System and method for semi-distributed event warning notification for individual entities, and computer program product therefor

[0001] This application claims the benefit of U.S. Provisional Patent Application Ser. No. 60/764,385, entitled “System and Method for Semi-Distributed Event Warning/Notification for Individual Entities” and filed Jan. 26, 2006, which is fully incorporated herein by reference herein.

[0002] The invention described herein may be manufactured, used, imported, sold, and licensed by or for the Government of the United States of America, without the payment or any royalty thereon or therefor.

[0003] The present invention relates to the field of communications notification and warning systems, and more particularly, to a network information system that combines hardware components and a corresponding computer software system to provide a semi-distributed system and method for real-time event warning/notification to numerous individual entities across dispersed locations via one or more central event/threat receiving stations, one or more network bridges, and one or more user warning and positioning devices.

[0004] One of the salient features of today's modern organizations on a global, national, regional and local level is the ability to leverage information technology to command and control systems in real or near-real time. Advances in the technologies that integrate sensor and communications systems, for instance, facilitate determination of the precise location of mobile vehicles. Also, a plurality of modern information systems permit such location determination, including space, airborne, terrestrial and marine-based command and control systems.

[0005] Every vehicle equipped with such a command and control system is able to determine the location using global positioning system (GPS) technology, and then report that vehicle's information to higher command structures/systems using secure wireless linkages. Vehicles equipped with command and control systems also receive a variety of messages from higher command structures/systems, including the known locations of other related vehicles and other unknown or suspected locations of non-related vehicles. Command and control systems also allow vehicles to send and receive warning messages and, in turn, permit, for instance, the alerting of related vehicles about such significant events whether developing or in progress.

[0006] Though command and control systems warning messages are often manually generated, there are other information systems in use today, such as weather and tsunami stations, that automatically generate threat warning messages without human intervention. One of the military systems that automatically generates a threat warning message is the AN/TPQ-36 Firefinder Counter-fire Radar, which is able to detect projectiles in flight, compute their predicted points of origin and predicted points of impact, and automatically broadcast this information to other systems. The above described system still leaves the most numerous and vulnerable assets, humans, exposed to threats. Thus, there is a need to significantly enhance survivability.

[0007] Accordingly, there is a need for a network information system that allows command organizations/structures to know the location in real time of all their remote human assets, such as dismounted soldiers, emergency responders, remote construction crews, etc., as well as warn those assets whenever an event, such as a man-made or environmental threat, exists or is inbound. These warnings must be expeditiously distributed, received, and processed to permit sufficient time for potentially affected human assets to alter their protective posture and/or take positive actions in response to the predicted event. In the past, this quick response time has not been achieved in practice. This is understandable when considering the vast number of end systems, and resulting costs required to equip every remote human asset in a field of operations.

[0008] Accordingly, there is a need for a system that enables training, simulation, and rehearsal capabilities, along with real-time use by organizations, first responders, public safety, emergency management personnel, etc. for providing warning of harmful events, such as natural disasters, medical emergencies, military threats, homeland security events, and natural disaster incidents. In addition, there is a need for remotely located individuals, such as skiers, hikers, etc. to be provided with warning of harmful events, such as sudden violent weather changes, avalanches, and natural disasters. Further, there is a need for remotely located vehicles and vessels to be provided with a warning of potentially harmful events, such as, for example, violent ocean conditions, sea state changes, and tidal waves.

[0009] It is, therefore, an object of the present invention to provide a networked information system and method that combines a plurality of components to effectively distribute a real-time event warning/notification to many individual entities (i.e., small, easily transportable user warning and positioning devices) across dispersed locations, as well as a computer program product therefor. It is desirable that only the affected individual nodes be alerted of the future event, so as to minimize the amount of bandwidth needed for the system, as well as minimizing the cost of the user devices themselves. As such, it is desirable to determine, at a local node, whether or not these predicted events pertain to their locales, and react accordingly by transmitting an event warning message only to those affected individual nodes in communication with the local node.

[0010] It is another object of the present invention to enable the networked information system to monitor other connected information systems for externally and internally generated event warning/notification messages.

[0011] It is yet another object of the present invention to transmit event warning/notification messages on a secure wireless network whenever these are received.

[0012] It is another object of the present invention to enable the individual nodes to retransmit received event warning/notification messages to other user warning and positioning devices that may not have received the original message.

[0013] It is a further object of the present invention to provide a tailored event warning/notification to a user of the networked information system, method and computer program product of the present invention, based on message and user-defined setup parameters.

[0014] Still a further object of the present invention is to track the location of each equipped organization, individual human asset and/or vehicle, and periodically report this information to designated command and control organizations/structures, whether space-based, airborne, terrestrial and/or marine-based, using standard or customized messaging formats.

[0015] Another object of the present invention is to enable the warning of each equipped organization, individual human asset, vehicle, or other entity every time a significant event is predicted to occur or impact within a given distance from the individual user's location. In doing so, it is desirable that the distance parameter be kept to a minimum, to preclude false positives, but also account for an expected event radius or area as well as for errors in determining the location of the user, and of the predicted point of event or impact.

[0016] It is another object of the present invention to provide a secure network system, by using encrypted communications. However, the end system itself should not compromise friendly forces, even when captured intact by an opponent. This means that the information contained in the devices carried by individual assets should be minimal, and of extremely limited utility to an adversary, in the case of a military or confidential application.

[0017] Furthermore, it is an object of the present invention to incorporate mechanisms that allow lost or captured devices to be selectively excluded from participating in the network.

[0018] It is still another object of the present invention to permit assets/users to carry an unobtrusive user warning notification device that is of minimal size. It is also an object of the present invention that the system user warning device be capable of operating for extended periods of times, on the order of weeks and months, in a tactical environment, with no required user interaction.

[0019] It is a further object of the present invention that the networked information system, method and computer program product of the present invention be applicable to training, simulation and rehearsal, along with real-time use by organizations, such as first responders, public safety, emergency management personnel, and provide warning of harmful events, such as emergency response, homeland security, and natural disaster incidents. In addition, it is an object of the present invention that the system, method and computer program product be applicable to remotely located individuals, such as skiers, hikers, etc., to be provided warning of harmful events, such as sudden violent weather changes, avalanches, natural disasters, etc.

[0020] Further, it is an object of the present invention that same be applicable to remotely located vehicles and vessels, so as to provide warning of harmful events, such as violent ocean conditions/sea state changes/tidal waves, for example.

[0021] It is also an object of the present invention, in order to overcome the difficulties discussed above, to provide a system and software program product for use in such a system, to automatically facilitate the real-time user warning notification to many individual entities across dispersed locations.

[0022] These and other objects in advantages of this invention will become apparent when considered in light of the following description when taken together with the accompanying drawings.

[0023] Accordingly, the present invention provides a robust, versatile and cost-effective solution for event warning/notification for individual entities. Unlike other notification approaches, this method allows for remote and virtually instantaneous, semi-distributed notification of future events or threats.

[0024] The present invention has been made to solve the problems associated with the prior art inability to cost-effectively provide real-time warning notification to numerous remotely located human assets (users), as described above. In order to achieve the objects of the present invention, as discussed above, the present inventors have earnestly endeavored to create a network information system, method, and computer program product to use in the network information system, to effectively distribute to numerous individuals over a dispersed area, event warning messages in a timely fashion.

[0025] In particular, in a first embodiment of the present invention, a network event warning system enabling distribution of event warning messages to one or more individual entities within the network information system is provided comprising:

[0026] (a) one or more situational awareness workstation and threat warning gateways capable of receiving event warnings from linked and/or remote sensors, and/or other externally generated event warning messages, each of said situation awareness workstation and threat warning gateways comprising:

[0027] a gateway wireless communications means capable of receiving and transmitting data; and

[0028] situational awareness workstation computing means in communication with the situational awareness workstation and threat warning gateway and wireless communication means, said situational awareness workstation computing means;

[0029] (b) one or more network bridges in communication with the situational awareness workstation and threat warning gateway, each network bridge defining a local node, said network bridges providing a communications interface between individual user warning and positioning devices and the situational awareness workstation and threat warning gateway, each of said network bridges comprising:

• • [0030] (i) a network bridge wireless communications means capable of receiving and transmitting data; and
  • [0031] (ii) network bridge computer processing means in communication with the network bridge and network wireless communications means, individual user warning and positioning devices, sensors, and command and control systems; and
  • [0032] (iii) a local data storage means in communication with the network bridge computer processing means, for storage of location/geographical position data received from the individual user warning and positioning devices;

[0033] (c) one or more user warning and positioning devices, each user warning and positioning device defining an individual node, each of said devices comprising:

• • [0034] (i) a warning device computer processing means;
  • [0035] (ii) a global positioning system (GPS) means capable of calculating the location of the user warning device, said GPS in communication with the warning device computer processing means;
  • [0036] (iii) a wireless communications means in communication with the warning device computer processing means; and
  • [0037] (iv) one or more sensory notification means;

[0038] (d) network situational awareness workstation application program code embodied on a computer readable medium for execution on the situational awareness workstation and threat gateway computer processing means capable of authenticating event warning messages, processing and analyzing the event warning messages via an event prediction determination process to produce predicted future event warning messages, and distributing future event warning messages to the network bridges comprising:

• • [0039] (i) application program code operable to decode and authenticate a valid event warning message, input directly or indirectly into the situational awareness workstation and threat warning gateway, by verifying the digital signature of the event warning message;
  • [0040] (ii) application program code operable to input and authenticate an event warning message into an event prediction determination process, thereby analyzing the event warning message to predict a corresponding future event with associated relevant information including predicted event type, location, area impacted, start time, and duration;
  • [0041] (iii) application program code operable to distribute the predicted future event and associated relevant information to all network bridges within the information network, without regard to whether a specific local or individual node will be affected by the predicted future event; and
  • [0042] (iv) application program code operable to convert the format of the predicted future event information, in terms of electronic format and content, to alternative electronic formats, before distribution;

[0043] (e) bridge application program code embodied on a computer readable medium for execution on the network bridge computer processing means for processing event warning messages received from the situational awareness workstation and threat warning gateway, and other external sources, determining which user warning and positioning devices in communication with the local node will be affected by the future event, and distributing an authenticated event warning message of an event to occur in the future to all affected user warning and positioning devices, said bridge application program code comprising:

• • [0044] (i) application program code operable to automatically verify the authenticity of an event warning message reporting an event to occur in the future, by examining its digital signature, so as to produce either an invalid or valid event warning message;
  • [0045] (ii) application program code operable to input a valid event warning message into an event prediction process, wherein the predicted time of the event is compared with the local time, to determine whether the event will occur at some future time;
  • [0046] (iii) application program code operable to track the status of each user warning and positioning devices with which the network bridge is in communication, by receiving periodic location reports from each user warning and positioning device, and storing said location report in the local data storage means;
  • [0047] (iv) application program code operable to automatically compare the locale to be affected by an authenticated event warning message of an event to occur in the future within the locale of the local node, to determine the affected area;
  • [0048] (v) application program code operable to identify all user warning and positioning devices in communication with the local node which are in the affected area, by comparing the most recent location data contained in the location reports of each user warning and positioning device with location data of the affected area, so as to determine all affected user warning and positioning devices;
  • [0049] (v) application program code operable to send notification to all affected user warning and positioning devices of an authenticated event warning message of an event predicted to occur in the future;
  • [0050] (vi) application program code operable to log off and discard all invalid and elapsed event warning messages;
  • [0051] (vii) application program code operable to input and translate authenticated event warning messages from individual user warning and positioning devices into other message formats utilized by other different command and control systems;
  • [0052] (viii) application program code operable to filter event warning messages that should not be sent from one network to the other;
  • [0053] (ix) application program code operable to enable the network bridges to communicate with sensors, individual user warning and positioning devices, and command and control systems, using different networks and protocols; and
  • [0054] (x) application program code operable to issue keys acting as the root certificate authority for all nodes in the network, thereby permitting the network bridges and user warning and positioning devices to authenticate each other;

[0055] (f) user warning and positioning device application program code embodied on a computer-readable medium for execution on the user warning device computer processing means in conjunction with the bridge application program code and the situational awareness workstation program code, said user warning device application program code being capable of decoding messages, validating received event warning messages, and then issuing a notification of an event predicted to occur in the future in the locale of the user warning device, said user warning device application program code comprising:

• • [0056] (i) application program code operable to authenticate received event warning messages by verifying the digital signature of the event warning messages;
  • [0057] (ii) application program code operable to decode incoming coded messages;
  • [0058] (iii) application program code operable to query a local cache of messages to determine whether an event warning message has already been relayed;
  • [0059] (iv) application program code operable to relay event warning messages concerning an event that has not as yet happened and has not as yet been relayed;
  • [0060] (v) application program code operable to notify local nodes within the affected area of the predicted future event, and activate user warning and positioning devices based upon the time remaining until the predicted event; and
  • [0061] (vi) application program code operable to activate one or more of the sensory notification means in the user warning devices when a valid event warning message is received.

[0062] In a second embodiment of the present invention, the network event warning system of the first embodiment is provided, wherein the bridge application program code further comprises:

[0063] application program code operable to selectively disable or alter individual user warning and positioning devices that appear to have been compromised or lost.

[0064] In a third embodiment of the present invention, the network event warning system of the first embodiment is provided, wherein the bridge application program code further comprises:

[0065] application program code operable to reconfigure any parameters in the individual user warning and positioning devices, and application program code therein.

[0066] In a fourth embodiment of the present invention, the network event warning system of the first embodiment is provided, wherein the bridge application program code further comprises:

[0067] application program code operable to interface one or more of the network bridges with an optional laptop computer running on an operating system.

[0068] In a fifth embodiment of the present invention, the network event warning system of the first embodiment is provided, wherein the bridge application program code further comprises:

[0069] application program code operable to revoke the certificate of a user warning and positioning device.

[0070] In a sixth embodiment of the present invention, the network event warning system of the first embodiment above is provided, wherein the user warning and positioning device application program code further comprises:

[0071] application program code operable to convert event warning messages to human voice warnings, said human voice warnings comprising instructions on what subsequent action to take in response to the future event.

[0072] In a seventh embodiment of the present invention, the network event warning system of the first embodiment is provided, wherein the user warning and positioning device application program code further comprises:

[0073] application program code operable to encrypt outgoing messages.

[0074] In an eighth embodiment of the present invention, the network event warning system of the first embodiment is provided, wherein the bridge application program code further comprises:

[0075] application program code operable to encrypt outgoing messages.

[0076] In a ninth embodiment of the present invention, the network event warning system of the first embodiment is provided, wherein the user warning and positioning device application program code further comprises:

[0077] application program code operable to utilize spread-spectrum technology to prevent basic triangulation efforts to locate the user warning and positioning device.

[0078] In a tenth embodiment of the present invention, the network event warning system of the first embodiment is provided, wherein the user warning and positioning devices are capable of communicating over wired or wireless systems to the network bridges and other user warning and positioning devices.

[0079] In an eleventh embodiment of the present invention, the network event warning system of the first embodiment is provided, wherein the user warning and positioning device application program code further comprises:

[0080] application program code operable to reconfigure the files stored in the user warning and positioning device.

[0081] In a twelfth embodiment of the present invention, the network event warning system of the first embodiment is provided, wherein the bridge application program code further comprises:

[0082] application program code operable to connect user warning and positioning devices to command and control systems and sensor systems.

[0083] In a thirteenth embodiment of the present invention, a computer program product for tactical distributed event warning over a network event warning system is provided, comprising:

[0084] (a) network situational awareness workstation application program code embodied on a computer readable medium for execution on a situational awareness workstation and threat gateway computer processing means capable of authenticating event warning messages, processing and analyzing the event warning messages via an event prediction determination process to produce predicted future event warning messages, and distributing future event warning messages to one or more network bridges comprising:

• • [0085] (i) application program code operable to decode and authenticate a valid event warning message, input directly or indirectly into the situational awareness workstation and threat warning gateway, by verifying the digital signature of the event warning message;
  • [0086] (ii) application program code operable to input and authenticate an event warning message into an event prediction determination process, thereby analyzing the event warning message to predict a corresponding future event with associated relevant information including predicted event type, location, area impacted, start time, and duration;
  • [0087] (iii) application program code operable to distribute the predicted future event and associated relevant information to all network bridges within the information network, without regard to whether a specific local or individual node will be affected by the predicted future event; and
  • [0088] (iv) application program code operable to convert the format of the predicted future event information, in terms of electronic format and content, to alternative electronic formats, before distribution;

[0089] (b) bridge application program code embodied on a computer readable medium for execution on a network bridge computer processing means for processing event warning messages received from the situational awareness workstation and threat warning gateway, and other external sources, so as to determine which user warning and positioning devices in communication with the network bridge will be affected by the future event, and distribute an authenticated event warning message of an event to occur in the future to all affected user warning and positioning devices, said bridge application program code comprising:

• • [0090] (i) application program code operable to automatically verify the authenticity of an event warning message reporting an event to occur in the future, by examining its digital signature, so as to produce either an invalid or valid event warning message;
  • [0091] (ii) application program code operable to input a valid event warning message into an event prediction process, wherein the predicted time of the event is compared with the local time, to determine whether the event will occur at some future time;
  • [0092] (iii) application program code operable to track the status of user warning and positioning devices with which the network bridge is in communication, by receiving periodic location reports from each user warning and positioning device, and storing said location report in a local data storage means;
  • [0093] (iv) application program code operable to automatically compare the locale to be affected by an authenticated event warning message of an event to occur in the future within the locale of the network bridge, to determine the affected area;
  • [0094] (v) application program code operable to identify all user warning and positioning devices in communication with the network bridge which are in the affected area, by comparing most recent location data contained in location reports received from each user warning and positioning device in communication with the network bridge with location data of the affected area, so as to determine all affected user warning and positioning devices;
  • [0095] (vi) application program code operable to send notification to all affected user warning and positioning devices of an authenticated event warning message of an event predicted to occur in the future;
  • [0096] (vii) application program code operable to log off and discard all invalid and elapsed event warning messages;
  • [0097] (viii) application program code operable to input and translate authenticated event warning messages from individual user warning and positioning devices into other message formats utilized by other different command and control systems;
  • [0098] (ix) application program code operable to filter event warning messages that should not be sent from one network to the other;
  • [0099] (x) application program code operable to enable the network bridges to communicate with sensors, individual user warning and positioning devices, and command and control systems, using different networks and protocols; and
  • [0100] (xi) application program code operable to issue keys acting as the root certificate authority for all nodes in the network, thereby permitting the network bridges and user warning and positioning devices to authenticate each other;

[0101] (c) user warning and positioning device application program code embodied on a computer-readable medium for execution on the user warning device computer processing means in conjunction with the bridge application program code and the situational awareness workstation program code, said user warning device application program code being capable of decoding messages, validating received event warning messages, and then issuing a notification of an event predicted to occur in the future in the locale of the user warning device, said user warning device application program code comprising:

• • [0102] (i) application program code operable to authenticate received event warning messages by verifying the digital signature of the event warning messages;
  • [0103] (ii) application program code operable to decode incoming coded messages;
  • [0104] (iii) application program code operable to query a local cache of messages to determine whether an event warning message has already been relayed;
  • [0105] (iv) application program code operable to relay event warning messages concerning an event that has not as yet happened and has not as yet been relayed;
  • [0106] (v) application program code operable to notify local nodes within the affected area of the predicted future event, and activate user warning and positioning devices based upon the time remaining until the predicted event; and
  • [0107] (vi) application program code operable to activate one or more of the sensory notification means in the user warning and positioning devices when a valid event warning message is received.

[0108] In a fourteenth embodiment of the present invention, the computer program product of the thirteenth embodiment above is provided, wherein the network bridge application program code further comprises:

[0109] application program code operable to selectively disable or alter individual user warning and positioning devices that appear to have been compromised or lost.

[0110] In a fifteenth embodiment of the present invention, the computer program product of the thirteenth embodiment above is provided, wherein the network bridge application program code further comprises:

[0111] application program code operable to reconfigure any parameters in the individual user warning and positioning devices, and application program code therein.

[0112] In a sixteenth embodiment of the present invention, the computer program product of the thirteenth embodiment above is provided, wherein the network bridge application program code further comprises:

[0113] application program code operable to interface one or more network bridges with an optional laptop computer running on a conventional operating system.

[0114] In a seventeenth embodiment of the present invention, the computer program product of the thirteenth embodiment is provided, wherein the network bridge application program code further comprises:

[0115] application program code operable to revoke the certificate of a user warning and positioning device.

[0116] In an eighteenth embodiment of the present invention, a method for receiving and tactically semi-distributing event warnings is provided, said method comprising the steps of:

• • [0117] (1) electronically receiving an event warning message, having a digital signature, at a situational awareness workstation;
  • [0118] (2) examining the digital signature of the event warning message to authenticate the event warning message;
  • [0119] (3) decoding the authenticated event warning message into a readable format;
  • [0120] (4) analyzing the authenticated event warning message so as to generate corresponding predicted event and associated relevant information, said predicted event and associated relevant information including event type, event location, area impacted, event start time, and event duration, so as to define an event warning message;
  • [0121] (5) converting the event warning message to an electronic format and content readable by a network bridge (local node) and a user warning and positioning device (individual node);
  • [0122] (6) distributing the event warning message by transmission of same from the situational awareness workstation to all network bridges in communication with the situational awareness workstation, without regard to whether a specific local or individual node will be affected by the predicted event;
  • [0123] (7) receipt of the event warning message in one or more network bridges, and verifying, in the network bridges, the validity of the event warning message received from the situational awareness workstation, so as to authenticate same;
  • [0124] (8) comparing, in the network bridges, the predicted time of the predicted event in the authenticated event warning message with the local time, to determine whether the event has already occurred, and if the predicted event has not occurred, generate a future authenticated event warning message;
  • [0125] (9) filtering out event warning messages, at the network bridges, that should not be sent from one network to another, due to lack of validity or authenticity;
  • [0126] (10) tracking the status of user warning and positioning devices in communication with the network bridge, to determine active or inactive status thereof, by receiving period location reports containing location data from each user warning and positioning device in communication with a network bridge, and storing the location reports in a local storage means in communication with the network bridge;
  • [0127] (11) comparing the locale to be affected by the valid and authenticated event warning message with the local data for each user warning and positioning device, so as to determine user warning and positioning devices to be affected by the future event;
  • [0128] (12) translating the future authenticated event warning messages at the network bridge into other message formats utilized by other different command and control systems and user warning and positioning devices;
  • [0129] (13) issuing, at the network bridges, keys acting as the root certificate authority for all nodes in the network information system, permitting the network bridges and user warning and positioning devices to authenticate each other;
  • [0130] (14) distributing the valid, converted and authenticated event warning message from the network bridges to all affected active user warning and positioning devices in communication with the network bridge;
  • [0131] (15) receiving the valid, converted and authenticated event warning message at the affected user warning and positioning devices,
  • [0132] (16) examining, in the user warning and positioning devices, the digital signature of the incoming event warning message to verify its authenticity;
  • [0133] (17) discarding all invalid and elapsed warning messages at the user warning and positioning devices;
  • [0134] (18) comparing in the user warning and positioning devices the time of the predicted event or threat in the event warning message to the local time, to determine whether the event will occur at some future time and, if it will, authenticating the message;
  • [0135] (19) decoding, in the user warning and positioning devices, incoming coded event warning messages;
  • [0136] (20) activating one or more notification mechanisms in the user warning and positioning devices, including sensory mechanisms, a user notification concerning the received event warning message.

[0137] In a nineteenth embodiment of the present invention, the method for receiving and tactically distributing event warnings of the eighteenth embodiment above is provided, further comprising the step of establishing and maintaining communication between the network bridge, sensors, user warning and positioning devices, and command and control systems, using different networks and protocols.

[0138] In a twentieth embodiment of the present invention, the method for receiving and tactically distributing event warnings of the eighteenth embodiment above is provided, further comprising:

[0139] sending a query from the user warning and positioning devices to a local cache of messages to determine whether the event warning message has already been relayed; and

[0140] relaying, from the user warning and positioning devices to other nodes in the network information system, the event warning message concerning an event that has not as yet happened and has not as yet been relayed.

[0141] In a twenty first embodiment of the present invention, the method for receiving and tactically distributing event warnings of the seventeenth embodiment above is provided, further comprising converting valid event warning messages to human voice warnings with instructions on what subsequent action to take.

[0142] In a twenty second embodiment of the present invention, the method for receiving and tactically distributing event warnings of the eighteenth embodiment above is provided, further comprising sending messages from one or more of the network bridges to one or more of user warning and positioning devices, to either alter, reconfigure, or disable one or more of the user warning and positioning devices.

[0147] The following section describes various preferred embodiments of the present invention, while exemplifying the semi-distributed event warning/notification system, method, and computer program software of the present invention.

[0148] The present invention applies engineering design principles to improve commercial products and military applications for situational awareness and event warning. The present invention is a networked information system that combines hardware components, wireless technologies, and computer software programs to provide a semi-distributed system and method for real-time event warning/notification to all network bridges across dispersed locations. The network bridges, in turn, determine whether or not these events pertain to their locales, and if so, transmit an event warning message to all affected user warning and positioning devices in communication with the network bridge.

[0149] For instance, if the system is notified that an artillery shell is in the air and will strike a certain point at a certain time, this message will be distributed to all local nodes within the system (i.e., all network bridges), allowing the local nodes to determine whether any of the user warning and positioning devices in communication with the network bridge is in the danger radius. If so, an event warning message is sent to only the affected individual nodes, to alert their users, while all other unaffected individual nodes remain silent. The present invention supports a plurality of network types, e.g., radio, local area networks, etc.

[0150] The present invention's system architecture satisfies the present invention's objectives by determining, at the local nodes (i.e., the network bridges), whether a user, such as a public safety professional or soldier, carrying a user warning and positioning device, is inside a predicted future event area. This system and method achieves same by comparing the location of an individual user warning and positioning device (by referencing location reports stored in the local data storage means) at the time of receipt of the future event warning at the local node with each known event or threat area to determine whether or not a user must be warned at that time, or at a later time up through the predicted future time of the event as the user changes geographic locations.

[0151] This is the most computationally intensive calculation required to satisfy the system and method objectives, as errors in this calculation can either erode trust in the system or result in injury or death, or both, of the user. Accordingly, the present invention's architecture permits the ongoing computation of user locations and threat areas at the local nodes from the time of receipt of the future event warning message at the local nodes up to the predicted future event time. By performing these intensive calculations at the local nodes, the user warning and positioning devices components and size can be minimized.

[0152] The present invention further provides a robust solution in the case of the loss, compromise or incapacitation of a computational node, e.g., the user warning and positioning device, by affecting only the individual user, such as a public safety professional or soldier, for example. Specifically, according to the present invention, network bridges are utilized to connect the user warning and positioning devices to the command and control and sensor systems, wherein the user warning and positioning devices are not affiliated with a specific network bridge. Instead, each user warning and positioning device is able to exchange messages with any other system component, whether another user warning and positioning device or a network bridge. The present invention is advantageous in that it increases the robustness of the ability to provide warnings within an event area or structure, such as a building, since each node is often multi-homed.

[0153] Accordingly, FIG. 1 illustrates the semi-distributed warning/notification method and system of the present invention. One or more situational awareness workstation and threat warning gateways (hereinafter “gateways”) is established, as well as network bridge structures (A, B, C, etc.) which provide the principal data management. The network bridges are, in turn, in communication with user warning and positioning devices on assets (1, 2, 3, 4, 5, 6, etc.), being humans, in this example. Event warning information concerning an event locale, e.g., area XY, is delivered to the gateways. Subsequently, an event warning message is communicated to network bridges A, B and C. The network bridges then determine the present location of all user warning and positioning devices in communication with that network bridge, compare that location to the location of the predicted future event, and, in turn, communicate an event warning message to all affected user warning and positioning devices in communication therewith.

[0154] Location (position) information of the assets (users) is generated in the user warning and positioning devices, via a geographical positioning means (GPS) located therein, and periodically communicated to network bridges, e.g., A, B, C, etc., via wireless transmission means. The location information received from the individual user warning and positioning devices is then stored in the local data storage means in communication with each network bridge and, optionally, also sent to the gateways. For example, as shown in FIG. 1, for Area XY, there is an event warning message that is communicated to the gateway and, subsequently, location and event warning/notification information, in the form of an event warning message, is communicated to the network bridges, and on to the affected individual user warning and positioning devices (individual nodes). Moreover, event and asset location information is communicated not only to those assets (individual nodes) within the affected or threat area, but also may be communicated to and between assets not in the affected or threat area by relaying of event warning messages from one individual node to another. Thus, threat and location information may be communicated to all affected user warning and positioning devices in the system, whether or not they are in constant communication with the network bridges.

[0155] The present invention's system includes three types of nodes: the gateways (central nodes), the network bridge devices (local nodes), and user warning and positioning devices (individual nodes), e.g., pager-sized modularized user warning and positioning devices, as illustrated in FIG. 1. The network bridge devices communicate on at least two separate networks. Most commonly, one of these networks is the network over which the pager-size user warning and positioning devices communicate. The other network(s) allows the system to receive externally-generated event warning/notification messages.

[0156] The pager-sized user warning and positioning devices communicate wirelessly with the network bridge devices that receive alerts from the situational awareness workstation and threat warning gateway, other network bridge devices, other user warning and positioning devices and/or other information systems communicating over a wired or wireless network. According to the present invention, although a fixed infrastructure may be utilized, there is no need for a fixed infrastructure. Given the need for user warning and positioning devices to communicate with each other, as well as with any network bridges within range, the wireless communications subsystem must support a large number of nodes (i.e., a large number of network bridges and user warning and positioning devices) operating simultaneously within a broadcast environment.

[0157] Furthermore, since the system of the present invention can be deployed to hundreds of assets, e.g., soldiers in a theater of operation, emergency response personnel, etc., the wireless communications subsystem must also provide a mechanism for breaking up broadcast domains. The present invention permits different domains to be assigned to the various user warning and positioning devices, so that said devices may operate in close proximity to each other without interfering with each other's receiving and transmitting functions.

[0158] The present invention also provides for adaptive power management. The user warning and positioning device transmits at the lowest possible power level in order to conserve energy, as well as to minimize the risk of enemy detection in military or law enforcement applications. Alternately, the user warning and positioning devices is capable of transmitting at a fairly high power level when operating in challenging environments, such as densely developed urban areas or mountainous environments, or when the user, e.g., a soldier, is laying prone or the asset's vehicle has a low profile. Thus, the present invention's communications module's output power is configurable in a flexible manner by the user warning and positioning device's computer processing means.

[0159] In a preferred embodiment of the present invention, the user warning and positioning device's configuration file, encryption key, and/or software is updated using a physical or secure wireless connection from a trusted source. This trust, like the validity of received event warning messages, is based on a digital signature. The present invention's physical connections for updates permit the system to be securely reconfigured when a key or device has been compromised.

[0160] Also, the present invention considers the potential exploitation of these devices by adversaries, in the military or law enforcement applications. Given the fact that the user warning and positioning devices are configured to periodically generate and transmit location reports to the network bridges and, optionally, on to the gateways and/or CCS's, it may be possible for an enemy to triangulate the position of each user warning and positioning device. To address this threat, the user warning and positioning devices' communications module provides the capability to thwart basic triangulation effort by, for example, utilizing spread-spectrum technologies.

[0161] Spread-spectrum techniques are methods in which energy generated at a single frequency is deliberately spread over a wide band of frequencies. This is done for a variety of reasons, including increasing resistance to natural interference or jamming and to prevent hostile detection. A contemporary application of this technique is used in the Single Channel Ground and Airborne Radio System (SINCGARS) by changing frequencies (frequency-hopping) several times per second. In a preferred embodiment of the present invention, the user warning and positioning device similarly uses frequency-hopping spread spectrum techniques to thwart possible triangulation efforts.

[0162] The system and method of the present invention provide for the integration of the event information and warning notification. Based upon the present invention's exemplary applications, the resulting general method steps can be understood as follows:

[0163] Step 1: An action (event) occurs that generates a predictable event(s) that will occur in the future. (Example: An enemy artillery battery shoots at a friendly unit location.)

[0164] Step 2: The action (event) is detected by an action detection means, via direct or indirect means, such as, for example, optical, electromagnetic, radio frequency, and/or acoustic methods that discretely or in combination characterize the initial and/or ongoing action. (Example: A friendly artillery locating radar picks up the incoming enemy artillery round and accurately measures its ballistic-based path of flight). Action characterization information is the formulated, and the action characterization information subsequently fed to an event prediction determination process, as described in Step 3.

[0165] Step 3: The action characterization information is processed and analyzed in a timely manner. The result of this analysis generates predicted corresponding future event and associated relevant information, defined as an event warning message. The event warning message includes, for example, event type (e.g., enemy attack, approaching severe weather, etc.), predicted location/area impacted by the event, predicted start time of the event, and predicted duration of the event. For example, a command and control system (CCS) associated with friendly artillery locating radar uses the ballistic-based path of flight and speed of the enemy artillery round information received from the friendly artillery locating radar to determine the predicted Time of Impact (PTI) and predicted point of impact (PPI) of the enemy artillery round, with corresponding affected area footprint considering any ballistic measurement errors).

[0166] Step 4: The event warning message is distributed to all local nodes (i.e., all network bridges) within the information network without regard to whether a specific node will be affected by the future event. While this so-called “semi-distributed method”, which involves communication to all local nodes, whether in the affected area or not, exerts increased load on the communications network (e.g., increased use of bandwidth) versus a centralized network configuration (wherein the event warning message is sent only to the network bridge and user warning and positioning devices in the affected area), the semi-distributed network configuration of the present invention provides fairly rapid and accurate event warning/notification to all affected individual nodes, since time delays or asset location errors associated with unit position reporting latencies and centralized computational processes to determine which individual nodes will be specifically impacted by an event are minimized. In particular the network bridges perform the intensive calculations, and can do so quicker and more accurately than a central processing means, as they are in communication with fewer individual nodes, and have constant access to very current position information of each individual node. Thus, the present invention permits fairly short warning/notification time windows between event detection and impact on individual entities. (Example: A CCS generates a set of strike warning messages that are electronically transmitted to all local nodes within the network).

[0167] Step 5: Optionally, if either the communications network, information network, and/or versions of components within the system of the present invention are heterogeneous in nature, then a translation of the event warning message may be required in terms of format and content to insure compatibility and continuity of timely transmittal as the event warning message makes it way to the user warning and positioning devices. For example, the CCS generates a variable-message-format (VMF) based strike warning message(s). The unit-borne system addressed for receipt of this strike warning message is only able to parse and understand extensible Markup Language (XML) based messages. An interim system/device/process is required to translate the strike warning message from VMF to XML.)

[0168] Step 6: The network bridges receive and locally parse/process the future event warning message in a timely manner, via a computer processing means running the bridge device computer program product of the present invention. Whenever an event warning message is received by the network bridge, the predicted time of the event is compared to the local time to determine whether or not the event will occur at some future time. If it will, the event warning message's authenticity is automatically verified by examining its digital signature. If the signature is valid, the locale that is affected by the future event is automatically compared to the location of each user warning and positioning device in communication with the network bridge. If a user warning and positioning device is within the affected area, it is classified as “affected”, and an event warning message is communication to the affected user warning and positioning device.

[0169] Step 7: The user warning and positioning device receives the event warning message, authenticates the authenticity thereof by examining its digital signature, and if valid and authentic, notifies the user, based on the time remaining until the future event, via the sensory notification means. The sensory notification means may include audible alarms, audible spoken warnings and instructions, visual alarms such as flashing lights, and/or vibrations mechanisms.

[0170] Optionally, the user warning and positioning device will also retransmit the received event warning message to other network bridges and user warning and positioning devices, so that other nodes that may not be in range of the original transmission by the network bridge may also receive the event warning message. All invalid or elapsed event warning messages are logged and then discarded. The re-transmission feature on the user warning and positioning device can be disabled to prolong power life, or to reduce the risk of detection by enemy assets in military and law enforcement applications. (Example: A pager-sized user warning and positioning device carried by an individual dismounted soldier receives and validates an XML-base strike (event) warning message. Computational logic within this device activates several notification mechanisms found within the device, to alert the soldier of an impending enemy strike in his area).

[0171] Based on the set of alert actions selected by the user for his user warning and positioning device (i.e., the user can select the types of alerts given by his device, according to the situation), the user is warned/notified via one or more sensory means prior to and during the time period of the event occurrence. As discussed above, these sensory indicia include auditory, visual, and/or physical stimulation of an individual's bodily senses. (Example: A pager-sized user warning and positioning device carried by a soldier can be programmed to both vibrate and sound an audible alarm when receiving an event warning message, to notify the affected soldier to change his protective posture prior to impact of an enemy artillery round in his locale).

[0172] The present invention's network bridges provides three principle functions. First, it provides an interface between the user warning and positioning devices and the external systems that receive, generate and utilize warning/notification information. In this role, the network bridges translate messages received from other systems into event warning messages. They also translates messages received from the individual user warning and positioning devices into other message formats utilized by other different and multiple command and control systems. Thus, the network bridges also filter messages that should not be sent from one network to the other, e.g., spot reports coming from a terrestrial command and control system.

[0173] Second, the network bridge acts as a management device for the individual user warning and positioning devices. The network bridge keeps track of the status and location of each user warning and positioning devices with which it has communications contact, stores the location of each in a readily accessible location data storage means, and permits the selective disablement or remote alteration of any individual user warning and positioning device that appears to have been compromised or lost. The network bridge is capable of configuring and reconfiguring any parameter in the individual user warning and positioning devices, e.g., by changing the URN of a replacement user warning and positioning device issued to a soldier.

[0174] Third, the network bridges act as the central data processing means, wherein the intensive calculations as to which user warning and positioning devices in communication with each network bridge are in the predicted locale of a future event are carried out. This system architecture allows the sophisticated computer processing means to be locally located, allowing for the use of simple and inexpensive individual user warning and positioning devices.

[0175] The present invention's network bridge communicates with sensor, warning, and command and control systems that use different networks and protocols. For example, the present invention's network bridge can use the internet protocol (IP) at the network layer. Moreover, the network bridge can communicate using both a local area network (LAN) and a point-to-point (PPP) link in order to support both mobile/tactical and fixed installations.

[0176] In an embodiment of the present invention, the network bridge device is implemented using a laptop computer running on a conventional operating system. The network bridge supports various formats, such as extensible Markup Language (XML) messages, over an Ethernet interface, Joint Variable Format Message (JVMF) over a point-to-point protocol (PPP) interface, etc. When a command and control system is connected to a tactical network, e.g., SINCGARS, the CCS connects over its serial port to the Inter-Network Controller (INC), which is a tactical router mounted on the radio's vehicular adapter. The serial connection is established using PPP. Then, the CCS queries the INC to determine its configuration and, if necessary, reconfigures it using the simple network management protocol (SNMP). Thereafter, the CCS exchanges regular IP traffic, e.g., event warning messages, across the serial port. When the CCS is running on a LAN, multicast groups are utilized to transmit packets. By contrast, other sensor and warning systems use other languages, such as extensible markup language (XML) for the messages.

[0177] The present invention is applicable to numerous CCS's, such as space, airborne, terrestrial and marine-based system. For instance, multiple terrestrial-based systems can be utilized. For example, some CCS's utilize non-persistent transmission control protocol (TCP) connections to send messages. Thus, such CCS's create a client socket that connects to a server socket on the receiving system, i.e., the present system's network bridge, sends the XML message, and then disconnects. On the other hand, other CCS's create a client socket that connects to the server socket on the receiving system, i.e., the network bridge of the present invention, and then maintains that connection indefinitely. When a message needs to be transmitted, there is no delay in setting up a connection and, if the connection is lost, the CCS will immediately detect the lost connection and try to re-establish it.

[0178] The present invention permits message and source authentication, encryption, secure reconfiguration of user warning and positioning devices, and remote zero. Accordingly, the system, method and computer program product of the present invention utilize public key infrastructure (PKI) to mitigate security risks to the system itself. According to a preferred embodiment of the present invention, when an individual user warning and positioning device is initially configured, it is loaded with a plurality, e.g., four, separate encryption keys as follows:

[0179] 1) the device's own certificate;

[0180] 2) the device's own private key;

[0181] 3) the certificate of the network bridge serving as the root certificate authority; and

[0182] 4) the shared secret key for encrypting messages.

[0183] Further, keys are issued by the network bridges that are acting as the root certificate authority for all user warning and positioning devices in the network bridge area of operation. Certificates are signed by this root certificate authority (CA) to allow nodes (such as user warning and positioning devices) to authenticate one another. Moreover, certificate revocation is provided. Thus, the present invention permits both a user warning and positioning device, and its associated network bridge, to authenticate each other, and is particularly important whenever the user warning and positioning device's configuration is remotely modified. As a practical field operation protocol, the only key that should be changed over the air is the shared secret key, but only after the identity of the network bridge has been verified.

[0184] Moreover, transmission encryption is provided. Accordingly, the encryption key cannot be read out of the radio transceiver module (of the wireless communication means of the user warning and positioning device) by any means. The entire payload of the data packet is encrypted using the key, and the cyclic redundancy check (CRC) is computed across the ciphertext. A module with the wrong key (or no key) will still receive encrypted data, but this data will be unreadable and useless. Likewise, a module with a key will still receive unencrypted data sent from a module without a key, but the output will be similarly meaningless.

[0185] According to the present invention, certain types of event warning messages are authenticated upon receipt. Specifically, in these cases the user warning and positioning devices will verify the identity of a message sender when the received message instructs the user warning and positioning device to modify its configuration. Thus, authentication is performed according to the following steps:

[0186] Step 1: A network bridge sends a configuration message to a specific user warning and positioning device. This message contains a plurality of values, e.g., three, separated or parsed values as follows:

1) the parameter name, e.g., “retransmit”);

2) the desired value, e.g., “no”; and

3) the secure hash of the concatenated parameter name, equality sign, and value, e.g., retransmit=no. This secure hash is a hash, e.g., MD5, of the string encrypted using the bridge's private key.

[0187] Step 2: The recipient user warning and positioning device automatically looks in its cache for the sender's (the network bridge mentioned in Step 1) public key. If it doesn't find one, the user warning and positioning device automatically sends a request for this key to the sender. The sender subsequently sends a message with its public key, which has been encrypted using the root certificate authority's private key. The recipient that has the root CA's public key, decrypts the key it received and adds it to its cache.

[0188] Step 3: The recipient user warning and positioning device automatically computes the hash, e.g., MD5, of the received string, e.g., retransmit=no. The user warning and positioning device then automatically decrypts the received hash using the sender's public key and compares the received and the computed hash values. If they match, the recipient user warning and positioning device knows that the received configuration message is a legitimate authentic message.

[0189] According to the present invention, the event warning message reaches all network bridges, but only the affected user warning and positioning devices, thereby decreasing the data communications load in comparison to a distributed system in which all individual nodes, regardless of their location, receive the event warning message. In the event that a number of user warning and positioning devices are not in communication contact with a network bridge at a particular point in time, the system of the present invention optionally allows the user warning and positioning devices receiving event warning messages to selectively relay future event warning messages, including multiple occurrences.

[0190] The present invention permits retransmission of event warning messages, in appropriate instances, depending on the specified configuration of the user warning and positioning devices, e.g., when the event warning message contains an appropriate configuration file. Thus, a specific event warning message can be transmitted once or multiple times. In the case that the event warning message is to be communicated only once, e.g., to prevent redundancy of an event warning message that has already occurred, the system will ensure that it is configured not to allow retransmissions. The system checks, e.g., a local cache, to ensure that the event warning message has not already been relayed. Conversely, in the case of retransmission, the system checks to ensure that the threatened event has not occurred in the past.

[0191] The present invention is also particularly robust through its integration of verbal (as opposed to merely sound) warnings. In particular, specific event warning messages are transmitted to an affected user warning and positioning device, decoded therein to determine the future event, an appropriate spoken warning broadcast, and a corresponding audible spoken warning made to the user via the sensory notification means of the device, so that users may hear a human voice broadcast by the user warning and positioning device, instructing the user as to what subsequent actions to take in response to the impending event.

[0192] The system, method and computer program product of the present invention are also useful for training, simulation, and rehearsal, along with real-time use by organizations such as first responders, public safety, emergency management personnel with warning of harmful events, such as emergency response, homeland security, natural disaster incidents, etc. For example, the present invention may be utilized to support first responders in disaster areas by tracking their location and allowing a command post to send a danger signal (i.e., an event warning message) to the first responders if an unsafe condition is detected in a particular sector. In such case, as the network area is very limited, the danger signal would only affect the personnel in the danger area such as, perhaps, a building about to collapse.

[0193] In another example, the present invention may be utilized to support law enforcement officers by allowing a precinct to position the officers to best deter or respond to criminal activity. Further, the present invention may be utilized to provide remotely located individuals, such as skiers, hikers, etc., with warning of harmful events, such as sudden violent weather changes, avalanches, natural disasters, etc. Further, the present invention may be utilized to provide remotely located vehicles, such as watercraft, with advanced warning of impending harmful events in their locale, such as violent ocean conditions, water spouts, sea state changes, tidal waves, etc.

[0194] The present invention is applicable to commercial/non-military, as well as military, applications. Further, the possible events addressed by the system, method and computer program product of present invention range from day-to-day events, such as a street-side performance at a large amusement park, road closing due to construction, etc., to life threatening events, such as the imminent collapse of a building within a disaster area, the imminent detonation of a roadside bomb, etc. The human-computer interface implemented at the user warning and positioning device allows users to reconfigure the settings of the device to determine the content and amount of information that is relayed to user, and can be flexibly configured to address a multitude of events and threats.

[0195] Those skilled in the art will recognize that the system, method and computer program product of the present invention has many applications, and that the present invention is not limited to the representative examples disclosed herein. Although illustrative, the embodiments disclosed herein have a wide range of modification, change and substitution that is intended and in some instances some features of the present invention may be employed without a corresponding use of the other features.

[0196] Moreover, the scope of the present invention covers conventionally known variations and modifications to the system components described herein, as would be known by those skilled in the art. Accordingly, it is appropriate that the appended claims be construed broadly and in a manner consistent with the scope of the invention.