Time-based server management system for networked endpoints

Patent metadata

Field	Value
Publication number	US-12267302-B2
Application number	US-202418882954-A
Country	US
Kind code	B2
Filing date	Sep 12, 2024
Priority date	Nov 15, 2022
Publication date	Apr 1, 2025
Grant date	Apr 1, 2025

Abstract

A system and method for securely exchanging information between a server and an endpoint. A firewall and switch may administer connections between the endpoint and the server. The network interface of the server may send and receive information through the firewall and switch. A program task in the sever may set the network interface to be in an “on state” for a predetermined amount of time on a specific date thereby creating an active time transfer window that the network interface can receive communications from the endpoint.

First claim

The invention claimed is:

1. A system comprising:
a first endpoint comprising:
an endpoint network interface having an endpoint timing means for controlling timing for the network interface of the first endpoint;
a secure operating system;
a CT Scanner;

a server comprising a server network interface having a server timing means for controlling timing for the network interface of the server;
the server and the first endpoint configured to form a secure network; and
a means for automatically turning off the network interface of the server after the network interface of the server has transmitted or received information.

2. The system of claim 1 comprising:
a means for generating a rotating IP address; and
a means for randomly determining a next IP address;
wherein the next IP address is the next IP address that the server will have when the server connects to the internet for communication with other servers or endpoints.

3. The system of claim 1 comprising:
a demand prediction means for determining or predicting demand at one or more scanning locations;
a queue analysis means for determining demand by analyzing video or photos of people waiting in a queue;
a usage analysis means for analyzing how many scans one or more endpoints has processed in a given time window on a given date;
a prediction means for predicting how many scans a given endpoint will need to process on a future date, day of the week, or calendar date in a future time window; and
a staffing means for updating a duty roster to make more agents available to work at machines at times that have more people entering or leaving a building and analyzing various data inputs including the prediction means, the queue analysis means, and the usage analysis means to predict what updates to make to the duty roster.

4. The system of claim 1 comprising a setup means for setting up the endpoint timing means.

5. The system of claim 4 wherein the setup means is configured to:
establish a connection of a second endpoint to the secure network;
connect the second endpoint into the secure network; and
restore connectivity to a third endpoint that has lost connection to the secure network.

6. The system of claim 1 comprising a secure transmission means.

7. A system comprising:
a first endpoint comprising:
an endpoint network interface having an endpoint timing means for controlling timing for the network interface of the first endpoint;
a secure operating system;
a CT Scanner;

a server comprising a server network interface having a server timing means for controlling timing for the network interface of the server;
the server and the first endpoint configured to form a secure network;
a record means for obtaining service information records from the first endpoint; the service information records consisting of items selected from the list of: maintenance requests, tolerances, belt tolerances, and scheduled repairs; and
a storage means for storing the service information records.

8. The system of claim 7 comprising a scan transmission means for transmitting scan records to the server.

9. A system comprising:
a first endpoint comprising:
an endpoint network interface having an endpoint timing means for controlling timing for the network interface of the first endpoint;
a secure operating system;
a CT Scanner;

a server comprising a server network interface having a server timing means for controlling timing for the network interface of the server;
the server and the first endpoint configured to form a secure network;
a means for generating a rotating IP address;
a means for rotating which ports the server accepts communications from endpoints;
a means for generating a next IP address; and
wherein the server is configured to connect to other servers or endpoints via the next IP address.

10. The system of claim 9 wherein the server is configured to store scan records in a scan records database; the scan records comprising images, metadata, alarm information, date, location, time, suspected item, and analysis data of the image.

11. The system of claim 9 comprising a means for running statistical analysis on data from multiple servers.

12. The system of claim 9 comprising:
a reservation system containing reservations for people expected to enter or leave a location in a time window through an entrance or exit; and
a staffing means for requisitioning additional equipment to improve scan rate of people waiting in a queue.

13. A system comprising:
a first endpoint comprising:
an endpoint network interface having an endpoint timing means for controlling timing for the network interface of the first endpoint;
a secure operating system;
a CT Scanner;

a server comprising a server network interface having a server timing means for controlling timing for the network interface of the server;
the server and the first endpoint configured to form a secure network;
a means for rotating which ports the server accepts communications from endpoints; and
a means for specifying a time window and date at which the server will accept communications on a specific port.

14. The system of claim 13 wherein the server is configured to select only nonstandard ports.

15. The system of claim 13 wherein the server is configured to select only incongruent, standard ports.

16. The system of claim 13 comprising:
a means for identifying a rogue machine attempting to guess which port on the server is open; and
a means for verifying that the rogue machine is not on a whitelist.

17. The system of claim 13 comprising:
an endpoint diagnostic means for generating and maintaining records on service life, repairs, and costs for operating different types of endpoints and detectors; and
a report means for generating reports about CT Scanners connected to the server.

18. The system of claim 17 wherein the endpoint diagnostic means is configured to generate a cost to operate report of one or more endpoints; the cost to operate reports comprising energy costs, planned upgrades, planned and unplanned repairs, staffing costs, and costs to acquire.

19. The system of claim 13 comprising a means for setting user access on one or more endpoints or detectors.

20. The system of claim 13 comprising a means for standardizing information from different formats into a standard format.

21. The system of claim 13 comprising:
a means for capturing an image of an object;
a means for analyzing the image; and
a means for determining an interest level, a binary decision, or a probability that the image shows an object of interest.

22. The system of claim 21 comprising a means for receiving an image identification and object status; the image identification comprising a name or description of a scanned object; the object status comprising a machine or human verified decision as to whether the object is an object of interest.

Assignees

• The Government Of The Us Secretary Of Homeland Security

Inventors

• Karas Michael

Classifications

• H04L63/029 Primary

  Firewall traversal, e.g. tunnelling or, creating pinholes · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/30

  Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy · CPC title

• H04L9/088

  Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068) · CPC title

• H04L63/1425

  Traffic logging, e.g. anomaly detection · CPC title