Building access control system with complex event processing

A system for controlling access to at least a portion of a building, the system comprising:

• one or more processors;
• and
• one or more computer-readable storage media having instructions stored thereon that, when executed by the one or more processors, cause the one or more processors to implement operations comprising:
• providing a temporal model identifying relationships between a first set of access control events based on times at which the first set of access control events occurred;
• providing a spatial model identifying relationships between a second set of access control events based on locations associated with the second set of access control events;
• providing a user model identifying patterns of user behavior based on a third set of access control events;
• receiving a fourth set of access control events comprising time data, and location data, and user data associated with the access control events;
• and
• determining whether to generate alarms responsive to receiving the fourth set of access control events using the temporal model, the spatial model, and the user model.