Work plan based control of physical and virtual access
AssigneeInternational Business Machines Corporation
InventorsDavid L. Kaminsky, Lori M. Pilgrim, Govindaraj Sampathkumar
Life of this patent
Estimating the term…
Abstract
A method, system, and computer program product for work plan based access control are provided in the illustrative embodiments. For a portion of the work plan, a physical space is determined. Access to the physical space is used in a task in the portion. At least one workflow is initiated to determine whether to grant the access to the physical space. Responsive to the workflow granting the access to the physical space, the access to the physical space is configured for a first duration for a first user performing the task. Responsive to an indication of closing of the portion, the access to the physical space for the first duration for the first user performing the task is revoked.
Claims18
A method for work plan based access control, the method comprising:
- determining, at an application executing using a processor and a memory, for a portion of the work plan, a physical space, wherein access to the physical space is used in a task in the portion;
- initiating at least one workflow, the at least one workflow operating to determine whether to grant the access to the physical space;
- configuring, responsive to the workflow granting the access to the physical space, the access to the physical space and a first plurality of virtual resources for a first duration for a first user performing the task;
- revoking, responsive to an indication of closing of the portion, the access to the physical space for the first duration for the first user performing the task;
- initiating, corresponding to a second portion of the work plan, a second workflow, the second workflow operating to determine whether to grant access to a second physical space for a second duration, the second physical space comprising a route between the first physical space and a third physical space;
- configuring, responsive to the second workflow granting access to the second physical space, access to the second physical space for a second duration for the first user performing the task, the configuring maintaining access to a virtual resource in the first plurality of virtual resources, the virtual resource included in a second plurality of virtual resources;
- revoking, responsive to an indication of exiting the second physical space, the access to the second physical space for the second duration for the first user performing the task;
- and
- configuring, responsive to the second workflow granting access to the third physical space, access to the third physical space and the second plurality of virtual resources for a third duration for the first user performing the task.
A computer usable program product comprising a computer readable storage medium including computer usable code for work plan based access control, the computer usable code when executed by a processor causing operations comprising:
- determining, at an application executing using a processor and a memory, for a portion of the work plan, a physical space, wherein access to the physical space is used in a task in the portion;
- initiating at least one workflow, the at least one workflow operating to determine whether to grant the access to the physical space;
- configuring, responsive to the workflow granting the access to the physical space, the access to the physical space and a first plurality of virtual resources for a first duration for a first user performing the task;
- revoking, responsive to an indication of closing of the portion, the access to the physical space for the first duration for the first user performing the task;
- initiating, corresponding to a second portion of the work plan, a second workflow, the second workflow operating to determine whether to grant access to a second physical space for a second duration, the second physical space comprising a route between the first physical space and a third physical space;
- configuring, responsive to the second workflow granting access to the second physical space, access to the second physical space for a second duration for the first user performing the task, the configuring maintaining access to a virtual resource in the first plurality of virtual resources, the virtual resource included in a second plurality of virtual resources;
- revoking, responsive to an indication of exiting the second physical space, the access to the second physical space for the second duration for the first user performing the task;
- and
- configuring, responsive to the second workflow granting access to the third physical space, access to the third physical space and the second plurality of virtual resources for a third duration for the first user performing the task.
A data processing system for work plan based access control, the data processing system comprising:
- a storage device including a storage medium, wherein the storage device stores computer usable program code;
- and
- a processor, wherein the processor executes the computer usable program code causing operations comprising:
- determining, at an application executing using a processor and a memory, for a portion of the work plan, a physical space, wherein access to the physical space is used in a task in the portion;
- initiating at least one workflow, the at least one workflow operating to determine whether to grant the access to the physical space;
- configuring, responsive to the workflow granting the access to the physical space, the access to the physical space and a first plurality of virtual resources for a first duration for a first user performing the task;
- revoking, responsive to an indication of closing of the portion, the access to the physical space for the first duration for the first user performing the task;
- initiating, corresponding to a second portion of the work plan, a second workflow, the second workflow operating to determine whether to grant access to a second physical space for a second duration, the second physical space comprising a route between the first physical space and a third physical space;
- configuring, responsive to the second workflow granting access to the second physical space, access to the second physical space for a second duration for the first user performing the task, the configuring maintaining access to a virtual resource in the first plurality of virtual resources, the virtual resource included in a second plurality of virtual resources;
- revoking, responsive to an indication of exiting the second physical space, the access to the second physical space for the second duration for the first user performing the task;
- and
- configuring, responsive to the second workflow granting access to the third physical space, access to the third physical space and the second plurality of virtual resources for a third duration for the first user performing the task.
Dependencies are inferred from the claim text.