On Premises Peer to Peer Credential Validation System and Method of Operation
OwnerSteven Mark Bryantinventor
Life of this patent
Estimating the term…
Abstract
For each area of a service subscriber, an occupancy control server maintains an access control list and a census of authorized occupants within the area. The server receives a query from a mobile security device, checks for access control permission, and transmits an updated census of authorized occupants to each authorized occupant in the area. Each occupant transmits its identification indicia and responds to requests. Each occupant demands an encrypted credential from a responding mobile security device not found in the most recently updated list and relays it to the occupancy control server for validation.
Claims11
A method at a mobile security device comprising a process for searching for new devices in proximity, and a process for updating mobile security devices approved by an Authority for occupancy of an area wherein a mobile security device comprises a circuit to generate a temporal security hash upon demand.
A method at a security server comprising:
- maintaining a census of authorized occupants of a first secure Area A;
- receiving from a first mobile security device a verification packet related to an identification indicia (I*I);
- checking verification packet against most recent census of authorized occupants;
- checking access control list of incremental current occupants for authorization in first secure Area A;
- transmitting updated census to all authorized occupants of first secure Area A;
- and
- when a check of access control list fails, transmitting a security alert to designated individuals;
- and
- receiving location indicia from mobile security devices to update census of authorized occupants within each secure area.
A method of operation of a first mobile security device in an on premises credential verification system by performing executable instructions stored in non-transitory media in at least one processor comprising the processes:
- listening for a transmission from a credential verification server and updating an annotated list of identification indicia upon reception;
- advertising according to a wireless protocol, its identification indicia;
- responding to a request by hashing its first advertiser timestamp with its mobile security system credential to produce a first hash, and transmitting its first advertiser identification indicia, its first advertiser timestamp, and said first hash.
Dependencies are inferred from the claim text.