Methods of Cautioning and Alerting within Umbras, and Penumbras of Physical Access Control Systems

1 . A system comprising:

at least one mobile credential device having a location sensor;

a camera;

a physical access control system (PACS) server coupled to said camera;

a message server;

a security display station; and,

a communication network coupling all the above.

2 . A method at a mobile credential device comprising:

receiving a user input of intention to enter an area of reserved access;

transmitting a credential;

transmitting an intention to enter the region of reserved access (RORA);

transmitting its location indicia; and,

receiving at least one of an acknowledgement and a rejection of authorization to enter.

3 . The method of claim 2 further comprising:

performing an action and

requesting authorization to perform an action within the RORA.

4 . A method at a mobile credential device comprising:

receiving a challenge or warning from the server when entering the penumbra;

transmitting a credential;

transmitting an intention to enter the region of reserved access (RORA); transmitting its location indicia; and,

receiving at least one of an acknowledgement and a rejection of authorization to enter.

5 . At a mobile credential device, a method comprising:

sampling a plurality of location measurements;

transmitting a credential on the condition that at least two location measurements converge toward a region of restricted access.

6 . The method of claim 2 further comprising:

transmitting a request to unfault an alert after entering the RORA without authorization.

7 . The method of claim 2 further comprising:

requiring a user to perform an action; and

transmitting success to the server.

8 . A method at a physical access control system (PACS) server, comprising:

receiving a credential and a location;

verifying the credential with a policy for time and place access;

transmitting an authorization to enter or perform an action within a RORA; and

issuing an alert only when incursion by an uncredentialed mobile device exceeds a threshold of time.

9 . A method at a server, comprising:

receiving an image from a camera;

initiating a message, warning, or question to a user; and

transmitting an alert and credential information to a security output means when no authorization has been transmitted within a range of time.

10 . The method of claim 9 further comprising:

unfaulting the alert upon receiving a credential and request to unfault the alert after entering the RORA.

11 . A method at a server comprising:

sensing an entry into a penumbra; and,

transmitting a warning message and a request to present a credential.

12 . The method of claim 11 , further comprising:

transforming an image from a camera with credential indicia for transmission to a security display station.

13 . A method at a security display station, comprising:

receiving images from a camera;

displaying an alert transmitted from a server;

displaying an unfault of an alert;

annotating an image from a camera with comments and an elapsed time clock; and,

transforming the image from the camera with credential indicia and elapsed time for augmented display.

14 . The method of claim 8 further comprising:

setting a suppression condition on further alerts for a condition.

15 . The method of claim 8 further comprising:

augmenting an image from a camera with credential information, alerts, unfaults, and

overriding a policy to transmit an authorization.

16 . The method of claim 8 further comprising:

refusing submission of credential when the user is not within the vicinity of the protected area.

17 . At a cloud security server, a method comprising:

notifying at least one mobile device of intrusion on the condition that an unauthorized presence is in its vicinity based on location service coordinates.

18 . At a mobile credential device, a method comprising:

notifying the user to submit a credential, on the condition that at least two location measurements converge toward region of restricted access.

21 . A physical access control system (PACS) which comprises a PACS server; coupled to at least one physical access control panel apparatus (panel); the panel coupled to at least one physical access portal actuator (actuator); and at least one wireless mobile gatekeeper device, all mutually communicatively coupled.

22 . The system of claim 21 further comprising: a physical object deliverance system (pods) which comprises: a pods server, non-transitory media, and at least one mobile delivery agent apparatus wirelessly coupled to said pods server; said physical object deliverance system coupled by an application programming interface to said physical access control system; and wherein each device, apparatus, and server comprises at least one processor and non-transitory computer readable media tangibly encoded with data and computer executable instructions.

23 . A system to control multiple levels of access in a multi-lock residential community comprising: a server communicatively coupled to at least one gatekeeper and to at least one portal, at least one delivery agent dispatcher, and to at least one delivery agent authentication device; at least one electronic lock for access to semi-private, semi-public, and common shared zones which actuate when a token presented by a delivery agent authentication device matches location, and date-time indicia; and a network coupling all the above subsystem elements.

24 . A method for operation of a security augmented visitor entry system comprising: at a proprietor-controlled physical access control server, responsive to a gatekeeper apparatus, synthesizing a location-specific date-time valid access control token for portal actuator operation; transmitting said token to a mobile authentication device; receiving assurance, location, and date-time indicia from said mobile authentication device; and causing said portal actuator to enable access to the bearer of said mobile actuation device when assurance, location, and date-time indicia are acceptable to the gatekeeper.

25 . The method of claim 24 wherein assurance indicia is at least one of text, audio, image, voice recognition, facial recognition, RFID, and a credential.

26 . The method of claim 24 further comprising: synthesizing an anti-token which enables access when matching the location-specific date-time valid token; and distributing said anti-token to at least one location aware access control portal actuator.

27 . The method of claim 24 further comprising: at a location-aware access control portal actuator, receiving an access control token from a mobile authentication device; determining the current location of the access control portal actuator; on the condition of determining a match of the location and date time range of the token and the current location and date time of the portal actuator, enabling access through the portal; and on the condition of failing said match, transmitting an alert to the server.

28 . The method of claim 24 further comprising: at a mobile gatekeeper device, receiving, via the server, an authenticated mobile request to access at least one location specific portal during a date-time range; determining assurance by one of image, voice, text, credential, and RFID of the identity of bearer of said mobile authentication device; selecting a date-time range, persistence, and routing through location specific portals for access; and enabling generation and transmittal by the server of said token to the mobile authentication device.

29 . The method of claim 28 further comprising: transmitting an invitation via the server to a mobile authentication device to access at least one location specific portal during a date-time range.

30 . The method of claim 24 further comprising: at a mobile authentication device, transmitting a request to access at least one location specific portal during a date-time range with an authentication credential; receiving a token with date-time validity for at least one portal location; presenting said token when in proximity to each location specific portal; and discarding said token when expired.

31 . The method of claim 30 further comprising: receiving an invitation to access a location specific portal.

32 . The method of claim 24 further comprising: receiving from a fixed image capture and audio sensing device a verbal explanation and video of a visitor requesting access but not providing mobile device credentials; matching facial recognition indicia with a store of known residents or visitors; converting speech to text; transmitting text and images to a gatekeeper annotated in said store; receiving portal control instruction from said gatekeeper; and recording video, voice, and disposition of the request.