# US 10,311,692 B2 · Method and information system for security intelligence and alerts

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,311,692 B2
- Document ID: US10311692B2
- Status: Granted
- Kind: B2
- Application number: 15/963,933
- Filed: 2018-04-26
- Published: 2018-11-01
- Granted: 2019-06-04
- Earliest claimed: 2017-04-28
- Applicants: Patrick J. Brosnan
- Inventors: Patrick J. Brosnan
- Web page: https://patentgrep.com/patent/US10311692B2

## CPC

- G08B 21/02: Alarms for ensuring the safety of persons
- G06F 16/2465: {Query processing support for facilitating data mining operations in structured databases}
- G08B 25/08: using communication transmission lines {(G08B13/19658, G08B21/0286, G08B25/016 take precedence)}
- G08B 25/14: Central alarm receiver or annunciator arrangements
- G06F 2216/03: Data mining
- G08B: SIGNALLING SYSTEMS, e.g. PERSONAL CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

The method and information system provides for receiving, verifying, analyzing, and monitoring data streams from various news feeds, web services and social media posts to alert and coordinate security services of possible terrorist events, major crimes, active shooters, public protests and other developing incidents. The method and information system provides for the transmission of real-time actionable intelligence instantaneously directly to security service personnel through SMS messaging using smart phone and similar mobile devices. Based on the relevant intelligence transmitted through SMS messages on smart phones and devices, individual security personnel can be coordinated and instructed to revise post orders, lock down doors or call for backup to provide timely responses to help ensure the safety and security of the assets and personnel they are contracted to protect.

## Claims

### Claim 1

A method for using an information system for monitoring threat events using broadcast news, on-line news services, social media and other intelligence sources to alert and coordinate security personnel and first responders where the information system includes internet connected computer hardware, computer memory operatively connected to the computer hardware, telecommunication equipment connected to and integrated with the computer hardware, and information management software having data structures stored within the computer memory and run on the computer hardware to input, organize and manage information relating to the threat events, the information system also includes a client data set of client information, such as information regarding client location and client security assets, an event data set of threat event information such as event location, event type, response actions, the method comprises:
a) Mining broadcast news, wire and on-line news services and social media sites for threat event alerts;
b) Accessing each of the threat event alerts for validity including cross referencing event alerts against multiple information sources;
c) Determining the threat level and the physical proximity of the threat event to any clients for each threat event alert;
d) Disregarding invalid threat event alerts;
e) Creating event profiles in event data sets for each valid threat alert;
f) Adding all clients affected by the threat event to the event profile of each threat event;
g) Determining an appropriate event response to the threat event for each client affected by the threat event;
h) Assigning the determined event response to the event profiles;
i) Generating and transmitting a security alert notice to all the clients and security personnel;
j) Determining the threshold for integrated threat response; and
k) Launching integrated threat response.

### Claim 2 (depends on 1)

The method of claim 1 wherein the step d) includes assigning a validity value for the event alert in the event profile.

### Claim 3 (depends on 1)

The method of claim 1 and step l) generating a report for each event profile.

### Claim 4 (depends on 1)

The method of claim 1 wherein step h) includes selecting event responses from a predetermined list of actions.

### Claim 5 (depends on 1)

The Method of claim 1 wherein step d) includes mapping the physical location of each client against the physical location of the threat event in each event alert.