Access authorization based on physical location

Patent metadata

Field	Value
Publication number	US-2016284141-A1
Application number	US-201514670793-A
Country	US
Kind code	A1
Filing date	Mar 27, 2015
Priority date	Mar 27, 2015
Publication date	Sep 29, 2016
Grant date	—

Abstract

An approach for access authorization to a protected resource is provided. The approach provisions a physical access badge identifier to a door controller. The approach receives a swipe event, wherein the swipe event includes a door controller identifier and the physical access badge identifier. The approach creates an authorization request to access a protected resource, wherein the authorization request includes a request from a user for access to a protected resource. The approach identifies one or more security policies for the protected resource. The approach determines whether to permit access to the protected resource based, at least in part, on the one or more security policies and the swipe event. Responsive to a determination to permit access to the protected resource, the approach permits access to the protected resource, wherein permitting access to the protected resource includes validating an authentication session for a user.

First claim

What is claimed is:

1 . A method for access authorization to a protected resource, the method comprising:
provisioning, by one or more computer processors, a physical access badge identifier to a door controller; receiving, by one or more computer processors, a swipe event, wherein the swipe event includes a door controller identifier and the physical access badge identifier; creating, by one or more computer processors, an authorization request to access a protected resource, wherein the authorization request includes a request from a user for access to a protected resource; identifying, by one or more computer processors, one or more security policies for the protected resource; determining, by one or more computer processors, whether to permit access to the protected resource based, at least in part, on the one or more security policies and the swipe event; and responsive to a determination to permit access to the protected resource, permitting, by one or more computer processors, access to the protected resource, wherein permitting access to the protected resource includes validating an authentication session for a user.

2 . The method of claim 1 , wherein provisioning a physical access badge identifier to a door controller, further comprises:
creating, by one or more computer processors, one or more user accounts, wherein the one or more user accounts includes at least an employee ID, an authorization level, and a user access password; retrieving, by one or more computer processors, user information from the one or more user accounts associated with a user; associating, by one or more computer processors, the physical access badge identifier with user information from the one or more user accounts associated with the user; and storing, by one or more computer processors, the one or more user accounts associated with the user in a database.

3 . The method of claim 1 , wherein receiving a swipe event, further comprises:
sending, by one or more computer processors, the swipe event to a physical access control system; and storing, by one or more computer processors, the door controller identifier and the physical access badge identifier in a database.

4 . The method of claim 1 , wherein creating an authorization request to access a protected resource, further comprises:
receiving, by one or more computer processors, a user authentication, wherein the user authentication includes a user password from the one or more user accounts associated with a user; and receiving, by one or more computer processors, a user access request for the protected resource, wherein the user access request includes at least a resource identifier, a user name, and a user password.

5 . The method of claim 1 , wherein identifying one or more security policies for the protected resource, further comprises:
retrieving, by one or more computer processors, a physical access badge identifier for a user from a database; retrieving, by one or more computer processors, a swipe event associated with the physical access badge identifier for the user from a database, wherein the swipe event identifies a physical location for a most recent swipe event associated with the physical access badge identifier; and identifying, by one or more computer processors, the one or more security policies for the protected resource associated with the physical access badge identifier of the user and the swipe event.

6 . The method of claim 1 , wherein determining whether to permit access to the protected resource based, at least in part, on the one or more security policies and the swipe event, further comprises:
evaluating, by one or more computer processors, the one or more identified security policies, wherein evaluating includes associating the one or more identified security policies with at least a physical access badge identifier, a user identifier, and a level of security clearance associated with the user identifier; and determining, by one or more computer processors, to permit access to the protected resource where the level of security clearance associated with the user identifier and a physical location of the user conforms with the one or more identified security policies.

7 . The method of claim 1 further comprises:
responsive to a determination to not permit access to the protected resource, denying, by one or more computer processors, access to the protected resource, wherein denying access to the protected resource includes invalidating an authentication session for a user.

8 . A computer program product for access authorization to a protected resource, the computer program product comprising:
one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions comprising: program instructions to provision, by one or more computer processors, a physical access badge identifier to a door controller; program instructions to receive, by one or more computer processors, a swipe event, wherein the swipe event includes a door controller identifier and the physical access badge identifier; program instructions to create, by one or more computer processors, an authorization request to access a protected resource, wherein the authorization request includes a request from a user for access to a protected resource; program instructions to identify, by one or more computer processors, one or more security policies for the protected resource; program instructions to determine, by one or more computer processors, whether to permit access to the protected resource based, at least in part, on the one or more security policies and the swipe event; and responsive to a determination to permit access to the protected resource, program instructions to permit, by one or more computer processors, access to the protected resource, wherein permitting access to the protected resource includes validating an authentication session for a user.

9 . The computer program product of claim 8 , wherein program instructions to provision a physical access badge identifier to a door controller, further comprises:
program instructions to create, by one or more computer processors, one or more user accounts, wherein the one or more user accounts includes at least an employee ID, an authorization level, and a user access password; program instructions to retrieve, by one or more computer processors, user information from the one or more user accounts associated with a user; program instructions to associate, by one or more computer processors, the physical access badge identifier with user information from the one or more user accounts associated with the user; and program instructions to store, by one or more computer processors, the one or more user accounts associated with the user in a database.

10 . The computer program product of claim 8 , wherein program instructions to receive a swipe event, further comprises:
program instructions to send, by one or more computer processors, the swipe event to a physical access control system; and program instructions to store, by one or more computer processors, the door controller identifier and the physical access badge identifier in a database.

11 . The computer program product of claim 8 , wherein program instructions to create an authorization request to access a protected resource, further comprises:
program instructions to receive, by one or more computer processors, a user authentication, wherein the user authentication includes a user password from the one or more user accounts associated with a user; and program instructions to receive, by one or more computer processors

Assignees

• IBM

Inventors

• Moore David P
• Pearson Craig

Classifications

• G06F16/22

  Indexing; Data structures therefor; Storage structures · CPC title

• G07C9/22 Primary

  in combination with an identity check of the pass holder · CPC title

• G07C9/00031 Primary

  Physics · mapped topic

• G06F17/30312

  Physics · mapped topic

• G07C9/27 Primary

  with central registration · CPC title