Back to results
US 12,249,199 B2Granted
Method and apparatus for policy based access control
AssigneeAlertEnterprise, Inc.
InventorsYogesh Ailawadi, Vikas Chauhan
Life of this patent
Estimating the term…
Abstract
An authorization approach to physical access uses identity attributes, doors/readers attributes, time of the day, and policies to determine access rights to facilities and physical spaces in real-time, based on three criteria: who, when, and what. Embodiments address the constantly changing physical access needs of companies as those needs evolve.
Claims7
A physical access method, comprising:
- addressing constantly changing physical access needs of entities as said needs evolve using physical access authorization comprising all of identity attributes (WHO), time of the day attributes (WHEN), access point attributes (WHAT), and one or more policies, said physical access authorization:
- determining access rights to facilities and physical spaces in real-time each time access is requested by presenting a credential at a facility access point, based on evaluation of each of said WHO, WHEN, and WHAT attributes;
- wherein user identity is not tied or programmed to an access name in advance;
- wherein user identity is evaluated based on evaluation of each of said identity, time of day, and access point attributes and said one or more policies;
- wherein said one or more policies are defined for said user and particular access points that are evaluated in near real-time, each time the user presents the credential at the facility access point;
- and
- wherein said one or more policies comprise a combination of identity and/or user, access point attributes, and a time frame during which access is requested.
4 more elements
A method for physical access control, comprising:
- performing near real-time policy evaluation with a policy engine comprising policy-based access controls (PBAC) for physical access authorization comprising all of identity attributes (WHO), time of the day attributes (WHEN), access point attributes (WHAT), and one or more policies, and determining access rights to facilities and physical spaces in real-time each time access is requested based on evaluation of each of said WHO, WHEN, and WHAT attributes;
- said policy engine:
- receiving data relating to identity attributes and access point attributes from an identity store, and said one or more policies in near real-time;
- obtaining said data from an authorization service each time access is requested;
- addressing constantly changing physical access needs of entities as they evolve;
- using environmental factors and multi-factor authentication to determine said WHO, WHEN, and WHAT attributes when access is requested;
- processing said data against said one or more policies;
- using said processed data to override existing assigned access to a user;
- performing said processing of data and overriding of policy in real-time to grant or deny access to an individual;
- and
- performing said processing of data and overriding of said one or more policies in near real-time to challenge the user with multi-factor authentication (MFA).
8 more elements
Dependencies are inferred from the claim text.