MAPPING OF PHYSICAL AND LOGICAL COORDINATES OF USERS WITH THAT OF THE NETWORK ELEMENTS

• US 20090216587A1
• Filed: 06/20/2008
• Published: 08/27/2009
• Est. Priority Date: 06/20/2007
• Status: Abandoned Application

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Dwivedi, Saket, Arora, Vikram J., Angeri, Harsha R.
• Application Number:
  US12/142,887
• Publication Number:
  US 20090216587A1
• Time in Patent Office: Days
• US Class Current: 705/7
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06Q 10/0631 Resource planning, allocation, distributing or scheduling for enterprises or organisations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 4/02 Services making use of location information

Abstract

Physical coordinates of a user and an asset are determined. A probability that the user and the asset are close to one another is determined based on the physical coordinates of the user and the asset. Permission for the user to access to the asset is decided based on the probability. Additionally or alternatively, logical coordinates of a user and an asset are determined. The logical coordinates of the user and the asset are compared, and permission for the user to access to the asset is decided based on the comparison.

Claims

1. A method of providing security comprising:

determining a physical coordinate of a user;

determining a physical coordinate of an asset;

determining a probability that the user and the asset are close to one another based on the physical coordinates of the user and the asset; and

,

deciding whether to permit the user access to the asset based on the probability.

2. The method of claim 1 wherein the physical coordinate of the user comprises a location of the user, and wherein the physical coordinate of the asset comprises a location of the asset.

3. The method of claim 2 wherein the physical coordinate of the user comprises:

a facility identity of a facility in which the user is located;

a zone identity of a zone of the facility in which the user is located; and

,

a room identity of a room in the zone of the facility in which the user is located.

4. A method providing security comprising:

determining a logical coordinate of a user;

determining a logical coordinate of an asset;

comparing the logical coordinates of the user and the asset; and

,

deciding whether to permit the user access to the asset based on the comparison.

5. The method of claim 4 wherein the logical coordinate of the user comprises a credential defining an extent of a right of the user to use the asset, and wherein the logical coordinate of the asset comprises a unique identifier assigned to the asset.

6. The method of claim 5 wherein the credential of the user comprises a password assigned to the user.

7. The method of claim 4 further comprising:

determining a physical coordinate of the user;

determining a physical coordinate of the asset;

determining a probability that the user and the asset are close to one another based on the physical coordinates of the user and the asset; and

,

deciding whether to permit the user access to the asset based on the probability.

8. The method of claim 7 wherein the physical coordinate of the user comprises a location of the user, and wherein the physical coordinate of the asset comprises a location of the asset.

9. The method of claim 8 wherein the physical coordinate of the user comprises:

a facility identity of a facility in which the user is located;

a zone identity of a zone of the facility in which the user is located; and

,

a room identity of a room in the zone of the facility in which the user is located.

10. The method of claim 4 further comprising:

defining policies based on defined conditions;

mapping the physical and logical coordinates in a manner that enforce the policies; and

,

reporting violations of the policies based on the mapping.

11. The method of claim 4 further comprising comparing physical and logical coordinates of more than one user for the purpose of enforcing a policy.

12. The method of claim 4 further comprising:

mapping multiple user coordinates; and

,

providing a risk perspective of the organization based on the mapping.

13. A method of providing security comprising:

setting privileges of a user;

changing the privileges of the user;

adding/deleting new/existing users; and

,

attributing the changes in the privileges of the user and addition/deletion of users to person who made the changes.

14. A method of providing security comprising:

determining a physical coordinate of a user;

determining a physical coordinate of an asset;

determining a logical coordinate of a user;

determining a logical coordinate of an asset;

comparing the physical and logical coordinates of the user and the asset in various combinations; and

,

deciding whether to permit the user access to the asset based on the results of the comparison.

15. The method of claim 14 wherein the physical coordinate of the user comprises a location of the user, and wherein the physical coordinate of the asset comprises a location of the asset.

16. The method of claim 15 wherein the physical coordinate of the user comprises:

a facility identity of a facility in which the user is located;

a zone identity of a zone of the facility in which the user is located; and

,

a room identity of a room in the zone of the facility in which the user is located.

17. The method of claim 14 wherein the logical coordinate of the user comprises a credential defining an extent of a right of the user to use the asset, and wherein the logical coordinate of the asset comprises a unique identifier assigned to the asset.

18. The method of claim 17 wherein the credential of the user comprises a password assigned to the user.

19. The method of claim 14 further comprising:

defining policies based on defined conditions;

mapping the physical and logical coordinates in a manner that enforce the policies; and

,

reporting violations of the policies based on the mapping.

20. The method of claim 14 further comprising comparing physical and logical coordinates of more than one user for the purpose of enforcing a policy.

21. The method of claim 14 further comprising:

mapping multiple user coordinates; and

,

providing a risk perspective of the organization based on the mapping.