Abstract:
A credential management and administration system and method by which the documented eligibility of persons to receive benefits, services, access to premises or events, and the like is centrally administered. In one embodiment, credentials are distributed to the individuals electronically, via communication network, to respective portable device having a corresponding display. Each display is configured to visually present certain qualifying information that is updated at periodic intervals. Alternatively, the qualifying information may be presented via wireless means to a suitable receiver proximate the location where services are delivered.

Description:
REFERENCE TO RELATED APPLICATIONS 
       [0001]    This application is a continuation-in-part of co-pending patent application Ser. No. 13/196,342 filed by Alan Amron on Aug. 2, 2011 and entitled SYSTEM AND METHOD FOR ALLOCATING ACCESS AT EVENTS. 
     
    
     BACKGROUND OF THE INVENTION 
       [0002]    1. Field of the Invention 
         [0003]    The present invention relates to systems and techniques for administering the credentials of those individuals who are authorized, for example, to receive or benefit from a product or service, to enter an area of restricted access, to be present at an event or performance, or to collect governmental benefit, so that individuals bearing such credentials may be easily, accurately and consistently distinguished from individuals who are not so authorized. 
         [0004]    2. Discussion of the Background Art 
         [0005]    There are many situations where it is necessary to distinguish between those individuals with and without authorization to perform a particular act. Representative examples of such acts include entering into a restricted-access building or area of a building, attending a sporting event or performance, and receiving or collecting a governmental benefit (or, for that matter, state-run lottery winnings). The complexity associated with conferring authority upon select individuals or groups of individuals correlates closely with the population of individuals included in the group(s), the degree to which that population is static or dynamic, the number of groups (if applicable) within the population, and the need to accommodate variations in authority among those groups. For example, in building security situations where the number of individuals to be recognized is relatively small, the turnover among them is low, and the security workforce stable, it is generally possible to rely solely on recognition of each individual based on their physical appearance (i.e., “by sight”). Where the number of individuals having authority to enter secure areas and/or facilities is too large or is subject to a higher rate of turnover, or where the security staff itself is subject to turnover, however, it is not feasible to rely upon recognizing individuals by sight alone. 
         [0006]    It has therefore become commonplace to distribute wearable badges or wallet-sized identification cards and to uniquely associate each such badge or ID card with the individual wearing or carrying it. A typical badge or ID card, for example, may include a photograph, a signature, a fingerprint, an RFID tag, and usually some combination of these. Specially designed doors equipped to admit only one person at a time and only upon recognition of an appropriate code (whether by keypad entry, passive RFID detection, biometric scanning, etc.) are also commonplace. 
         [0007]    While the aforementioned identification systems are now ubiquitous in the workplace, there are certain limitations which make them undesirable for certain situations such, for example, as where a higher degree of protection against counterfeiting is required or as where one or more groups of individuals have only a transient need to enter a specific building, facility, or area thereof. The need to safeguard against counterfeiting, of course, arises from the widespread availability of image scanners, color printers, and field-programmable RFID tags. While the need to prevent unauthorized duplication or counterfeiting of credentials is particularly acute when it comes to law enforcement and investigative personnel, additional safeguards would also be applicable to cards used to establish eligibility to receive government benefits (e.g., social security identification cards), to board an airplane as a passenger (e.g., a boarding pass), and even to collect lottery winnings 
         [0008]    As for transient or frequently changing access requirements, consider the examples of traveling sports teams and performers. A professional football team may play eighteen games, with half of these being at a local or “home” stadium and the other half of the games being “away games” played at the home stadium of an adversary. A professional baseball team may play almost ten times as many games as a football team, but with a similar distribution of local and away games. In each of these cases, there are team members, supporting staff and other employees that all require a way of documenting their authority to enter a stadium on the day of an event (whether it be a practice session, a pre-season game, a regular season game, or a post season game). A musician or band may play at a large number of venues during a single tour, while a movie or television show may require filming at a number of different locations, with a concert or filming session at each discrete location also constituting an “event”. 
         [0009]    In the aforementioned transient access situations, it has been customary to issue individuals who are authorized to be present at an event—whether they are attending as a member of the audience or in a supporting capacity—a discrete, temporary printed admission pass good only for the day of the event, after which it is to be discarded and cannot be used for admission to a subsequent event. These printed passes are expensive to produce, and each must be distributed to every authorized individual at some point prior to the applicable event(s). As the number of individuals with a need or desire to be present at multiple events grows, the cost and inefficiency of the approach quickly becomes apparent. While it would be possible to print and distribute a multiple use pass, the risk of unauthorized duplication and/or use, already quite high, increases dramatically. 
         [0010]    In U.S. patent application Ser. No. 13/196,342, the inventor herein proposed a credential management system which obviates the need to design, produce and distribute one-time printed passes to individuals authorized to be present at an event such, for example, as cast members, stage crew, security details and staff, important guests, performers, players, officials and many others. 
         [0011]    A continuing need exists for credential management systems which minimize the risks of unauthorized use or duplication of distributed credentials, passes, badges and tickets. 
         [0012]    A further need exists for credential management systems having an optional location tracking capability whereby the whereabouts of each person to whom a credential is issued can be remotely monitored during an event. 
         [0013]    Yet another need exists for credential management systems which can be centrally administered to accommodate levels of authorization among individuals in a single group, among individuals in plural groups associated with a single entity (e.g. a corporate client or government organization), and even among respective groups and individuals associated with a plurality of such entities. 
       SUMMARY OF THE INVENTION 
       [0014]    The aforementioned needs are addressed, and an advance is made in the art, by methods of configuring and administering secure electronic devices so that they visually present an authenticating credential, pass, badge, ticket, etc. An illustrative method according to the invention includes the step of associating each of a plurality of portable electronic devices with a corresponding user, utilizing an identifier that is unique to each device. The electronic devices can be smartphones, tablet computers, personal digital assistants (PDAs) adapted to utilize the services of a wireless telecommunications carrier and/or a wireless local area network (WLAN), they may be special purpose devices adapted for WLAN or physical link connections only, or they may be some combination of any or all of these devices. Non-limiting examples of useful unique identifiers include an internet protocol (IP) address, Ethernet media access control (MAC) address, a telephone number, an IMEI (International Mobile Equipment Identity) number, or an RFID tag. 
         [0015]    The illustrative process further includes obtaining—for each of a group of secure electronic devices to be administered as a credential, pass, badge, ticket, permit or the like (collectively, “credentials”)—visual symbol information from which a unique visual symbol to be displayed during a first time interval can be derived. The visual symbol information can include a bar code, an alphanumeric sequence, or other type of machine-discernable image. The obtained visual symbol information is transmitted or otherwise supplied to a corresponding device and, for the duration of the first time interval, each administered electronic device of a group displays a visual symbol that is not displayed by any other administered electronic device of that group. 
         [0016]    The illustrative process further includes obtaining and transmitting, for each of the group of electronic devices to be administered as a credential, visual symbol information from which the next unique credential to be displayed during the next time interval by each device can be derived. The time intervals may be of equal duration, on the order of 30 to 6000 seconds depending upon the rate at which each credential is to be updated, or the duration may be randomly selected so as to change from one interval to the next. 
         [0017]    In accordance with another aspect of an illustrative embodiment of the present invention, a process of facilitating authentication of a candidate portable electronic device displaying a visual symbol and presented as a credential comprises determining, in a first determining step, whether the candidate portable electronic device is identifiable by a unique ID associated with an authorized user. In a second determining step, a determination is made as to whether the visual symbol displayed by the candidate portable electronic device corresponds to a visual symbol valid for an authorized user during a current time interval. 
         [0018]    If a candidate portable electronic device is identifiable by a unique ID associated with an administered user and received data is representative of a visual symbol valid during a current time interval, a record associated with administered user is updated to reflect at least one of the time, date, location and event where the first portable electronic device was presented as a credential. Thereafter, an acceptance decision may be transmitted to a remote terminal accessible by personnel to whom the candidate portable electronic device was presented. Optionally, an acceptance decision may also be transmitted to the remote terminal if the received data is representative of a visual symbol valid during a preceding time interval. 
         [0019]    Conversely, if the candidate portable electronic device is not identifiable by a unique ID associated with an authorized user or if received data is not representative of a visual symbol valid during a current (or, optionally, a preceding) time interval and associated with any authorized user, a rejection decision is communicated to a remote terminal accessible by personnel to whom the candidate portable electronic device was presented. 
         [0020]    In accordance with another aspect of illustrative embodiments of the present invention, at least some of the portable electronic devices include a global positioning satellite (GPS) receiver operative to obtain positional data and a corresponding cellular network transceiver for establishing a telecommunications link with a cellular network to thereby transmit position data for monitoring a location within a facility to which the first user has gained access using the first portable electronic device as a credential. Illustrative methods of administering such devices include a step of storing a record of locations visited by users of such devices while such users are present at a facility and a step of generating a report graphically presenting an average time spent, at respectively specified locations within the facility. 
         [0021]    Alternate processes of administering devices may include steps of associating, in a database, each of a plurality of users with a corresponding portable electronic device having a memory, a display, at least one of a wireless transceiver and a global positioning satellite (GPS) receiver wherein each device is identifiable by a unique identifier, transmitting to each of said portable electronic devices an instruction to display at least one of a corporate logo, a respectively unique computer-readable visual symbol, and a personal photo for use as a credential to be presented at a facility; and collecting, from each device, data corresponding to time spent at a plurality of specified locations within a facility and to which each respective user has gained access using a corresponding portable electronic device as a credential. The collecting step may comprise receiving, at regular intervals, location data reported wirelessly by at least some of said portable electronic devices. Alternatively, the collecting step comprises performing wireless signal triangulation, at regular intervals, to locate at least some of said portable electronic devices. As yet another alternative, the collecting step may comprise downloading historical location data from at least some of the portable electronic devices via a physical link. The various reports may optionally incorporate socio-demographic information such that the movements of specific socio-demographic groups attending a particular event or visiting a given facility can be separately averaged and reported. 
         [0022]    This Summary is provided to introduce a selection of concepts in a simplified form that are further described below in the Detailed Description. This Summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to be used as an aid in determining the scope of the claimed subject matter. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0023]      FIG. 1  is a schematic representation of the elements of a credential management system constructed in accordance with an illustrative embodiment of the present invention, the system including a back-end credential management server and a credential application download service for configuring to use conventional communication network links to update a plurality of distributed, portable electronic credentials, passes, badges, tickets, permits, licenses and the like; 
           [0024]      FIG. 2  is a flow chart depicting the client, event and user management processes of an exemplary back-end administrative process in accordance with an illustrative embodiment of the present invention; 
           [0025]      FIGS. 3A and 3B  depict the user interface of an exemplary client management portal which may be utilized by an administrator to enter and update client information; 
           [0026]      FIGS. 4A and 4B  depict the user interface of an exemplary event management portal which may be utilized by an administrator to enter and update event information; 
           [0027]      FIGS. 5A-5D  depict the user interface of an exemplary user management portal which may be utilized by an administrator to enter and update client information; 
           [0028]      FIG. 6  is a flow chart depicting an illustrative sequence of updating the respectively unique, computer readable visual symbols displayed by corresponding portable electronic credential devices so that they display a unique symbol during each of a plurality of consecutive time intervals spanning an event; 
           [0029]      FIG. 7  is a flow chart depicting an illustrative process of portable credential device authentication, which may be optionally performed at the credential administration server; 
           [0030]      FIG. 8  is a flow chart depicting an illustrative process for generating reports of interest to an event sponsor or other client, utilizing socio-demographic data entered by the administrator for at least some users as well as location data made available via wireless triangulation, gps tracking or other suitable means; and 
           [0031]      FIG. 9  is a modified system in which an credential administration server constructed in accordance with the present invention is used to manage and update the credentials presented by a plurality of special purpose, portable electronic devices (as opposed to smart phones, pda&#39;s and tablet computers). 
       
    
    
       [0032]    Like reference numerals indicate like elements in the drawings. Unless otherwise indicated, elements are not drawn to scale. 
       DETAILED DESCRIPTION 
       [0033]    With initial reference to  FIG. 1 , there is shown an illustrative credential management system  10  for configuring a plurality of portable, secure electronic display devices indicated generally at  12 A,  12 B,  12 C,  12 D, and  12 E, respectively. A characterizing feature of each of the devices  12 A- 12 E depicted in  FIG. 1  is the incorporation of a display dimensioned and arranged to present a visual symbol such that the device may serve as a secure electronic credential, pass, badge, ticket, permit, or license. As used herein, the phrase “visual symbol” is intended to encompass machine readable bar codes (e.g. UPC codes), alphanumeric sequences (which may consist of number sequences, letter sequences, or a combination thereof), images, and any other distinctive visible indicia apparent to a human observer and/or an optical scanning device. The term “credential” is intended to refer to a credential, badge, permit, license, and/or ticket as well as any combination of these. 
         [0034]    Devices  12 A- 12 E are dimensioned and arranged so that they can be carried, worn or otherwise presented—when depicting a visual symbol in accordance with the teachings of the present invention—as evidence, for example, of a person&#39;s authorization to be present at a particular facility or event (e.g., equivalent to an ID card issued by an employer, as a single- or multiple-event entry pass issued to staff, performers, members of the press, etc.), to receive a benefit (e.g., as a replacement for a social security card, health insurance card, other traditional indicia of entitlement), to exercise a governmentally regulated right or privilege (e.g., a license or permit credential), or to access the services of a common carrier (e.g., functioning as an airline boarding pass). 
         [0035]    In any event, and with continued reference to  FIG. 1 , it will be appreciated that credential management system  10  includes a credential administration server  14  having a network interface  16 , a processor  18 , and memory  20 . For a purpose which will be explained shortly, memory  20  defines an authorized user database indicated generally at reference number  22  and an event database indicated generally at reference numeral  24 . Administrator input is supplied to credential administration server  14  by administrator terminal  26 , which includes a keyboard  28 , a display monitor  30 , and other peripheral devices such as a mouse, scanning device, and printer (none of which are shown). 
         [0036]    Interaction between credential management server  14  and electronic display devices  12 A- 12 E is facilitated via a suitable network communication link as, for example, an internet link, established between network interface  16  and a corresponding interfaces and transceiver (not shown) within each respective electronic display device. In the latter regard, it should be emphasized that a credential management system constructed in accordance with the teachings of the present invention may be readily adapted to support a wide variety of electronic display devices. By way of illustrative example, and with continued reference to  FIG. 1 , display device  12 A may be configured as a conventional smartphone device characterized by a processor, a memory containing operating software as well as executable software applications, a GPS receiver, a display, an alphanumeric input and/or touchscreen, and a wireless transceiver for interacting with the base station of a cellular network to set up a link  32  over which an internet connection to network interface  16  of administration server  14 . Display device  12 B, on the other hand, may be configured as a computer tablet device supported by a cellular carrier and equipped with the same generic components as a smartphone. 
         [0037]    Devices  12 C,  12 D and  12 E can, but need not be, configured as smartphone or table computer devices supported by a cellular carrier network. In the illustrative configuration shown in  FIG. 1 , each of these devices is configured with a suitable wireless transceiver for utilizing a corresponding wireless local area network link  34  which may be, for example, an IEEE 802.11 RF link. In this regard, devices  12 C- 12 E may be configured as special-purpose devices. In the present inventor&#39;s co-pending U.S. patent application Ser. No. 13/196,342, the entire disclosure of which is expressly incorporated herein by reference, there are disclosed special purpose pass devices which further include a display, memory, power source, transceiver, an on/off slide switch for energizing and de-energizing the device, and optionally, a display screen select pushbutton for allowing the user to toggle between a first display screen, and one or more additional screens. In any event, via link  34 , each devices as device  12 C is capable of interacting with administrative server  14  via a link to the internet  38  established via base station  36  and associated local terminal  40 . 
         [0038]    In accordance with an optional aspect of the present invention, credential management system  10  further includes a credential application download server  50  which includes a network interface and a downloadable credential application program file  54 . In a conventional manner, a portable electronic device as smartphone device  12 A may access an online marketplace such, for example as the Google Apps Marketplace or the Apple® iStore, and download an executable program which, when executed by a device such as device  12 A, allows administration server  14  to interact and update device  12 A as a credential in accordance with the teachings of the present invention. 
         [0039]    Where smartphone devices are employed as secure electronic credentials in accordance with the present invention, the executable software program is preferably configured to prompt the user to decide whether to accept or reject the call. If the call is accepted, the program suspends further display of the credential (including both the visible symbol and any accompanying graphics corresponding to a ticket, pass, permit, or license being represented) until the call terminates and then automatically resumes the display. To increase visibility of the credential for all visibility conditions, the brightness of the display is set at a relatively high level at all times unless and until overridden by the user. Special purpose embodiments of the display devices, on the other hand, may incorporate a high contrast electrophoretic display. 
         [0040]    In any event, having now described the various components of an illustrative credential administration system constructed in accordance with the present invention, the administration and managing of portable electronic display devices using such a system will now be described in detail. 
         [0041]    With reference now to  FIG. 2 , it will be seen that the process commences at block  60  and passes, at block  62 , whereupon a client management portal of the administration server is accessed by the administrator. Using the client management portal, client records are either created or updated, via a series of input screens exemplified by  FIGS. 3A and 3B . In the embodiment of  FIGS. 2 ,  3 A and  3 B, it is contemplated that the credential administration needs of a plurality of client entities may be served by a single administration platform. In this regard, a single administration server as administration server  10  ( FIG. 1 ) can support multiple categories of client organizations as well as multiple organizations in a single category. An example of the former would be a platform supporting law enforcement agencies, government benefit administration agencies, multinational corporations, professional sports organizations such as the National Football League (NFL). An example of the latter would be a platform supporting the site security needs of one or more multi-national corporations. It suffices to say that credential management systems constructed in accordance with the teachings of the present invention are scalable to accommodate the particular needs of the client application(s). 
         [0042]    In any event, the process continues to block  64  at which point a client record is either created or updated. As shown in  FIG. 3A , an administrator can access a first client management screen  640  to determine whether a particular client has already been set up in the system. This is performed by clicking on a “Clients” tab indicated generally at reference numeral  642 , at which point a list of clients is presented to the administrator. Illustratively, the list of clients displayed can be narrowed as the administrator begins typing a part of the client&#39;s name in client management field  644 . In this case, typing the letter “N” causes the names of three pre-existing clients that have already set up in a client database. By clicking on one of the three entries, the administrator is presented with an opportunity to edit or add information for the selected client. As shown in  FIG. 3B , each client record includes such data as the client name, file address for specifying a logo, the business address, the telephone number, and the e-mail address of the designated corporate contact. After entering any new data, the client file record is updated by clicking upon “save” button  646 . 
         [0043]    At decision block  66 , a determination is made as to whether additional client records or updates are required. If so, the process returns to block  64 , but if not the process proceeds to block  68 . In the illustrative embodiment of  FIGS. 2 ,  4 A and  4 B, a credential administration and management system is used to set up devices which will serve as credentials for entering an event such, for example, as football game or a concert, and for displaying indicia representative of the capacity in which the wearer or presenter of the device is serving (e.g., member of staff, press, performer etc.). Thus, as shown in block  68  of  FIG. 2  and in  FIGS. 4A and 4B , an administrator having clicked on the “Events” tab is presented with the opportunity to display upcoming events (events for which one or more entries already exist) and to either modify them, cancel them, or supplement them with additional events. The process advances to block  70  for creation of or updates to a particular event record.  FIG. 4A  depicts a listing of upcoming events, as well as the date and time for which these events are scheduled. By clicking on client tab  684 , the administrator can associate a new event entry (entered in field  686 ) with a particular client. The various details to be entered for each event are shown  FIG. 4B . The start and end times for the event, for example, are entered via field  688 . In embodiments of the present invention in which the devices distributed to users are instructed to display a sequence of visual symbols for the duration of an event, reference may be made to the entered start and end time data. 
         [0044]    Returning to  FIG. 2 , it will be seen that at decision block  72 , if there are further event records to be created or updated, the process returns to block  70 , but if not then the process advances to block  74 . At block  74 , the user management portal of the credential administration server is accessed and, at block  76 , a user record is created or updated. In this regard, it is understood that a user is the person on whose behalf a portable credential management device is to be administered and updated in accordance with the present invention. To this end, an association is created, in authorized user database  22  ( FIG. 1 ), between unique identifiers (as, for example, the IP address, telephone number, mobile electronic serial number or ESN, or an RFID) and corresponding portable electronic display devices. As best seen in  FIG. 5A , a typical entry for a particular authorized user may include the user&#39;s name, the type of display device assigned to or owned by the user, an email address for the user, and a telephone number associated with the user or with the display device itself (in the case of smartphones and the like).  FIG. 5B  depicts the screen accessed by the administrator to add a new user, while  FIG. 5C  depicts the screen used by the administrator to assign users to a specific event and/or client. Finally,  FIG. 5D  is a screen which allows the user to see, at a glance, the entirety of a given user&#39;s record. 
         [0045]    In a manner which will soon be described, during an event or for a specified time period, a series of visual symbols are chosen and “pushed” to respective portable display devices. During a given time interval, each portable display device of a group of devices (for example, a plurality of devices associated with a given client or group of clients) are assigned a unique visual symbol. For example, for a given scheduled event, no two portable electronic display devices are sent the same visual symbol for display as a credential. As part of each user&#39;s record, the most recent visual symbol pushed to the corresponding display device is stored and, optionally, the immediately preceding visible symbol (or symbols) may also be stored. In addition to the visual symbol, other data and images may be pushed by credential management and administration system  10  ( FIG. 1 ) to each portable electronic display device. Images files corresponding to the respective visual components making up an identification card, entry pass, license, and so on, for example, can be sent to each device with an instruction to display any combination of the foregoing. By updating this information at periodic, finite, intervals, it is possible to create a secure and unique “document” which is not readily subject to forgery or duplication. 
         [0046]    The aforementioned capabilities are exemplified by  FIG. 6  wherein it will be seen that a process of periodically pushing credential updates to a portable electronic device commences at start block  82  and then advances to block  84  wherein an administrator operates the system to schedule an event and to associate a user with a corresponding, unique portable device identifier (ID). At block  86 , a time interval counter N is initialized and set to zero. While each time interval might, for example, be on the order of five to ten minutes, intervals of up to one hundred hours or more are possible. The principal advantage to intervals of shorter duration is that may provide a greater disincentive to would-be duplicators. It should also be mentioned that there is no requirement that the time intervals be of constant duration. Thus for example, each time interval may be randomly selected so as to be shorter or longer than the one which preceded it. 
         [0047]    In any event and with continued reference to  FIG. 6 , it will be seen that the process then advances to block  88  wherein the interval counter is advanced by one, and thereafter to block  90  at which time credential management system  10  obtains and transmits the next visual symbol to be displayed by a particular portable display device (e.g., device  1 ). The same visual symbol obtaining and transmitting step is performed for devices  2  through M as exemplified by blocks  92  and  94 . At decision block  96 , a decision is made as to whether the event is still ongoing at the expiration of the first time interval, and if so, the process returns to block  88  and the interval counter N increments by one so that the steps ( 90 - 94 ) or updating display devices  1 -M with respectively new visual symbols can be repeated. If it is determined that the event has terminated, on the other hand, the process ends at block  100 . 
         [0048]    Turning now to  FIG. 7 , it will be seen that a process of facilitating authentication of portable electronic devices presented as credentials in accordance with an aspect of the present invention commences at block  102  and advances to block  104  wherein a request is received to authenticate a portable electronic credential device. By way of illustrative example and with momentary reference to  FIG. 1 , the authentication process may be initiated when a visual symbol displayed by a portable electronic display device as device  12 A is scanned (e.g., by security staff) by a conventional bar code scanner indicated generally at reference numeral  41  and associated with remote terminal  40 . Alternatively, a passive RFID scanner may detect the presence of a portable electronic display device and trigger an authentication request via remote terminal  40 . At decision block  106 , an initial decision is made as to whether the visual symbol specified in a request is valid during the current time interval for any of the devices managed by the credential management and administration system, or whether it has already been used to gain access to the event. If the symbol is not valid or has already been used, a rejection decision is transmitted to the requesting terminal (block  112 ), a record of the attempt is made, and the process ends at block  116 . If the reason for the rejection was due to prior use of the same visual symbol by a different device, this reason is transmitted as part of the rejection decision notification. Likewise, if visual symbol was not valid, then this information is returned as part of the rejection decision. 
         [0049]    If, on the other hand, it is determined at block  106  that the visual symbol is valid for any administered display device (i.e., one for which a user or unique ID entry exists in the system), then the process advances to decision block  108 . At decision block  108 , a determination is made as to whether the visual symbol presented during the authentication request matches the unique device id and/or user to which it is assigned in the records of authorized user database  22  ( FIG. 1 ). If the outcome is no, the process proceeds to blocks  112 ,  114 , and  116  as described previously. However, if the outcome is yes, an acceptance decision is transmitted (block  110 ), the process advances to block  114  where in the client/user/event records are updated accordingly, and then the process terminates at block  116 . 
         [0050]      FIG. 8  depicts a process of operating a credential management and administration server to update user records using user location/mobility data. The location data can take the form of either obtaining location data directly from devices such as devices  12 A- 12 E ( FIG. 1 ) (as might be obtained when the devices are equipped with GPS receivers) or by remote fixing using transmission signal triangulation or other conventional means. In any event, the process is entered at block  120  and advances to block  122 , whereupon the position data is retrieved for portable credential devices during, for example, an event or within a specified time range during which devices as devices  12 A- 12 E are being used as credentials in accordance with the present invention. The process then advances to block  124  whereupon the user records are updated to reflect time spent at each of a plurality of locations of interest specified by the administrator (and, in turn, by the client). 
         [0051]    By way of illustrative example, a client may be interest in knowing how much time users spend waiting at line at specific locations (snack bar, souvenir shop, benefits window) or how long a staff member spent at a particular part of a building. To facilitate detailed reports which include such socio-demographic data as household income, gender, marital status and the like, the administrator may additionally include such information as part of each user&#39;s data record. To this end, at block  126  a report is generated which graphically presents an average amount of time spent, by users in at least one socio-demographic group, at locations of interest. This may be during a specific event or within a specific date range, as the case may be. It is further possible to collect user location data during additional events or over specific blocks of time (block  128 ) and updating the user records with the additional data (block  130 ) so that reports aggregating data from multiple events or dates/times can be generated (block  132 ). When all desired data entry and/or reporting activity is completed, the process terminates at block  134 . 
         [0052]    In  FIG. 9  there is shown a modified embodiment of the configuration management system depicted in  FIG. 1 , wherein like elements are identified by like numerals. In the embodiment of  FIG. 9 , the portable electronic display devices as devices  12 A′- 12 E′ are pre-configured with the program for executing the program which enables them to be administered by system  10 ′. 
         [0053]    Although the subject matter has been described in language specific to structural features and/or methodological acts, it is to be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or acts described above. Rather, the specific features and acts described above are disclosed as example forms of implementing the claims.