control device, the second set of configuration data, when applied, causing the device to
function in the second mode of operation; and whilst functioning in the second mode of operation, processing data indicative of access requests on the basis of the second set of configuration data.
[0011 ] One embodiment provides access control system including: a plurality of access control devices as described herein; and a central server in communication with the plurality of access control devices via a network, wherein the central server is configured to provide to the plurality of devices data indicative of a command to change modes of operation, wherein in response to the command, the devices each cease applying a current set of configuration data and commence applying a different set of configuration data identified by the command.
[0012] One embodiment provides a method for controlling an access control environment, wherein the access control environment includes a plurality of access control devices as described herein, the method including providing to the devices data indicative of a command to change modes of operation, wherein in response to the command the software instructions cause the device to cease applying a current set of configuration data and commence applying a different set of configuration data identified by the command, wherein the different set of configuration data is locally stored at the devices.
[0013] One embodiment provides a hardware component configured device configured to perform a method as described herein.
[0014] One embodiment provides a computer program product configured device configured to perform a method as described herein.
[0015] One embodiment provides a carrier medium carrying computer executable code that, when executed on one or more processors, cause the performance of a method as described herein.
[0016] Reference throughout this specification to "one embodiment" or "an embodiment" or "some embodiments" means that a particular feature, structure or characteristic described in connection with the embodiment is included in at least one embodiment of the present invention. Thus, appearances of the phrases "in one embodiment" or "in an embodiment" or "in some embodiments" in various places
- A - throughout this specification are not necessarily all referring to the same embodiment, but may. Furthermore, the particular features, structures or characteristics may be combined in any suitable manner, as would be apparent to one of ordinary skill in the art from this disclosure, in one or more embodiments.
BRIEF DESCRIPTION OF THE DRAWINGS
[0017] Embodiments of the invention will now be described, by way of example only, with reference to the accompanying drawings in which:
[0018] FIG. 1 schematically illustrates an access control environment according to one embodiment.
[0019] FIG. 2 schematically illustrates an access control device according to one embodiment.
[0020] FIG. 3A schematically illustrates an access control environment according to one embodiment.
[0021] FIG. 3B schematically illustrates an access control environment according to one embodiment.
[0022] FIG. 4 illustrates a method according to one embodiment.
DETAILED DESCRIPTION
[0023] Described herein are systems and methods for managing access control devices. In overview, an access control device is configured to function on the basis of an applied set of configuration data. For example, the manner in which the device processes an access request is dependent on the configuration data. A device according to an embodiment of the present invention is configured to locally maintain a plurality of uniquely applicable sets of configuration data. Each set, when applied, causes the device to function in accordance with a respective mode of operation. The device is configured to change which set of configuration data is applied in response to a predetermined command, thereby allowing the device to shift between modes of operation relatively quickly and without the need to download additional configuration data. In some cases, the modes of operation correspond to threat levels, and the use of such access control
devices allows a change in threat level to be applied across an access control environment quickly and with minimal bandwidth requirements.
[0024] Although examples considered herein are focused on access control devices, in other embodiments implementation occurs in respect of other devices, such as other devices in a broader security system (e.g. control systems configured for intrusion detection and/or video surveillance).
ACCESS CONTROL ENVIRONMENT
[0025] FIG. 1 schematically illustrates an access control environment 101 according to one embodiment. Environment 101 includes connected access control devices 102 to 104 and disconnected access control devices 105 to 107. The primary point of difference between the connected access control devices and the disconnected access control devices is that the former are connected to a network 108 (such as a TCP/IP or other network), whilst the latter are not. All of the access control devices have been commissioned for operation within environment 101, and provided configuration data to allow such operation.
[0026] An administration server 110 is also connected to network 108, and the connected access control devices are able to communicate with this administration server over the network. In this manner, server 110 is able to communicate with connected devices 105 to 107.
[0027] Although server 110 is schematically illustrated as a single component, in some cases it is defined by a plurality of distributed networked components.
[0028] For the sake of the present disclosure, it is assumed that each of access control devices 102 to 107 include similar hardware and software components, and each that device is configured to progress between a connected state and a disconnected state depending on whether or not a connection to network 108 and central server is available. However, in other embodiments a variety of different access control devices are used. For example, in some embodiments the access control devices are designed, from a hardware perspective, to allow/deny control to a variety of different locations or functionalities.
[0029] In the context of the present disclosure, the term "access control device" refers generally to any device having an access control functionality. That is, any device with which a user interacts to gain access to a physical region or virtual functionality. Common examples include devices that control locking mechanisms on doors or other barriers. An access control device includes either or both of hardware and software components.
ACCESS CONTROL DEVICE
[0030] FIG. 2 illustrates an exemplary access control device 201 according to one embodiment. Device 201 is configured for integration into an access control environment such as environment 101 of FIG. 1. Device 201 includes a processor 202 coupled to a memory module 203. Memory module 203 carries software instructions 204 which, when executed on processor 202, allow device 201 to perform various methods and functionalities described herein, which in themselves also provide embodiments of the present invention.
[0031] In the present example, device 201 is configured for selectively granting access through a door 207 having a locking mechanism 208. When in a locked state, this mechanism prevents access through the door, and when in an unlocked state, permits access through the door. To this end, processor 201 is coupled to an access signal interface 209 which selectively provides to locking mechanism 208 signals for unlocking and/or unlocking the door (in some cases the door retimes to a default locked state automatically, without need for an explicit "lock" signal). Whether or not the locked state is default depends on the configuration data applied at a particular point in time, although for the present example it is considered that the locked state is default, and unlocking of the door requires allowance of an access request.
[0032] A user wishing to gain access through door 207 makes an access request via device 201. For the sake of this example, this access request is initiated when the user presents (indicated by arrow 211) an access card to a card reader 210, which is also coupled to processor 201. Upon presentation of the access card, processor 202 performs an authentication/authorization process, influenced by configuration data, to determine whether or not access should be granted (i.e. the access request allowed). In the event that the authentication/authorization process is successful, interface 209 provides to
mechanism 208 a signal thereby to progress mechanism 208 to the unlocked state for a predefined period of time, typically the order of a few seconds, before returning to the locked state. If the authentication process is unsuccessful, mechanism 208 remains in the locked state, and access is denied.
[0033] The nature of card reader 210 varies between embodiments depending on the nature of access card that is used in a given access control environment. In the embodiment of FIG. 2, access cards are in the form of smartcards, and reader 210 is a smartcard reader. However, in other embodiments alternate components are provided for the same purpose, including the likes of magnetic card readers, proximity readers, biometric readers, keypads, and so on. In some cases multiple readers are present, such as a smartcard reader in combination with a biometric reader (for instance an iris scanner).
[0034] Device 201 additionally includes a communications interface 212, such as a wired or wireless Ethernet networking interface, or the like. This allows device 201 to communicate with remote components, such as a central server (at least when the device operates in a connected state). In this regard, device 201 is configured to receive a control signal 213 from a central server, or other networked component.
CONFIGURATIONDATA
[0035] An access control device operates on the basis of configuration data. That is, the manner in which the device operates is dependent on the configuration data applied at a given point in time. For example, software instructions 204 include software instructions for processing data indicative of access requests, and this processing is performed on the basis of an applied set of configuration data. A given access request might be allowed based on one applied set of configuration data, but denied were another set of configuration data to be applied. This configuration data also influences other functionalities of the access control device.
[0036] Typically, an access control device maintains only a single set of configuration data. In known situations, such configuration data is downloaded during an initial configuration of a device, and updated configuration data is downloaded to the device over time as required. However, in accordance with the present embodiments, multiple sets of configuration data are downloaded to a device, with one being applied and the
others remaining dormant in memory. This allows for a change in device configuration without a need to download new configuration data; the applied set is simply interchanged for one of the dormant sets.
[0037] A set of configuration data includes a plurality of aspects of data, optionally including one or more of the aspects of data outlined below:
• Settings directly relevant to the processing of access requests, such as authentication/authorization settings and/or other access permission settings. Specific examples include visitor access card rules (for example some sets of configuration data block authorization for visitor access cards), supervisor requirements (for example some sets of configuration data require a supervisor present before access is granted), minimum occupancy requirements (for example requiring a minimum number of authorized persons to enter/exit/remain with a zone at any given point in time).
• Hardware settings, such as whether a locked/unlocked state is default.
• Scheduling settings. These include, for example, scheduling matters, such as where a device adopts a certain default locked/unlocked state during one time period, and another default locked/unlocked state during a different time period. Scheduling settings may also affect settings directly relevant to the processing of access requests, for example by causing these to be varied over time.
• Special functions. For example, configuration data in some cases causes a device to provide a signal to a surveillance system when predefined criteria are met.
[0038] In the case of device 201, memory module 203 stores configuration data including a plurality of uniquely applicable sets of configuration data. In this sense, the term "plurality" refers to "two or more". That is, there may be two sets of configuration data, or more than two sets of configuration data.
[0039] In the context of FIG. 2, there are several sets of configuration data: configuration data set 220 and configuration data sets 221 to 224. For the sake of the example, set 220 is identified as the "active" configuration data (that which is applied) and sets 221 to 224 as "dormant" (that which is not applied).
[0040] Sets of configuration data are "uniquely applicable" in the sense that only one set is able to be applied at any given time, with other stored sets remaining dormant in memory. Although FIG. 2 illustrates only a small number of sets of dormant configuration data, there may be other sets of dormant configuration data stored in memory module 203 or elsewhere in device 201.
[0041] Each set of configuration data, when applied, causes the device to function in accordance with a respective mode of operation. In terms of the language presently used, the configuration data includes an nΛ set of configuration data that, when applied, causes the device to function in an nώ mode of operation. For example:
• A first set of configuration data that, when applied, causes the device to function in a first mode of operation.
• A second set of configuration data that, when applied causes the device to function in a second mode of operation.
[0042] Communications interface 212 is configured for receiving data indicative of a command to change modes of operation. In response to such a command, software instructions 104 cause device 201 to cease applying a current set of configuration data and commence applying a different set of configuration data identified by the command. For example, when the device is functioning in a first mode of operation, the communications interface is configured for receiving data indicative of a command to change to a second mode of operation, and in response to the command the software instructions cause the device to cease applying the first set of configuration data and commence applying the second set of configuration data. In the context of FIG. 2, such a command causes a specified one of sets 221 to 224 to become active, and set 220 to become dormant in memory.
[0043] The nature of "data indicative of a command to change modes of operation" varies between embodiments. In some cases this data references a mode of operation to be adopted, in other cases it references a set of configuration data to be applied, and in other cases it refers to a threat level (or other criteria) to be applied. The data is in some embodiments transmitted over the network to connected access control devices as a TCP/IP signal or the like.
APPLICATIONTO THREATLEVELS
[0044] Embodiments are described below by reference to a situation where each set of configuration data corresponds to a respective "threat level". The term "threat level" is used to describe a high-level security assessment. For example, the US Department of Homeland Security implements a "threat level" system via their Homeland Security Advisory System. This system uses the following criteria:
• Severe (red): severe risk.
• High (orange): high risk.
• Elevated (yellow): significant risk.
• Guarded (blue): general risk.
• Low (green): low risk.
[0045] In general terms, the Homeland Security Advisory System is a color-coded terrorism threat advisory scale. The different levels trigger specific actions by federal agencies and state and local governments, and they affect the level of security at some airports and other public facilities. In this regard, there is often a link between the System and the manner in which access control environments should be implemented. For example, an escalation in threat levels might have a practical consequence in that greater access control scrutiny is applied in, say, regions of an airport. For example, a particular class of employee may be able to access a particular area under one threat level, but not under another.
[0046] Different threat level systems are used in other jurisdictions and/or for other purposes, including UK Threat Levels, and Vigipirate in France. The present disclosure should not be limited to any such system in isolation, and the use of the term "threat level" is descriptive only, relating to the general concept of a tiered system whereby security or other concerns are categorized at a high-level and in an objective manner.
[0047] In the present embodiments, a set of configuration data is defined for each threat level, and the resulting sets of configuration data downloaded to the individual access control devices. At any given time, one set of configuration data is applied
(preferably corresponding to the current threat level) and the other sets remain dormant in memory.
[0048] In general terms, an access control device according to the present embodiment stores in memory:
• A first set of configuration data, when applied, causes the software instructions process data indicative of access requests in accordance with a first threat level.
• An n"1 set of configuration data, when applied, causes the software instructions process data indicative of access requests in accordance with an nώ threat level.
[0049] Such an embodiment is schematically illustrated in FIG. 3A and FIG. 3B. A threat level advisory service 301 provides data indicative of a threat level, or change in a threat level. This data is provided to the central server 302 of an access control system. In some embodiments the data is provided by an automated electronic process (for example an automated notification), whist in other cases the data is initially provided electronically via a notification (for example through a news agency, email, or the like), and subsequently manually entered into the central server.
[0050] When the central server receives data indicative of a change in threat level, it provides a signal to all connected access control devices 303 with which it compatibly interacts. In the illustrated example, there are "n" access control devices 303, and each maintains configuration data for at least three threat levels, being set 304 A for "threat level A", set 304B for "threat level B", and set 304C for "threat level C".
[0051] In the context of FIG. 3 A, set 304A (corresponding to threat level A) is applied. For the sake of a simple example, it is assumed that threat level advisory service 301 provides to server 302 data indicative of a change to threat level B. As such, server 302 provides to each of devices 303 an instruction to apply set 304B, and those devices apply that set as shown in FIG. 3B.
[0052] It is not necessary that configuration data sets be identical among devices. For example, data set 304A might differ between devices, for example where those devices behave differently for a given threat level. For example, one device might control access to an area that is restricted to certain personnel during a given threat level, whilst another device might control access to an area that is restricted to other certain personnel during
that same threat level. This is optionally managed via system wide configuration, as described below.
SYSTEM WIDE CONFIGURATION
[0053] From an implementation perspective, one embodiment provides a threat level configuration module 310, being a software-based component allowing a user to define configuration data corresponding to threat levels. This module is, as illustrated, operable on central server 302. However, in another embodiment it is operable on a machine in communication with server 302. In some embodiments the module executes on a processor of server 302, although a user interface is presented on a remote terminal via a browser-based implementation or the like.
[0054] For the sake of the present examples, it is considered that module 310 provides a user interface for allowing a user to select between a plurality of threat levels, and adjust various parameters for each of those threat levels. For example, a user is able to select a GUI object corresponding to a particular threat level, and via that object access various menus and options for allowing modification of parameters for that threat level. The threat levels are optionally provided with default parameters.
[0055] In overview, module 310 allows a user to set up configuration data for a plurality of threat levels on a system-wide level. That is, rather than manually defining individual sets of configuration data for each individual access control device, module 310 provides an interface for defining the meaning of threat levels on a system wide basis, and from that automatically defines the actual sets of configuration data for the individual devices.
[0056] FIG. 4 illustrates a method for configuring threat levels in an access control environment according to one embodiment. This method is described in terms of a configuration module method, which is indicative of processes performed by the configuration module, and a user method, which is indicative of actions undertaken by a human user.
[0057] At step 401 the configuration module presents an initial user interface, which allows a user to select between one of a plurality of threat levels. These may be predefined, or available for user creation. A user selects a threat level at step 402, and the
configuration module presents a modification interface for that threat level at step 403. For example, the modification interface provides various prompts, menus and/or and fields for allowing the user to modify various parameters for a threat level. The presently considered parameters are:
• Name and description. For example, these could optionally correspond to names and descriptions for an existing threat level system, such as the Homeland Security Advisory System.
• Behavior parameters. These define how a given access control device should behave under a given threat level. For example, this may include settings such as allow/block visitor cards, supervision requirements, minimum occupancy requirements, default door states (locked/unlocked), authentication needs, authorization settings, camera recording settings, and so on.
• Access right parameters. These define which cardholders/categories of cardholders have access to a given door (i.e. can traverse a given access control device) for the relevant threat level.
[0058] The user decides which parameter to modify at step 404, and optionally modifies name and description at 405 (leading to a name/description update at 406), behavior parameters at 407 (leading to a behavior parameter update at 408), or access right parameters at 409 (leading to a access right parameter update at 410). Whichever of these is selected, the method progresses to decision 411, where the user decides whether or not to modify other parameters, based on which the method either loops to step 404, or progresses to decision 412. At decision 412, the user decides whether configuration is complete, and either selects another threat level at 402, or provides and indication (explicit or implicit) that configuration is complete.
[0059] Following step 413, the configuration module defines configuration data for download to the individual control devices at step 414. This is downloaded to the devices at step 415, using one of the various known methodologies for downloading configuration data to access control devices. For example, this may include network transfer, download to portable media for provision to disconnected devices, and so on.
[0060] Once the configuration data is downloaded, the devices initially adopt a specified default threat level. It will be appreciated that a simple command is all that is required to progress the devices to a different threat level.
APPLYING THREATLEVEL CHANGES TO DISCONNECTED DEVICES
[0061] As noted above, an access control environment often includes disconnected devices, being access control devices that are not connected to the central server via a network. The above disclosure deals with a situation where threat level changes are communicated via a command provided via the network. It will be appreciated that other approaches are required to communicate such a command to disconnected devices. Some exemplary approaches for achieving that goal are discussed below.
[0062] A relatively rudimentary approach is to simply manually deliver the command to disconnected devices, for example by presenting a smartcard or other carrier substrate (e.g. USB device) to the individual devices, or by connecting a portable computational platform (e.g. notebook computer, PDA, smartphone or the like) and uploading the command directly.
[0063] A more advanced (and less resource intensive) approach is to use ordinary user interactions to propagate a command. In the context of the present example, smartcards are used for the purpose of providing access requests. In overview, timestamped threat level information is maintained on smartcards, and devices are configured to read from each smartcard timestamped data indicative of a threat level. Subject to a predetermined authentication/authorization procedure (and other predefined constraints) the device selectively either:
• Adopts the set of configuration data for that threat level. This only occurs where the read data has a more recent timestamp as compared with the threat level being applied by the device. In some cases there are additional constraints for security purposes, one of which might be to prevent reduction in threat level by various classes of user.
• Writes to the smartcard updated timestamped data indicative of a threat level. This occurs where the device has newer threat level information than the smartcard. In
this manner, connected devices begin updating smartcards as soon as a threat level change command is received from a central server and processed.
• Takes no action.
[0064] It will be appreciated that such an approach is particularly effective for propagating threat level changes throughout an access control environment having disconnected devices, in a relatively unobtrusive and resource conscious manner.
[0065] In some cases threat levels cause devices to make additional modifications to smartcards. For example, various categories of user may have their cards cancelled, so that they can not be used in future.
CONCLUSIONSAND INTERPRETATION
[0066] It will be appreciated that the above disclosure provides various systems and methods for managing access control devices, these methods and systems providing distinct advantages and technical contributions over what was previously known in the art. For example, the storage of multiple sets of configuration data locally at individual devices allows substantial modification to device configuration/operation to be effected quickly and efficiently by way of a simple command signal. This is especially significant in respect of disconnected readers, noting that the simple nature of the command signal allows it to be effected by data carried by a conventional access card (in spite of inherent information storage constraints of such access cards) for convenient delivery to disconnected access control devices.
[0067] Unless specifically stated otherwise, as apparent from the following discussions, it is appreciated that throughout the specification discussions utilizing terms such as "processing," "computing," "calculating," "determining", analyzing" or the like, refer to the action and/or processes of a computer or computing system, or similar electronic computing device, that manipulate and/or transform data represented as physical, such as electronic, quantities into other data similarly represented as physical quantities.
[0068] In a similar manner, the term "processor" may refer to any device or portion of a device that processes electronic data, e.g., from registers and/or memory to transform that electronic data into other electronic data that, e.g., may be stored in registers and/or
memory. A "computer" or a "computing machine" or a "computing platform" may include one or more processors.
[0069] The methodologies described herein are, in one embodiment, performable by one or more processors that accept computer-readable (also called machine-readable) code containing a set of instructions that when executed by one or more of the processors carry out at least one of the methods described herein. Any processor capable of executing a set of instructions (sequential or otherwise) that specify actions to be taken are included. Thus, one example is a typical processing system that includes one or more processors. Each processor may include one or more of a CPU, a graphics processing unit, and a programmable DSP unit. The processing system further may include a memory subsystem including main RAM and/or a static RAM, and/or ROM. A bus subsystem may be included for communicating between the components. The processing system further may be a distributed processing system with processors coupled by a network. If the processing system requires a display, such a display may be included, e.g., an liquid crystal display (LCD) or a cathode ray tube (CRT) display. If manual data entry is required, the processing system also includes an input device such as one or more of an alphanumeric input unit such as a keyboard, a pointing control device such as a mouse, and so forth. The term memory unit as used herein, if clear from the context and unless explicitly stated otherwise, also encompasses a storage system such as a disk drive unit. The processing system in some configurations may include a sound output device, and a network interface device. The memory subsystem thus includes a computer-readable carrier medium that carries computer-readable code (e.g., software) including a set of instructions to cause performing, when executed by one or more processors, one of more of the methods described herein. Note that when the method includes several elements, e.g., several steps, no ordering of such elements is implied, unless specifically stated. The software may reside in the hard disk, or may also reside, completely or at least partially, within the RAM and/or within the processor during execution thereof by the computer system. Thus, the memory and the processor also constitute computer-readable carrier medium carrying computer-readable code.
[0070] Furthermore, a computer-readable carrier medium may form, or be includes in a computer program product.
[0071] In alternative embodiments, the one or more processors operate as a standalone device or may be connected, e.g., networked to other processor(s), in a networked deployment, the one or more processors may operate in the capacity of a server or a user machine in server-user network environment, or as a peer machine in a peer-to-peer or distributed network environment. The one or more processors may form a personal computer (PC), a tablet PC, a set-top box (STB), a Personal Digital Assistant (PDA), a cellular telephone, a web appliance, a network router, switch or bridge, or any machine capable of executing a set of instructions (sequential or otherwise) that specify actions to be taken by that machine.
[0072] Note that while some diagrams only show a single processor and a single memory that carries the computer-readable code, those in the art will understand that many of the components described above are included, but not explicitly shown or described in order not to obscure the inventive aspect. For example, while only a single machine is illustrated, the term "machine" or "device" shall also be taken to include any collection of machines that individually or jointly execute a set (or multiple sets) of instructions to perform any one or more of the methodologies discussed herein.
[0073] At least one embodiment of various methods described herein is in the form of a computer-readable carrier medium carrying a set of instructions, e.g., a computer program that are for execution on one or more processors, e.g., one or more processors that are part of building management system. Thus, as will be appreciated by those skilled in the art, embodiments of the present invention may be embodied as a method, an apparatus such as a special purpose apparatus, an apparatus such as a data processing system, or a computer-readable carrier medium, e.g., a computer program product. The computer-readable carrier medium carries computer readable code including a set of instructions that when executed on one or more processors cause the a processor or processors to implement a method. Accordingly, aspects of the present invention may take the form of a method, an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of carrier medium (e.g., a computer program product on a computer-readable storage medium) carrying computer-readable program code embodied in the medium.
[0074] The software may further be transmitted or received over a network via a network interface device. While the carrier medium is shown in an exemplary embodiment to be a single medium, the term "carrier medium" should be taken to include a single medium or multiple media (e.g., a centralized or distributed database, and/or associated caches and servers) that store the one or more sets of instructions. The term "carrier medium" shall also be taken to include any medium that is capable of storing, encoding or carrying a set of instructions for execution by one or more of the processors and that cause the one or more processors to perform any one or more of the methodologies of the present invention. A carrier medium may take many forms, including but not limited to, non-volatile media, volatile media, and transmission media. Non-volatile media includes, for example, optical, magnetic disks, and magneto-optical disks. Volatile media includes dynamic memory, such as main memory. Transmission media includes coaxial cables, copper wire and fiber optics, including the wires that comprise a bus subsystem. Transmission media also may also take the form of acoustic or light waves, such as those generated during radio wave and infrared data communications. For example, the term "carrier medium" shall accordingly be taken to included, but not be limited to, solid-state memories, a computer product embodied in optical and magnetic media, a medium bearing a propagated signal detectable by at least one processor of one or more processors and representing a set of instructions that when executed implement a method, a carrier wave bearing a propagated signal detectable by at least one processor of the one or more processors and representing the set of instructions a propagated signal and representing the set of instructions, and a transmission medium in a network bearing a propagated signal detectable by at least one processor of the one or more processors and representing the set of instructions.
[0075] It will be understood that the steps of methods discussed are performed in one embodiment by an appropriate processor (or processors) of a processing (i.e., computer) system executing instructions (computer-readable code) stored in storage. It will also be understood that the invention is not limited to any particular implementation or programming technique and that the invention may be implemented using any appropriate techniques for implementing the functionality described herein. The invention is not limited to any particular programming language or operating system.
[0076] Similarly it should be appreciated that in the above description of exemplary embodiments of the invention, various features of the invention are sometimes grouped together in a single embodiment, figure, or description thereof for the purpose of streamlining the disclosure and aiding in the understanding of one or more of the various inventive aspects. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.
[0077] Furthermore, while some embodiments described herein include some but not other features included in other embodiments, combinations of features of different embodiments are meant to be within the scope of the invention, and form different embodiments, as would be understood by those in the art. For example, in the following claims, any of the claimed embodiments can be used in any combination.
[0078] Furthermore, some of the embodiments are described herein as a method or combination of elements of a method that can be implemented by a processor of a computer system or by other means of carrying out the function. Thus, a processor with the necessary instructions for carrying out such a method or element of a method forms a means for carrying out the method or element of a method. Furthermore, an element described herein of an apparatus embodiment is an example of a means for carrying out the function performed by the element for the purpose of carrying out the invention.
[0079] In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In other instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure an understanding of this description.
[0080] As used herein, unless otherwise specified the use of the ordinal adjectives "first", "second", "third", etc., to describe a common object, merely indicate that different instances of like objects are being referred to, and are not intended to imply that
the objects so described must be in a given sequence, either temporally, spatially, in ranking, or in any other manner.
[0081] In the claims below and the description herein, any one of the terms comprising, comprised of or which comprises is an open term that means including at least the elements/features that follow, but not excluding others. Thus, the term comprising, when used in the claims, should not be interpreted as being limitative to the means or elements or steps listed thereafter. For example, the scope of the expression a device comprising A and B should not be limited to devices consisting only of elements A and B. Any one of the terms including or which includes or that includes as used herein is also an open term that also means including at least the elements/features that follow the term, but not excluding others. Thus, including is synonymous with and means comprising.
[0082] Similarly, it is to be noticed that the term coupled, when used in the claims, should not be interpreted as being limitative to direct connections only. The terms "coupled" and "connected," along with their derivatives, may be used. It should be understood that these terms are not intended as synonyms for each other. Thus, the scope of the expression a device A coupled to a device B should not be limited to devices or systems wherein an output of device A is directly connected to an input of device B. It means that there exists a path between an output of A and an input of B which may be a path including other devices or means. "Coupled" may mean that two or more elements are either in direct physical or electrical contact, or that two or more elements are not in direct contact with each other but yet still co-operate or interact with each other.
[0083] Thus, while there has been described what are believed to be the preferred embodiments of the invention, those skilled in the art will recognize that other and further modifications may be made thereto without departing from the spirit of the invention, and it is intended to claim all such changes and modifications as fall within the scope of the invention. For example, any formulas given above are merely representative of procedures that may be used. Functionality may be added or deleted from the block diagrams and operations may be interchanged among functional blocks. Steps may be added or deleted to methods described within the scope of the present invention.
Claims
1. An access control device including: a processor for allowing the execution of software instructions, including software instructions for processing data indicative of access requests on the basis of an applied set of configuration data and selectively allowing or denying the respective requests; a memory module coupled to the processor, the memory module storing data indicative of the software instructions and configuration data, wherein the configuration data stored by the device includes a plurality of uniquely applicable sets of configuration data, wherein each set, when applied, causes the device to function in accordance with a respective mode of operation; and a communications interface that is configured for receiving data indicative of a command to change modes of operation, wherein in response to the command the software instructions cause the device to cease applying a current one of the sets of configuration data and commence applying a different one of the sets of configuration data identified by the command.
2. An access control device access according to claim 1 wherein the plurality of sets of configuration data include: a first set of configuration data that, when applied, causes the device to function in a first mode of operation; and a second set of configuration data that, when applied causes the device to function in a second mode of operation; such that when the device is functioning in the first mode of operation, the communications interface is configured for receiving data indicative of a command to change to the second mode of operation, and in response to the command the software instructions cause the device to cease applying the first set of configuration data and commence applying the second set of configuration data.
3. An access control device access according to claim 1 wherein the configuration data includes an n set of configuration data that, when applied, causes the device to function in an nώ mode of operation.
4. An access control device access according to claim 1 wherein each set of configuration data corresponds to a respective threat level.
5. An access control device according to claim 4 wherein: a first set of configuration data, when applied, causes the software instructions process data indicative of access requests in accordance with a first threat level; and a second set of configuration data, when applied, causes the software instructions process data indicative of access requests in accordance with a second threat level.
6. An access control device access according to claim 1 wherein each set of configuration data describes respective authentication/authorisation settings.
7. An access control device access according to claim 1 wherein each set of configuration data describes respective access permission settings.
8. An access control device access according to claim 1 wherein each set of configuration data describes settings in relation to one or more of the following: visitor access card rules; supervisor requirements; minimum occupancy requirements; default access control states; other access related rules and surveillance settings.
9. An access control device access according to claim 1 including an input for interacting with an access control token, wherein the access control token maintains timestamped data indicative of a mode of operation and wherein, in response to the data indicative of a mode of operation, the device selectively adopts that mode of operation.
10. An access control device access according to claim 1 including an input for interacting with an access control token, wherein the access control token maintains timestamped data indicative of a mode of operation and wherein, in response to the data indicative of a mode of operation, the device selectively writes to the access control token updated timestamped data indicative of a mode of operation, the updated data being indicative of the current mode of operation of the device.
11. A method performable by an access control device, the method including: applying a first set of configuration data stored locally at the access control device, the first set of configuration data, when applied, causing the device to function in a first mode of operation; whilst functioning in the first mode of operation, processing data indicative of access requests on the basis of the first set of configuration data; receiving data indicative of a command to change to a second mode of operation; in response to the command, ceasing application of the first set of configuration data and commencing application of a second set of configuration data, wherein the second set of configuration data is also stored locally at the access control device, the second set of configuration data, when applied, causing the device to function in the second mode of operation; and whilst functioning in the second mode of operation, processing data indicative of access requests on the basis of the second set of configuration data.
12. A method according to claim 11 wherein the device additionally stores an nΛ set of configuration data that, when applied, causes the device to function in an n mode of operation.
13. A method according to claim 11 wherein each set of configuration data corresponds to a respective threat level.
14. A method according to claim 13 wherein: when the first set of configuration data is applied, processing data indicative of access requests is performed in accordance with a first threat level; and when the second set of configuration data is applied, processing data indicative of access requests is performed in accordance with the second threat level.
15. A method according to claim 11 wherein each set of configuration data describes respective authentication/authorisation settings.
16. A method according to claim 11 wherein each set of configuration data describes respective access permission settings.
17. A method according to claim 11 wherein each set of configuration data describes settings in relation to one or more of the following: visitor access card rules; supervisor requirements; minimum occupancy requirements; default access control states; other access related rules; and surveillance settings.
18. A method according to claim 11 including the steps of: reading an access control token, wherein the access control token maintains timestamped data indicative of a mode of operation; processing the data indicative of a mode of operation; and selectively adopting that mode of operation.
19. A method according to claim 11 including the step of: reading an access control token, wherein the access control token maintains timestamped data indicative of a mode of operation; processing the data indicative of a mode of operation; and selectively writing to the access control token updated timestamped data indicative of a mode of operation, the updated data being indicative of the current mode of operation of the device.
20. A method according to claim 11 wherein the method is performable on the basis of software instructions stored on a memory module of the access control device by execution of those instructions on a processor of the access control device:
21. An access control system including: a plurality of access control devices according to claim 1; and a central server in communication with the plurality of access control devices via a network, wherein the central server is configured to provide to the plurality of devices data indicative of a command to change modes of operation, wherein in response to the command, the devices each cease applying a current set of configuration data and commence applying a different set of configuration data identified by the command.
22. A method for controlling an access control environment, wherein the access control environment includes a plurality of access control devices according to claim 1, the method including providing to the devices data indicative of a command to change modes of operation, wherein in response to the command the software instructions cause the device to cease applying a current set of configuration data and commence applying a different set of configuration data identified by the command, wherein the different set of configuration data is locally stored at the devices.
Priority Applications (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP10753194.9A EP2408984B1 (en) | 2009-03-19 | 2010-03-12 | Systems and methods for managing access control devices |
US13/257,263 US9019070B2 (en) | 2009-03-19 | 2010-03-12 | Systems and methods for managing access control devices |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
AU2009901185 | 2009-03-19 | ||
AU2009901185A AU2009901185A0 (en) | 2009-03-19 | Systems and methods for managing access control devices |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2010106474A1 true WO2010106474A1 (en) | 2010-09-23 |
Family
ID=42739244
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/IB2010/051067 WO2010106474A1 (en) | 2009-03-19 | 2010-03-12 | Systems and methods for managing access control devices |
Country Status (3)
Country | Link |
---|---|
US (1) | US9019070B2 (en) |
EP (1) | EP2408984B1 (en) |
WO (1) | WO2010106474A1 (en) |
Cited By (31)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
GB2475959A (en) * | 2009-12-03 | 2011-06-08 | Honeywell Int Inc | Method and apparatus for setting up a security system |
US8565902B2 (en) | 2009-09-29 | 2013-10-22 | Honeywell International Inc. | Systems and methods for controlling a building management system |
US8577505B2 (en) | 2010-01-27 | 2013-11-05 | Honeywell International Inc. | Energy-related information presentation system |
US8584030B2 (en) | 2009-09-29 | 2013-11-12 | Honeywell International Inc. | Systems and methods for displaying HVAC information |
US8878931B2 (en) | 2009-03-04 | 2014-11-04 | Honeywell International Inc. | Systems and methods for managing video data |
US8947437B2 (en) | 2012-09-15 | 2015-02-03 | Honeywell International Inc. | Interactive navigation environment for building performance visualization |
US9019070B2 (en) | 2009-03-19 | 2015-04-28 | Honeywell International Inc. | Systems and methods for managing access control devices |
US9170574B2 (en) | 2009-09-29 | 2015-10-27 | Honeywell International Inc. | Systems and methods for configuring a building management system |
US9280365B2 (en) | 2009-12-17 | 2016-03-08 | Honeywell International Inc. | Systems and methods for managing configuration data at disconnected remote devices |
US9344684B2 (en) | 2011-08-05 | 2016-05-17 | Honeywell International Inc. | Systems and methods configured to enable content sharing between client terminals of a digital video management system |
US9704313B2 (en) | 2008-09-30 | 2017-07-11 | Honeywell International Inc. | Systems and methods for interacting with access control devices |
US9894261B2 (en) | 2011-06-24 | 2018-02-13 | Honeywell International Inc. | Systems and methods for presenting digital video management system information via a user-customizable hierarchical tree interface |
US10038872B2 (en) | 2011-08-05 | 2018-07-31 | Honeywell International Inc. | Systems and methods for managing video data |
US10362273B2 (en) | 2011-08-05 | 2019-07-23 | Honeywell International Inc. | Systems and methods for managing video data |
GB2574675A (en) * | 2018-06-15 | 2019-12-18 | Scotia Safes Ltd | Access control device, system and methods |
US10523903B2 (en) | 2013-10-30 | 2019-12-31 | Honeywell International Inc. | Computer implemented systems frameworks and methods configured for enabling review of incident data |
US10978199B2 (en) | 2019-01-11 | 2021-04-13 | Honeywell International Inc. | Methods and systems for improving infection control in a building |
US11184739B1 (en) | 2020-06-19 | 2021-11-23 | Honeywel International Inc. | Using smart occupancy detection and control in buildings to reduce disease transmission |
DE102013101846B4 (en) | 2013-02-25 | 2022-01-20 | Heinz Roth | access control device |
US11288945B2 (en) | 2018-09-05 | 2022-03-29 | Honeywell International Inc. | Methods and systems for improving infection control in a facility |
US11372383B1 (en) | 2021-02-26 | 2022-06-28 | Honeywell International Inc. | Healthy building dashboard facilitated by hierarchical model of building control assets |
US11402113B2 (en) | 2020-08-04 | 2022-08-02 | Honeywell International Inc. | Methods and systems for evaluating energy conservation and guest satisfaction in hotels |
US11474489B1 (en) | 2021-03-29 | 2022-10-18 | Honeywell International Inc. | Methods and systems for improving building performance |
US11620594B2 (en) | 2020-06-12 | 2023-04-04 | Honeywell International Inc. | Space utilization patterns for building optimization |
US11619414B2 (en) | 2020-07-07 | 2023-04-04 | Honeywell International Inc. | System to profile, measure, enable and monitor building air quality |
US11662115B2 (en) | 2021-02-26 | 2023-05-30 | Honeywell International Inc. | Hierarchy model builder for building a hierarchical model of control assets |
US11783658B2 (en) | 2020-06-15 | 2023-10-10 | Honeywell International Inc. | Methods and systems for maintaining a healthy building |
US11783652B2 (en) | 2020-06-15 | 2023-10-10 | Honeywell International Inc. | Occupant health monitoring for buildings |
US11823295B2 (en) | 2020-06-19 | 2023-11-21 | Honeywell International, Inc. | Systems and methods for reducing risk of pathogen exposure within a space |
US11894145B2 (en) | 2020-09-30 | 2024-02-06 | Honeywell International Inc. | Dashboard for tracking healthy building performance |
US11914336B2 (en) | 2020-06-15 | 2024-02-27 | Honeywell International Inc. | Platform agnostic systems and methods for building management systems |
Families Citing this family (21)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8232860B2 (en) | 2005-10-21 | 2012-07-31 | Honeywell International Inc. | RFID reader for facility access control and authorization |
CN101765835B (en) * | 2007-05-28 | 2013-05-08 | 霍尼韦尔国际公司 | Systems and methods for configuring access control devices |
CN101765995B (en) | 2007-05-28 | 2012-11-14 | 霍尼韦尔国际公司 | Systems and methods for commissioning access control devices |
US8707414B2 (en) | 2010-01-07 | 2014-04-22 | Honeywell International Inc. | Systems and methods for location aware access control management |
US8787725B2 (en) | 2010-11-11 | 2014-07-22 | Honeywell International Inc. | Systems and methods for managing video data |
FR2989857B1 (en) * | 2012-04-23 | 2014-12-26 | Electricite De France | METHOD FOR ACCESSING A LOCAL SERVICE OF A COMMUNICATOR DEVICE THROUGH A TERMINAL. |
US9576410B2 (en) * | 2012-07-09 | 2017-02-21 | Jeremy Keith MATTERN | System and method for implementing a threat condition protocol in pass control |
WO2014197158A2 (en) | 2013-06-07 | 2014-12-11 | Velo Labs, Inc. | Wireless ultra-low power portable lock |
US9342223B2 (en) * | 2013-08-16 | 2016-05-17 | Honeywell International Inc. | System and method for virtual region based access control operations using BIM |
US9619668B2 (en) | 2013-09-16 | 2017-04-11 | Axis Ab | Managing application data in distributed control systems |
US11036897B2 (en) | 2015-03-24 | 2021-06-15 | Carrier Corporation | Floor plan based planning of building systems |
US10756830B2 (en) | 2015-03-24 | 2020-08-25 | Carrier Corporation | System and method for determining RF sensor performance relative to a floor plan |
WO2016154311A1 (en) | 2015-03-24 | 2016-09-29 | Carrier Corporation | Systems and methods for providing a graphical user interface indicating intruder threat levels for a building |
US10230326B2 (en) | 2015-03-24 | 2019-03-12 | Carrier Corporation | System and method for energy harvesting system planning and performance |
WO2016154306A1 (en) | 2015-03-24 | 2016-09-29 | Carrier Corporation | System and method for capturing and analyzing multidimensional building information |
EP3274932A1 (en) | 2015-03-24 | 2018-01-31 | Carrier Corporation | Integrated system for sales, installation, and maintenance of building systems |
EP3274934A1 (en) | 2015-03-24 | 2018-01-31 | Carrier Corporation | Floor plan coverage based auto pairing and parameter setting |
EP3275253A1 (en) | 2015-03-24 | 2018-01-31 | Carrier Corporation | Floor-plan based learning and registration of distributed devices |
US9619952B1 (en) * | 2016-02-16 | 2017-04-11 | Honeywell International Inc. | Systems and methods of preventing access to users of an access control system |
US10032009B2 (en) * | 2016-08-03 | 2018-07-24 | International Business Machines Corporation | Motion information filtering |
US11482088B1 (en) * | 2021-06-22 | 2022-10-25 | Motorola Solutions, Inc. | System and method for context aware access control with weapons detection |
Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6318137B1 (en) * | 1998-04-08 | 2001-11-20 | David Chaum | Electronic lock that can learn to recognize any ordinary key |
WO2004092514A1 (en) * | 2003-04-16 | 2004-10-28 | Tcam Technology Pte. Ltd. | Electronic lock and key for access management |
WO2005038729A1 (en) | 2003-10-16 | 2005-04-28 | Scm Microsystems, Inc. | Access control system |
US20070132550A1 (en) * | 2005-12-08 | 2007-06-14 | Msystems Ltd. | Electromechanical Lock Device And Method |
US20080313556A1 (en) * | 2007-06-12 | 2008-12-18 | Honeywell International, Inc. | Access control system with rules engine architecture |
Family Cites Families (288)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US3753232A (en) | 1972-04-06 | 1973-08-14 | Honeywell Inf Systems | Memory control system adaptive to different access and cycle times |
US3806911A (en) | 1972-07-10 | 1974-04-23 | A Pripusich | Display sequence control means |
US3906447A (en) | 1973-01-31 | 1975-09-16 | Paul A Crafton | Security system for lock and key protected secured areas |
US3866173A (en) | 1973-10-02 | 1975-02-11 | Mosler Safe Co | Access control system for restricted area |
US3860911A (en) | 1973-11-01 | 1975-01-14 | Pitney Bowes Inc | Electronic combination lock and lock system |
US3857018A (en) | 1973-12-07 | 1974-12-24 | Business Electronics Inc | Controlled access systems |
US4148012A (en) | 1975-09-26 | 1979-04-03 | Greer Hydraulics, Inc. | Access control system |
CA1101513A (en) | 1976-11-08 | 1981-05-19 | Leonard J. Genest | Security system |
US4161778A (en) | 1977-07-19 | 1979-07-17 | Honeywell Information Systems, Inc. | Synchronization control system for firmware access of high data rate transfer bus |
US4095739A (en) | 1977-08-26 | 1978-06-20 | A-T-O Inc. | System for limiting access to security system program |
US4146085A (en) | 1977-10-03 | 1979-03-27 | Borg-Warner Corporation | Diagnostic system for heat pump |
US4336902A (en) | 1977-10-28 | 1982-06-29 | Neal Albert D | Thermostat alterable by remote control |
US4332852A (en) | 1978-03-29 | 1982-06-01 | Kennecott Corporation | Conditioned colloidal silica post impregnant to prevent binder migration in the production of insulation articles comprising randomly oriented refractory fibers |
US4283710A (en) | 1978-10-25 | 1981-08-11 | J.S. Lock Company | Security system |
US4298946A (en) | 1978-12-18 | 1981-11-03 | Texas Instruments Incorporated | Electronically controlled programmable digital thermostat |
US4373664A (en) | 1980-01-30 | 1983-02-15 | Robertshaw Controls Company | Wall thermostat and the like |
US4337893A (en) | 1980-04-07 | 1982-07-06 | Energy Savings Parhelion | Multi-phase modular comfort controlled heating system |
US4385231A (en) | 1980-06-27 | 1983-05-24 | Omron Tateisi Electronics Co. | Unlocking system for use with cards |
US4353064A (en) | 1981-01-14 | 1982-10-05 | Honeywell Inc. | Battery operated access control card |
US4462028A (en) | 1981-02-19 | 1984-07-24 | Honeywell Information Systems Inc. | Access control logic for video terminal display memory |
US4525777A (en) | 1981-08-03 | 1985-06-25 | Honeywell Information Systems Inc. | Split-cycle cache system with SCU controlled cache clearing during cache store access period |
US4379483A (en) | 1981-08-17 | 1983-04-12 | The Coleman Company, Inc. | Method of controlling heating and cooling sources |
US4646964A (en) | 1982-03-26 | 1987-03-03 | Parker Electronics, Inc. | Temperature control system |
US4538056A (en) | 1982-08-27 | 1985-08-27 | Figgie International, Inc. | Card reader for time and attendance |
ATE53683T1 (en) | 1983-01-10 | 1990-06-15 | Figgie Int Inc | CARD READER FOR SECURITY SYSTEM. |
DE3307931C2 (en) | 1983-03-05 | 1985-02-07 | Dr. Johannes Heidenhain Gmbh, 8225 Traunreut | Digital electrical length or angle measuring system |
SE8301957D0 (en) | 1983-04-08 | 1983-04-08 | Wso Cpu System Ab | Locking system |
EP0152678A3 (en) | 1984-02-13 | 1988-03-16 | James W. Raymond | Electronic lock and key system for hotels and the like |
US4634846A (en) * | 1984-05-22 | 1987-01-06 | American District Telegraph Company | Multimode programmable stand-alone access control system |
US4556169A (en) | 1984-06-07 | 1985-12-03 | Honeywell Inc. | On-off thermostat based modulating air flow controller |
US4685615A (en) | 1984-12-17 | 1987-08-11 | Hart Douglas R S | Diagnostic thermostat |
US6072402A (en) | 1992-01-09 | 2000-06-06 | Slc Technologies, Inc. | Secure entry system with radio communications |
US4821177A (en) | 1986-09-02 | 1989-04-11 | Honeywell Bull Inc. | Apparatus for controlling system accesses having multiple command level conditional rotational multiple port servicing priority hierarchy |
US4847839A (en) | 1987-08-26 | 1989-07-11 | Honeywell Inc. | Digital registers with serial accessed mode control bit |
US5070468A (en) | 1988-07-20 | 1991-12-03 | Mitsubishi Jukogyo Kabushiki Kaisha | Plant fault diagnosis system |
US5099420A (en) | 1989-01-10 | 1992-03-24 | Bull Hn Information Systems Inc. | Method and apparatus for limiting the utilization of an asynchronous bus with distributed controlled access |
FI88432C (en) | 1989-01-13 | 1993-05-10 | Halton Oy | FOERFARANDE FOER REGLERING OCH UPPRAETTHAOLLANDE AV LUFTSTROEMMAR OCH MOTSVARANDE I VENTILATIONSANLAEGGNINGAR OCH ETT VENTILATIONSSYSTEM I ENLIGHET MED FOERFARANDET |
US5227122A (en) | 1989-11-02 | 1993-07-13 | Combustion Engineering, Inc. | Display device for indicating the value of a parameter in a process plant |
US5479154A (en) | 1990-04-06 | 1995-12-26 | Siemens Aktiengesellschaft | Process for operating a remote-controllable central locking installation of a vehicle |
US5204663A (en) | 1990-05-21 | 1993-04-20 | Applied Systems Institute, Inc. | Smart card access control system |
US5172565A (en) | 1990-05-21 | 1992-12-22 | Honeywell Inc. | Air handling system utilizing direct expansion cooling |
US5640151A (en) | 1990-06-15 | 1997-06-17 | Texas Instruments Incorporated | Communication system for communicating with tags |
US5973613A (en) | 1990-06-15 | 1999-10-26 | Raytheon Company | Personal messaging system and method |
US5465082A (en) | 1990-07-27 | 1995-11-07 | Executone Information Systems, Inc. | Apparatus for automating routine communication in a facility |
NO300045B1 (en) | 1990-12-03 | 1997-03-24 | Trioving As | Time controlled electrically controlled locking system |
US5259553A (en) | 1991-04-05 | 1993-11-09 | Norm Pacific Automation Corp. | Interior atmosphere control system |
JP2926282B2 (en) | 1991-06-06 | 1999-07-28 | 株式会社日立製作所 | Air conditioner and medium recording operation control program thereof |
US6347997B1 (en) | 1997-10-01 | 2002-02-19 | Brad A. Armstrong | Analog controls housed with electronic displays |
US5404934A (en) | 1992-05-19 | 1995-04-11 | Currise & Carlson, Inc. | Retrofit air conditioning system |
US5591950A (en) | 1992-11-04 | 1997-01-07 | Talleres De Escoriaza, S.A. (Tesa) | Programmable electronic lock |
US5481481A (en) | 1992-11-23 | 1996-01-02 | Architectural Engergy Corporation | Automated diagnostic system having temporally coordinated wireless sensors |
WO1994019912A1 (en) | 1993-02-23 | 1994-09-01 | British Telecommunications Public Limited Company | Event correlation |
AU6551794A (en) | 1993-03-24 | 1994-10-11 | Universal Electronics Inc. | Infrared remote control device for a personal digital assistant |
FR2706652B1 (en) | 1993-06-09 | 1995-08-18 | Alsthom Cge Alcatel | Device for detecting intrusions and suspicious users for a computer system and security system comprising such a device. |
US5361982A (en) | 1993-07-12 | 1994-11-08 | Johnson Service Company | Temperature control system having central control for thermostats |
US5631825A (en) | 1993-09-29 | 1997-05-20 | Dow Benelux N.V. | Operator station for manufacturing process control system |
US5594429A (en) | 1993-10-27 | 1997-01-14 | Alps Electric Co., Ltd. | Transmission and reception system and signal generation method for same |
US5420927B1 (en) | 1994-02-01 | 1997-02-04 | Silvio Micali | Method for certifying public keys in a digital signature scheme |
US5526871A (en) | 1994-02-08 | 1996-06-18 | Musser; Marshall R. | Quick connect diagnostic apparatus and method for a vehicle cooling system |
US5449112A (en) | 1994-03-15 | 1995-09-12 | Heitman; Lynn B. | Method and apparatus for monitoring and controlling air handling systems |
US5528516A (en) | 1994-05-25 | 1996-06-18 | System Management Arts, Inc. | Apparatus and method for event correlation and problem reporting |
US5541585A (en) | 1994-10-11 | 1996-07-30 | Stanley Home Automation | Security system for controlling building access |
US5644302A (en) | 1994-12-27 | 1997-07-01 | Najib Hana | Device for remotely changing the set temperature of a thermostat |
US7019614B2 (en) | 1995-02-07 | 2006-03-28 | Harrow Products, Inc. | Door security system audit trail |
AU4707596A (en) | 1995-03-08 | 1996-09-23 | Keba Gesellschaft M.B.H. & Co. | Access control system with an access control device and a housing, and a process for monitoring access authorisation |
US5663957A (en) | 1995-07-12 | 1997-09-02 | Ericsson Inc. | Dual mode satellite/cellular terminal |
US5774058A (en) | 1995-07-20 | 1998-06-30 | Vindicator Corporation | Remote access system for a programmable electronic lock |
US5717758A (en) | 1995-11-02 | 1998-02-10 | Micall; Silvio | Witness-based certificate revocation system |
US5717757A (en) | 1996-08-29 | 1998-02-10 | Micali; Silvio | Certificate issue lists |
US7353396B2 (en) | 1995-10-02 | 2008-04-01 | Corestreet, Ltd. | Physical access control |
US6292893B1 (en) | 1995-10-24 | 2001-09-18 | Silvio Micali | Certificate revocation system |
US6766450B2 (en) | 1995-10-24 | 2004-07-20 | Corestreet, Ltd. | Certificate revocation system |
US6487658B1 (en) | 1995-10-02 | 2002-11-26 | Corestreet Security, Ltd. | Efficient certificate revocation |
US7337315B2 (en) | 1995-10-02 | 2008-02-26 | Corestreet, Ltd. | Efficient certificate revocation |
US6097811A (en) | 1995-11-02 | 2000-08-01 | Micali; Silvio | Tree-based certificate revocation system |
US5793868A (en) | 1996-08-29 | 1998-08-11 | Micali; Silvio | Certificate revocation system |
US8732457B2 (en) | 1995-10-02 | 2014-05-20 | Assa Abloy Ab | Scalable certificate validation and simplified PKI management |
US5666416A (en) | 1995-10-24 | 1997-09-09 | Micali; Silvio | Certificate revocation system |
US5604804A (en) | 1996-04-23 | 1997-02-18 | Micali; Silvio | Method for certifying public keys in a digital signature scheme |
US6301659B1 (en) | 1995-11-02 | 2001-10-09 | Silvio Micali | Tree-based certificate revocation system |
DE19547727A1 (en) | 1995-12-20 | 1997-06-26 | Vdo Schindling | Servo-driven door lock for vehicle |
CN1105341C (en) | 1996-01-11 | 2003-04-09 | 株式会社东芝 | Device diagnostic method and device special diagnostic apparatus |
JPH09233412A (en) | 1996-02-23 | 1997-09-05 | Mitsubishi Electric Corp | Recording and reproducing system for video image data |
US5610982A (en) | 1996-05-15 | 1997-03-11 | Micali; Silvio | Compact certification with threshold signatures |
US5927398A (en) | 1996-06-22 | 1999-07-27 | Carrier Corporation | Device identification system for HVAC communication network |
US6150955A (en) | 1996-10-28 | 2000-11-21 | Tracy Corporation Ii | Apparatus and method for transmitting data via a digital control channel of a digital wireless network |
US5732691A (en) | 1996-10-30 | 1998-03-31 | Rheem Manufacturing Company | Modulating furnace with two-speed draft inducer |
US5915473A (en) | 1997-01-29 | 1999-06-29 | American Standard Inc. | Integrated humidity and temperature controller |
JP4268690B2 (en) | 1997-03-26 | 2009-05-27 | ソニー株式会社 | Authentication system and method, and authentication method |
US6404858B1 (en) | 1997-03-28 | 2002-06-11 | Verizon Services Corp. | Personal dial tone service with personalized call waiting |
US6366558B1 (en) | 1997-05-02 | 2002-04-02 | Cisco Technology, Inc. | Method and apparatus for maintaining connection state between a connection manager and a failover device |
US6490610B1 (en) | 1997-05-30 | 2002-12-03 | Oracle Corporation | Automatic failover for clients accessing a resource through a server |
US6424068B2 (en) | 1997-06-27 | 2002-07-23 | Asahi Kogaku Kogyo Kabushiki Kaisha | Galvano mirror unit |
FR2766942B1 (en) | 1997-07-31 | 1999-10-01 | Gemplus Card Int | CHIP CARD READER WITH MICROCONTROLLER AND SECURITY COMPONENT |
US5930773A (en) | 1997-12-17 | 1999-07-27 | Avista Advantage, Inc. | Computerized resource accounting methods and systems, computerized utility management methods and systems, multi-user utility management methods and systems, and energy-consumption-based tracking methods and systems |
DE19838628A1 (en) | 1998-08-26 | 2000-03-02 | Ibm | Extended smart card communication architecture and method for communication between smart card application and data carrier |
US6141595A (en) | 1998-04-03 | 2000-10-31 | Johnson Controls Technology Company | Common object architecture supporting application-centric building automation systems |
US6154681A (en) | 1998-04-03 | 2000-11-28 | Johnson Controls Technology Company | Asynchronous distributed-object building automation system with support for synchronous object execution |
US6119125A (en) | 1998-04-03 | 2000-09-12 | Johnson Controls Technology Company | Software components for a building automation system based on a standard object superclass |
US6104963A (en) | 1998-04-03 | 2000-08-15 | Johnson Controls Technology Company | Communication system for distributed-object building automation system |
US6167316A (en) | 1998-04-03 | 2000-12-26 | Johnson Controls Technology Co. | Distributed object-oriented building automation system with reliable asynchronous communication |
US6334121B1 (en) | 1998-05-04 | 2001-12-25 | Virginia Commonwealth University | Usage pattern based user authenticator |
CA2331705C (en) | 1998-05-07 | 2007-08-07 | Samsung Electronics Co., Ltd. | Method and apparatus for user and device command and control in a network |
US6347374B1 (en) | 1998-06-05 | 2002-02-12 | Intrusion.Com, Inc. | Event detection |
AU5079599A (en) | 1998-06-08 | 1999-12-30 | Ericsson Inc. | Application and communication platform for connectivity based services |
CA2240881C (en) | 1998-06-17 | 2007-12-04 | Axs Technologies Inc. | Shared intelligence automated access control system |
US7218243B2 (en) | 1998-07-23 | 2007-05-15 | Universal Electronics Inc. | System and method for automatically setting up a universal remote control |
US7586398B2 (en) | 1998-07-23 | 2009-09-08 | Universal Electronics, Inc. | System and method for setting up a universal remote control |
US6411199B1 (en) | 1998-08-21 | 2002-06-25 | Keri Systems, Inc. | Radio frequency identification system |
US20040068583A1 (en) | 2002-10-08 | 2004-04-08 | Monroe David A. | Enhanced apparatus and method for collecting, distributing and archiving high resolution images |
US7634662B2 (en) | 2002-11-21 | 2009-12-15 | Monroe David A | Method for incorporating facial recognition technology in a multimedia surveillance system |
US20020170064A1 (en) | 2001-05-11 | 2002-11-14 | Monroe David A. | Portable, wireless monitoring and control station for use in connection with a multi-media surveillance system having enhanced notification functions |
US7576770B2 (en) | 2003-02-11 | 2009-08-18 | Raymond Metzger | System for a plurality of video cameras disposed on a common network |
US6149065A (en) | 1998-10-28 | 2000-11-21 | Harper-Wyman Company | Modulating thermostat for gas oven burner |
AU2225100A (en) | 1999-01-06 | 2000-07-24 | Mas-Hamilton Group, Inc. | Electronic supervisor and subordinate lock system |
US6453426B1 (en) | 1999-03-26 | 2002-09-17 | Microsoft Corporation | Separately storing core boot data and cluster configuration data in a server cluster |
US6233954B1 (en) | 1999-04-28 | 2001-05-22 | Ingersoll-Rand Company | Method for controlling the operation of a compression system having a plurality of compressors |
US6241156B1 (en) | 1999-05-13 | 2001-06-05 | Acutherm L.P. | Process and apparatus for individual adjustment of an operating parameter of a plurality of environmental control devices through a global computer network |
JP2003501968A (en) | 1999-06-03 | 2003-01-14 | アイビューイット・ホールディングズ・インコーポレーテッド | System and method for streaming enhanced digital video files |
US6796494B1 (en) | 1999-06-18 | 2004-09-28 | Steven M. Gonzalo | Method and system for configuring a publicly accessible computer system |
US6910135B1 (en) | 1999-07-07 | 2005-06-21 | Verizon Corporate Services Group Inc. | Method and apparatus for an intruder detection reporting and response system |
US6886742B2 (en) | 1999-08-09 | 2005-05-03 | First Data Corporation | Systems and methods for deploying a point-of sale device |
US7203962B1 (en) | 1999-08-30 | 2007-04-10 | Symantec Corporation | System and method for using timestamps to detect attacks |
US6647400B1 (en) | 1999-08-30 | 2003-11-11 | Symantec Corporation | System and method for analyzing filesystems to detect intrusions |
DE19945861A1 (en) | 1999-09-24 | 2001-03-29 | Ibm | Configuration and locking procedure for guarding equipment and devices against unauthorized use especially for mobile phones and computer controlled equipment, requires verification of data |
AU2131801A (en) | 1999-12-07 | 2001-06-18 | Ilco Unican Inc. | Key control system for electronic locks |
US6665669B2 (en) | 2000-01-03 | 2003-12-16 | Db Miner Technology Inc. | Methods and system for mining frequent patterns |
US6453687B2 (en) | 2000-01-07 | 2002-09-24 | Robertshaw Controls Company | Refrigeration monitor unit |
US6934862B2 (en) | 2000-01-07 | 2005-08-23 | Robertshaw Controls Company | Appliance retrofit monitoring device with a memory storing an electronic signature |
US20020011923A1 (en) | 2000-01-13 | 2002-01-31 | Thalia Products, Inc. | Appliance Communication And Control System And Appliance For Use In Same |
DE10100826B4 (en) | 2000-02-01 | 2005-11-10 | Lg Electronics Inc. | Internet refrigerator and operating procedures for this |
US7096502B1 (en) | 2000-02-08 | 2006-08-22 | Harris Corporation | System and method for assessing the security posture of a network |
US6260765B1 (en) | 2000-02-25 | 2001-07-17 | American Secure Care, Llc | Remotely controllable thermostat |
EP1269754A4 (en) | 2000-03-14 | 2009-03-11 | Joseph Robert Marchese | Digital video system using networked cameras |
US6268797B1 (en) | 2000-03-15 | 2001-07-31 | Detection Systems, Inc. | Integrated portable tracking signal and access authorization signal generator |
GB0008037D0 (en) | 2000-04-01 | 2000-05-24 | Integrated Design Limited | Monitoring entry through doorways |
US6801907B1 (en) | 2000-04-10 | 2004-10-05 | Security Identification Systems Corporation | System for verification and association of documents and digital images |
US6628997B1 (en) | 2000-04-28 | 2003-09-30 | Carrier Corporation | Method for programming a thermostat |
US6604023B1 (en) | 2000-04-28 | 2003-08-05 | International Business Machines Corporation | Managing an environment utilizing a portable data processing system |
US20020118096A1 (en) | 2000-05-26 | 2002-08-29 | Hector Hoyos | Building security system |
US20030208689A1 (en) | 2000-06-16 | 2003-11-06 | Garza Joel De La | Remote computer forensic evidence collection system and process |
US6394359B1 (en) | 2000-07-12 | 2002-05-28 | Arthur Morgan | Remote control thermostat |
US6676226B2 (en) | 2002-04-04 | 2004-01-13 | Gkn Automotive, Inc. | Wheel end system |
US7120935B2 (en) | 2000-08-10 | 2006-10-10 | Shield Security Systems, Llc | Interactive key control system and method of managing access to secured locations |
US6556899B1 (en) | 2000-08-17 | 2003-04-29 | New Flyer Industries | Bus diagnostic and control system and method |
US20040205350A1 (en) | 2000-08-28 | 2004-10-14 | Paul Waterhouse | Low cost secure ID card and system |
US7032114B1 (en) | 2000-08-30 | 2006-04-18 | Symantec Corporation | System and method for using signatures to detect computer intrusions |
US6647317B2 (en) | 2000-09-06 | 2003-11-11 | Hitachi Ltd | Air conditioner management system |
AU2001297022A1 (en) | 2000-10-10 | 2002-04-22 | Recognition Source, Llc | Wireless biometric access control system |
US7839926B1 (en) | 2000-11-17 | 2010-11-23 | Metzger Raymond R | Bandwidth management and control |
US6324854B1 (en) | 2000-11-22 | 2001-12-04 | Copeland Corporation | Air-conditioning servicing system and method |
US6871193B1 (en) | 2000-11-29 | 2005-03-22 | Verizon Corporate Services Group | Method and system for partitioned service-enablement gateway with utility and consumer services |
JP5497249B2 (en) | 2000-12-20 | 2014-05-21 | メルク パテント ゲゼルシャフト ミット ベシュレンクテル ハフツング | Liquid crystal medium and electro-optic display including the same |
US6895215B2 (en) | 2000-12-28 | 2005-05-17 | International Business Machines Corporation | Method and apparatus for transferring correspondence information |
US6663010B2 (en) | 2001-01-22 | 2003-12-16 | Meritor Heavy Vehicle Technology, Llc | Individualized vehicle settings |
US6574537B2 (en) | 2001-02-05 | 2003-06-03 | The Boeing Company | Diagnostic system and method |
KR20020076185A (en) | 2001-03-27 | 2002-10-09 | 코우프랜드코포레이션 | Compressor diagnostic system |
US6615594B2 (en) | 2001-03-27 | 2003-09-09 | Copeland Corporation | Compressor diagnostic system |
US7376839B2 (en) | 2001-05-04 | 2008-05-20 | Cubic Corporation | Smart card access control system |
US6658373B2 (en) | 2001-05-11 | 2003-12-02 | Field Diagnostic Services, Inc. | Apparatus and method for detecting faults and providing diagnostics in vapor compression cycle equipment |
US6973410B2 (en) | 2001-05-15 | 2005-12-06 | Chillergy Systems, Llc | Method and system for evaluating the efficiency of an air conditioning apparatus |
US6483697B1 (en) | 2001-05-29 | 2002-11-19 | Palm, Inc. | Nested flip cover lid for a hand-held computing system |
US6801849B2 (en) | 2001-07-13 | 2004-10-05 | Bombardier Recreational Products Inc. | Engine diagnostic via PDA |
US7313819B2 (en) | 2001-07-20 | 2007-12-25 | Intel Corporation | Automated establishment of addressability of a network device for a target network environment |
US7310817B2 (en) * | 2001-07-26 | 2007-12-18 | Mcafee, Inc. | Centrally managed malware scanning |
US20030033230A1 (en) | 2001-08-06 | 2003-02-13 | Mccall John E. | Method and system for presenting customized advisory information |
US7505914B2 (en) | 2001-08-06 | 2009-03-17 | Ecolab Inc. | Method and system for providing advisory information to a field service provider |
US7004401B2 (en) | 2001-08-10 | 2006-02-28 | Cerys Systems, Inc. | System and method for regulating agriculture storage facilities in order to promote uniformity among separate storage facilities |
US7542867B2 (en) | 2001-08-14 | 2009-06-02 | National Instruments Corporation | Measurement system with modular measurement modules that convey interface information |
US6741915B2 (en) | 2001-08-22 | 2004-05-25 | Mmi Controls, Ltd. | Usage monitoring HVAC control system |
JP4422932B2 (en) | 2001-09-05 | 2010-03-03 | シャープ株式会社 | Control equipment for air conditioning equipment |
US6826454B2 (en) | 2001-09-19 | 2004-11-30 | Louis E. Sulfstede | Air conditioning diagnostic analyzer |
US7630359B1 (en) | 2001-09-28 | 2009-12-08 | At&T Corp. | Technique for providing translation between the packet environment and the PSTN environment |
DE50210061D1 (en) | 2001-10-16 | 2007-06-14 | Siemens Ag | A method for initializing an access control system with a plurality of electronic keys and a plurality of objects |
US7321784B2 (en) | 2001-10-24 | 2008-01-22 | Texas Instruments Incorporated | Method for physically updating configuration information for devices in a wireless network |
WO2003044698A1 (en) | 2001-11-15 | 2003-05-30 | Visto Corporation | System and methods for asychronous synchronization |
US7487538B2 (en) | 2001-11-19 | 2009-02-03 | Steven Siong Cheak Mok | Security system |
JP3996428B2 (en) | 2001-12-25 | 2007-10-24 | 松下電器産業株式会社 | Abnormality detection device and abnormality detection system |
US6667690B2 (en) | 2002-01-22 | 2003-12-23 | Carrier Corporation | System and method for configuration of HVAC network |
US6789739B2 (en) | 2002-02-13 | 2004-09-14 | Howard Rosen | Thermostat system with location data |
US7907753B2 (en) | 2002-03-08 | 2011-03-15 | Honeywell International Inc. | Access control system with symbol recognition |
US20030174049A1 (en) | 2002-03-18 | 2003-09-18 | Precision Dynamics Corporation | Wearable identification appliance that communicates with a wireless communications network such as bluetooth |
EP1490941A4 (en) | 2002-03-28 | 2007-01-10 | Robertshaw Controls Co | Energy management system and method |
US7383158B2 (en) | 2002-04-16 | 2008-06-03 | Trane International Inc. | HVAC service tool with internet capability |
CA2490226C (en) | 2002-05-21 | 2012-04-24 | Bio-Key International, Inc. | Systems and methods for secure biometric authentication |
US20030233432A1 (en) | 2002-06-18 | 2003-12-18 | John Davis | Web-based interface for building management systems |
US7583401B2 (en) | 2002-06-27 | 2009-09-01 | Snap-On Technologies, Inc. | Portal for distributing business and product information |
GB2390705B (en) | 2002-07-11 | 2004-12-29 | Ritech Internat Ltd | Portable biodata protected data storage unit |
CN1592811A (en) | 2002-07-31 | 2005-03-09 | 索尼株式会社 | Collective housing shared entrance device, collective housing door-to-door interphone device, door-to-door container box management device, and communication system |
US7574734B2 (en) | 2002-08-15 | 2009-08-11 | Dominique Louis Joseph Fedronic | System and method for sequentially processing a biometric sample |
US20040062421A1 (en) | 2002-08-30 | 2004-04-01 | Jakubowski Peter Joel | System for generating composite reports respecting personnel traffic at a personnel checkpoint |
US20040064453A1 (en) | 2002-09-27 | 2004-04-01 | Antonio Ruiz | Large-scale hierarchical identification and verification for secured ingress and egress using biometrics |
US7245223B2 (en) | 2002-11-20 | 2007-07-17 | Richard Steven Trela | Anti terrorist and homeland security public safety warning system |
EP1429082B1 (en) | 2002-12-10 | 2012-04-11 | LG Electronics Inc. | Central control system and method for controlling air conditioners |
US7076083B2 (en) | 2002-12-12 | 2006-07-11 | Eastman Kodak Company | Personnel access control system |
JP2003240318A (en) | 2003-02-12 | 2003-08-27 | Hitachi Ltd | Monitoring device |
US6983889B2 (en) | 2003-03-21 | 2006-01-10 | Home Comfort Zones, Inc. | Forced-air zone climate control system for existing residential houses |
US7283489B2 (en) | 2003-03-31 | 2007-10-16 | Lucent Technologies Inc. | Multimedia half-duplex sessions with individual floor controls |
GB2400478B (en) | 2003-04-07 | 2006-03-29 | Research In Motion Ltd | Method and system of supporting smart cards on electronic devices |
US7340743B1 (en) * | 2003-04-25 | 2008-03-04 | Symantec Operating Corporation | Masterless locks in a multi-node environment |
US6970070B2 (en) | 2003-05-08 | 2005-11-29 | Rsa Security Inc. | Method and apparatus for selective blocking of radio frequency identification devices |
US6985212B2 (en) | 2003-05-19 | 2006-01-10 | Rosemount Aerospace Inc. | Laser perimeter awareness system |
US7380125B2 (en) | 2003-05-22 | 2008-05-27 | International Business Machines Corporation | Smart card data transaction system and methods for providing high levels of storage and transmission security |
US7274676B2 (en) | 2003-07-14 | 2007-09-25 | Honeywell International Inc. | Burst-mode weighted sender scheduling for ad-hoc wireless medium access control protocols |
US7222800B2 (en) | 2003-08-18 | 2007-05-29 | Honeywell International Inc. | Controller customization management system |
US6851621B1 (en) | 2003-08-18 | 2005-02-08 | Honeywell International Inc. | PDA diagnosis of thermostats |
US7055759B2 (en) | 2003-08-18 | 2006-06-06 | Honeywell International Inc. | PDA configuration of thermostats |
US7362210B2 (en) | 2003-09-05 | 2008-04-22 | Honeywell International Inc. | System and method for gate access control |
WO2005027068A1 (en) | 2003-09-12 | 2005-03-24 | Canon Kabushiki Kaisha | Streaming non-continuous video data |
SE525847C2 (en) | 2003-10-16 | 2005-05-10 | Solid Ab | Ways to configure a locking system and locking system |
US7543327B1 (en) | 2003-11-21 | 2009-06-02 | Arecont Vision Llc | Video surveillance system based on high resolution network cameras capable of concurrent transmission of multiple image formats at video rates |
FI116592B (en) | 2003-11-24 | 2005-12-30 | Nokia Corp | Configuration of a terminal |
US8272053B2 (en) | 2003-12-18 | 2012-09-18 | Honeywell International Inc. | Physical security management system |
US20050138380A1 (en) | 2003-12-22 | 2005-06-23 | Fedronic Dominique L.J. | Entry control system |
US7233243B2 (en) | 2004-01-09 | 2007-06-19 | Ctrl Systems, Inc. | Method of defense-in-depth ultrasound intrusion detection |
US7408925B1 (en) | 2004-03-31 | 2008-08-05 | Avaya Technology Corp. | Originator based directing and origination call processing features for external devices |
US7243001B2 (en) | 2004-06-15 | 2007-07-10 | Amazon Technologies, Inc. | Time-based warehouse movement maps |
JP2006065538A (en) | 2004-08-26 | 2006-03-09 | Fujitsu Ltd | Wireless ic tag system, wireless ic tag access control device, wireless ic tag access control method, wireless ic tag access control program and wireless ic tag |
CN101052970B (en) | 2004-08-27 | 2011-07-13 | 霍尼韦尔有限公司 | Access control system and access control method |
US7124943B2 (en) | 2004-09-24 | 2006-10-24 | Assa Abloy Identification Technology Group Ab | RFID system having a field reprogrammable RFID reader |
US7280030B1 (en) * | 2004-09-24 | 2007-10-09 | Sielox, Llc | System and method for adjusting access control based on homeland security levels |
US6967612B1 (en) | 2004-10-22 | 2005-11-22 | Gorman John D | System and method for standoff detection of human carried explosives |
EP2498199A3 (en) | 2004-11-02 | 2012-12-12 | Dai Nippon Printing Co., Ltd. | Management system |
US7205882B2 (en) | 2004-11-10 | 2007-04-17 | Corestreet, Ltd. | Actuating a security system using a wireless device |
US7250853B2 (en) | 2004-12-10 | 2007-07-31 | Honeywell International Inc. | Surveillance system |
US7397371B2 (en) | 2005-01-31 | 2008-07-08 | Honeywell International Inc. | Security system access control and method |
US7735145B2 (en) | 2005-02-18 | 2010-06-08 | Microsoft Corporation | Portable secure media with timed erasure |
US8316407B2 (en) | 2005-04-04 | 2012-11-20 | Honeywell International Inc. | Video system interface kernel |
WO2006126974A1 (en) | 2005-04-11 | 2006-11-30 | Tubitak Bilten | Optimal video adaptation for resource constrained mobile devices based on subjective utility models |
US7216007B2 (en) | 2005-07-06 | 2007-05-08 | Honeywell International Inc. | System and method for providing direct web access to controllers in a process control environment |
US20070109098A1 (en) | 2005-07-27 | 2007-05-17 | Siemon John A | System for providing network access security |
EP1752937A1 (en) | 2005-07-29 | 2007-02-14 | Research In Motion Limited | System and method for encrypted smart card PIN entry |
US20070028119A1 (en) * | 2005-08-01 | 2007-02-01 | Mirho Charles A | Access control system |
KR100810251B1 (en) | 2005-10-11 | 2008-03-06 | 삼성전자주식회사 | Method and Apparatus to transmit and receive Electronic Service Guide for preview service in Digital Video Broadcasting system |
US8232860B2 (en) | 2005-10-21 | 2012-07-31 | Honeywell International Inc. | RFID reader for facility access control and authorization |
US7343265B2 (en) | 2005-11-23 | 2008-03-11 | Lockheed Martin Corporation | System to monitor the health of a structure, sensor nodes, program product, and related methods |
US20070171862A1 (en) | 2006-01-25 | 2007-07-26 | Honeywell International Inc. | Media access control protocol for mobile ad hoc networks using CDMA and multiuser detection |
US20070268145A1 (en) | 2006-05-19 | 2007-11-22 | Bazakos Michael E | Automated tailgating detection via fusion of video and access control |
US20070272744A1 (en) | 2006-05-24 | 2007-11-29 | Honeywell International Inc. | Detection and visualization of patterns and associations in access card data |
WO2008039759A2 (en) | 2006-09-25 | 2008-04-03 | Intelligent Management Systems Corporation | System and method for resource management |
US8166532B2 (en) | 2006-10-10 | 2012-04-24 | Honeywell International Inc. | Decentralized access control framework |
US7853987B2 (en) | 2006-10-10 | 2010-12-14 | Honeywell International Inc. | Policy language and state machine model for dynamic authorization in physical access control |
US7796536B2 (en) | 2006-10-17 | 2010-09-14 | Honeywell International Inc. | Dynamic auto-reconfigurable time division multiple access |
US7801870B2 (en) | 2006-10-26 | 2010-09-21 | Samsung Electronics Co., Ltd. | Method of synchronizing information shared between a plurality of universal plug and play devices and apparatus therefor |
US9286481B2 (en) | 2007-01-18 | 2016-03-15 | Honeywell International Inc. | System and method for secure and distributed physical access control using smart cards |
EP2119235A4 (en) | 2007-02-02 | 2011-12-21 | Honeywell Int Inc | Systems and methods for managing live video data |
JP4924713B2 (en) * | 2007-04-26 | 2012-04-25 | 富士通株式会社 | Entrance / exit management program, entrance / exit management method, and entrance / exit management device |
US7595815B2 (en) | 2007-05-08 | 2009-09-29 | Kd Secure, Llc | Apparatus, methods, and systems for intelligent security and safety |
CN101765835B (en) | 2007-05-28 | 2013-05-08 | 霍尼韦尔国际公司 | Systems and methods for configuring access control devices |
CN101765995B (en) | 2007-05-28 | 2012-11-14 | 霍尼韦尔国际公司 | Systems and methods for commissioning access control devices |
US8045960B2 (en) | 2007-05-31 | 2011-10-25 | Honeywell International Inc. | Integrated access control system and a method of controlling the same |
US20090018900A1 (en) | 2007-06-11 | 2009-01-15 | Honeywell International Inc. | Parking facility customer service and access control system |
US20090097815A1 (en) | 2007-06-18 | 2009-04-16 | Lahr Nils B | System and method for distributed and parallel video editing, tagging, and indexing |
US7600679B2 (en) | 2007-07-11 | 2009-10-13 | Honeywell International Inc. | Automatic guidance of visitor in new facility through access control system integration with LCD display |
US8543684B2 (en) * | 2007-08-24 | 2013-09-24 | Assa Abloy Ab | Method for computing the entropic value of a dynamical memory system |
US8605151B2 (en) | 2007-09-21 | 2013-12-10 | Utc Fire & Security Americas Corporation, Inc. | Methods and systems for operating a video surveillance system |
US8554865B2 (en) | 2007-09-21 | 2013-10-08 | Honeywell International Inc. | System and method for remotely administering and synchronizing a clustered group of access control panels |
US8199196B2 (en) | 2007-09-27 | 2012-06-12 | Alcatel Lucent | Method and apparatus for controlling video streams |
US8413227B2 (en) | 2007-09-28 | 2013-04-02 | Honeywell International Inc. | Apparatus and method supporting wireless access to multiple security layers in an industrial control and automation system or other system |
WO2009061855A2 (en) * | 2007-11-05 | 2009-05-14 | Intelli-Check--Mobilisa, Inc. | Dynamic access control in response to flexible rules |
US8179227B2 (en) | 2007-11-08 | 2012-05-15 | Honeywell International Inc. | Employing external storage devices as media for access control panel control information |
AU2007254603A1 (en) | 2007-12-20 | 2009-07-09 | Canon Kabushiki Kaisha | Hierarchical tag based browsing of media collections |
US8102240B2 (en) | 2007-12-27 | 2012-01-24 | Honeywell International Inc. | Controller providing shared device access for access control systems |
US8620269B2 (en) | 2007-12-31 | 2013-12-31 | Honeywell International Inc. | Defining a boundary for wireless network using physical access control systems |
WO2009094731A1 (en) | 2008-01-30 | 2009-08-06 | Honeywell International Inc. | Systems and methods for managing building services |
US8427552B2 (en) | 2008-03-03 | 2013-04-23 | Videoiq, Inc. | Extending the operational lifetime of a hard-disk drive used in video data storage applications |
US20090258643A1 (en) | 2008-04-09 | 2009-10-15 | Honeywell International Inc. | Method for accessing air traffic control communications |
US7995526B2 (en) | 2008-04-23 | 2011-08-09 | Honeywell International Inc. | Apparatus and method for medium access control in wireless communication networks |
US8474710B2 (en) | 2008-04-28 | 2013-07-02 | Honeywell International Inc. | Access control proximity card with actuation sensor |
US8341695B2 (en) | 2008-05-01 | 2012-12-25 | Honeywell International Inc. | Method of access control implemented in an Ethernet switch |
US8095889B2 (en) | 2008-05-12 | 2012-01-10 | Honeywell International Inc. | Heuristic and intuitive user interface for access control systems |
US20090328203A1 (en) | 2008-05-19 | 2009-12-31 | Honeywell International Inc. | Parametric based conditional access codes for access control applications |
US8731895B2 (en) | 2008-05-20 | 2014-05-20 | Honeywell International Inc. | System and method for accessing and configuring field devices in a process control system |
US7983892B2 (en) | 2008-05-20 | 2011-07-19 | Honeywell International Inc. | System and method for accessing and presenting health information for field devices in a process control system |
US8108200B2 (en) | 2008-05-20 | 2012-01-31 | Honeywell International Inc. | System and method for accessing and configuring field devices in a process control system using distributed control components |
US8521312B2 (en) | 2008-08-06 | 2013-08-27 | Honeywell International Inc. | Apparatus and method for wireless access and control of process control instruments |
WO2010039598A2 (en) | 2008-09-30 | 2010-04-08 | Honeywell International Inc. | Systems and methods for interacting with access control devices |
US8350666B2 (en) | 2008-10-15 | 2013-01-08 | Honeywell International Inc. | Apparatus and method for location-based access control in wireless networks |
US8222990B2 (en) | 2008-12-12 | 2012-07-17 | Honeywell International Inc. | Hybrid access control system and method for controlling the same |
US9019070B2 (en) | 2009-03-19 | 2015-04-28 | Honeywell International Inc. | Systems and methods for managing access control devices |
US8443437B2 (en) | 2009-04-20 | 2013-05-14 | Honeywell International Inc. | Method and apparatus for enforcing logical access security policies using physical access control systems |
US20120106915A1 (en) | 2009-07-08 | 2012-05-03 | Honeywell International Inc. | Systems and methods for managing video data |
US8509987B2 (en) | 2009-11-11 | 2013-08-13 | Benjamin Resner | Methods and apparatus for automatic internet logging and social comparison of vehicular driving behavior |
US8558658B2 (en) | 2009-12-03 | 2013-10-15 | Honeywell International Inc. | Method and apparatus for configuring an access control system |
US9280365B2 (en) | 2009-12-17 | 2016-03-08 | Honeywell International Inc. | Systems and methods for managing configuration data at disconnected remote devices |
US8707414B2 (en) | 2010-01-07 | 2014-04-22 | Honeywell International Inc. | Systems and methods for location aware access control management |
US8680995B2 (en) | 2010-01-28 | 2014-03-25 | Honeywell International Inc. | Access control system based upon behavioral patterns |
US8787725B2 (en) | 2010-11-11 | 2014-07-22 | Honeywell International Inc. | Systems and methods for managing video data |
-
2010
- 2010-03-12 US US13/257,263 patent/US9019070B2/en active Active
- 2010-03-12 EP EP10753194.9A patent/EP2408984B1/en active Active
- 2010-03-12 WO PCT/IB2010/051067 patent/WO2010106474A1/en active Application Filing
Patent Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6318137B1 (en) * | 1998-04-08 | 2001-11-20 | David Chaum | Electronic lock that can learn to recognize any ordinary key |
WO2004092514A1 (en) * | 2003-04-16 | 2004-10-28 | Tcam Technology Pte. Ltd. | Electronic lock and key for access management |
WO2005038729A1 (en) | 2003-10-16 | 2005-04-28 | Scm Microsystems, Inc. | Access control system |
US20070132550A1 (en) * | 2005-12-08 | 2007-06-14 | Msystems Ltd. | Electromechanical Lock Device And Method |
US20080313556A1 (en) * | 2007-06-12 | 2008-12-18 | Honeywell International, Inc. | Access control system with rules engine architecture |
Cited By (44)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US9704313B2 (en) | 2008-09-30 | 2017-07-11 | Honeywell International Inc. | Systems and methods for interacting with access control devices |
US8878931B2 (en) | 2009-03-04 | 2014-11-04 | Honeywell International Inc. | Systems and methods for managing video data |
US9019070B2 (en) | 2009-03-19 | 2015-04-28 | Honeywell International Inc. | Systems and methods for managing access control devices |
US8584030B2 (en) | 2009-09-29 | 2013-11-12 | Honeywell International Inc. | Systems and methods for displaying HVAC information |
US8565902B2 (en) | 2009-09-29 | 2013-10-22 | Honeywell International Inc. | Systems and methods for controlling a building management system |
US9170574B2 (en) | 2009-09-29 | 2015-10-27 | Honeywell International Inc. | Systems and methods for configuring a building management system |
GB2475959A (en) * | 2009-12-03 | 2011-06-08 | Honeywell Int Inc | Method and apparatus for setting up a security system |
GB2475959B (en) * | 2009-12-03 | 2014-04-02 | Honeywell Int Inc | Method and apparatus for configuring an access control system |
US8558658B2 (en) | 2009-12-03 | 2013-10-15 | Honeywell International Inc. | Method and apparatus for configuring an access control system |
US9280365B2 (en) | 2009-12-17 | 2016-03-08 | Honeywell International Inc. | Systems and methods for managing configuration data at disconnected remote devices |
US8577505B2 (en) | 2010-01-27 | 2013-11-05 | Honeywell International Inc. | Energy-related information presentation system |
US9894261B2 (en) | 2011-06-24 | 2018-02-13 | Honeywell International Inc. | Systems and methods for presenting digital video management system information via a user-customizable hierarchical tree interface |
US10038872B2 (en) | 2011-08-05 | 2018-07-31 | Honeywell International Inc. | Systems and methods for managing video data |
US10362273B2 (en) | 2011-08-05 | 2019-07-23 | Honeywell International Inc. | Systems and methods for managing video data |
US9344684B2 (en) | 2011-08-05 | 2016-05-17 | Honeywell International Inc. | Systems and methods configured to enable content sharing between client terminals of a digital video management system |
US10863143B2 (en) | 2011-08-05 | 2020-12-08 | Honeywell International Inc. | Systems and methods for managing video data |
US8947437B2 (en) | 2012-09-15 | 2015-02-03 | Honeywell International Inc. | Interactive navigation environment for building performance visualization |
US11592851B2 (en) | 2012-09-15 | 2023-02-28 | Honeywell International Inc. | Interactive navigation environment for building performance visualization |
US9760100B2 (en) | 2012-09-15 | 2017-09-12 | Honeywell International Inc. | Interactive navigation environment for building performance visualization |
US10429862B2 (en) | 2012-09-15 | 2019-10-01 | Honeywell International Inc. | Interactive navigation environment for building performance visualization |
US10921834B2 (en) | 2012-09-15 | 2021-02-16 | Honeywell International Inc. | Interactive navigation environment for building performance visualization |
DE102013101846B4 (en) | 2013-02-25 | 2022-01-20 | Heinz Roth | access control device |
US10523903B2 (en) | 2013-10-30 | 2019-12-31 | Honeywell International Inc. | Computer implemented systems frameworks and methods configured for enabling review of incident data |
US11523088B2 (en) | 2013-10-30 | 2022-12-06 | Honeywell Interntional Inc. | Computer implemented systems frameworks and methods configured for enabling review of incident data |
GB2574675A (en) * | 2018-06-15 | 2019-12-18 | Scotia Safes Ltd | Access control device, system and methods |
US11626004B2 (en) | 2018-09-05 | 2023-04-11 | Honeywell International, Inc. | Methods and systems for improving infection control in a facility |
US11288945B2 (en) | 2018-09-05 | 2022-03-29 | Honeywell International Inc. | Methods and systems for improving infection control in a facility |
US10978199B2 (en) | 2019-01-11 | 2021-04-13 | Honeywell International Inc. | Methods and systems for improving infection control in a building |
US11887722B2 (en) | 2019-01-11 | 2024-01-30 | Honeywell International Inc. | Methods and systems for improving infection control in a building |
US11620594B2 (en) | 2020-06-12 | 2023-04-04 | Honeywell International Inc. | Space utilization patterns for building optimization |
US11783658B2 (en) | 2020-06-15 | 2023-10-10 | Honeywell International Inc. | Methods and systems for maintaining a healthy building |
US11914336B2 (en) | 2020-06-15 | 2024-02-27 | Honeywell International Inc. | Platform agnostic systems and methods for building management systems |
US11783652B2 (en) | 2020-06-15 | 2023-10-10 | Honeywell International Inc. | Occupant health monitoring for buildings |
US11778423B2 (en) | 2020-06-19 | 2023-10-03 | Honeywell International Inc. | Using smart occupancy detection and control in buildings to reduce disease transmission |
US11184739B1 (en) | 2020-06-19 | 2021-11-23 | Honeywel International Inc. | Using smart occupancy detection and control in buildings to reduce disease transmission |
US11823295B2 (en) | 2020-06-19 | 2023-11-21 | Honeywell International, Inc. | Systems and methods for reducing risk of pathogen exposure within a space |
US11619414B2 (en) | 2020-07-07 | 2023-04-04 | Honeywell International Inc. | System to profile, measure, enable and monitor building air quality |
US11402113B2 (en) | 2020-08-04 | 2022-08-02 | Honeywell International Inc. | Methods and systems for evaluating energy conservation and guest satisfaction in hotels |
US11894145B2 (en) | 2020-09-30 | 2024-02-06 | Honeywell International Inc. | Dashboard for tracking healthy building performance |
US11662115B2 (en) | 2021-02-26 | 2023-05-30 | Honeywell International Inc. | Hierarchy model builder for building a hierarchical model of control assets |
US11599075B2 (en) | 2021-02-26 | 2023-03-07 | Honeywell International Inc. | Healthy building dashboard facilitated by hierarchical model of building control assets |
US11815865B2 (en) | 2021-02-26 | 2023-11-14 | Honeywell International, Inc. | Healthy building dashboard facilitated by hierarchical model of building control assets |
US11372383B1 (en) | 2021-02-26 | 2022-06-28 | Honeywell International Inc. | Healthy building dashboard facilitated by hierarchical model of building control assets |
US11474489B1 (en) | 2021-03-29 | 2022-10-18 | Honeywell International Inc. | Methods and systems for improving building performance |
Also Published As
Publication number | Publication date |
---|---|
EP2408984A1 (en) | 2012-01-25 |
EP2408984B1 (en) | 2019-11-27 |
US9019070B2 (en) | 2015-04-28 |
EP2408984A4 (en) | 2016-11-30 |
US20120133482A1 (en) | 2012-05-31 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US9019070B2 (en) | Systems and methods for managing access control devices | |
EP2150901B1 (en) | Systems and methods for configuring access control devices | |
JP7051766B2 (en) | Self-provisioning access control | |
EP2816532B1 (en) | Systems and methods for enabling access control via mobile devices | |
US8707414B2 (en) | Systems and methods for location aware access control management | |
CA2723186C (en) | Method and apparatus for configuring an access control system | |
US9280365B2 (en) | Systems and methods for managing configuration data at disconnected remote devices | |
AU2017101435B4 (en) | Frameworks and methodologies configured to enable integration of booking and access control for service providers | |
KR102612502B1 (en) | Managing data and data usage in IOT networks | |
US10839628B2 (en) | Virtual panel access control system | |
EP2332386A2 (en) | Systems and methods for interacting with access control devices | |
US11594092B2 (en) | Multi-site building access using mobile credentials | |
US20110077754A1 (en) | Systems and methods for controlling a building management system | |
CN113519007A (en) | Credential storage manager for securing credentials during use of a delegated account | |
US20190251765A1 (en) | Policy-managed physical access authentication | |
CN115362466A (en) | Unmanned house visiting system | |
US9754432B2 (en) | Wireless communication protocol based lock management | |
US11783646B1 (en) | Method and apparatus for policy based access control | |
Blaško et al. | Laboratory Access and Evidence System | |
KR20210107327A (en) | Untact room control system and method thereof |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
WWE | Wipo information: entry into national phase |
Ref document number: 2010753194 Country of ref document: EP |
|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 10753194 Country of ref document: EP Kind code of ref document: A1 |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
WWE | Wipo information: entry into national phase |
Ref document number: 13257263 Country of ref document: US |