Converged logical and physical security

Abstract

A security management system that includes a hierarchical security platform, converged IT and physical security management, unified credentialing, credential issuance and incident(s) management. An exemplary aspect of the invention also relates to physical and logical security management and information technology/network security management, with a credential issuance and integrity checking system as well as associated readers and printers of the credential. Still further aspects of the invention relate to obtaining, assembling and analyzing one or more of data, video information, image information, biometric information, sensor information, terrorist information, profile information, and/or other types of information to provide a comprehensive platform for all aspects of security management. A toolkit is also provided that allows complete management, integration, scalability, interoperability and centralized control of all aspects of security including personnel credentialing, personnel management, personnel tracking, task management, security system integration, security information exchange and scalability.

1 . An integrated physical and network security platform comprising:
 a unified credential having associated therewith information allowing access to one or more of a physical area and a computer system;   a security management system including a data store and connectivity modules allowing scalability and one or more connections to one or more additional security management systems, wherein the security management system is capable of interfacing with one or more of an existing enterprise physical security system and an existing enterprise computer system;   an incident management perimeter access control and tracking system that manages one or more of personnel, tasks, equipment and access for a secure area.   
     
     
         2 . The system of  claim 1 , further comprising a credential issuance system that can associate information with the unified credential. 
     
     
         3 . The system of  claim 2 , wherein the information pertains to one or more of personnel and equipment. 
     
     
         4 . The system of  claim 3 , wherein information about the personnel comprises one or more of fingerprint information, name, credentials, certifications, biometric information, access information, a picture, background information and medical information. 
     
     
         5 . The system of  claim 1 , wherein the unified credential includes a contact or contactless chip and one or more of a bar code, printed data, proximity chip, magnetic stripe, token and computer readable information. 
     
     
         6 . The system of  claim 1 , wherein the secure area can be a physical area, a computer or a computer network. 
     
     
         7 . The system of  claim 1 , wherein a credential issuance system interfaces with one or more of a fingerprint capture system, a camera, a PIN capture system, a signature capture system, a document scanner, a card reader/writer, a card printer and a report printer. 
     
     
         8 . The system of  claim 1 , wherein the unified credential is a smart card, smart chip, embedded chip or implanted chip. 
     
     
         9 . The system of  claim 1 , wherein the information associated with the unified credential is verified through a government entity. 
     
     
         10 . The system of  claim 9 , wherein status information related to the verification of the information is maintained by the security management system. 
     
     
         11 . The system of  claim 1 , wherein the security management system can receive information from one or more external data sources. 
     
     
         12 . The system of  claim 11 , wherein the external data sources include one or more of map information, terrorist activity information, incident information, global positioning system information, audio information, video information, perimeter breach information, alarms, enterprise security system status information, local emergency response information, local, state, federal or international governmental information and information obtained from one or more other security management systems. 
     
     
         13 . The system of  claim 1 , further comprising a rules toolkit, the toolkit allowing a user to construct one or more rules including metrics that govern the handling and action to be taken based on received information. 
     
     
         14 . The system of  claim 1 , further comprising an interface module configured to communicate with the one or more of the existing enterprise physical security system and the existing enterprise computer system. 
     
     
         15 . The system of  claim 1 , wherein the platform includes one or more of satellite communications capabilities, VOIP capabilities, networking capabilities, switch-based network communication capabilities and packet-based network capabilities. 
     
     
         16 . The system of  claim 1 , wherein the platform can be booted into a plurality of modes. 
     
     
         17 . The system of  claim 16 , wherein the modes are one or more of an EMS mode, a national disaster mode, an incident mode, a local disaster mode, a state disaster mode, a terrorist activity mode and a international disaster mode. 
     
     
         18 . The system of  claim 17 , wherein additional modes can be dynamically added in real-time. 
     
     
         19 . The system of  claim 17 , wherein each mode has an associated set of templates related to management of information associated with the security management system. 
     
     
         20 . The system of  claim 1 , further comprising a data filtering module that filters data based on a sensitivity rating. 
     
     
         21 . The system of  claim 1 , further comprising a prediction module utilizing artificial intelligence to analyze information received by the security management system. 
     
     
         22 . The system of  claim 1 , wherein the system provides security for one or more of chemical, drinking water and wastewater treatment systems, energy facilities, dams, commercial nuclear reactors, water sectors, process manufacturing, emergency services, public health and healthcare, continuity of government, government facilities, defense facilities, defense industrial base, continuity of government, information technology, telecommunications, converged facilities, national monuments and icons, postal and shipping, banking and finance, commercial facilities, materials and waste facilities, transportation systems, port security, aviation security, cargo, cruise ships, trains, mass transit, Intermodal, food and agriculture facilities, military facilities, first responders, police, fire control access to a machine and OSHA Compliance. 
     
     
         23 . The system of  claim 1 , wherein the unified credential is stored in a RFID shielded pouch. 
     
     
         24 . A method for providing integrated physical and network security comprising:
 providing an unified credential having associated therewith information allowing access to one or more of a physical area and a computer system;   maintaining a security management system including a data store and connectivity modules allowing scalability and one or more connections to one or more additional security management systems, wherein the security management system is capable of interfacing with one or more of an existing enterprise physical security system and an existing enterprise computer system;   monitoring an incident management perimeter access control and tracking system that manages one or more of personnel, tasks, equipment and access for a secure area.   
     
     
         25 . The method of  claim 24 , wherein the information pertains to one or more of personnel, equipment, corporation, government entity, international entity or facility. 
     
     
         26 . The method of  claim 25 , wherein information about the personnel comprises one or more of fingerprint information, name, credentials, certifications, biometric information, access information, a picture, a unique identifier, background information and medical information. 
     
     
         27 . The method of  claim 24 , wherein the unified credential includes a contact or contactless chip, smart card, smart chip or embedded chip, implanted chip and one or more of a bar code, printed data, proximity chip, magnetic stripe and computer readable information. 
     
     
         28 . The method of  claim 24 , wherein the secure area can be a physical area, a computer or a computer network. 
     
     
         29 . The method of  claim 24 , wherein a credential issuance system interfaces with one or more of a fingerprint capture system, a camera, a PIN capture system, a signature capture system, a document scanner, a card reader/writer, a card printer and a report printer. 
     
     
         30 . The method of  claim 24 , wherein the unified credential is a smart card, implanted chip or embedded chip. 
     
     
         31 . The method of  claim 24 , wherein the information associated with the unified credential is verified through one or more of a government entity, certificate authority, corporate entity, state authority and local authority. 
     
     
         32 . The method of  claim 31 , wherein status information related to the verification of the information is maintained by the security management system. 
     
     
         33 . The method of  claim 24 , wherein the security management system can receive information from one or more external data sources. 
     
     
         34 . The method of  claim 33 , wherein the external data sources include one or more of map information, GIS information, terra server information, terrorist activity information, incident information, global positioning system information, audio information, video information, perimeter breach information, alarms, enterprise security system status information, local emergency response information, local, state, federal or international governmental information and information obtained from one or more other security management systems. 
     
     
         35 . The method of  claim 24 , wherein the platform includes one or more of satellite communications capabilities, VOIP capabilities, networking capabilities, switch-based network communication capabilities and packet-based network capabilities. 
     
     
         36 . The method of  claim 24 , wherein the platform can be booted into a plurality of modes. 
     
     
         37 . The method of  claim 36 , wherein the modes are one or more of an EMS mode, a national disaster mode, an incident mode, a local disaster mode, a state disaster mode, a terrorist activity mode and a international disaster mode. 
     
     
         38 . The method of  claim 37 , wherein additional modes can be dynamically added in real-time. 
     
     
         39 . The method of  claim 38 , wherein each mode has an associated set of templates related to management of information associated with the security management system. 
     
     
         40 . The method of  claim 24 , wherein the system provides security for one or more of chemical, drinking water and wastewater treatment systems, energy facilities, dams, commercial nuclear reactors, water sectors, process manufacturing, emergency services, public health and healthcare, continuity of government, government facilities, defense facilities, defense industrial base, continuity of government, information technology, telecommunications, converged facilities, national monuments and icons, postal and shipping, banking and finance, commercial facilities, materials and waste facilities, transportation systems, port security, aviation security, cargo, cruise ships, trains, mass transit, Intermodal, food and agriculture facilities, military facilities, first responders, police, fire and OSHA Compliance. 
     
     
         41 . Any one or more of the features as described herein. 
     
     
         42 . Means for performing any one or more of the features described herein. 
     
     
         43 . A computer readable storage medium comprising information, that when executed, performs one or more of the functions described herein. 
     
     
         44 . The method of  claim 24 , wherein a combination of SQL and active directory are used to integrate the physical and network security. 
     
     
         45 . The method of  claim 24 , wherein authentication is based on location based in time. 
     
     
         46 . The method of  claim 45 , wherein artificial intelligence compares location and time information to determine authentication.