Multi-factor authentication with geolocation and short-range communication with indoor-outdoor detection

An access control device for controlling user access to a protected area, comprising:

• at least one processor;
• and
• at least one memory coupled to the at least one processor, the at least one memory having instructions stored therein, which when executed by the at least one processor, direct the access control device to:
• detect at least one beacon signal of a plurality of beacon signals periodically transmitted by a user equipment (UE) via a short-range radio access technology (RAT);
• determine whether the UE is within the protected area or in an exterior area that is outside the protected area based on the at least one beacon signal;
• in response to determining that the UE is within the protected area, deny access to the protected area;
• and
• in response to determining that the UE is in the exterior area, perform an authentication procedure, the authentication procedure comprising instructions to direct the access control device to:
• send a query to a location server for a current location of the UE;
• receive an indication of the current location of the UE from the location server in response to sending the query;
• determine whether the UE is within a threshold distance of the access control device based on the indication of the current location of the UE;
• and
• generate an access signal in response to determining that the UE is within the threshold distance of the access control device based on the indication of the current location of the UE, wherein the access signal indicates that a user associated with the UE is authorized to access the protected area.

One or more non-transitory computer-readable media storing computer-executable instructions, which when executed by at least one processor of an access control device that is configured to control user access to a protected area, direct the access control device to:

• detect at least one beacon signal of a plurality of beacon signals periodically transmitted by a user equipment (UE) via a short-range radio access technology (RAT);
• determine whether the UE is within the protected area or in an exterior area that is outside the protected area based on the at least one beacon signal;
• in response to determining that the UE is within the protected area, deny access to the protected area;
• and
• in response to determining that the UE is in the exterior area, perform an authentication procedure, the authentication procedure comprising instructions to direct the access control device to:
• send a query to a location server for a current location of the UE;
• receive an indication of the current location of the UE from the location server in response to sending the query;
• determine whether the UE is within a threshold distance of the access control device based on the indication of the current location of the UE;
• and
• generate an access signal in response to determining that the UE is within the threshold distance of the access control device based on the indication of the current location of the UE, wherein the access signal indicates that a user associated with the UE is authorized to access the protected area.