Patent ID: 12261959

DETAILED DESCRIPTION OF THE INVENTION

The disclosure provided in the following pages describes examples of some embodiments of the invention. The designs, figures, and descriptions are non-limiting examples of certain embodiments of the invention. For example, other embodiments of the disclosed device may or may not include the features described herein. Moreover, disclosed advantages and benefits may apply to only certain embodiments of the invention and should not be used to limit the disclosed inventions.

FIG.1shows an exemplary access manager100. A digital processor or computer104is interconnected with each of a memory106, a transducer block110, and an actuator block114. The processor and memory may be included in an access manager controller or local access manager controller102. Where, as here, a controller communicates with external devices, the controller and the device(s) may be said to form a network or portion thereof.

In various embodiments the memory includes an identification or ID library, for example information including identification information in an ID library108stored via the memory106. And, in various embodiments, the transducer block includes at least a first transducer112.

FIG.2shows an exemplary access manager installation200. Here, human210access to a guarded space202via a door204is subject to action by a controller220. In particular, a transducer block or blocks208includes one or more transducers for accessing identification to determine whether the human is authorized to enter the guarded space. A human subject to an access decision by the access manager may be referred to as a “candidate.” When access is granted, the controller communicates with an actuator block or blocks206to permit access via the door. In some embodiments, the controller is a local controller interconnected with an extended network230and in some embodiments the ID library108or another ID library resides within the external network.

FIG.3Ashows a group of transducers300A. The transducer group includes a camera302such as a still or video camera incorporating a pixelated light sensor, a keypad or keyboard304, a radio frequency “RF” unit306such as a WiFi, RFID, bluetooth, AM, FM or similar unit, a proximity sensor308such as a directional or non-directional sonic sensor, a display310such as an alpha or graphic display, an audio unit312such as annunciator, speaker and/or microphone, a reader314such as a magnetic or optical card reader, a reader316such as an iris, fingerprint and/or palmprint reader, an explosives detection or odor unit318such as a calorimetric detector. Any one or more of these transducers or similar transducers may be located with one or more transducer blocks such as the transducer block(s)208mentioned above.

FIG.3Bshows a group of actuators300B. The actuator group includes devices for pre-actuation and actuation. Shown in the figure are i) motors352such as any of electric, pneumatic, hydraulic and the like motors, ii) magnetic and electromagnetic devices354with and without moving parts for example magnetic locks, iii) solenoid devices and linear devices356such as an electromagnetic solenoid with a moving plunger, iv) actuator signal generators358, v) wired devices360, and vi) wireless devices362.

FIGS.4A-Cshow ID types and transducers400A-C.

FIG.4Ashows exemplary types and forms of identification400A. These identifications are organized as one or more of scannable ID, biometric ID, and cooperative ID.

The terms scannable ID and uncooperative ID refer to forms of identification that do not require overt cooperation of the person that is being identified. Scannable ID's include optical badges, RF badges, proximity, odor and selected biometric identifiers such as ear/ear lobe, face, gait, and iris.

The term biometric ID refers to a physical attribute(s) of the person that is being identified. Biometric ID's include ear/ear lobe, face, fingerprint, gait, iris, palm print, and voice.

The term cooperative ID refers to a form of identification that requires the person being identified to cooperate. Cooperative ID's include cards such as magnetic cards, code entries via keypad or keyboard, and official documents such as government documents including driver's licenses, passports, and the like.

FIG.4Bshows uncooperative ID determinations400B. In particular, where a subject whose identification is being assessed without the subject's knowledge and/or cooperation, the table shows which ID types may be assessed and by which transducer(s). As shown, optical badges may be assessed by an optical device such as a still or video camera, radio frequency “RF” badges may be assessed by an RF device such as a WiFi or bluetooth device, a face may be assessed by the optical device, a gait may be assessed by the optical device, and an iris may be assessed by the optical device. Further, odor may be assessed by a colorimeter and proximity by a sonic device. Notably, an optical device such as a video camera provides a means for assessing several uncooperative identifiers including an optical badge, face, gait, and iris.

FIG.4Cshows ID determinations including cooperative and uncooperative ID determinations400C. In addition to the uncooperative determinations itemized in the table ofFIG.4B, the combined cooperative and uncooperative ID determinations of the table ofFIG.4Cfurther include magnetic cards assessed by a card reader, fingerprints and palm prints assessed by any of optical, capacitive, magnetic, pressure, thermal, and sonic devices, keypad or keyboard entries, document assessment by an optical device, and voice assessment by a microphone.

FIGS.5A-Bshow selected cases for using one or more types or categories of identification in connection with a decision to grant access500A-B.

FIG.5Ashows use of a single or at least one identification category in connection with a decision to grant access500A. In particular, case1shows that a scannable ID is used, that is an ID that does not require the human that is being identified to cooperate with the assessment and/or that enables scanning without apprising the human that is being assessed with any one or more of i) the assessment, ii) the particular type of identification being assessed, and iii) the method of assessment. Case2differs from case1in that a cooperative ID is used, that is an ID that requires the human that is being assessed to cooperate as occurs with an ID that is intentionally cooperative for assessment.

FIG.5Bshows use of at least two identification categories in connection with a decision to grant access500B. Four cases are shown. In multiple ID case1, first and second IDs are scannable and scannable. In multiple ID case2, first and second IDs are scannable and cooperative. In multiple ID case3, first and second IDs are cooperative and scannable. In multiple ID case4, first and second IDs are cooperative and cooperative. In light of the above, skilled artisans will appreciate the merits of choosing among the cases to fit the environment, circumstances, and objectives associated with the species and/or space to which access is limited.

Identification datasets corresponding to IDs may be selected and/or stored in groups corresponding to function, title such as job titles, authorization such as security level, function such as job function, temporal limitations such as time of day, and the like. Identification datasets may also be selected and/or stored in a manner corresponding to particular individuals.

FIGS.5C-Eshow multiple embodiments of ID datasets500C-E.

FIG.5Cshows ID datasets that are a function as a single variable500C. In particular, each ID dataset (“IDDS”) may be a function of a single variable IDDS(y). The variable “y” represents a selection from among a plurality of different ID types such that each ID dataset is associated with a particular ID type, e.g., IDDS(ID Type 1), IDDS(ID Type 2), IDDS(ID Type 3).

Where ID datasets are a function of a single variable, access may be granted when the access manager100,200acquires data from an acceptable ID that can be successfully matched with IDDS(y). For example, where an acceptable ID type is a magnetic card and data the access manager100,200acquires from such a card can be matched with IDDS(y), e.g., a stored106,108IDDS(y), access may be granted. Notably, the type of transducer or transducers available for acquiring ID data may determine and/or give notice of what is an acceptable ID Type. This feature is useful e.g., where the same ID dataset is used with multiple persons, for example a combination code.

FIG.5Dshows ID datasets that are a function of two variables500D. In particular, each ID dataset (“IDDS”) may be a function of two variables IDDS(x,y). Here, variable “x” may be used to limit the ID Datasets that are available for matching. In an embodiment, “x” refers to or is associated with a particular person and “y” represents a selection from among a plurality of different ID types such that IDDS(x,y) is IDDS(particular person, particular ID Type). This feature supports e.g., ID datasets such as biometric datasets that vary according to the person.

Where ID datasets are a function of two variables, access may be granted when the access manager100,200acquires data from an acceptable ID that can be successfully matched with an IDDS(x,y). For example, where an acceptable ID type is a magnetic card and data the access manager100,200acquires from such a card can be matched with IDDS(x,y), e.g., a stored106,108IDDS(x,y), access may be granted. Notably, a database or another data structure may store a representation or equivalent of the table500D such that for any tabulated person, selecting a particular tabulated column “y” determines the same ID Type. That is, for example, IDDS(x,1) determines ID Type 1, IDDS(x,2) determines ID Type 2, and IDDS(x,3) determines ID Type 3.

FIG.5Eshows ID datasets that are a function of two variables500E. In this embodiment, the ID Types found in a particular tabulated column may vary. Here, the tabulated columns are marked by index values 1, 2, 3 such that selection of ID datasets from a particular tabulated column may result in different ID Types. For example, IDDS(Person 1,1) may be an ID dataset corresponding to ID Type 1 while IDDS(Person 2,1) may be an ID dataset corresponding to ID Type 2. Here, the ID datasets IDDS(x,y) may include or reference, inherently or otherwise, indicia which reveal the ID Type. This feature supports e.g., use of ID Type(s) by one person that are not used by another person, for example Person 1 uses ID Types (face, magnetic card, passport) while Person 2 uses ID Types (fingerprint, optical card, passport).

FIGS.6A-Dshow flowcharts600A-D illustrating algorithmic steps taken by various embodiments of an access manager100,200. For example, algorithmic steps executed by a processor or processors of the access manager100, the controller220, or the extended network230. For a selected algorithm, all or fewer than all of the steps shown may be stored in memory106and executed on a processor104.

FIGS.6A-Bmay utilize ID datasets that a function of at least one ID or ID type. See e.g.,FIG.5C.

FIG.6Ashows a flowchart illustrating a first algorithm600A. In a step610, the algorithm watches for a person and/or indicators that a person is present. The algorithm may use watch means. Watch means may utilize scannable and/or cooperative ID such as ID types recognizable via any corresponding transducer(s) as mentioned above. For example, a proximity transducer or a directional proximity transducer may be used to recognize the presence of a person as in recognizing a person positioned in a particular location. For example, a camera may be used to recognize the presence of a person via determining the presence of a biometric identification such as a humanoid face or face in motion. For example, a keypad entry may be used to recognize the presence of a person via determining that a key or code or a particular key or code has been entered.

As a result of the watch step610, the presence of a person may be detected620. This leads to a selection of an ID type and/or ID dataset. In an embodiment, the selection may be a random or pseudo random (“RPR”) selection630of an ID type and/or ID dataset from among a plurality of ID types and/or ID datasets400A. See for exampleFIG.5Cwhere an RPR selection may be from a plurality of ID datasets IDDS(ID Type y) where “y” is an integer in a range corresponding to the number ID Types available.

Following the selection of a particular ID type, the access manager200may request, prompt for, and/or otherwise make available a facility for the person to provide a particular ID640from which the access manager acquires data. For example, where there is a request for a magnetic card ID, a magnetic card reader provides a facility for entry and/or presentation650of the requested ID. For example, where there is a request for a fingerprint, a fingerprint reader provides a facility for entry of the requested ID. As mentioned above, one or more transducers (e.g., fingerprint reader, magnetic card reader) in a transducer block110may be colocated or located in different locations.

In another embodiment, the person is not given notice of the random or RPR selected ID type630. Rather, the RPR selected ID type is a scannable ID that is obtained surreptitiously such that the person is unaware of the ID type involved and in cases unaware that an ID is being acquired. Here, the RPR selection may be from ID types limited to scannable ID types.

Matching processes660include non-directed and directed matching.

In non-directed matching, neither of ID Type nor ID dataset depend upon information acquired by the access manager100,200during the watch step610. For example, where a proximity sensor is used in the watch step.

Here, the ID dataset may be determined by an RPR selection from all of or from a selected group of ID types stored in a library such as ID library108and available to processor104. See e.g.FIG.5C.

In directed matching, selection of the ID type depends at least in part on information acquired by the access manager100,200during watch step610. For example, where an RF badge is used in the watch step.

Here, the watch step may identify the person as a particular person or a person belonging to a particular group, e.g. by name, number, or other characteristic(s). The particular type or form of ID to be requested may then be an RPR selection from a plurality of available ID types. For example, inFIG.5Dwhere ID Types do not vary from person to person, the ID type is an RPR selection from the ID types shown in the column headings504. With the person's identification502from the watch step, the identification dataset IDDS(Person, ID Type)506is found.

Where ID types do vary from person to person,FIG.5Eprovides yet another example. Here, given a particular person512, three IDDS entries are determined514. An RPR selection of one of these entries516provides the IDDS to be used in the matching process. Further, the selected IDDS determines the corresponding ID type either directly, indirectly, inherently, or in another suitable manner.

Matching processes660may utilize one or more different matching success criteria. A match may be judged successful when a transducer110,208acquires ID data from the person's ID and this acquired data matches IDDS(ID Type y). A match may be judged successful if the acquired ID type and the acquired ID data matches ID Type y and IDDS(ID Type y). A match may be judged successful if the acquired ID type matches ID Type y.

In various embodiments, to the extent selected match criteria are met662, access to a guarded species or space is granted to the person, to another person, and/or to some instrumentality such as a machine670. The grant of access may be followed by a return to the watch step672. To the extent selected match criteria are not met663, access is not granted and the process may return672to the watch step610.

FIG.6Bshows a flowchart illustrating a second algorithm600B. The flowchart of600B is similar to that of600A. However, flowchart600B differs from flowchart600A because it requires that a particular type of ID be presented in response to a code used to request the ID. For example, where “boxwood” and “underwood” are codes referring to particular different ID types, a request for the “boxwood ID” may be code indicating that a magnetic card should be presented while a request for the “underwood ID” may be code indicating that a keypad entry should be presented.

The flowchart differences include substitution of step631for step630, substitution of step641for step640, and addition of step655.

In step631, the access manager200makes an RPR selection to determine a particular (ID code:ID type) pair. The table ofFIG.5Cmay be adapted to include or associate ID codes and respective ID types. In step641, the access manager200utilizes the ID code to request presentation of the paired ID type.

Added step655determines if the presented ID is the ID type that was requested using the ID code. If the correct ID type was presented656, the process proceeds to an ID match step660. If the correct ID type was not presented653, the process may return673to the watch step610.

FIGS.6C-Dmay determine ID datasets based on at least two identifications or ID types. See e.g.,FIGS.5D-E.

FIG.6Cshows a flowchart illustrating a third algorithm600C. The flowchart of600C is similar to that of600A. However, flowchart600C differs from flowchart600A because it utilizes two ID's. In some embodiments, the first ID is a scannable ID, for example a face, and the second ID is a cooperative ID such as a passport.

The flowchart differences include new steps622,624,628. Following the watch step610, added step622scans for a first ID, for example for a scannable ID acquired surreptitiously. Following step622, added step624tests whether the first ID was found and if so tests for a match in step628. To the extent the first ID is not found623, the process may return675to the watch step. To the extent the first ID is found625and a match is successful629, an RPR selection of a second ID type follows in step630that follows.

FIG.6Dshows a flowchart illustrating a fourth algorithm600D. The flowchart600D is similar to a combination of flowcharts i)600B using ID codes and ii)600C using first and second ID's.

While various embodiments of the present invention have been described above, it should be understood that they have been presented by way of example only, and not limitation. It will be apparent to those skilled in the art that various changes in the form and details can be made without departing from the spirit and scope of the invention. As such, the breadth and scope of the present invention should not be limited by the above-described exemplary embodiments, but should be defined only in accordance with the following claims and equivalents thereof.