Work plan based control of physical and virtual access

• US 10,102,489 B2
• Filed: 08/12/2014
• Issued: 10/16/2018
• Est. Priority Date: 08/12/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kaminsky, David L., Pilgrim, Lori M., Sampathkumar, Govindaraj
• Primary Examiner(s): Sterrett, Jonathan G
• Application Number:
  US14/457,296
• Publication Number:
  US 20160048787A1
• Time in Patent Office: 1,526 Days
• CPC Class Codes: G06Q 10/06314 Calendaring for a resource
• CPC Class Codes: G06Q 10/1093 Calendar-based scheduling for persons or groups

Abstract

A method, system, and computer program product for work plan based access control are provided in the illustrative embodiments. For a portion of the work plan, a physical space is determined. Access to the physical space is used in a task in the portion. At least one workflow is initiated to determine whether to grant the access to the physical space. Responsive to the workflow granting the access to the physical space, the access to the physical space is configured for a first duration for a first user performing the task. Responsive to an indication of closing of the portion, the access to the physical space for the first duration for the first user performing the task is revoked.

Claims

1. A method for work plan based access control, the method comprising:

determining, at an application executing using a processor and a memory, for a portion of the work plan, a first physical space, wherein access to the first physical space is used in a task in the portion;

forming, at the application executing using the processor and the memory, for the portion of the work plan, a first logical grouping using the first physical space and a first plurality of virtual resources related to the first physical space, wherein the first plurality of virtual resources is used in the task in the portion;

initiating at least one workflow, the at least one workflow operating to determine whether to grant the access to the first logical grouping;

configuring, responsive to determining that an access permission is needed to the first physical space, a mobile device of a first user, wherein the mobile device is going to be present in the first physical space with the access permission to the first physical space for a first duration for the first user performing the task;

further configuring the mobile device such that the mobile device is recognized to provide access to the first plurality of virtual resources for the first duration for the first user performing the task;

triggering a second workflow, responsive to determining that the portion requires longer than the first duration, to modify the access permission on the mobile device; and

progressively changing the access permission on the mobile device, comprising;

revoking, responsive to an indication of closing of the portion, the access to the first logical grouping for the first duration for the first user performing the task;

determining, responsive to the closing of the portion, for a second portion of the work plan, a second logical grouping of a second physical space and a second plurality of virtual resources related to the second physical space, wherein the second physical space and the second plurality of virtual resources are used in a second task in the second portion, and wherein access to at least one of the first plurality of virtual resources is maintained during the revoking and included in the second plurality of virtual resources; and

configuring, responsive to granting access to the second physical space, the access permission on the mobile device of the first user to access the second logical grouping for a second duration of the second task.

2. The method of claim 1, wherein the at least one workflow further operates to determine whether to grant the access to the virtual resource.

3. The method of claim 1, wherein the virtual resource is a part of a Building Information Model (BIM), wherein the BIM models a component of the physical space.

4. The method of claim 1, further comprising:

determining, after revoking the access to the first physical space for the first duration, that the first user uses the first physical space in performing the second task for a second portion of the work plan;

initiating a third workflow, the third workflow operating to determine whether to grant access to the first physical space, wherein the third workflow is shorter as compared to the at least one workflow in determining whether to grant access to the first physical space.

5. The method of claim 1, further comprising:

initiating a third workflow, the third workflow operating to determine whether to grant access to the second physical space, wherein a route to the first physical space comprises the second physical space;

configuring, responsive to the second workflow granting access to the second physical space, access to the second physical space but preventing access to the second virtual resource related to the second physical space for the first duration for the first user performing the task.

6. The method of claim 1, further comprising:

determining for the portion of the work plan, that for the first duration for the first user performing the task has to be changed by an amount;

initiating a third workflow, the third workflow operating to determine whether to change the first duration access to the first physical space by the amount; and

changing the first duration by the amount, responsive to the third workflow authorizing the change.

7. A non-transitory computer usable program product comprising a computer readable storage device including computer usable code for work plan based access control, the computer usable code comprising:

computer usable code for determining, at an application executing using a processor and a memory, for a portion of the work plan, a first physical space, wherein access to the first physical space is used in a task in the portion;

computer usable code for forming, at the application executing using the processor and the memory, for the portion of the work plan, a first logical grouping using the first physical space and a first plurality of virtual resources related to the first physical space, wherein the first plurality of virtual resources is used in the task in the portion;

computer usable code for initiating at least one workflow, the at least one workflow operating to determine whether to grant the access to the first logical grouping;

computer usable code for configuring, responsive to determining that an access permission is needed to the first physical space, a mobile device of a first user, wherein the mobile device is going to be present in the first physical space with the access permission to the first physical space for a first duration for the first user performing the task;

computer usable code for further configuring the mobile device such that the mobile device is recognized to provide access to the first plurality of virtual resources for the first duration for the first user performing the task;

computer usable code for triggering a second workflow, responsive to determining that the portion is required longer than the first duration, to modify the access permission on the mobile device; and

computer usable code for progressively changing the access permission on the mobile device, comprising;

computer usable code for revoking, responsive to an indication of closing of the portion, the access to the first logical grouping for the first duration for the first user performing the task;

computer usable code for determining, responsive to the closing of the portion, for a second portion of the work plan, a second logical grouping of a second physical space and a second plurality of virtual resources related to the second physical space, wherein the second physical space and the second plurality of virtual resources are used in a second task in the second portion, and wherein access to at least one of the first plurality of virtual resources is maintained during the revoking and included in the second plurality of virtual resources; and

computer usable code for configuring, responsive to granting access to the second physical space, the access permission on the mobile device of the first user to access the second logical grouping for a second duration of the second task.

8. The non-transitory computer usable program product of claim 7, wherein the at least one workflow further operates to determine whether to grant the access to the virtual resource.

9. The non-transitory computer usable program product of claim 7, wherein the virtual resource is a part of a Building Information Model (BIM), wherein the BIM models a component of the physical space.

10. The non-transitory computer usable program product of claim 7, wherein the computer usable code is stored in a computer readable storage medium in a data processing system, and wherein the computer usable code is transferred over a network from a remote data processing system.

11. The non-transitory computer usable program product of claim 7, wherein the computer usable code is stored in a computer readable storage medium in a server data processing system, and wherein the computer usable code is downloaded over a network to a remote data processing system for use in a computer readable storage medium associated with the remote data processing system.

12. A data processing system for work plan based access control, the data processing system comprising:

a storage device including a storage medium, wherein the storage device stores computer usable program code; and

a processor, wherein the processor executes the computer usable program code, and wherein the computer usable program code comprises;

computer usable code for determining, at an application executing using a processor and a memory, for a portion of the work plan, a first physical space, wherein access to the first physical space is used in a task in the portion;

computer usable code for forming, at the application executing using the processor and the memory, for the portion of the work plan, a first logical grouping using the first physical space and a first plurality of virtual resources related to the first physical space, wherein the first plurality of virtual resources is used in the task in the portion;

computer usable code for initiating at least one workflow, the at least one workflow operating to determine whether to grant the access to the first logical grouping;

computer usable code for configuring, responsive to determining that an access permission is needed to the first physical space, a mobile device of a first user, wherein the mobile device is going to be present in the first physical space with the access permission to the first physical space for a first duration for the first user performing the task;

computer usable code for further configuring the mobile device such that the mobile device is recognized to provide access to the first plurality of virtual resources for the first duration for the first user performing the task;

computer usable code for triggering a second workflow, responsive to determining that the portion is required longer than the first duration, to modify the access permission on the mobile device; and

computer usable code for progressively changing the access permission on the mobile device, comprising;

computer usable code for revoking, responsive to an indication of closing of the portion, the access to the first logical grouping for the first duration for the first user performing the task;

computer usable code for determining, responsive to the closing of the portion, for a second portion of the work plan, a second logical grouping of a second physical space and a second plurality of virtual resources related to the second physical space, wherein the second physical space and the second plurality of virtual resources are used in a second task in the second portion, and wherein access to at least one of the first plurality of virtual resources is maintained during the revoking and included in the second plurality of virtual resources; and

computer usable code for configuring, responsive to granting access to the second physical space, the access permission on the mobile device of the first user to access the second logical grouping for a second duration of the second task.