Security module.

BACKGROUND OF THE INVENTION

0001This invention relates to a security module for identifying and verifying the identification of personnel accessing between stations in a facility such as an industrial complex and for signaling an alert when access is unauthorized.

0002The rise of terrorism, sabotage, industrial espionage and other acts of violence and theft and of other unauthorized entries to and at public and governmental facilities and industrial complexes has risen substantially in recent years. Security systems and security personnel are now commonplace at such installations. Verification of authorized access to such areas is thus significant if such acts are to be reduced or eliminated.

0003Security verification systems are known wherein an authorized individual is provided with an identification card which must be inserted within a card reader when accessing a secure area. Such cards may include a magnetic strip, bar code or laser read coded information and, if the card is authorized, the person carrying the card is permitted access without setting off an alarm or providing another alerting signal. Only those systems having a security officer to verify that a picture on the card corresponds to the person having the card are designed to verify that a valid card is being used by an authorized person. However, even where human error is not a factor and the carrier of an identification card corresponds to the person to whom the card was issued, there are circumstances when that person is not authorized entry to an area. For example, in facilities where aspects of an industrial process or the like should remain secret to all but a few authorized employees, other employees should be precluded entry. Although certain security officer protected systems provide cards that have a color or other visual code corresponding to the various restricted areas, tampering or other violations of such card may occur when unauthorized access to industrial or other secrets is the objective. Additionally, access to an area may be authorized to employees or others at certain times, but not at other times. For example, an employee working one shift may be permitted entry to an area during that shift but may be unauthorized to enter that area during other shifts or times.

SUMMARY OF THE INVENTION

0004Consequently, it is a primary object of the present invention to provide a system for identifying and verifying the identification of personnel accessing between stations or zones in a facility and for providing an alerting signal when the identity of a person entering or leaving a station or zone does not correspond to identifying data stored in the system.

0005It is another object of the present invention to provide a system including a security module through which personnel must pass when accessing from one area to another, the module having a card reader for reading data on an identification card entered into the reader by each person passing through the module, the module including means for measuring physical characteristics of each person passing through, and means for comparing the measured characteristics with pre-recorded physical characteristics of the person to whom the card was issued.

0006It is a further object of the present invention to provide a security system including a module through which each person accessing a station passes in route to the station, the module including a card reader for reading identifying data on a card inserted into the reader by personnel entering the module, the module further including sensing means for determining the weight, height and girth of the person or persons within the module and the direction of travel of the person or persons through the module for validating or invalidating access between stations at that time.

0007It is a still further object of the present invention to provide a security module through which persons pass when accessing between stations or zones in a facility such as an industrial plant, the module having a floor supported for weighing persons passing through the module, the walls of the module having unobtrusive sensors for sensing the height, girth and direction of travel of such persons and having unobtrusive video cameras hidden at least at each end of the module for displaying visual images of persons within the module.

0008It is a yet further object of the present invention to provide a security module through which persons pass when accessing between areas or stations, the module having sensors embedded within wall panels of the module, the panels being attached to structural frame members by internal locking means including brackets on the internal surfaces of the panels having camming slots for receiving a locking rod selectively receivable within the slots and selectively precluded from extracting from the slots.

0009Accordingly, the present invention provides a security system including a security module which may be located between zones or stations within a facility and/or at the entrance to the facility so that personnel traveling between the zones and/or at the entrance to the facility must pass through the module, the module having a card reader for reading an identification card that must be inserted into the reader, and further including sensors for weighing personnel within the module, for measuring the height of such personnel, for measuring the girth and direction of movement of such personnel and video cameras for viewing those passing through the module. Information relating to whether the card reader is used properly, whether the card is correct, whether the card is valid, whether the card has been issued to the person possessing and inserting the card, and whether that person should be entering or leaving the zone at that time is determined and an alert is provided when there are violations or deviations. The alert may be a signal to security personnel for further immediate action and/or a recording of the violation/deviation for real time and subsequent auditing. Additionally if the card is verified for the person possessing the card and access is valid for that person information regarding physical characteristics of the personnel is recorded for updating the personnel file for that person. A plurality of modules may be mounted in various zones in a facility and networked into a central system where files are maintained and reports generated.

0010The module includes a floor suspended within the module by hangers extending within the walls and connected to a load cell so as to measure the weight of personnel passing through the module. Additionally, infrared sensing means which measure the height and girth of personnel within the module and the direction of passage through the module are embedded within the walls of the module so as to be hidden or unobtrusive, the inner panels of the module acting to hide the sensors from view. Video cameras activated by the ingress into and deactivated by egress out of the module by personnel are also mounted unobtrusively within the module and view the module occupants through one-way mirror elements. Thus, the card reader is the only visible intrusion of a personal identification device made within the module. The covert or clandestine intrusion provides the security system with a veil of secrecy that ensures its continuous effectiveness.

0011The module includes interior panels within which the infrared sensors are mounted and these panels are removably secured to the frame of the module by a unique system including brackets on the panels facing toward the frame, the brackets having a slot including a narrow channel opening onto a circular portion having a diameter larger than the width of the channel for receiving a rod rotatably carried by the frame. The rod has a diameter substantially equal to that of the circular portion of the slot and includes a plurality of reduced area flat sections corresponding to the number of brackets formed thereon so that the rod flat sections may be received through the channel of the respective bracket and into the circular portion. The rod may thereafter be rotated to lock the rod to the brackets and thereby the panel to the frame.

BRIEF DESCRIPTION OF THE DRAWINGS

0012The particular features and advantages of the invention as well as other objects will become apparent from the following description taken in connection with the accompanying drawings in which: <ul id="ul0001" list-style="none"><li>Fig. 1 is a perspective view of a security module constructed in accordance with the principles of the present invention illustrating one interior side;</li><li>Fig. 2 is a view similar to Fig. 1 illustrating the opposite interior side;</li><li>Fig. 3 is a perspective view of a portion of the skeletal framework of the module with parts thereof in phantom illustrating the construction of the weighing system in the module;</li><li>Fig. 4 is a perspective view illustrating the exterior facing surface of an interior panel of the module and the locking system in the wall for removably connecting the panel to the frame in accordance with the present invention;</li><li>Figs. 5 through 7 are diagrammatic views illustrating the manner in which the inner panels are connected to the frame;</li><li>Fig. 8 is a cross sectional view taken substantially along line 8-8 of Fig. 2 illustrating the mounting of a video camera within an end cap at one end of the module;</li><li>Fig. 9 is a fragmentary elevational view looking along line 9-9 of Fig. 8 illustrating a video capture port in the module;</li><li>Fig. 10 is a horizontal cross sectional view taken substantially along line 10-10 of Fig. 9;</li><li>Fig. 11 is a horizontal cross sectional view taken substantially along line 11-11 of Fig. 1 through an interior panel wall of the module illustrating the mounting of the detectors or sensors within the panel;</li><li>Fig. 12 is a vertical cross sectional view taken substantially along line 12-12 of Fig. 1 illustrating the mounting of the detectors within the panel;</li><li>Fig. 13 is a functional block diagram of the components of the access verification system for the security modules of the present invention;</li><li>Figs. 14 through 20 are flow diagrams illustrating the manner by which the system operates to verify the access of personnel through a module and to provide an alert signal and report when access is valid or an exception is found; and</li><li>Fig. 21 is a flow diagram illustrating the manner in which sojourns through the modules are audited.</li></ul>

DESCRIPTION OF THE PREFERRED EMBODIMENT

0013Referring now to the drawings, Figs. 1 and 2 illustrate a module <b>10</b> constructed in accordance with the principles of the present invention, there preferably being one such module at the entrance to each zone in a facility. For example, in an industrial plant there may be a module located at the entrance to the plant, and one at the entrance to distinct zones located throughout the plant where access to personnel may be restricted or controlled. Each module <b>10</b> may be a housing having sides including inner and outer side panels <b>12</b>, <b>14</b>, and <b>16</b>, <b>18</b> respectively and open at each end for ingress and egress of personnel, the sides being connected to skeletal framework, hereinafter described with reference to Figs. 3, 4 and 8, and to end caps <b>20</b> at the side of each end and to which further reference will be made. A floor <b>22</b> in the form of a plate having tapered ramps <b>21</b> of the required inclination is disposed wholly within the module so that the entrance to and exit from the module satisfies required governmental standards and permits the module to be placed against the walls adjacent existing doorways and the like, the floor <b>22</b> being suspended by approximately 1/8 inch above the floor or ground surface <b>24</b> at the location of the module and forms part of a weighing system as hereinafter described. The module also includes a ceiling <b>26</b> above which various control elements and electrical wiring (not illustrated) may be mounted out of view from those entering and leaving the module. One side, namely that having the inner panel <b>14</b> and the outer panel <b>18</b> has a transparent portion such as windows <b>28</b> so that a security guard or the like may view the occupants in the module. That same side includes a card reader <b>30</b> mounted on the inner panel <b>14</b>, the card reader being conventional and having scanning means for reading data or information on a conventional identification card issued to authorized personnel. The data or information on the card may be in any conventional form readable by the card reader, such as information applied to a magnetic strip or the like and such data may merely be a number corresponding to the person to whom the card is issued, such as an employee identification number.

0014Referring to Fig. 3, the frame of the module includes a plurality of vertical upstanding wood struts such as those illustrated at <b>32</b>, the studs at each side being secured to a respective horizontal base stud <b>34</b> spaced laterally from the floor plate <b>22</b> and to a respective header <b>36</b> spaced below the ceiling, each header being disposed within a channel beam <b>38</b> having a substantially C-shaped cross sectional configuration with an upper and lower flange. Secured to the upper flange of each channel beam <b>38</b> at one end of the module is a respective pillow bearing <b>40</b> (only one of which is illustrated) for journally receiving a first torque shaft <b>42</b> while a similar bearing <b>44</b> is secured to the lower flange of each beam <b>38</b> for journally receiving a second torque shaft <b>46</b>. A torque plate <b>48</b> is fastened as by welding to one of the shafts, e.g., shaft <b>42</b> adjacent one end, the torque plate having an integral lever portion <b>49</b> positioned for abutting a conventional load cell <b>50</b> mounted on a metal block <b>51</b> welded to the top flange of the channel beam <b>38</b> at that side of the module. Pivotably mounted on the torque plate <b>48</b> is one end of a transfer arm <b>52</b>, the other end of which is pivotably attached to a torque plate or arm <b>54</b> secured as by welding to the second torque arm <b>46</b> adjacent the end thereof. As illustrated, the transfer arm <b>52</b> is connected to the torque plates <b>48</b> and <b>54</b> in a manner such that rotation of the shaft <b>42</b> in a first direction effects rotation of the shaft <b>48</b> in the opposite direction. Other torque plates or arms <b>56</b>, <b>58</b> are secured to the rods <b>42</b> and <b>46</b> respectively adjacent the ends remote from the respective torque plates <b>48</b>, <b>54</b>. If desired another transfer arm may connect the torque plates <b>56</b> and <b>58</b>.

0015Pivotably connected to each torque plate <b>48</b>, <b>54</b>, <b>56</b>, <b>58</b> is one end of a respective vertically extending hanger <b>60</b> in the form of a bar or rod, the other end of each hanger <b>60</b> is pivotably connected to a side edge of the floor plate <b>22</b> and suspends the floor plate above the floor <b>24</b> spaced from the base studs <b>34</b>. Thus, whenever one or more persons are disposed on the floor plate <b>22</b> a load is applied to the hangers <b>60</b> and transferred by the torque arm <b>48</b> to the load cell <b>50</b>. The weight on the floor may thus be determined by conventional calibration of the load cell. The mounting of the load cell by use of the torque shaft <b>42</b>, <b>46</b> and transfer arm <b>52</b> ensures that the correct load corresponding to the weight on the floor plate <b>22</b> is transferred to the load cell irrespective of the location of the load on the floor plate. Thus, if the load is disposed closer toward one end than the other, the torque shaft <b>42</b> will rotate in the first direction resulting in the torque shaft <b>46</b> rotating in the opposite direction. The net effect is that the force applied to the load cell is substantially the same irrespective of the location of the load on the floor plate. To preclude the floor plate from swinging toward the ends of the module, a stud <b>62</b> is fastened to the floor plate at each side and is received within a narrow slot within a respective block <b>64</b> fastened to the base stud <b>34</b> at each side of the module.

0016As hereinafter described in detail each inner panel <b>12</b>, <b>14</b> includes an array of signal generators for detecting when someone enters the module, together with that person or persons height, girth, direction of travel and position. These detectors are preferably of the infrared transmitting and receiving type wherein signals are sent by infrared energy from a transmitter to a receiver and the receiver retransmits the signals by hard wiring to logic circuitry. Preferably all the transmitters are in one inner panel while the corresponding receivers are in the other inner panel. The detectors are unobtrusively mounted within the panels so that those passing through the modules are unaware of detection.

0017In order to mount the inner panels <b>12</b>, <b>14</b> so that the detectors are readily wired to circuits within the ceiling of the module and for removal and remounting of the panels when maintenance or servicing of the detectors is performed, the present invention provides a panel fastening arrangement for releasably locking the inner panels to the frame. Thus, as illustrated in Fig. 4, in regard to the inner panel <b>12</b> which has detector circuit boards <b>66</b>, <b>68</b>, <b>70</b>, <b>72</b>, <b>74</b> mounted within and opening onto the externally facing surface <b>75</b> at predetermined locations, as hereinafter described, there are a plurality of vertically spaced attachment brackets <b>76</b>, preferably in two or more horizontally spaced rows. Each bracket <b>76</b> has a substantially L-shaped form including a vertically disposed portion <b>78</b> which is secured to the exterior facing surface <b>75</b> of the panel, and a horizontally disposed portion <b>80</b>. As best illustrated in Figs. 5 through 7, the horizontal portion <b>80</b> has a slot <b>82</b> including a narrow channel <b>84</b> opening at a wide mouth <b>86</b> at the free end of the portion <b>80</b> and opening onto an arcuate portion <b>88</b> at the closed end. The arcuate portion <b>88</b> is of a partial circular form having a diameter larger than the width of the channel <b>84</b>. As illustrated one edge of the channel may be substantially tangent and form a smooth transition with the partial circular form while the other edge abruptly intersects the partial circular form.

0018Secured to the end studs <b>32</b> are a plurality of collars <b>90</b>, the collars having annular portions extending from stud attachment legs. The collars are arranged in vertically spaced apart disposition in two horizontally spaced apart vertical rows, the rows being spaced apart a distance substantially equal to the spacing between the channel slots <b>84</b> of the two bracket rows on the surfaces of the panels <b>12</b>, <b>14</b>. Journalled within the collars of a row is a respective locking shaft <b>92</b> which extends upwardly adjacent the channel beam <b>38</b> and includes a crank arm <b>94</b> at the upper end which may be used for turning the shaft, the diameter of the shafts <b>92</b> being substantially equal to the diameter of the circular portion <b>88</b> of the brackets. Each shaft has a reduced cross sectional area in the form of a flat surface <b>96</b> corresponding in number to the number of brackets <b>76</b> in a vertical row on the inner panel and disposed at a vertical disposition corresponding to each bracket in the respective row. The flat surfaces, which are ground on the rod, provide a spacing between the flat face and the remote peripheral surface of the shaft <b>92</b> such as to be received within the slot <b>82</b> of the respective brackets <b>76</b>.

0019Thus, as illustrated in Figs. 5 through 7, the inner panel and the shafts are positioned so that the flat surface of the shaft <b>92</b> may be received within the respective bracket slot <b>82</b> as illustrated in Fig. 5. The panel is then located and the shafts are then received within the slots as illustrated in Fig. 6. Thereafter the inner panels are pushed toward the outer panel and the crank <b>94</b> is turned to position the flats facing the slot entrance as illustrated in Fig. 7, thereby locking the inner panel to the frame. The outer panels carry no control or circuit elements and are thus merely fastened to the frames by conventional fastening means such as glue and screws, the outer panels preferably being melmine coated particle board.

0020As aforesaid, the module <b>10</b> includes a video camera mounted unobtrusively therein, there preferably being one such camera <b>98</b> mounted in each end cap <b>20</b> at the side of the module on which the card reader is mounted and, although not illustrated, video cameras preferably are also mounted above the ceiling <b>26</b> of the module. As illustrated in Fig. 8, each end cap <b>20</b> is a vertically elongated integral rail having an end wall <b>100</b> facing outwardly from the end of the module, a first interior wall <b>102</b> disposed substantially normal to the wall <b>100</b> facing the interior of the module and the end cap at the opposite side of the module, and a second interior wall <b>104</b> inclined outwardly relative to the interior of the module and relative to the wall <b>102</b> preferably at an angle of approximately 120° so as to face toward the central portion of the module. Thus, the walls <b>104</b> of the two end caps at the card reader side of the module face the area where personnel are located when inserting or swiping the identification card in the card reader. The end caps also include a wall <b>106</b> bent relative to the wall <b>104</b> such as to be substantially parallel to the wall <b>102</b> and may include a narrow exterior wall portion <b>108</b> substantially parallel to the wall <b>102</b>. The end caps, which preferably are polished stainless steel or other shiny metallic material, has one leg <b>110</b> of an angle beam welded or otherwise fastened to the interior of the wall <b>100</b> with the other leg <b>112</b> spaced from the wall portion <b>108</b>. The wall <b>106</b> is secured to the respective end stud <b>32</b> while the outer panel <b>18</b> is sandwiched between the wall <b>108</b> and the leg <b>112</b>, both preferably being by screws or the like (not illustrated) extending through respective holes in the wall and leg. The vertical edge of the inner wall panel <b>14</b> is tapered as illustrated in Fig. 8 and when mounted within the module as heretofore described abuts the walls <b>106</b> and <b>104</b> so that a neat aesthetic appearance is presented.

0021The walls <b>104</b> of the end caps <b>20</b> include a circular aperture <b>114</b> as illustrated in Fig. 2 behind which the video camera <b>98</b> is mounted. Disposed within the aperture <b>114</b> in each end cap on the card reader side is a small disk portion <b>116</b> of a larger disk <b>118</b> of acrylic one-way mirror material, the small portion <b>116</b> having a diameter substantially equal to that of the apertures <b>114</b>. The larger disk <b>118</b> is cut away from one-way mirror material having a thickness equal to that of the larger disk plus the small disk and then the small central disk <b>116</b> is formed by cutting away the material between the peripheries of the large disk and the small disk. The face of the small disk <b>116</b> is coated with a film of chromium so as to blend in with the stainless steel of the end cap <b>20</b> and will not be readily apparent to one looking at the end caps. Radial portions of the larger disk may be glued to the inner surface of the end cap wall <b>104</b> with the small disk <b>116</b> disposed within the aperture <b>114</b>. Similar disks may be inserted into other apertures <b>115</b> so that the aperture <b>114</b> through which the video camera views does not appear different and will not attract attention.

0022The video camera <b>98</b>, which preferably is a solid state CCD camera, is mounted within the interior of the two aforementioned end caps behind the one-way mirror and includes a lens base <b>120</b> for mounting the lens (not illustrated) and a black plastic foam sleeve <b>122</b> is disposed about the lens, the sleeve acting to block exterior light and preventing light passing through the lens from being reflected away. Thus, the camera <b>98</b> unobtrusively views a portion of the interior of the module when activated, the lens being such that the head and upper body portion of one or more persons within the module may be viewed and recorded.

0023As aforementioned the inner panels <b>12</b>, <b>14</b> each include an array of infrared devices for sensing or detecting certain events and characteristics, the devices comprising infrared transmitters and receivers. The term detector or sensor is here defined as either a transmitter or receiver since both function together for detection purposes. Preferably all of the transmitters are carried by one of the panels, e.g., the panel <b>12</b> while the other panel, e.g., panel <b>14</b>, carries all of the receivers. However, the mounting of the detectors be they transmitters or receivers is identical. Thus, for example, as illustrated in Figs. 11 and 12 in regard to panel <b>12</b>, the panels may be constructed from a combination of masonite and plywood <b>124</b> having an opaque sheet of material <b>126</b> on the surface facing the interior of the module, the material <b>126</b> being of a type that does not detract from the performance of the infrared detectors. It has been found that a sheet of 0.150 inch opaque high molecular weight polyethylene material performs ideally. Grooves <b>128</b> are routed in the plywood <b>124</b> for receiving the detector circuit boards, such as circuit boards <b>70</b>, to which the detectors are electrically connected, and for receiving the detectors which are indicated by reference number <b>130</b> in Figs. 11 and 12. For purposes of illustration and clarity of presentation the other detectors are merely illustrated generally in Fig. 1 by the hidden lines, the detectors <b>132</b>, <b>134</b>, <b>136</b> and <b>138</b> being respectively mounted in the circuit boards <b>66</b>, <b>68</b>, <b>72</b> and <b>74</b> while cooperating detectors are illustrated in Fig. 2 at <b>131</b>, <b>133</b>, <b>135</b>, <b>137</b>, <b>139</b>.

0024The horizontally extending detectors <b>130</b>, <b>131</b> determine the girth, position, direction of travel and number of persons entering the module, while the detectors <b>132</b>, <b>133</b> and <b>134</b>, <b>135</b> determine the height of those entering and leaving the module. The detectors <b>136</b>, <b>137</b> and <b>138</b>, <b>139</b>, which are disposed approximately four inches above the floor plate <b>22</b>, determine when the foot of a person enters the module, and since a person's foot generally precedes the person, these detectors at the entrance end will provide the first signals. Thus, when the signal transmitted by the transmitting detectors is not received by the corresponding receiving detectors, it is due to the presence of a person breaking the infrared energy beam. The height of those within the module may thus be sensed, as is the girth or width of the person, and thus the number of persons within the module may be determined. As the infrared beams are broken in seriatim, the direction of travel may be determined. When a first infrared beam is broken a video camera <b>98</b> begins recording, the particular camera being determined by the direction from which the person enters the module. The signals provided by these sensors, together with the weight determined by the load cell <b>50</b>, as heretofore described, and the characteristic data patterns from the sensors and the load cell may be used by the system to determine if the person entering the module corresponds to the person to whom the identification card swiped through the reader was issued and is authorized to pass through the module from a first zone to a second zone.

0025The overall identification and verification circuit for the security system may be readily understood by those skilled in the art by reference to Fig. 13 where a block diagram of the control for the security system is illustrated. Signals from the height sensor receivers <b>133</b> and <b>135</b>, the direction/girth position sensors <b>131</b>, <b>137</b>, <b>139</b>, the load cell <b>50</b>, the card reader <b>30</b> and the activated video camera or cameras are fed to logic interface circuitry <b>140</b> preferably comprising two circuit boards. The first circuit board includes analog to digital (A/D) converting circuitry, camera switching circuitry for switching between cameras in the end caps <b>20</b> and ceiling in response to the direction of travel of personnel through the module and power circuits for powering and monitoring the sensors and the load cell <b>50</b>. The second circuit board contains software drivers for interfacing the signals to software in a computer <b>142</b> associated with each respective module, the computer <b>142</b> preferably being a conventional personal computer including a central processing unit (CPU) such as the Intel Corporation 80286 or 80386 micro-computers, or if desired may be a more powerful system using a CPU such as an Intel 80486. The software program, which identifies and validates or invalidates a transaction in the module as hereinafter further described in detail, powers the interface board to drive identification card accepting circuitry <b>144</b> which either powers a card accept signal by illuminating a green light emitting diode (LED) or a card reject signal by illuminating a red LED which may be viewed on the card reader and a red line on a display/input <b>146</b> comprising a monitor and a keyboard used by security personnel at a remote location. It may be noted here that a transaction commences when a sensor or the load cell is activated and terminates when all sensors are deactivated.

0026The interface circuitry <b>140</b>, which is on the bus with the computer, also transmits the video signals to a conventional video capture board <b>148</b> which is a circuit board within the computer which digitizes the video signals and transmits the digital signals to the computer <b>142</b> where it is stored in memory on a hard memory disk drive associated with the computer. The stored information becomes a historical record subsequently used as hereinafter described in the audit system viewed by a system administrator. The monitor of the display/input apparatus <b>146</b> shows every card reader transaction and provides information as to whether the card inserted into the card reader is or is not a correct card, whether or not the card has expired, whether the reader has been used during a transaction, whether or not the person and the identification card match, and whether or not that person should be at that location at that time. If the card is invalid or if anomalies or exceptions are noted, it is displayed on the monitor, the security personnel is alerted by an alert signal such as buzzer <b>150</b>, and it is noted by the security personnel to the computer by use of the keyboard. The information from the computer regarding the transaction is temporarily stored in a buffer <b>152</b> on a hard disk drive controlled by the computer and moved when there is available transfer time through network system circuitry <b>154</b> such as ethernet network to a central computer <b>156</b>.

0027The central computer <b>156</b>, which may be a conventional personal computer having a CPU such as an Intel 80486 microcomputer chip receives such information from the various modules located in the different zones throughout the facility for both real time and/or historical auditing of the security system. The central computer <b>156</b> also transmits the data to various files and devices such as permanent transaction files <b>158</b>, a report printer <b>160</b>, the personnel data base <b>162</b>, a video printer <b>164</b> and to the monitor of display/input apparatus <b>166</b> where a security system administrator may monitor the system and input exceptions for an exception report printed by the printer <b>160</b>. The central computer <b>156</b> accesses the personnel data base <b>162</b> for receiving stored information regarding each individual inserting a valid card into the card reader. For example, an employee identification number in the information on the card corresponds to a particular employee and information relevant to that employee in the data base is accessed. Such information may be the shift to which the employee is currently assigned, and thus the times during which the employee may validly access zones or areas, the employee job code and the zones or areas of the facility in which the employee is permitted access, physical characteristics of the employee, whether that employee is currently on alert status for a prior breach or violation of security, and other information which may be used by the system. This information is transmitted from the central computer <b>156</b> through the network <b>154</b> to the module computer <b>142</b> for use in the system to verify access of the employee.

0028A transaction commences when a person enters a module. As the identification card is passed or swiped through the card reader a green light on the card reader illuminates to show that the system has accepted the card. The transaction is completed when the person has fully exited the module. A module transaction starts when any sensor is tripped, i.e., the load cell, card reader, position or height sensor. As the transaction starts, the module computer records the beginning time and date, collects weight signals at approximately 18 per second, records the patterns of sensors activated to determine direction of travel, height, girth, and position, all at approximately 18 receptions per second and any time two or more people are within a module. As a transaction starts, the module cameras output frames are selectively recorded, the software acting to direct which video frame or frames is to be digitized as part of the transaction. When the identification card is passed through the card reader, the software confirms that the card is read and, from its data base, that the card is valid, that the person is scheduled to be there at that time and date, and that the person has valid access to the area. If the answer to the above is "yes" the card reader LED will illuminate green. If the answer is "no" the LED on the card reader will light red and an alert is sent to the control monitor listing the denial reason or error. For example, if an employee is not scheduled to work at that time and date, the prompt will show time, date, identification number and show "employee not scheduled to work this shift." The transaction is also flagged for auditing as an exception by the system administrator. The ending time and date of the transaction is logged as a transaction is completed.

0029The module computer also processes the inputs from the card reader, sensors and load cell through a statistical neural network decision engine to compare the profile of the inputs,e.g., height, weight, girth, time, work area and job code, to the historical profile of the authorized card owner. From this comparison the software establishes a certainty factor that the present bearer of the card is the valid possessor of the card. If the certainty level is below a predetermined level established by the system administrator, the transaction is flagged as an exception for audit and the security control monitors are alerted. The central control computer receives and stores all module transaction data for real time and historical file purposes. Thus, the system administrator can view what is occurring at any module in the system at any time.

0030The central computer monitors relationships between all modules in the system in real time. Zones are established, monitored for logical relationships, e.g., passage can only take place between bordering zones, and outer zones are accessed before inner zones, etc., and reported in real time or historically. For instance, if modules are placed at every doorway in a building, all modules at exit doors can be used to provide a building perimeter zone and the units on inside doors may be arranged to provide an office zone, a production zone and a warehouse zone. The central computer may then monitor for valid transactions between zones and report exceptions. If, for example, an employee leaves a zone through which he or she did not enter through a module, the transaction is flagged as an exception. The central computer may also provide information such as how many employees are in a given zone at any point in time, or how many employees enter the building through one entrance versus another entrance. The audit functions of the system are performed through the central computer and the system administrator may review all transactions that have been flagged as exceptions as well as transactions that have a certainty level below a selected certainty level.

0031The computers <b>152</b> and <b>156</b> thus may be programmed in conventional manner to receive and process the information regarding each transaction in the respective module to identify whether the person with the identification card corresponds to information regarding that person and to determine whether the system is being breached so as to alert security personnel and effect an audit. Referring to Fig. 14, the program checks to see whether a position sensor has changed state, whether a height sensor has changed state, and whether the card reader was activated. Thus, when a person enters the module <b>10</b> a transaction commences normally either when that person's foot activates the receiving sensors <b>137</b> or <b>139</b> dependent upon the direction from which entry occurs or when the person steps on the floor panel and activates the load cell <b>50</b>. The change in state of the sensors together with signals obtained when the person's identification card is inserted into the card reader results in enabling the program to treat or handle the signals and data. For example, when the state of a foot actuated receiving sensor <b>137</b> or <b>139</b> or a girth receiving sensor <b>131</b> is activated, the information from the position sensors is handled at <b>168</b> by the program according to the sequence illustrated in Fig. 15.

0032Progress of the transaction <b>170</b> is monitored in accordance with the program steps illustrated in Fig. 16. Thus, the shadow of the person within the module is tracked to calculate the girth value and weight value determined from the signals received and are transmitted to the central computer for updating these characteristics of the person within the module. The card reader is also checked to determine if the identification card has been read and, if not, an alert signal is provided to the display unit <b>146</b> and the alert signal buzzer or the like <b>150</b>. If the card has been recorded the program checks, as indicated at <b>172</b>, to determine if access for that person is valid as illustrated by the steps in Fig. 17 before or while completing the other program steps of Fig. 15.

0033Thus, as illustrated in Fig. 17, the program compares the height, weight, girth and data patterns together with the access information of the person on the memory disk of the computers corresponding to the person to whom the identification card was issued so as to determine whether there is a data match or whether there may be an unauthorized use of the card. This is performed by a statistical decision engine and a backpropagation neural network, as illustrated in Fig. 18, in two stages. The first stage is a statistical stage wherein the data points are summed and averaged and the standard deviation from the card holder's historical averages is recorded as a transaction statistical certainty value. This statistical stage implements statistical models chosen by the system administrator. The second stage feeds the data points from the sensors into neural network neurons. The input layer of neurons, illustrated by the lower layer of neurons in Fig. 18, distributes the pattern of data points within this software construct. The middle layer, or computing neurons, act as feature detectors and react to characteristic features, i.e., validated card holder data patterns. The output layer of neurons generates a selected response. The weight of this response is compared to the target response and is recorded as a neural certainty value. Learning is achieved when audited transactions are confirmed or completed and when transactions are validated. These user inputs become learning weights subsequently used in the neural network. Transaction audits are optimized by conducting audits on all transactions with certainty values below a chosen confidence level. The reliability and accuracy of the system is documented by transaction audits and the certainty and efficiency are optimized by conducting audits on those transactions with the lowest statistical and neural certainty values as chosen by the system administrator for real time validation and historical audits. If the data does not match during the transaction, the transaction is marked as a possible unauthorized card use. If the card user is not authorized to enter or exit the area at that particular time, a shift violation is noted on the display unit <b>146</b>. The same is true if the card user is not permitted entry into the area or if the card user is currently on alert status due to a prior violation. Any exception or anomalies that are determined to be presented are recorded and displayed on the unit <b>146</b>.

0034The progress of the active transaction having been performed, the system further determines whether there is more than one person in the module and also starts the appropriate video camera or cameras to photograph the person or persons within the module. These and all other events occur substantially simultaneously during the program since a person may enter the module, swipe his or her card, and leave the module in a time frame of approximately a few seconds.

0035The information from the height sensors is handled at <b>174</b> illustrated in Figs. 14 and 19. The data for a transaction corresponding to the height sensor is correlated so that the correct height of a person when there is more than one person within the module can be utilized in the statistical and neural network, and the maximum height is recorded. The card reader data is handled at <b>176</b> as illustrated in Figs. 14 and 20. As aforesaid, if the card is an incorrect card or if for some reason the information is improperly read, the read light at the card reader <b>30</b> is illuminated and a red line or band appears on the display <b>146</b>. If the card is read the transaction corresponding to the data read at the center of the module is utilized to determine if the card is a valid and legal card and if the card holder corresponding to a valid card is on alert status. A legal and valid card held by one not on alert activates the green LED at the card reader otherwise the guard is alerted and the transaction is flagged for audit.

0036Auditing of the transaction file both for real time and historic purposes is illustrated in Fig. 21. When an audit has been flagged the stored information including the video picture is displayed through a graphical replay of the transaction and compared with the information from the personnel data base for verification of the identity of the person involved in the transaction.

0037Accordingly, the present invention provides a system including walk-through modules containing a card reader, floor scale, CCD video cameras and position/height sensors which are interpreted to derive height, girth, weight passage of multiple people, direction of travel and digitized images from different perspectives in each passage. Each module includes its own computer, hardware drivers and software so that it may process the basic inputs and develop a discreet transaction and various outputs. The modules function in a network environment such that each module operates independently for each passage, i.e., transaction, yet each module may compare the data obtained in each transaction to an historical profile of each user that is distributed to each module on the network by a central control computer. Each individual module passes each transaction record to the central computer for real time system-wide control and data storage.

0038Numerous alterations of the structure herein disclosed will suggest themselves to those skilled in the art. However, it is to be understood that the present disclosure relates to the preferred embodiment of the invention which is for purposes of illustration only and not to be construed as a limitation of the invention. All such modifications which do not depart from the spirit of the invention are intended to be included within the scope of the appended claims.