text:
Patent application title: SYSTEMS AND METHODS FOR CONTROLLING ACCESS WITHIN A SYSTEM OF NETWORKED AND NON-NETWORKED PROCESSOR-BASED SYSTEMS
C.s. Lee Crawford (Frisco, TX, US)
IPC8 Class: AG05B1900FI
USPC Class:
340 56
Class name: Intelligence comparison for controlling authorization control (e.g., entry into an area) coded record input (e.g., ic card or key)
Publication date: 2008-11-27
Patent application number: 20080290988
Sign up to receive free email alerts when patent applications with chosen keywords are published SIGN UP
Inventors list
Agents list
Assignees list
List by place
Classification tree browser
Top 100 Inventors
Top 100 Agents
Top 100 Assignees
Usenet FAQ Index
Other FAQs
Patent application title: SYSTEMS AND METHODS FOR CONTROLLING ACCESS WITHIN A SYSTEM OF NETWORKED AND NON-NETWORKED PROCESSOR-BASED SYSTEMS
C.S. Lee Crawford
Origin: FRISCO, TX US
IPC8 Class: AG05B1900FI
USPC Class:
340 56
In one embodiment, a method controls access within a secured facility. The
method comprises: temporarily denying access to the end-user by a
non-networked access controller; indicating, by the non-networked access
controller, to the end-user that the end-user should proceed to a
validation point access controller, wherein the validation point access
controller is a networked access controller; writing data to the access
card by the non-networked access controller indicative of the temporarily
denied access request; reading the access card of the end-user by a
validation point access controller and, in response to the data written
by the non-networked access controller, establishing a communication
connection from the validation point access controller to permit auditory
and/or visual data to be obtained from the end-user before authorization
for the access is given; and writing access right data to the access card
of the end-user by the validation point access controller.
1. A method of controlling access within a secured facility, the secured
facility comprising networked and non-networked access controllers and at
least one security server, the method comprising:receiving an access
request from an end-user at a non-networked access
controller;determining, by the non-networked access controller, that
access data on an access card of the end-user does not indicate that the
end-user is currently permitted access as requested by the
end-user;temporarily denying access to the end-user by the non-networked
access controller;indicating, by the non-networked access controller, to
the end-user that the end-user should proceed to a validation point
access controller, wherein the validation point access controller is a
networked access controller;writing data to the access card by the
non-networked access controller indicative of the temporarily denied
access request;reading the access card of the end-user by a validation
point access controller and, in response to the data written by the
non-networked access controller, establishing a communication connection
from the validation point access controller to permit auditory and/or
visual data to be obtained from the end-user before authorization for the
access is given;writing access right data to the access card of the
end-user by the validation point access controller; andproviding access
to the end-user by the non-networked access controller in response to the
written access right data upon return of the end-user to the
non-networked access controller.
2. The method of claim 1 wherein the establishing communication comprises:identifying a user to decide whether to allow or deny access from a plurality of users;establishing a communication connection with software on a desktop computer, laptop computer, or personal mobile computing device of the identified user to permit communication between the identified user and the end-user.
3. The method of claim 1 wherein the identified user is identified as a supervisor or manager of the end-user in a database accessible by the at least one security server.
4. The method of claim 2 wherein a video connection is established to permit communication between the end-user and the identified user.
5. The method of claim 1 wherein the establishing communication occurs with a software program, the software program storing communication with the end-user for subsequent retrieval.
6. The method of claim 5 wherein the software program stores an image or video of the end-user captured by the validation point access controller.
7. The method of claim 5 wherein the software program stores audio data from the end-user captured by the validation point access controller.
8. An access control system for controlling access within a secured facility, comprising:a plurality of access point controllers within the secured facility;at least one security server for managing or storing access rights data; andsoftware code executable within access control devices, the at least one server, access control cards, and/or other devices of the secured facility, the software code being operable to: process access attempts at access point controllers by end-users of the secured facility, wherein the processing comprises:processing an access request from an end-user at a non-networked access controller;determining that access rights data does not indicate that the end-user is currently permitted access as requested by the end-user;temporarily denying access to the end-user;indicating to the end-user that the end-user should proceed to a validation point access controller;writing data to the access card indicative of the temporarily denied access request;reading the access card of the end-user by a validation point access controller and, in response to the data written by the non-networked access controller, establishing a communication connection from the validation point access controller to permit auditory and/or visual data to be obtained from the end-user before authorization for the access is given;writing access right data to the access card of the end-user by the validation point access controller; andproviding access to the end-user by the non-networked access controller in response to the written access right data upon return of the end-user to the non-networked access controller.
9. The system of claim 9 wherein the establishing communication comprises:identifying a user to decide whether to allow or deny access from a plurality of users;establishing a communication connection with software on a desktop computer, laptop computer, or personal mobile computing device of the identified user to permit communication between the identified user and the end-user.
10. The system of claim 9 wherein the identified user is identified as a supervisor or manager of the end-user in a database accessible by the at least one security server.
11. The system of claim 9 wherein a video connection is established to permit communication between the end-user and the identified user.
12. The system of claim 8 wherein the establishing communication occurs with a software program, the software program storing communication with the end-user for subsequent retrieval.
13. The system of claim 12 wherein the software program stores an image or video of the end-user captured by the validation point access controller.
14. The system of claim 12 wherein the software program stores audio data from the end-user captured by the validation point access controller.
[0001]The present application is a continuation-in-part of U.S. patent application Ser. No. 11/424,644, filed Jun. 16, 2006 (which, in turn, claims the benefit of U.S. Provisional Application No. 60/691,383, filed Jun. 18, 2005), which are incorporated herein by reference.
[0002]Limiting access to relevant resources and protected areas to authorized individuals may be important in many circumstances, such as in the case of access to an airport, military installation, office building, etc. Traditional doors and locks can be used for protection of sensitive areas. However, doors with traditional locks and keys may be cumbersome to manage in a setting with a large number of users. For instance, once an employee is fired, it may be difficult to retrieve the physical keys the former employee was issued while employed. Moreover, there is a possibility that copies of such keys were made and never surrendered.
[0003]Smart" doors provide access control to sensitive areas. A smart door may be equipped with a key pad through which a user enters his/her PIN or password. The key pad may have an attached memory and/or elementary processor in which a list of valid PINs/passwords may be stored. Thus, a door may check whether the currently entered PIN belongs to the currently valid list. If so, the door may open. Otherwise, the door may remain locked. Of course, rather than (solely) relying on traditional keys or simple key pads, a more modern smart door may work with cards or other portable devices with various types of memory. Such cards or devices may be used in addition to or instead of traditional keys or electronic key pads. Such magnetic-strip cards, smart cards or contactless devices may have the capability of storing information that is transmitted to the doors. More advanced cards may also have the ability of computing and communicating. Corresponding devices on the doors may be able to read information from the cards, and perhaps engage in interactive protocols with the cards, communicate with computers, etc.
[0004]Smart doors can possess various connectivity levels. A fully networked door is one that is at all times connected with some database (or other computer system). For instance, the database may contain information about the currently valid cards, users, PINs, etc. In some instances, to prevent an enemy from altering the information flowing to the door, such connection is secured (e.g., by running the wire from the door to the database within a steel pipe). On the other hand, a totally non-networked door does not communicate outside of its immediate vicinity. In between these two extremes, there may be doors that have intermittent network-capability (e.g., a wirelessly connected "moving" door that can communicate with the outside only when within range of a ground station, such as the door of an airplane or a truck).
[0005]Traditional access control mechanisms suffer from many drawbacks. Fully networked doors may be very expensive. The cost of running a secure pipe to a distant smart door may vastly exceed the cost of the smart door itself. Protecting a wire cryptographically, while possibly cheaper, still has its own costs (e.g., those of protecting and managing cryptographic keys). Moreover, cryptography without steel pipes and security guards cannot prevent a wire from being cut, in which case the no-longer-networked door may be forced to choose between two extreme alternatives: namely, remaining always closed or always open, neither of which may be appropriate or practical. In any case, a fully networked door is often not a viable option.
[0006]Non-networked smart doors may be cheaper than connected doors. However, traditional approaches to smart doors have their own problem. Consider, for instance, a non-networked smart door capable of recognizing a PIN. A terminated employee may no longer be authorized to go through that door; yet, if he still remembers his own PIN, he may have no trouble opening such an elementary smart door. Therefore, it would be necessary to "deprogram" the PINs of terminated employees, which is difficult for disconnected doors. Such a procedure may be very cumbersome and costly, e.g., an airport facility may have hundreds of doors and dispatching personnel to reprogram all of such doors can be impractical.
[0007]FIG. 1 depicts an access card according to one representative embodiment.
[0008]FIG. 2 depicts an access control device according to one representative embodiment.
[0009]FIG. 3 depicts a secured facility according to one representative embodiment.
[0010]FIG. 4 depicts a digital representation of the secured facility according to one representative embodiment which may be stored (in whole or in part) within access control devices to facilitate access control decisions.
[0011]FIG. 5 depicts a permitted path data structure for a group of employees according to one representative embodiment.
[0012]Representative embodiments are directed to systems and methods for controlling access within a secured facility. In some representative embodiments, access control is implemented using a system of multiple processor-based systems that allow or deny access according to rules, permissions, proofs, etc. A processor-based system is disposed at each object or resource (e.g., door, equipment, computer, particular software, etc.) to which access is controlled. The processor-based system may include a card reader that reads an access card and processes the relevant access information. Based upon the processing, the processor-based systems may keep a door closed, open a door, provide access to the desired resource, deny access to the resource, etc.
[0013]In some embodiments, some of the processor-based systems are networked, i.e., have the capacity of communicating over a suitable communications network such as an ethernet network, the Internet, a Wi-Fi network, any suitable combination of networks, etc. The networked processor-based systems utilize their network communication functionality to communicate with a central access control security server. The network communication allows the networked processor-based system to obtain the most up-to-date rules, permissions, proofs, etc. to make the access control decisions.
[0014]Some of the processor-based systems are non-networked, i.e., do not possess the functionality to communicate over a network or do not possess a network connection. The non-networked status may be intermittent, temporary, or persistent. Some representative embodiments utilize the access control cards of the users of the system to distribute updated rules, permissions, proofs, etc. In some representative embodiments, "revocation" information is written to user cards at various points (e.g., at networked processor-based systems), the revocation information from the user cards is read by non-networked processor-based systems and is stored locally by the non-networked processor-based systems. Revocation information refers to information that revokes the previously issued or otherwise valid rights of a user to access one, several, or all objects/resources within the secured facility.
[0015]As an example, suppose the employment of a first user is terminated and the user's access rights are revoked by updating information in the central access control security server. The first user's identification is added to a "revocation" list on the server. When a second user accesses a processor-based system within the secured facility, the revocation list is written to the second user's access card (assuming that the revocation list was not previously written to the second user's card at a different networked processor-based system). Specifically, the networked processor-based system checks the central access control security server for the most recent revocation information and writes the information to the second user's card. Then, as the second user traverses his/her way through the secured facility, non-networked processor-based systems read the revocation list from the second user's card and store the revocation information locally. If the first user attempts to access any of the doors or other objects within the secured facility that the second user has accessed after obtaining the revocation list, the first user will be denied access.
[0016]It shall be appreciated that the revocation information can be written to multiple users' access cards. Then, as the multiple users traverse their way through the secured facility, the updated access information is quickly and efficiently distributed throughout the system. Additionally, non-networked processor based systems can also write the updated revocation or other access information to users' cards. That is, the second user may only go "half-way" through the secured facility. Other users that present their cards to non-networked processor-based systems that processed the second user's card can have the updated information written to cards of the other users. Thereby, the distribution of the updated access information is accelerated through the secured facility.
[0017]In some embodiments, a history of access information is maintained by non-networked processor based systems. Portions of the history of access information can be written to users' cards so that when the users interact with networked processor based systems, the information stored on the users' cards can be retrieved and communicated to the central security server. Various algorithms can be used to select the specific information to be written to the users' card, e.g., to prioritize the information to be forwarded. Additionally, cryptographic processing and/or error correction code (ECC) processing can be applied to multiple portions of access history information. By performing such processing, if a subset of the access history portions are available, all of the access history information can be recovered. Also, a random number generator can be used to select the information to be written to users' cards and/or to control when the information is written to reduce the ability of malicious individuals from intercepting specific access history information.
[0018]In some embodiments, an access history is written to users' cards as they access objects within the secured facility. The history information can be used to determine (without, necessarily, accessing the central security server) whether users have engaged in inappropriate or suspicious activities. Specifically, non-networked processor based systems can examine this access history to determine whether to provide or deny access by comparing the access history against pre-defined rules. Alternatively, the users cards can be flagged for increased attention at various manned security locations within the secured facility.
[0019]In some embodiments, an access control device stores a representation of part or all of a secured facility. The access control device can also store path and tolerance data defining acceptable/permitted paths for users or groups of users for traversing the secured facility. The tolerance data may define acceptable deviations from the defined paths in case an individual takes a slightly but not-materially different path. When an end-user presents his or her card, the access control device compares the history of accesses as reflected on the end-user's card to the path information. If the information on end-user's card is not consistent with the permitted path information, access can be denied. By making access decisions in this manner, a number of inappropriate activities can be detected and remediated. For example, an end-user cannot use his/her card to enter a secured facility and then use another user's card to access highly secured areas/resources, because the other end-user's card will not possess the correct access history information. Other inappropriate activities can also be detected through such processing.
[0020]Referring now to the drawings, FIG. 1 depicts access card 100 according to one representative embodiment. Access card 100 can be physically implemented using commercially available cards and devices such as so-called "smart cards," magnetic cards, or any other handheld device possessing readable/writeable memory. Access card 100 differs from conventional cards in regard to the data stored in its memory (e.g., flash memory). Access card 100 preferably includes an interface for reading and writing information to and from the card. The communication may occur according to secured protocols, e.g., as preceded by an exchange of public keys between the card and another device. Access card 100 may include a CPU for performing processing activities (e.g., for authentication, for cryptographic processing, for internal memory management, etc.). Access card 100 may include volatile and non-volatile memory and may store software instructions for controlling the operations of the CPU.
[0021]As shown in FIG. 1, card 100 stores information 101 that indicates the access rights of the respective owner of card 100. The access rights may define the rights to doors, tools, equipment, vehicles, computers, particular software applications, etc. The access rights as shown in FIG. 1 are simple Boolean permissions. However, more complicated access right definitions could be defined (e.g., using a suitable mark-up language). Such access right definitions could define time dependent rules as an example. Also, information 101 may preferably include an identifier of the respective user (or alternatively a unique identifier of the card can be used as a proxy identifier for the user). As another example, a PKI key or other digital key could be used as a proxy for the identity of the user. Information 101 may also include a group identifier (e.g., an identifier for a particular group of personnel). Information 101 may also includes information that indicates that additional attention should be applied to the owner (e.g., if the owner has engaged in unusual or inappropriate activities). Card 100 also preferably comprises access history 102 that stores a list of the resources that the owner of card 100 has recently accessed or attempted to access, the time of the access, etc.
[0022]Card 100 also comprises access rights information 103 that defines the access rights for other end-users associated with the secured facility. Access rights information 103 can be used to revoke the rights of end-users other than the owner of the card 100. For example, when the owner of card 100 arrives at the secured facility and presents the card 100 to a networked processor-based system to gain access to the secured facility, revocation information can be written to the card 100 that indicates that the rights of one or more other users to one, several, or all resources/objects within the secured area are now revoked. Thus, as the owner of card 100 traverses his or her way through the secured facility, the revocation information can be distributed to the non-networked processor based systems in an efficient manner.
[0023]Card 100 also preferably stores log data 104. Log data 104 indicates when specific end-users associated with the secured facility have accessed particular resources. Log data 104 is preferably segmented into multiple portions and processed according to a cryptographic algorithm and error correction code (ECC) algorithm so that if only a subset of log data 104 is available (e.g., a malicious user has intercepted/erased some of the log data), all or substantially all of the access information can be recovered.
[0024]Suitable cryptographic processing may be applied to information 101 or other access information such as encryption or digital signatures to authenticate the validity of the data on access cards, access control devices, and/or the central security database/server.
[0025]FIG. 2 depicts access control device 200 according to one representative embodiment. Access control device 200 is preferably implemented as a processor-based system (including CPU 204) which operates according to software instructions stored in ROM 205 and/or hard drive 250. Access control device 200 includes reader 201 for communicating with, reading from, or writing to access cards 100 of end-users. Access control device 200 may also include lock 202 (e.g., a magnetic lock mechanism, a mechanical actuator lock, etc.) that implements the physical access control. Alternatively, lock 202 could implement suitable cryptographic means for controlling access to software, computers, or other processor resources (e.g., make an appropriate decryption key available). Access control device 200 may optionally include network interface 203 if access control device 200 is desired to function as a networked access control device.
[0026]Within hard drive 204 (or any other suitable non-volatile or volatile memory), a number of data structures and software files can be stored to facilitate the access decisions of electronic lock system 200.
[0027]In some embodiments, hard drive 204 stores validation/analysis algorithms 253 that read the data stored on a respective end-user's card 100, compares the data from the card to locally stored data, determines whether to allow access, and denies or provides access. The access decision may comprise determining whether the end-user should be given access by reading the access rights encoded on his/her card 100 and confirming the access rights using suitable cryptographic processing. In alternative embodiments, the end-user rights are stored within memory of access device 200 and access device 200 performs a look-up of those rights using a user identifier (e.g., the unique access card serial number) and/or a group identifier. The access decision may also involve analysis of the history of prior accesses/access attempts as recorded by data on the card 100 in view of secured access representation 251 and path, tolerances, and norm data 252 which will be discussed in greater detail below. Also, the access decision may involve determining whether the access rights retrieved from the end-user's card 100 has been revoked by comparison against revocation data list(s) 256.
[0028]In some embodiments, hard drive 204 stores revocation module 255. Revocation module 255 reads revocation data from access cards and stores revocation data in local revocation data list(s) 256. Also, revocation module 255 writes data from local revocation data list(s) 256 to access cards 100.
[0029]In some embodiments, hard drive 204 stores log module 258 which logs accesses and access attempts to log data file(s) 257. The log data file(s) 257 preferably detail the identifiers of end-users who have attempted to obtain access through access control device 200, times of access attempts, whether access was granted, etc. The log data is preferably replicated into multiple portions and an error correction code (ECC) processing is applied to the multiple portions. Also, cryptographic processing is preferably applied to the log data. Log module 258 preferably writes selected log data to access cards 100 as users attempt to obtain access through access control device 200. The log data can be prioritized (e.g., the most recent or most important data can be written first). Also, a random number generator function/routine can be used to control when to write data and/or what data to write. By employing the cryptographic processing, ECC processing, and random number generation, malicious individuals will find it much more difficult to intercept, modify, and/or destroy data before the data is communicated to the central security server.
[0030]FIG. 3 depicts secured facility 300 according to one representative embodiment. The architecture and organization of secured facility 300 is by way of example. Any suitable architecture, organization, size, and complexity of a secured facility can be controlled by selected representative embodiments.
[0031]Secured facility 300 includes primary door 301-1 that is controlled by access control device 200-1. Access control device 200-1 is networked, e.g., is connected to central database/security server 303 through network 302. Central database/security server 303 preferably stores employee data, access rights data, system data (e.g., identification of access control devices within the system, whether the respective devices are networked or non-networked, etc.). When an end-user initially enters secured facility 300, the end-user can present his/her access card 100 and access control device 200-1 can determine whether the end-user is currently permitted to have access to secured facility 300 by communicating with database/server 303. If so, access control device 200-1 opens door 301-1. Otherwise, access control device 200-1 denies access. In some representative embodiments, security personnel can be stationed at door 200-1 to ensure that the end-user is not using some other end-user's card 100. For example, user photographs can be printed on the cards for review by security personnel or biometric information can be sampled. Also, in some embodiments, access control device 200-1 can write a suitable "permission" for the day (or other suitable amount of time) to the card 100 of the end-user that enables the end-user to access one, some, or all controlled resources within secured facility 300 for that day or other suitable period of time.
[0032]After the user enters door 301-1, the user enters hallway 304-1. Without regard to the access rules, rights, etc., the user can proceed to the right to door 301-2 or to the left to door 301-7. These doors are controlled by access control devices 200-2 and 200-7, respectively. From door 301-2, the end-user can proceed to door 301-3 through hallway 304-2; door 301-3 is controlled by non-networked access control device 200-3. From door 301-3, the end-user can proceed to door 301-4 (e.g., a multi-door unit that controls traffic in multiple directions) through hallway 304-3 or to door 301-6 through hallway 304-7. Doors 301-4 and 301-6 are controlled by non-networked access control devices 200-4 and 200-7, respectively. Doors 301-4 and 301-5 are connected by hallway 304-4. Door 301-5 is controlled by non-networked access control device 200-5. From door 301-5, the end-user can proceed to door 301-6 through hallway 304-5. Door 301-6 is controlled by non-networked access control device 200-6. From door 301-6, the end-user can proceed through hallway 304-6 to door 301-7. Clearly, the end-user can proceed through the hallways in either direction.
[0033]Now as the user initially enters secured facility 300, access control device 200-1 communicates with database/sever 303 and obtains recently updated revocation data. Access control device 200-1 then writes some or all of the revocation data to the access card 100 of the end-user. As the user traverses his/her way through secured facility 300, the revocation data on the user's card 100 can be distributed to the non-networked access control devices 200.
[0034]As previously discussed, access control devices 200 preferably utilize the path that a user has taken through the secured facility to determine whether to provide access. When end-user access of resources indicates an out-of-order access of access points, omission of one or several access point accesses, time limit violations, or other inappropriate actions, appropriate action can be taken such as denial of further access within secured facility 300.
[0035]FIG. 4 depicts representation 400 of secured facility 300 according to one representative embodiment which may be stored (in whole or in part) within access control devices 200. Representation 400 represents the secured facility as a graph having nodes and edges. In one embodiment, a directed graph can also be utilized. Representation 400 includes node 401 which corresponds to the primary door 200-1 of secured facility 300. Each node is preferably implemented as a suitable data structure that stores an identifier of the access control unit 200 that controls the respective resources, stores an identifier of the type of resource, stores an identifier whether the resources is networked, non-networked, or intermittently networked, etc. From node 401, edge or link 402-1 represents the portion of hallway 304-1 that leads to door 200-2 and edge or link 402-7 represents the other portion of hallway 304-1. Each edge or link is preferably implemented by pointers or references that are stored in each respective node that point to or reference the data structures of connected nodes. Any suitable representation of secured facility 300 could be alternatively employed to store the appropriate information (e.g., tables, arrays, databases, relational databases, etc.).
[0036]Nodes 401-2 through 401-7 respectively represent doors 200-2 through 200-7. Edges or links 402-2, 402-3, 402-4, 402-5, 402-6, 402-7, and 402-8 respectively represent hallways 304-2, 304-3, 304-5, 304-5, 304-6, and 304-7. Each edge link can be associated with information that defines an amount of time used to traverse the hallways, passageways, distances between doors. For example, as shown in FIG. 4, the data (5, 10, 15) represents the minimum amount of time, the average time, and the maximum amount of time to proceed from door 301-1 to door 301-2.
[0037]Suppose a group of employees work in an office that is immediately past door 301-5 and accessible from hallway 304-4. FIG. 5 depicts permitted path data structure for such a group of employees. As shown in FIG. 5, data structure includes a group identifier ("CLERICAL CLASS 3"). The path that is authorized for this group of employees is defined by (401-1, 401-7, 401-6, and 401-5) as shown in FIG. 5. The error tolerance for these employees is given by ±10 minutes and one node. That is, if a particular end-user takes more than 10 minutes over a maximum amount of time to proceed from one node to another, the user can be flagged for increased supervisory attention (e.g., inspection) at an appropriate location. Additionally or alternatively, the user can be denied access to continue through additional doors. Other time tolerance parameters or security level rules can be used to make the decision whether to deny access upon deviation from the defined path information. A distance tolerance of 1 node is allowed for this group of employees. That is, an employee can deviate from the defined path by one node or door. For example, suppose a user could pass door 301-3 from door 301-6 but could not then proceed through door 301-4. The time and distance limitations can be enforced by comparing the node and time information stored on the user's access card to representation 400 and the path information in data structure 500.
[0038]In some representative embodiments, access control devices 200 are adapted to display the next appropriate link in the user's path as defined by suitable path information, permissions, user identity, group identity, and/or the like. Specifically, when a user presents his/her card 100 to an access control device 200, the device can display a map of a portion or all of the secured facility thereby graphically illustrating the path(s) that can/should be taken by the user. Access control devices 200 can also be adapted to display other information. For example, if a supervisor or security personnel presents his/her card 100 to an access control device 200, the individual can be given the option of reviewing individuals that have recently accessed the resource/door or attempted to access the resource/door. Also, to the extent that suspicious activity has been detected (e.g., out-of-bounds times of traversal from node to node), the access control device 200 can display alert information identifying the incident(s) and the users(s)/user card(s) associated with the incident(s).
[0039]The path definitions can be used to implement other appropriate security policies with a secured facility. For example, a "choose one path from multiple paths" security policy could be implemented. Specifically, a specific user or group of users may be allowed to access many locations in a secured facility. However, during a given time frame, the user(s) only need to access one location of the multiple allowed locations. An array or table-like data structure could store multiple data structures 500 that define the permitted paths to each of these locations. Validation/analysis algorithms 253 may identify the initial doors/resources accessed by an end-user as recorded on the user's card 100 and compare those initial doors against the various data structures 500 in the array-like data structure thereby identifying the initial path taken by the user. From there, the respective access control device 200 can determine whether the current door is appropriate. Thus, once a user begins his/her way through the secured facility, the user is no longer allowed to go anywhere at anytime. Instead, the user must proceed to a specific location.
[0040]For example, a multi-path data structure could be defined as follows {PATH1:A,B,C,D,E; PATH 2:A,F,G,H,I}. An end-user authorized to proceed through a secured facility according to such a multi-path definition could be required to begin at access point A. From there, the end-user can proceed either to access point B or access point F. If the user accesses point B, path 2 is no longer valid. Alternatively, if the user accesses point F, path 1 is no longer valid. In another embodiment, the user may simply select a path from multiple permitted paths via a user interface (e.g., as presented by an access control device). The selection of a given path may also be subject to approval by appropriate personnel.
[0041]Also, a "one way" security policy may be defined in which a user is not allowed to "back track" within the secured facility thereby further limiting the ability of user's to traverse the secured facility at will. For example, access devices 200 may be programmed (e.g., by suitable rule definition for certain paths) to only allow access through access points according to the order of those access points in a permitted path definition. The permitted path structure can be extended by objected oriented programming, as an example, to define a path definition {OneWayPath:A,B,C,D,E . . . } for this purpose. The end-user can be allowed to only back track a limited number of nodes by including an integer parameter in the one way path data structure that defines the number of nodes that are permitted for "back tracking."
[0042]In some secured facilities, one or several "free paths" may be implemented to allow the end-user to return to one or several initial/primary validation points, to leave the facility under normal conditions, to exit the facility on an emergency basis, etc. Upon returning to one of the initial/primary validation points, the user can also be re-evaluated/re-validated by security personnel, the central security DB/server, etc. After re-validation, the respective user can then take a path to a different location (if desired). In some embodiments, a rule can be defined (as stored in access control cards, access control devices, and/or the central security database/server) that requires a user to return to a revalidation point after accessing specific identified resources. The revalidation point can be physically manned by security or other personnel. Alternatively, the revalidation point can include a networked access control device. The networked access control device can permit a respective end-user to establish a communication with an appropriate party for revalidation (e.g., the approve the selection of a new path or new task to be performed within the secured facility).
[0043]Also, when end-users return to the initial/primary validation point (or any other point having a networked access control device 200), the control device 200 preferably reads log information from the end-user's card 100 and communicates the information to central DB/security server 303. Specifically, the log information written to the end-user's card by the various non-networked access control devices 200 are forwarded to the central DB/security server 303 for processing. The processing may include cryptographic processing, ECC processing, etc. Also, the processing may include analysis to identify aberrant behavior.
[0044]In some embodiments, an analysis of the log data is performed to determine "norm" behavior. The "norm" behavior may be performed to determine the common patterns for particular individual end-users, for particular classes of end-users, or for all end-users. The analysis may include determining the typical location(s) of end-users at particular times, the probability of one or several end-users being located at various locations, the typical minimum, average, maximum times spent at various locations, the typical minimum, average, maximum times spent traveling between locations, etc. The norms can be used to define the path information. Also, the norm information can be written to user card 100 and/or to access control devices 200 to allow the analysis of user access activities to be distributed throughout the secured facility 300. The norm information can be used to identify potentially inappropriate activities by end-users. The inappropriate activities need not necessarily be direct security-related issues. The processing may identify potentially poor job performance by personnel within the secured facility.
[0045]In some embodiments, access right data can be distributed in an interactive manner through the process of sending an end-user within a secured facility between one or more non-networked access control devices and one or more networked access control devices. For example, in one embodiment, an end-user may attempt to access an area, object, tool, vehicle, system, etc. as controlled by a non-networked access control device. The end-user may be initially denied access for any number of reasons (e..g, the proper access rights data is not present on the end-user's card). The non-networked access control device may indicate to the end-user that the end-user should proceed to a networked access control device to obtain the desired access rights. For example, a map or other suitable information may indicate the specific network access control device(s) may be provided to the end-user. Optionally, data indicative of the initial (perhaps, temporary) denial of access is written to the end-user's card so that it can be efficiently determined what access rights are necessary to complete the end-user's desired task.
[0046]When the user arrives at the respective networked access control device, the data indicative of the initial denial of access is read by the networked access control device. A communication connection is established through the networked access control device to permit communication with the end-user. In one embodiment, a database look-up through the security server or other similar data retrieval is performed to identify an appropriate party to make the access decision. The data may be defined, in terms, of who is responsible for the respective non-networked access control device or resource associated therewith. Alternatively, the data may be defined in terms of supervisory responsibility for the respective end-user. Default personnel can also be defined (for example, security personnel).
[0047]In one embodiment, the communication connection forms a communication with a software program on the identified party's computer, phone, or other suitable computing device as identified using data accessible to the one or more security servers. For example, a video connection may be provided to permit communication between the end-user and the identified party. The identified party may then query the end-user or make whatever step desired to determined whether to allow access. In preferred embodiments, audio and/or video is communicated over the communication connection to permit the identified party to determine that the correct end-user is making the access request. That is, the requesting user is not utilizing some other user's portable card. Also, the identified party may make whatever inquiries desired to ensure that the requesting end-user is attempting to gain access for a legitimate or proper purpose. Also, the communication connection may facilitate the end-user's supervision of the activities of the respective end-user. In other embodiments, only text may be communicated between the requesting and supervisory party. In another embodiment, the supervisory party is notified without alerting the requesting party in manner. In such a case, software in the system provides the supervisory party the opportunity to provide or deny access without, necessarily, involving the other party.
[0048]Assuming the supervisory end-user wishes, the user can provide suitable input to the software program to permit access. In response there to, the software program communicates a signal to the networked access control device that indicates that the networked access control device should write access rights data to the other end-user's portable card to permit access using the non-networked access control device. Accordingly, when the other end-user returns to the non-networked access control device, the user can obtain the desired access.
[0049]When implemented in software (e.g., software in the end-user access cards, access control devices, the central security server, and/or any other device that is part of the access control system), various elements or components of some representative embodiments are the code or software segments adapted to perform the respective tasks. The program or code segments can be stored in a computer readable medium, such as a processor readable medium, or transmitted by a computer data signal embodied in a carrier wave, or a signal modulated by a carrier, over a transmission medium. The "computer readable medium" may include any medium that can store or transfer information. Examples of the computer readable medium or memory include an electronic circuit, a semiconductor memory device, a ROM, a flash memory, an erasable programmable ROM (EPROM), a floppy diskette, a compact disk CD-ROM, an optical disk, a hard disk, a fiber optic medium, a radio frequency (RF) link, combinations thereof, etc. The computer data signal may include any signal that can propagate over a transmission medium such as electronic network channels, optical fibers, air, electromagnetic, RF links, etc. The code segments may be downloaded via computer networks such as the Internet, Intranet, etc.
[0050]Although some representative embodiments and advantages have been described in detail, it should be understood that various changes, substitutions and alterations can be made herein without departing from the spirit and scope of the appended claims. Moreover, the scope of the present application is not intended to be limited to the particular embodiments of the process, machine, manufacture, composition of matter, means, methods and steps described in the specification. As one of ordinary skill in the art will readily appreciate from the disclosure that processes, machines, manufacture, compositions of matter, means, methods, or steps, presently existing or later to be developed that perform substantially the same function or achieve substantially the same result as the corresponding embodiments described herein may be utilized. Accordingly, the appended claims are intended to include within their scope such processes, machines, manufacture, compositions of matter, means, methods, or steps.
User Contributions:comments("1"); ?> comment_form("1"); ?>
Inventors list
Agents list
Assignees list
List by place
Classification tree browser
Top 100 Inventors
Top 100 Agents
Top 100 Assignees
Usenet FAQ Index
Other FAQs
Patent applications by C.s. Lee Crawford, Frisco, TX US
Patent applications in class Coded record input (e.g., IC card or key)
Patent applications in all subclasses Coded record input (e.g., IC card or key)
User Contributions:
Comment about this patent or add new information about this topic:


text:
Wednesday, October 26, 2016
Citations for lionize
She brought me up to royalties, and people with stars and garters, and elderly ladies with gigantic tiaras and parrot noses. She spoke of me as her dearest friend. I had only met her once before, but she had took it into her head to lionize me.
The other players are the media--magazines, newspapers and broadcasters--that lionize managers whose funds produce dazzling short-term results. Such publicity attracts big bucks, perhaps faster than the fund can deal with the money, and there goes the goose.
Origin of lionize
Lionize comes from the noun senses of lion meaning "an object of interest or note" and "a person of great importance, influence, charm, etc., who is much admired as a celebrity." It entered English in the early 1800s.

subset: commoncrawl


text:
Warning: this review contains spoilers from the whole Throne of Glass series.
So I love the throne of Glass series, and I wanted to read the Assassin's blade, but I decided to put it off for a while so I could read it just before Empire of Storms' release, but it was too tempting and I couldn't not read it.
"She was fire, she was darkness, she was dust and blood and shadow."
Celaena's character is just as enjoyable as ever, and my fascination with her only seems to grow. Her badass qualities, compassion, and incredible taste in fashion, make her one of my favorite characters of all time.
Sam Cortland is gorgeous (I can just feel it) and I loved the romance between him and Celaena. I saw this thing on my Pinterest the other day that said that if Sam Cortland was alive, not of the other love interests (Rowan, Chaol, Dorian) wouldn't stand a chance. I think they still would. Sure, Sam is wonderful, but his relationship ship with Celaena isn't as wonderfully steamy as Rowan's, as friendly as Chaol's (yes, I just put Chaol in the friend zone) and isn't as fun as Dorian's.
"My name is Celaena Sardothien, and I will not be afraid."
Also did anyone notice in The Assassin and the Underworld that our very own Dorian was the stuffy noble with the Sapphire eyes!!! And Chaol was probably the one pulling him away from Celaena. I mean, yes, technically that's a theory, but did anyone else notice? Dorian would totally do that!!!
These novels are brutal and captivating, with their themes or violence, love, friendship, betrayal and so many others. Speaking of betraying though, can we please talk about Arobynn (which autocorrects to 'around' by the way)? I mean wow. I can't believe he had the NERVE to do that. So evil!!! Of course he betrayed her!!!! God I hate him. Thank god he died in Queen of Shadows.
I loved the scenes between Lysandra and Celaena. It's so funny to think that they actually become best friends. I love Lysandra and Celaena together so seeing their rivalry in these novels was great. Also I'm so glad the whole witch Crochan curse thing was cleared up. I had no idea what the curse was so I was confused.
"The silence was suddenly too charged, his face too beautiful in the light."
Ansel was awesome!!! I really, really, really, (I mean really) hope we meet her again in the next two Throne of Glass books! I feel like that would just bring the story full circle.
Anyways!!! Absolutely loved these novellas (Sarah J Maas, keep writing) and strongly recommend them! I feel like I just know so much more about Celaena and why she did the things she did in the other books! Also loved the little scene with the stag, it was so beautiful.
Make sure to check out all my reviews of the Throne of Glass series!
Yours forever more,


text:
We understand don't just the art of matching people, and also the science of engineering. We utilize a proprietary matching Device that helps our staffing specialists join just the proper person to simply the best work. And our network of sector connections and strategic associates remains unmatched.
The intersection of technologies and people — It can be the place we Reside. Backed by more than sixty five several years of experience, Robert 50 percent Engineering is a pacesetter between IT staffing organizations. Whether you're looking to hire knowledgeable technological innovation expertise or locate the most effective technological know-how jobs, we are your IT specialist to get in touch with.
You might also watch out for our other number of outsourced services which includes Net System outsourcing, community administration outsourcing and stability management outsourcing.
A corporation like CEC or Laptop or computer Experts Corporation can offer a wide variety of services to fix any of your computer problems.
memoryBlue memoryBlue can be an within revenue consulting business that provides valuable practical experience working with today's most promising significant-tech businesses.
Will need an IT support and IT support business that gives affordable, significant-top quality community, hardware and software remedies? Or, IT consultants who are obtainable and in a position deliver support and advice to every and every consumer inside your Group, no matter their technological capabilities? IT consulting in San Jose is no longer difficult to find!
Features like tracking unsuccessful and concluded Positions, completing backups and creating reports on restorations are all bundled. We also present on the web backup. Asset/Inventory Management
Whether you're trying to Make your company's 1st Laptop or computer network, enrich an existing a single, or troubleshoot a improperly performing router, Intivix's engineers will layout and carry out options that give the performance, dependability, scalability, and protection you need with network support selections that are productive and economical.
You may be asking what is it that separates Bay Area Movers from the other going corporations to choose from and why you must contemplate employing us to handle your commercial or household go. In an individual word, it's our services.
...I need to personal thank you Rescuecom for the remaining a lifestyle saver in supporting me After i forget passwords and I are already utilizing your service for over 8 years along with the service has often been speedy and resolve my challenges quickly and so are normally there when I need you. Thanks Rescuecom. fewer
NELSON is a worldwide architecture, style and design, and consulting services business with offices Situated across the nation....
• Storage answers – lengthy or brief-term local climate managed, entirely secured, and movie monitored to ensure the safety of your things
We are a cohesive team of IT gurus Doing the check here job collaboratively as being a dependable and respected companion during the campus Local community to advance the University's mission. Our Services
With our Managed IT Services, we offer your small business with our maximum amount of support consisting of a flat fee once-a-year support arrangement. The programs beneath offer entire servicing and Network Monitoring within your present
IT support bay area - An Overview
We understand don't just the art of matching people, and also the science of engineering. We utilize a proprietary matching Device that helps our staffing specialists join just the proper person to simply the best work. And our network of sector connections and strategic associates remains unmatched.


text:
- The fittest that this soon to be forgotten race of genetically deficient beings has to offer.
- -- Apocalypse
Following the take over of the America by Apocalypse, the majority of the human population was displaced to Europe. Some of humanities most prominent people were appointed to become the Human High Council, the ruling body of the surviving human population.
Their members included mutant expert Moira Trask her husband, the Sentinel inventor Bolivar Trask, lobotomized mutant Emma Frost, rich industrialist Brian Braddock (secretly a double agent for Apocalypse), and Japanese national Mariko Yashida.
The employed many operatives, who operated in different capacities. Military commander Thaddeus Ross would commando over soldiers such as Carol Danvers, Clint Barton, Sue Storm and Ben Grimm. Donald Blake and his aid Gwen Stacy would be part of the relief effort in famine ravaged Africa. Victor von Doom would be the head of Eurasian security, while Tony Stark and Bruce Banner would provide their technological expertise. The latter, unknown to all, was a double agent for Apocalypse. They would also hire mutant mercenaries Weapon X (Logan) and Jean Grey.
The two mutants would collect information from Sinister regarding Apocalypse's sea-wall defense perimeter. They would turn this information over to the Human High Council[2]. With this information, the Council would mobilize a Sentinel evacuation of the remaining human population in North America[3].
Also an attack on the council by agents of Apocalypse would lead the Council to go ahead with a plan to launch a nuclear assault on Apocalypse's kingdom. When the Reavers would attempt to thwart this, Braddock's double cross would be revealed and he would be slain. Weapon X would succeed in recruiting Gateway to teleport the nuclear weapons over America[4].
The High Council would next have to deal with the "Lost Horseman", Mikhail who offered salvation through cybernetic augmentation. However this was a double cross. However, Victor von Doom, Donald Blake, Tony Stark, Gwen Stacy, Susan Storm, Ben Grimm would expose this plot. Banner would be revealed as a double agent, who would defect back to the human side after it was learned Apocalypse launched his sea-wall. During the battle against Mikhail, Donald Blake and Victor von Doom would prevent an assassination attempt on the council, and Blake would sacrifice his life killing Mikhail[5].
Although the Sea-Wall was stopped by Jean Grey[6], The fate of most surviving Council members is unknown. Mariko Yoshida returned to Japan[7].
See Also
- 24 Human High Council (Earth-295) Members
- 22 Appearances of Human High Council (Earth-295)
- Minor Appearances of Human High Council (Earth-295)
- Media Human High Council (Earth-295) was Mentioned in
- 8 Images that include Human High Council (Earth-295)
- Team Gallery: Human High Council (Earth-295)


text:
High-level visit from the European Commission to Nepal 1-2 June 2006
Kathmandu, 31 May 2006
High-level visit from the European Commission to Nepal 1-2 June 2006
Mr. Hervé Jouanjean, Deputy Director General of the Directorate-General for External Relations of the European Commission (EC) will visit Nepal on 1-2 June 2006. This is the first time a European Commission official at Deputy Director-General level undertakes a bilateral visit to Nepal. Mr. Jouanjean already visited Nepal as part of the EU Troika in October 2005. Mr. Jouanjean is due to have meetings with the Nepal Government, civil society and representatives of the international community resident in Nepal. He will be accompanied by Mr. Fransisco da Camera Gomes, Head of the European Commission Delegation to India, Nepal and Bhutan and Ms. Rensje Teerink, Deputy Head of Unit and Desk Officer for Nepal. The Deputy Director General will visit Nepal to assess the recent political developments and to underscore European Commission support for the initiatives taken by the new government towards peace and democracy. The European Commission is committed to providing support to the peace process, democratic and accountable governance, economic growth, and to recapture development opportunities. A press conference will be held in Kathmandu on the last day of the Mr. Jouanjean's, visit. (Note: The second page contains an Annex) Website : www.delnpl.cec.eu.int
Annex The European Union (EU) brings together the following 25 Member States: Austria, Belgium, Cyprus, the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Poland, Portugal, Slovakia, Slovenia, Spain, Sweden and the United Kingdom. The European Commission is a key institution within the European Union. Together with the EU Member states represented in the Council of Europe and the European Parliament, the European Commission formulates and implements European policies within and beyond the borders of Europe. The European Union today faces global responsibilities and challenges. The EU is the largest trading block in the world, the largest donor of humanitarian and development assistance and a constant point of reference for others on stability, democracy and human rights. The European Commission plays a key role in the implementation of the EU's foreign and other policies and in this it relies heavily on its Delegations and Offices around the World, which act not only as the eyes and ears of the Commission in their host countries but also as its mouthpiece vis-à-vis the authorities and the general population. Commission Delegations are being consistently strengthened so that EU external assistance can be delivered more rapidly and efficiently. The European Commission works to promote the overall EU interest and administers a large development and humanitarian assistance budget on behalf of the EU. Furthermore, the EC is mandated to take the lead in all matters related to global trade development on behalf of the European Union. To fulfil its role in the external policy of the EU, the EC has established Delegations in 118 countries alongside the embassies of the EU member states. In Nepal, the European Commission established a Delegation in 1992; however, the EC has been permanently represented in Nepal since 1992. The EC is a major donor to Nepal with the following components as the main interventions: - Bilateral assistance focusing on rural development, education and conflict mitigation - Strong support to the Nepalese civil society through NGO co-financing and Asia-wide programmes - Targeted support to local NGOs that promotes human rights and democracy - Humanitarian assistance including disaster preparedness support In addition to the Delegation of the European Commission to Nepal, the following EU Member States have resident representations in Nepal: Denmark, Finland, France, Germany, and the United Kingdom.


text:
Thursday, June 05, 2008
ARC Orientation Participants Shine and Fly to New Heights
Memorial Day Weekend May 24, 25, and 26th.
Twelve local brave students braved the weather and the cold to camp by Smith Lake in the National Forest North of Truckee. They got more than just an introduction to the ARC program; they got a hardcore adventure to remember.
We packed our gear in the garage at Sagehen Creek Field Station and ducked between pouring rain to play games and get ready for the upcoming weekend. Once we hit the trailhead the rain held off, but the clouds stuck around...almost all weekend, almost.
We hiked to our campsite the beautiful alpine lake, Smith Lake, set camp and settled into dinner. Pesto pasta never tasted so good. MMM-MMM.
We hung our food so the bears won't find it. Can you find it? Nice job Bear Hang Crew.
The next day we again ducked the rain to start our peak hike to Steadfast Mountain. We did an activity connected to observations and started off trail travel to the peak. We got to our peak to notice a whole flock of over a hundred and thirty white pelicans circling majestically overhead. White pelicans are known for their teamwork in gliding along wind drifts for miles and miles. The ultimate display of teamwork. They rose silently on the breeze as the clouds broke and the sun shone down on our little campsite next to Smith Lake. It was truly an inspirational and special moment. (See the first photo in this post.)
We ate lunch and headed back to camp. We completed interviews with the instructors, had dinner and completed our reading, lesson and discussion on the benefits, the challenges and our excitement for the summer course. If anything, it won't be anywhere near as wet and chilly as it was those few days at the end of May.
See you this summer!!!
Wednesday, October 10, 2007
Berkeley e-giving adds Sagehen's ARC Program to system!
Use this link for more information or to make a secure on-line donation.
Monday, September 24, 2007
Organization of Biological Field Stations recognizes ARC Program
Thursday, May 31, 2007
Sagehen Orientation Climbs Steadfast
...they might have had to pack and unpack...
...meet some great new friends...
...and work together...
...Mara and Luis even fell off a log.
of who they...
really are.
Steadfast, Strong and Smiley.
Nice job to the ARC 2007 Orientation Group on a job well done.
Hope to see you this summer.
Wednesday, May 30, 2007
Poetry Challenge for ARC graduates and participants
Winds may blow violently at times,
Others, gently whispering cool secrets.
The deluge of the day wears away,
Digging deep around my roots.
My roots hold on. My trunk is solid,
strong, and determined. My skin protects.
The night approaches slowly
Silently like a hunting lion.
Chilled to the core, everything is darkened,
Some find fear here.
I sleep soundly. Dreaming of the light
And the life it helps me make.
Smoke fills the air. Fires burn below.
There is trouble brewing;
From time to time, panic sets in.
The clouds gather and the shadows lurk.
I stand like a tree because I am me.
And that is all I need to be.john arsenault May 2007.
If anyARC graduates or current students have a poem or other writing that you want to submit for publication with the ARC Blog send them to John Arsenault. Submissions must be appropriate and relevant with your ARC experience. Advice, reflections, accounts of post-course service work, or other creative endeavors are most welcome. Happy trails.
Tuesday, May 22, 2007
Spring Preparations for 2007 ARC Course
Happy Mother's Day Weekend from us all at ARC.
By John Arsenault, Course Director and English Teacher for the Sagehen Course,
I spent the weekend hiking various areas checking out the melting snow and blossoming spring around the ARC course area. With granola bars and water galore, I headed toward Mt Tallac and Loch Leven Trailheads. Tallac was mostly clear of snow. A few patches of snow remained on shady northern faces but for the most part the trail was not bad.
The views of Tahoe were absolutely stunning. My camera didn't really do it justice.
The next day I checked out the
There were spots on the
Lizards did push-ups on rocks as they twisted their heads one way and then another.
Checking me checking them out.
Flowers poked out of the rock as if responsible for the widening cracks.
Finally I reached the lakes, took off my pack, and propped it against a tree. I ravaged through my pack for a granola bar, snagged a big old bite and settled into quick break.
I looked out over the Middle Loch Leven and thought, my heart still pounding away, "whoever is going on the 2007 ARC orientation trip is psyched!"
Until later. John


text:
Eek!! I am IN LOVE with my new hair!! Thank you thank you thank you @caydenwildfox @Matthewmayfair for the stunning job you did on the cut!
On my @Matthewmayfair salon to get my hair did!
MATTHEW DAVID @Matthewmayfair
Great to see @JadeEwen sugababe in the
salon for a surprise NEW haircut coming
soon.All will be revealed very soon.


text:
MATHEWS – Just when Comeaux looked like it might grab a little momentum on Tuesday night early on during a first-round Class 5A playoff game against Central Lafourche at Broussard Field, Trojans player Logan Wilcox put an end to all that.
Wilcox blasted a two-out, three-run homer in the bottom of the second inning to help push Central Lafourche to an eventual 12-4 victory and to a best-of-three second-r0und series at top-seeded Zachary set for this weekend. Exact dates and times for the series are not yet set.
With the No. 16 Trojans (25-9 overall) up 3-0 in the bottom of the second inning, No. 17 Comeaux (19-15 overall) was looking to make it to the top of the third inning down just three runs, but Wilcox got into a pitch from Spartans starter Justin Schroder and planted it over the wall for a 6-0 Central Lafourche lead.
"I have been seeing the ball really well lately at the plate," Wilcox said. "I was just sitting on a fastball and hit it well. The wind was in my favor. I just hit it as hard as I could. As a sophomore, it's special to be a part of this team. It was a good win."
The Trojans, who won their first playoff game since 2007, took a 7-0 lead by adding a run on an error later in the inning and cruised to the victory.
"This is my 11th year at the school and fifth as head coach and this was our first playoff win since 2007," Trojans coach Simon Badeaux said. "There was a little pressure on us, but the kids played well and stayed in control of the game. This whole season has been pretty surreal. The guys have been playing great and the coaches have been working hard. Everything is coming together."
Trojans starter Brandon Babin went the distance in the win, allowed four runs on seven hits, struck out three, walked five and hit two batters.
"It was a rough start, but once I got loose it was fine," Brandon Babin said. "We have been playing well all year. I just have been throwing for the bat and letting them make plays in the outfield. We are not changing anything. We haven't won a playoff game here in years and for us to do it and to do it by more than a few runs, it feels great, and it's not over."
Central Lafourche (12 hits, two errors) scored three runs in the first inning, four runs in the second inning, two runs in the third inning and three runs in the sixth inning.
Offensive leaders for the Trojans included Drake Babin (1-for-3, single, run, two walks), Brandon Babin (2-for-5, run), Wilcox (2-for-2, four RBIs, homer, two walks), Johnathan Potter (2-for-4, double, single), Blake Trant (2-for-4, RBI, run) and Trey Naquin (2-for-4, double, single, RBI, two runs).
"We have been attacking the baseball all season long," Badeaux said. "More times than not it has been on our side. We are in control of our at-bats and that was a big thing for us (Tuesday)."
Comeaux, which got a solo homer, an RBI and two singles from Jeremy Harris, scored single runs in each of the third, fifth, sixth and seventh innings.
Schroder (two singles) took the loss on the mound after working into the third inning and Hunter Dugas and Seth Sonnier each worked in relief for the Spartans (seven hits, three errors).


text:
"Force is the perfect word for my game. People ask what you trying to do in the game? I'll tell you what. I'm trying to force my will upon the guy I'm playing against!"
"Round Mound of Rebound the Chunky Funk of Dunk. It was get the ball, get your motor running, get off the floor, get out the way... I'm dunking on you!"


text:
A family who's been involved with Watauga Special Olympics for approximately 19 years was presented the 2017 Family of the Year award by the Special Olympics of North Carolina.
Watauga Special Olympics Coordinator Keron Poteat said the Bell family - Nancy, Ty and Courtney - are very welcoming, funny and humble.
"I just start smiling when I think about them," Poteat said. "Your cheeks will hurt if you're around them for very long. They have this crazy, great energy."
Nancy Bell has served as a coach for Special Olympics bowling and aquatics for 15 years. Nancy Bell has also helped to assistant coach track and field and coach bocce. Poteat said Ty Bell has helped supply funds for the bowling team on multiple occasions and has served as a chaperone at events.
Nancy Bell said she became involved with Special Olympics in the 1980s as part of a class at the University of Delaware. Later she changed her major and became less involved with the program. However, Nancy said she and her husband, Ty, became involved with the program once again when they had their daughter Courtney, who was diagnosed with Downs Syndrome.
Bell said she and her husband - along with their then 4-year-old daughter and 2-year-old son, J.T. - moved to Boone in 1994. When her daughter, now 27, was 8 years old, Bell said Courtney became a Special Olympics athlete.
Over the years, Bell said her daughter has competed in sports such as bowling, swimming, bocce, cheerleading and basketball. While at a swimming practice early in her daughter's athletic career, Bell said a couple parents were asked to help with the sport. It was here that Bell started helping to coach the swim team and then later the bowling team.
"It's such a great group of people to be around," Bell said. "You go to volunteer and you think it's to help them out, but really you get it back so much more."
Poteat mentioned that the Bells help pay for the bowling athletes to practice at High Country Lanes in Boone. Bell said they had cut a deal with the bowling alley to pay $5 for each athlete to have shoes and two games per practice.
Poteat said she nominated the Bells for the award in August or September. She said the state office evaluates all of the submissions and chooses one family from the state of North Carolina who's deserving of the title.
"The Bell family genuinely cares and provides for our local athletes," Poteat said in her submission to the state. "By providing transportation to athletes who may not have rides, or coaching a team of bowlers or swimmers, or being that extra chaperone for travel in and around the state, the Bell family is always there. They are quick to say, 'what do you need,' and, then they make it happen."
The Special Olympics North Carolina and Poteat then strategized a way to surprise the Bell family with the award. Poteat said she invited the Bell family out to dinner at Bella's Italian Restaurant in November to deliver the news.
Bell said she had no idea they had been nominated and thought they were just celebrating the Thanksgiving holiday. A representative from the state office came to the event as well as a couple of Bell's co-coaches and athletes.
"That was really sweet," Bell said. "I had no idea. We were very humbled."
Ty Bell has a podiatry practice in Alaska and spends time there at last two weeks a month. Nancy Bell said since her daughter moved into a group home this past fall, she is either in Boone or Alaska. However, she said she will continue to stay involved with Special Olympics.
"I can't imagine when I wouldn't be helping with it in some fashion," Bell said. "It's just a part of me."
news archive
print close directions


text:
You are invited to connect to something beautiful, something rich with substance and soul, guiding us to joy and fulfillment. How does a yoga festival accomplish this magic in 3 days? Through amazing teachers, spiritual coaches and talented artists who have looked deeply inside themselves and found a unique offering they wish to share with you, to help you connect deeply to your own creativity and spirit. See Schedule Here
Take a break from the day to day, Awaken your true nature, align with water, air, fire, earth, sunshine and moonbeams.
A space for renewal, music, play, singing, dancing & contemplation.
Choose to spend the day, stay the night, or stay the weekend for the full retreat experience. Whether you choose tent camping by the lake or a stay in a beautiful cabin, we've got you covered.
Check out the options by clicking here.
Find yourself deeply immersed and inspired by empowering presenters and loving people in the beautiful
Gulf State Park on Lake Shelby. Awakened Life Yoga Festival is a unique and special gathering. This 3-day event features many offerings including power to peaceful yoga asana, meditation, kirtans, camping, fireside healing circles and more...
Awakened Life Yoga Festival
april 20th -22nd, 2018 gulf state park, Gulf shores, al


text:
Lonza Introduces Nucleofector™ PLUS Supplements
Product News Dec 27, 2012
Lonza has introduced Nucleofector™ PLUS Supplements, a new add-on product for use in combination with Nucleofector™ Kits.
These specialized supplements which are used instead of the standard kit supplement allow cryopreservation of freshly isolated or harvested cells in Nucleofector™ Solution.
"By decoupling cell harvesting and transfection, Nucleofection™ Experiments can be done at the scientist's convenience. Cells can be collected, stored and are ready-to-use at a later time, and deliver transfection results comparable to fresh cells. Larger cell batches can be cryopreserved so that researchers can avoid batch-to-batch variances in transfection results. Thus, Nucleofector™ PLUS Supplements can make whole experimental programs more consistent." explains Dr. Herbert Mueller-Hartmann, Head of R&D Discovery Technologies.
Nucleofection™ is a transfection technology that was first introduced into the market in 2001. It is based on the unique combination of electrical parameters and cell-type specific solutions.
It is known as the first efficient non-viral transfection method for primary neural cells and has been stated in over 300 peer-reviewed publications as the method of choice for transfection of primary neurons.


text:
Hey everybody:) Today I have some really cute monster nails to share with y'all. I saw these from @strawbrie on Pinterest... here is the original photo. For my nails I used Milani Fresh Teal and Polish Me Silly Clowning Around. Here are my Monster Nails!
I just love this mani! Leave me a comment and tell me what you think of this mani!
Happy Polishing Everyone!


text:
The use of mobile technology has become almost mandatory in every industry worldwide. Every worker, regardless of their job, is now expected to maintain a certain level of communication and visibility with colleagues, customers, partners and suppliers. That notion is not easily achieved by desk-bound employees, or "fixed" computer setups. Manufacturing, transportation and field service-centric organizations understand this more than anyone else. At least they should. The majority of their workforce spends their days either in a vehicle or on foot in the field, factory or warehouse; mobile technologies are the most efficient way to ensure mission-critical data and workflow applications are accessible in real time, at all times.
Yet, a recent seven-country study conducted by Arlington Research on behalf of Xplore partner and Enterprise Mobility Management (EMM) firm SOTI found that 'many CEOs, especially in transportation and logistics, are "failing to grasp" impact of mobile technology on business practices.' This is highly concerning given that properly-executed mobility solutions are proven to increase worker productivity levels, improve business process efficiency and enable the expansion of service models. In other words, mobile technologies directly impact a company's ability to introduce – and sustain – new revenue generating streams that can boost their bottom line. A recent Frost & Sullivan report even indicates that CEOs and other executives who have expanded their organization's use of mobile technologies are seeing significant returns on their investment (ROI).
Why, then, are other CEOs of highly mobile workforces struggling to 'understand how vital mobility has become in the basic "arsenal" of business tools'? While I might not understand what all is keeping them from embracing mobility, I do have some advice:
Regardless of why you want to spend on new mobile technologies , make sure you secure executive buy-in for your mobility project before you start shopping for a single mobile device or software solution. As evidenced by SOTI's research, and reinforced by our own customers' experiences, it will be hard to get anywhere fast without an executive sponsor backing your project and approving your budget.
If you really want to get your project greenlighted quickly, submit a thorough and detailed business case to justify "why" mobile technologies are essential to achieving the business objectives that they have set forth for your team and the overall company. Clearly articulate how a better quality rugged tablet-based solution, for example, will directly solve your business challenges – such as employee downtime – and mitigate the risk of missed deadlines, quality issues, or costly data input errors during inspection reports. Ask for the KPIs your company uses to assess performance and define "success" and show how business process improvements via new mobility solutions line up. And, plan to conduct a benefits analysis to support your case. Project sponsors will want to see "the value" before they sign off on any project.
Remember: 49% of CEOs only care about business mobility when downtime occurs as a result (according to the feedback SOTI received from executives and their employees). By demonstrating the direct, and positive, correlation that a particular mobility solution can have on employee productivity – and the correlation between "failing" mobile technology and downtime – the odds of executive signoff increase.
Want to know which other "benefits" you should be showcasing, or need help qualifying and quantifying each in terms your CEO will understand?
View the recorded webinar for a 45-minute "coffee break" conversation with Group Mobile's president Darin White and Field Technologies Editor Sarah Nicastro about this very topic. We'll go into more detail about what you can and should be doing to secure executive buy-in for your next mobility project.


text:
Freetown – "Skaffic Jam"
Busting a riddim in the style of the Skatalites, with a dab of the Specials, and heaping helpings of ska love, UK's Freetown delivers everything you would want from a track entitled "Skaffic Jam." One-chord hypnotic upbeat patrol? Check! Wikkid and wiley horn solos with smokin' jazz chops? Check! Toasting vocals chiming in with all the "shika-shikas" and "get-em-ups?" But yes! Why, it's enough to make a SuperFan skank up the walls. Best selection for drive time today!
"Skaffic Jam" (mp3)
from "Painless"
(Beatville Records)
Need more!


text: Fast growing private equity fund specializing in the acquisition and development of farmland in the Southwest U.S. We focus on creating value through increasing land productivity, lowering operating costs and increasing water efficiency. Our developed properties are suitable to grow vegetables, produce and row crops. Career Opportunities Available Currently No jobs Available http://www.integrated-ag.com


text:
Miranda Lambert has a lot to smile about this week. Her single, "Automatic," and album, Platinum, both hit the top of the charts — and she's sporting a brand-new sideswept bob.
The country superstar looked like an old-school Southern belle while partying with the song's co-writers, Nicolle Galyon and Natalie Hemby, in Nashville. The three wore poufy prom-style dresses and corsages while riding in a red vintage pickup truck.
The chin-length style is part of Miranda's overall style evolution. In the last year, she's turned to more glamorous looks, and this fun new haircut definitely adds sophistication.
[Via Los Angeles Times; Photos via Getty]
NEXT: Long Locks vs. Short Crops: Stars Who've Had Both »
This story originally appeared on redbookmag.com
More from redbook:
• Meet the Haircut That Works for Everyone
• 15 Gorgeous Ways to Get Your Best Blonde
• The Best Bob for Your Face Shape
From: Redbook


text:
Philip Rieff, an influential sociologist, author and cultural critic who wrote well-known books on the impact of Sigmund Freud on society and on the direction of morality and Western culture, died on Saturday at his home in Philadelphia. He was 83.
The cause was heart failure, said his son, David, the only child of Dr. Rieff's eight-year marriage in the 1950's to the writer Susan Sontag, who died in 2004.
Dr. Rieff, who taught at the University of Pennsylvania, was best known in scholarly circles for three early works on Freud and culture, published from 1959 to 1973, and for a book that appeared last January, "Sacred Order/Social Order: My Life Among the Deathworks: Illustrations of the Aesthetics of Authority" (University of Virginia Press), which was to have been the first of several volumes on related cultural themes.
The book, which uses works by Picasso, Marcel Duchamp, James Joyce and other artists and writers to explore what Dr. Rieff portrays as a battlefield on which culture is under attack, mounts a counterattack and is generally dismissive of feminism, gay rights, the television channel MTV and much of what has come to be regarded as social progress.
In an interview last year with David Glenn for The Chronicle of Higher Education, Dr. Rieff spoke of the emptiness of modern "anti-culture" and voiced deep pessimism for the future. "He does not believe that any restorative project is actually feasible," Mr. Glenn wrote. "When asked what he believes scholars might do to slow down the process of cultural decline, he says, 'They can become inactivists. They'll do less damage that way. Inactivism is the ticket.' "Continue reading the main story
In an academic career that began after World War II, Dr. Rieff taught at the University of Chicago; Brandeis University; the University of California, Berkeley; and from 1961 until his retirement in 1992, at the University of Pennsylvania.
Dr. Rieff often dazzled and occasionally puzzled students with multilayered but always authoritative lectures that blended philosophy, theology, economics, history, literature, psychology and dashes of poetry and Plato like ingredients in a sociological mulligatawny.
Readers often found his prose style difficult but the ideas behind it rewarding.
Dr. Rieff's first book, paradoxically titled "Freud: The Mind of the Moralist" (Viking Press, 1959), established him as an important sociologist. It argued that Freudian ideas, which gave rise to the idea of the "psychological man" as the dominant moral type in the 20th century, had had a corrosive effect on Western morality and culture because such an individual tended to relate all public questions not to received traditions of communal morality, but "to himself and his own emotions."
After editing a 10-volume edition of Freud's papers that appeared in 1961, Dr. Rieff completed his second book, "The Triumph of the Therapeutic: Uses of Faith After Freud" (Harper & Row, 1966), which said that Freudian therapies had gone awry in modern society, aiming not at a healthier life but at "better living," with rationales to replace virtue with value and sidestep consequences.
In "Fellow Teachers" (Harper & Row, 1973), Dr. Rieff explored the role of teachers in higher education and argued for a "feeling intellect" that avoids preaching or espousing doctrines to students.
"My re-educated friends, with their ardor for innovation and the perverse, are too influential as things are," he wrote. "This psychosocialism may destroy what remains of our received culture in order to replace it with permanent therapies."
Philip Rieff was born in Chicago on Dec. 15, 1922, the son of refugees who had fled political violence in Lithuania in 1921. Some members of his family who remained behind died in the Holocaust. He entered the University of Chicago in 1939, and after military service in World War II, he resumed his studies and earned a bachelor's degree in 1946, a master's in 1947 and a doctorate in 1954.
He joined the faculty in 1947 as a teaching instructor. In 1950, Ms. Sontag, then a 17-year-old sophomore at the University of Chicago with a brilliant academic record, audited a class taught by the 28-year-old Dr. Rieff. They talked, were captivated by one another — she later wrote that he was the first person with whom she could ever really talk — and they were married 10 days later.
In 1952, the couple moved to Boston. Dr. Rieff joined the faculty at Brandeis, Ms. Sontag began graduate work at Harvard, and their son was born. After earning two master's degrees and completing course work for a doctorate, Ms. Sontag received a fellowship to Oxford and Dr. Rieff a fellowship at Stamford; the couple went their separate ways for one academic year, their son was looked after by Dr. Rieff's parents, and the marriage unraveled.
In 1959, the couple divorced, and Ms. Sontag reclaimed her son and moved to New York to begin her celebrated career.
Dr. Rieff joined the faculty at Berkeley, where he taught until moving to Pennsylvania in 1961. Biographers have suggested that Ms. Sontag contributed significantly to Dr. Rieff's first book, "Freud: The Mind of the Moralist," although she was not listed as a co-author.
In 1963, Dr. Rieff married Alison Douglas Knox, a Philadelphia lawyer. Besides his wife and son, of New York, a journalist and author who specializes in foreign affairs, Dr. Rieff is survived by one grandchild.Continue reading the main story


text:
Jetradar compares cheap flights from Latrobe to 2,500 cities across 728 airlines and hundreds of travel websites from all over the world. We can find the cheapest flights from Latrobe with no commission or additional cost to you.
The peak season for flights from Latrobe is April and August. The low season for purchasing tickets is June and November.
Direct flights from Latrobe are offered by 0 airlines.
Depending on the number of days remaining before departure, the cost of flight from Latrobe could change by more than 63%.
Jetradar suggests buying flights from Latrobe in advance in order to choose the conditions for your flight based on your preferences and financial resources.


text:
If you ever saw a Cryptosporidium or Giardia parasite under a microscope it would horrify you if one made its way into your child's body. Just knowing where these parasitic water borne diseases originate is enough to turn your stomach, as they enter water systems through animal waste and human sewage. To protect your kids, you need an SureAquaStraw drinking water filtration system.
Cryptosporidium and Giardia are common protozoan pathogens and may be present in any water source from North and South America to Italy, Iraq to Africa, India to Australia. Even in developed countries there has been water scares including the cities of Miami, Sydney, and London.
These parasites are resistant to the water treatment system of chlorination and ozonolysis used in water treatment plants, and to water purification tablets. A drinking water filter with micro fine filters of at least 1 micron is the only way to remove the cysts from water supplies. With a filter of 0.2 micron, the SureAquaStraw is more than able to handle the job.
Cryptosporidium enters as an oocyst. The outer shell dissolves in the intestinal tract releasing the protozoa. In order to rid itself of this infection, the body starts a violent process of severe stomach cramps and diarrhea, and often fever and vomiting. Children are at particular risk of prolonged, debilitating effects.
Giardia enters as a dormant cyst. Even if it appears to be clean water, cysts can still be present. While it's possible to have no symptoms, adults and children can experience diarrhea and extreme gas, gastric pain and nausea, bloating and malaise.
Governments around the globe advise travelers to be careful of unfiltered water supplies. Governments warn these parasites are key travel health concerns and can enter the body by drinking contaminated water. Particularly when travelling in countries with poor water sanitization, do not drink unfiltered/untreated water and ice, avoid uncooked foods, peel fruits and vegetables and don't take drinking water straight from lakes, rivers, and streams.
Naturally, medical treatment must be sought and the whole family must wash hands carefully especially before handling food. Gloves can be worn when changing nappies, however, hands must still be washed.
The SureAquaStraw, water filter straw, effectively filters Cryptosporidium and Giardia from all water sources. Water filtration is via a microfiltration membrane of 0.2 micron, ensuring bacteria of a minimal size of 4 micron, and parasites can not pass through. SureAquaStraw has been approved effective by a National Association of Testing Authorities laboratory.
Kids just seem to naturally enjoy drinking from straws. When you consider the SureAqua Straw drinking water filtration straws can filter up to 500 liters (132 gallons) of water for just US$34.95, balanced with the potential risks of going without, you know this is protection your family can't afford to be without.