WO 01/60037 PCT/GBO1/00573 1 1 "Personal Safety System" 2 3 This invention relates to a system for monitoring 4 personal safety and computer hardware and software 5 therefor. The system is particularly useful for 6 monitoring the safety of persons employed in 7 positions where they must travel and visit premises, 8 remote from their organisation, such as health 9 professionals, service engineers, and estate agency 10 staff. 11 12 In accordance with a first aspect of the present 13 invention there is provided a personal safety system 14 comprising a central computer system being 15 connectable to a public communications network and 16 being provided with means for recording and 17 reproducing messages; the computer having means to 18 store data containing details of individual users, to 19 receive requests from such users defining the WO 01/60037 PCT/GBO1/00573 2 1 location and end time of an event, and, where an 2 update message is not received from the user before 3 the stated end time, to take action in accordance 4 with a prearranged plan. 5 6 Preferably, the public communications network is a 7 mobile telephone network. 8 9 Optionally, the public communications network is a 10 fixed line telephone network or an e-mail system or 11 the internet. 12 13 Preferably, an unique identification number is 14 associated with each user to allow identification of 15 the user to the central computer. 16 17 Optionally each user is automatically identified by 18 caller line identification of his personal mobile 19 phone, or using a digital signature. 20 21 Optionally wherein each user is automatically 22 identified by a digital signature. 23 24 Preferably, the information defining a visit is 25 transmitted and recorded as a combination of voice or 26 text and keystroke tone dial data. 27 28 Preferably, the action is to transmit a message to a 29 designated recipient. 30 31 Optionally, the transmission to the designated WO 01/60037 PCT/GBO1/00573 3 1 recipient is monitored by a third party. 2 3 Preferably, the message is transmitted by telephone 4 and includes relaying voice information recorded by 5 the user. 6 7 Preferably, the step of notifying a designated 8 recipient will be preceded by a step of contacting 9 the user and requesting a message confirming safety. 10 11 In accordance with a second aspect of the present 12 invention there is provided a computer being 13 connectable to a public communications network and 14 being provided with means for recording and 15 reproducing messages; the computer being arranged to 16 store data containing details of individual users, to 17 receive requests from such users defining the 18 location and end time of an event, and, in any case 19 where an update message is not received from the user 20 before the stated end time, to take action in 21 accordance with a prearranged plan. 22 23 In accordance with a third aspect of the present 24 invention there is provided a user interface 25 connectable to a public communications network, 26 having means for communicating with a central 27 computer, said user interface being adapted to send 28 data to the central computer defining the location 29 and end time of an event. 30 WO 01/60037 PCT/GBO1/00573 4 1 In accordance with a fourth aspect of the present 2 invention there is provided a computer program 3 comprising program instructions for operating a 4 personal safety system by performing the steps of: 5 storing information on each of at least one user 6 of the personal safety system; 7 communicating between a computer and a public 8 communications network; 9 recording messages on the computer, said messages 10 indicating the location and end time of an event; 11 logging updates of the messages indicating the 12 location and end time of an event to be updated; and 13 taking action in accordance with a pre-arranged 14 plan where an update message is not received. 15 16 Preferably, communication between the computer and 17 the public communications network comprises: 18 detecting a signal from the public communications 19 network; 20 interrogating said signal to identify that it is 21 from a registered user; and 22 verification of user ID. 23 24 Said action in accordance with a pre-arranged plan 25 preferably consists of contacting the user via the 26 public communications network, and if a response 27 confirming the safety of the user is not received, 28 contacting a designated recipient. 29 30 31 The computer program may further comprise allowing WO 01/60037 PCT/GBO1/00573 5 1 the contact between the designated recipient and the 2 user to be monitored by a third party; and allowing 3 remote access to said data storage means by an 4 authorised user. 5 6 The present invention further resides in said 7 computer program embodied on a record medium, stored 8 on a computer memory, embodied in a read-only memory, 9 or embodied on a electrical carrier signal. 10 11 In accordance with a fifth aspect of the present 12 invention there is provided a method for monitoring 13 the safety of dispersed personnel, the method 14 comprising storing details of individual users at a 15 central location; each individual transmitting when 16 necessary information defining the location and end 17 time of.a visit to said central location via a public 18 communications network; monitoring at said central 19 location receipt of update messages from each 20 individual having an outstanding visit; and, in the 21 event that no such update is received before the 22 relevant end time, taking action in accordance with a 23 prearranged plan. 24 25 An embodiment of the present invention will now be 26 described, by way of example only, with reference to 27 the drawings in which: 28 29 Fig. 1 is a schematic overview of one system in 30 accordance with the invention; and 31 WO 01/60037 PCT/GBO1/00573 6 1 Fig. 2 is a flow chart illustrating the 2 operation of the system of Fig. 1. 3 4 Referring to Fig. 1, one example of a system 5 incorporating the present invention is based upon a 6 central computer 10 which is provided with a 7 recording means 12 for recording and reproducing 8 messages, and with a message interface 14. 9 10 Each person using the system does so by means of a 11 communication device such.as a mobile phone 16 12 communicating with the interface 14 via the public 13 telephone network. The basic scheme of the system is 14 that a user makes use of his mobile phone 16 to 15 provide the central computer with details of premises 16 to be visited and the expected time of visit expiry. 17 The user subsequently by means of a separate call 18 cancels the record as the visit ends or changes the 19 visit expiry time. In the event that this does not 20 happen and the visit expiry time is passed, the 21 central computer 10 contacts a series of nominated 22 recipients relaying the visit details, and the fact 23 that the visit has expired. 24 25 The nominated recipient typically include the 26 employer of the person. In addition, third parties 27 such as the police or a Global Positioning System 28 service (GPS) can be nominated. Where a GPS is 29 nominated, the invention messages the QPS to obtain 30 information on the location of the user which can be 31 transmitted to the emergency services. The GPS can WO 01/60037 PCT/GBO1/00573 7 1 be messaged automatically via e-mail or fax. The 2 police or other emergency services can also be 3 informed automatically by e-mail or fax. 4 5 The present invention allows the police to be 6 '"patched" into a telephone call or other 7 communications between the user and the personal 8 safety system. Alternatively, the communications 9 between the user and the system can be broadcast over 10 multiple telephone lines or other communications 11 channels in cases where more than one emergency 12 service is involved or where multiple police response 13 teams require access to the communication. 14 15 In the embodiment shown, the contact between the 16 central computer 10 and the nominated recipients is 17 made by fixed line telephone or the internet. Where 18 the user has recorded details partly in voice form, 19 the contact may be by telephone with the voice 20 recording being replayed. The central computer is' 21 provided with voice recognition software for this 22 purpose. 23 24 A short range or a long range pager could be used to 25 communicate with the interface 14 in place of the 26 mobile phone 16. 27 28. The operation will now be described in more detail 29 with reference also to Fig. 2. 30 WO 01/60037 PCT/GBO1/00573 8 1 To subscribe to the service, a client organisation 2 establishes a client account with the operator which 3 defines the number of users, recipient contact, 4 details, and logic to handle expired visits. 5 6 Thereafter, each individual user becomes registered 7 with the service by using their personal telephone 8 and dialling into the service. The central computer 9 10 by using caller line identity or digital signature 10 or by detecting the unique user identification number 11 supplied to each user, establishes whether or not 12 this is an already registered user. New users will 13 be given the opportunity to enter a registration 14 routine. The user will then use a combination of key 15 presses and voice to enter data requested by the 16 system. 17 18 This could include: 19 20 a) Verification of the client account, achieved by 21 the user entering a unique client account number. 22 b) The individual user's name, given verbally or as 23 text. 24 c) The individual user's telephone number or 25 identification, captured automatically by caller 26 line identity or digital signature. 27 d) A security PIN number entered by key press. 28 e) Detection of the unique user identification number 29 supplied to each user. 30 WO 01/60037 PCT/GBO1/00573 9 1 When the registration has been completed, the central 2 computer 10 registers the user with the user data 3 stored in a database. The next time the user 4 connects, the central computer will recognise them as 5 a registered user. 6 7 In normal operation the individual user calls the 8 system to record visit details. A user can use the 9 system as little or as often as wished. 10 11 When a registered user dials in, again using the 12 personal phone, the system will recognise them as a 13 registered user from caller line identity and their 14 script is executed to collect data. The data in a 15 currently preferred form comprises (1) verification 16 of user by PIN number and calling line identity or 17 digital signature, the PIN number being input by key 18 stroke (2) details of the visit location given 19 verbally and recorded as voice, and (3) a visit 20 expiry time, entered by key press. These details are 21 recorded in the database. 22 23 Subsequently, the user has the options of calling in 24 to cancel the visit as it comes to an end or to 25 change the visit expiry time. To achieve either of 26 these, the user dials into the service, the computer 27 10 recognises that the user is currently at a visit 28 and runs an appropriate script. The system will 29 request that the user either cancels, extends or 30 records new visit details. Cancellation and WO 01/60037 PCT/GB01/00573 10 1 extension may be entered by key press, and new visit 2 details by a combination of key press and voice. 3 4 The system searches at defined intervals (for 5 example, each minute) for current visit records where 6 the time has expired. If an expiry time passes, the 7 system proceeds in accordance with details detailed 8 within a script for the particular client. 9 Typically, the central computer 10 contacts the user 10 and verifies their safety through a series of prompts 11 and responses. The PIN number can be used to verify 12 the user identity. There is an option to incorporate 13 an emergency-use PIN number which will activate an 14 emergency response, to be used for example if the 15 user is being held against their will or feels unable 16 to speak clearly. Once verified, the user can amend 17 or cancel the details of the visit. If for any 18 reason an inadequate response is received (for 19 example an incorrect PIN or no answer), the computer 20 will proceed as described in the user script. As one 21 example, the computer will contact a designated 22 person and relay details of the user and of the visit 23 location, and request an acknowledgement. If no 24 acknowledgement is received, the computer will repeat 25 the process with a second designated person. In 26 addition, in each case a fax will be sent to the 27 user's employer. Where user information has been 28 recorded by telephone as a mixture of voice and 29 keypad data, the message to the designated person(s) 30 can be by telephone and incorporate recorded user WO 01/60037 PCT/GBO1/00573 11 1 voice and synthesised voice for data entered by key 2 press. 3 4 The system will continue to issue an alert until 5 there is a satisfactory acknowledgement by the 6 recipient. Alerts can also be issued by fax, email 7 and other electronic means. 8 9 Should the user be unable to use their normal 10 communication device, they can use a third party 11 device such as a telephone to communicate with the 12 service. The system will recognise that this is an 13 unregistered device, but can accept a combination of 14 account code and PIN number to allow communication 15 from any unregistered device, such as the fixed line 16 phone indicated at 20 in Fig. 1. 17 18 It will be readily understood that the central 19 computer 10 may be any suitable general purpose 20 computer system and, given the foregoing description 21 of the operation and requirements of the system, 22 suitable programmes can readily be generated by those 23 skilled in the art, by way of example the system may 24 use a number of Pentium 111 servers running Microsoft 25 Windows NT Server 4.0 as the operating system. The 26 servers are fitted with conventional communication 27 interfaces capable of effecting communication with 28 remote devices. The database can be operated in any 29 conventional database program, such as Microsoft 30 Access or Microsoft SQL 7.0. The software specific WO 01/60037 PCT/GBO1/00573 12 1 to the system may be for example in Visual Basic 6.0 2 and Visual VoicePro 5. 3 4 The present invention can be deployed on third party 5 telephone software/hardware platforms such as 6 Periphonics or Aculab and is therefore platform 7 independent. 8 9 The present invention is also provided with an 10 internet based administration module which allows 11 user account managers to log on remotely, access 12 their account information and carry out changes to 13 their account such as changing user information or 14 request account reports. 15 16 Modifications may be made to the foregoing example 17 within the scope of the present invention. For 18 example, the inputting of data by users by key stroke 19 may be reduced or eliminated by use of voice 20 recognition techniques. Communication may be by 21 means other than voice telephone, such as short text 22 message via mobile phone, or by e-mail.