Systems and methods for automatically adjusting user access permissions based on beacon proximity

A system for automatically adjusting user access permissions based on beacon proximity, the system comprising:

• a configuration module, stored in a memory of the system, that:
• configures, at an access-management server that controls access to a network resource, a security policy that specifies an access level at which devices may access the network resource when the devices are within range of a short-range wireless signal from a secure beacon that is associated with a specific physical location and incorporates at least one anti-spoofing mechanism;
• and
• creates a registry of multiple secure beacons in association with a specific security policy for each secure beacon in the registry, wherein:
• the registry contains an entry for the secure beacon;
• each additional secure beacon in the registry is located in a different physical location from other secure beacons in the registry;
• and
• each specific security policy in the registry establishes a policy that is appropriate to the physical location of the additional secure beacon that is associated with the specific security policy;
• an identification module, stored in the memory, that identifies a network-enabled device that is attempting to access the network resource that is protected by a security policy;
• a determination module, stored in the memory, that determines, at the access-management server, that the network-enabled device is located at the specific physical location based at least in part on receiving, from the network-enabled device, information demonstrating that the network-enabled device is within range of the short-range wireless signal from the secure beacon;
• an establishing module, stored in the memory, that establishes, at the access-management server and according to the security policy, the access level at which the network-enabled device is allowed to access the network resource based at least in part on determining that the network-enabled device is located at the specific physical location;
• and
• at least one physical processor configured to execute the configuration module, the identification module, the determination module, and the establishing module.

A non-transitory computer-readable medium comprising one or more computer-readable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

• configure, at an access-management server that controls access to a network resource, a security policy that specifies an access level at which devices may access the network resource when the devices are within range of a short-range wireless signal from a secure beacon that is associated with a specific physical location and incorporates at least one anti-spoofing mechanism;
• create a registry of multiple secure beacons in association with a specific security policy for each secure beacon in the registry, wherein:
• the registry contains an entry for the secure beacon;
• each additional secure beacon in the registry is located in a different physical location from other secure beacons in the registry;
• and
• each specific security policy in the registry establishes a policy that is appropriate to the physical location of the additional secure beacon that is associated with the specific security policy;
• identify a network-enabled device that is attempting to access the network resource that is controlled by the access-management server and protected by the security policy;
• determine, at the access-management server, that the network-enabled device is located at the specific physical location based at least in part on receiving, from the network-enabled device, information demonstrating that the network-enabled device is within range of the short-range wireless signal from the secure beacon;
• and
• establish, at the access-management server and according to the security policy, the access level at which the network-enabled device is allowed to access the network resource based at least in part on determining that the network-enabled device is located at the specific physical location.