Architecture for access management
AssigneeTyco Integrated Security, LLC
InventorsRichard Campero, Sean Davis, Graeme Jarvis, Terezinha Rumble
Life of this patent
Estimating the term…
Abstract
Disclosed are techniques that use devices with corresponding identity wallet applications that execute on an electronic processor device of the devices, and which identity wallets store identity information and encrypt the stored identity information. A distributed ledger system, and a broker system that interfaces to the wallet and the distributed ledger are used for various information exchange cases pertaining to access to facilities.
Claims20
A system, comprising:
- a portable device that includes an embedded electronic credential that is associated with a user;
- and
- a card reader system of a building facility including a processor and memory, the card reader system configured to execute a security application that configures the card reader system to:
- receive the credential from the portable device;
- determine, based on the credential, that the user is authorized to access the building facility or that the user is denied access to the building facility;
- generate a message according to a result of the determination, wherein the message comprises an indication that the user is provided access to the building facility or that the user is denied access to the building facility;
- and
- send the message to a distributed ledger, wherein the distributed ledger records the result, wherein the distributed ledger stores an access log that indicates that each of a plurality of users are provided access to the building facility or are denied access to the building facility for a plurality of access requests, wherein the distributed ledger comprises a plurality of systems each storing the access log.
A method, comprising:
- receiving by a card reader system including a processor and memory, an electronic credential associated with a user, the electronic credential received from a portable device that has the electronic credential embedded in the portable device;
- and
- configuring the card reader system to execute a security application that configures the card reader system to:
- determine by the card reader system based on the credential, that the user is authorized to access a building facility or that the user is denied access to the building facility;
- generate by the card reader system a message according to a result of the determination, wherein the message comprises an indication that the user is provided access to the building facility or that the user is denied access to the building facility;
- and
- send by the card reader system the message to a distributed ledger to cause the distributed ledger to record the result, wherein the distributed ledger stores an access log that indicates that each of a plurality of users are provided access to the building facility or are denied access to the building facility for a plurality of access requests, wherein the distributed ledger comprises a plurality of systems each storing the access log.
A non-transitory storage medium of an access control system of a building facility configured to store instructions, the instructions, when executed by one or more processors of the access control system, causing the one or more processors to:
- receive an electronic credential associated with a user, the electronic credential received from a portable device that has the electronic credential embedded in the portable device;
- determine based on the credential, that the user is authorized to access the building facility or that the user is denied access to the building facility;
- generate a message according to a result of the determination, wherein the message comprises an indication that the user is provided access to the building facility or that the user is denied access to the building facility;
- and
- sending the message to a distributed ledger, wherein the distributed ledger records the result, wherein the distributed ledger stores an access log that indicates that each of a plurality of users are provided access to the building facility or are denied access to the building facility for a plurality of access requests, wherein the distributed ledger comprises a plurality of systems each storing the access log.
Dependencies are inferred from the claim text.