System and Method for Providing Convergent Physical/Logical Location Aware Access Control

• US 20110162058A1
• Filed: 12/31/2009
• Published: 06/30/2011
• Est. Priority Date: 12/31/2009
• Status: Abandoned Application

• Current Assignee: Raytheon Company (Rtx Corporation)
• Original Assignee: Raytheon Company (Rtx Corporation)
• Inventors: Powell, William Shane, Biller, Samuel Jeffrey, Thompson, Averett Wade Nelson
• Application Number:
  US12/650,844
• Publication Number:
  US 20110162058A1
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS

Abstract

According to one embodiment, a system for enforcing physical access control and logical access control may include a physical access control system, a logical access control system, a location detection system, and a convergence system. The convergence system may be communicatively coupled to the physical access control system, the logical access control system, and the location detection system and configured to: (i) receive information from the physical access control system regarding a physical access credential; (ii) receive information from the logical access control system regarding a logical access credential; (iii) receive information from the location detection system regarding a location of a location detection tag; and (iv) based on analysis of information regarding the physical access credential, information regarding the logical access credential, and the information regarding the location of the location detection tag, determine the approximate location of a person.

Claims

1. A system for enforcing physical access control and logical access control, comprising:

a physical access control system configured to control access of a person to a physical location based on a physical access credential associated with the person;

a logical access control system configured to control access of the person to an information system and an enterprise service based on a logical access credential associated with the person;

a video surveillance system configured to capture motion pictures of the person; and

a convergence system communicatively coupled to the physical access control system, the logical access control system, and the video surveillance system and configured to;

receive information from the physical access control system regarding the physical access credential;

receive information from the logical access control system regarding the logical access credential;

receive information from the video surveillance system;

based on information received from the video surveillance system, determine one or more biometric characteristics for the person; and

based on analysis of information regarding the physical access credential, information regarding the logical access credential, and the one or more biometric characteristics, determine an approximate location of the person.

2. A system according to claim 1, wherein the convergence system is further configured to:

based on the determined approximate location of the person, determine if a rule is to be applied; and

enforce the rule in response to a determination is to be applied.

3. A system according to claim 1, further comprising a firewall interfaced between the physical access control system and the convergence system and configured to:

block unauthorized access between the physical access control system and the logical access control system; and

block unauthorized access between the physical access control system and the video surveillance system.

4. A system according to claim 1, further comprising a firewall interfaced between the logical access control system and the convergence system and configured to:

block unauthorized access between the physical access control system and the logical access control system; and

block unauthorized access between the logical access control system and the video surveillance system.

5. A system according to claim 1, further comprising a firewall interfaced between the video surveillance system and the convergence system and configured to:

block unauthorized access between the physical access control system and the video surveillance system; and

block unauthorized access between the logical access control system and the video surveillance system.

6. A system according to claim 1, wherein the physical access credential and logical access credential are substantially identical.

7. A system according to claim 1, wherein the physical access credential and logical access credential are stored on a form factor.

8. A system according to claim 7, wherein the form factor comprises one of a smart card, an active radio-frequency identification (RFID) tag, and a passive RFID tag.

9. A system according to claim 1, further comprising a location detection system communicatively coupled to the convergence system and configured to detect a location of a location detection tag associated with the person, and the convergence system further configured to:

receive information from the location detection system regarding the location of the location detection tag; and

based on analysis of information regarding the physical access credential, information regarding the logical access credential, the one or more biometric characteristics, and the information regarding the location of the location detection tag, determine the approximate location of the person.

10. A system for enforcing physical access control and logical access control, comprising:

a physical access control system configured to control access of a person to a physical location based on a physical access credential associated with the person;

a logical access control system configured to control access of the person to an information system and an enterprise service based on a logical access credential associated with the person;

a location detection system configured to detect a location of a location detection tag associated with the person; and

a convergence system communicatively coupled to the physical access control system, the logical access control system, and the location detection system and configured to;

receive information from the physical access control system regarding the physical access credential;

receive information from the logical access control system regarding the logical access credential;

receive information from the location detection system regarding the location of the location detection tag; and

based on analysis of information regarding the physical access credential, information regarding the logical access credential, and the information regarding the location of the location detection tag, determine the approximate location of the person.

11. A system according to claim 10, wherein the convergence system is further configured to:

based on the determined approximate location of the person, determine if a rule is to be applied; and

enforce the rule in response to a determination is to be applied.

12. A system according to claim 10, further comprising a firewall interfaced between the physical access control system and the convergence system and configured to:

block unauthorized access between the physical access control system and the logical access control system; and

block unauthorized access between the physical access control system and the location detection system.

13. A system according to claim 10, further comprising a firewall interfaced between the logical access control system and the convergence system and configured to:

block unauthorized access between the physical access control system and the logical access control system; and

block unauthorized access between the logical access control system and the location detection system.

14. A system according to claim 10, further comprising a firewall interfaced between the location detection system and the convergence system and configured to:

block unauthorized access between the physical access control system and the location detection system; and

block unauthorized access between the logical access control system and the location detection system.

15. A system according to claim 10, wherein the physical access credential and logical access credential are substantially identical.

16. A system according to claim 10, wherein the physical access credential and logical access credential are stored on a form factor comprising the location detection tag.

17. A system according to claim 16, wherein the form factor comprises one of a smart card, an active radio-frequency identification (RFID) tag, and a passive RFID tag.

18. A system for enforcing physical access control and logical access control, comprising:

a physical access control system configured to control access of a person to a physical location based on a physical access credential associated with the person;

a logical access control system configured to control access of the person to an information system and an enterprise service based on a logical access credential associated with the person;

a location detection system configured to detect a location of a location detection tag associated with an item of equipment;

a convergence system communicatively coupled to the physical access control system, the logical access control system, and the location detection system and configured to;

receive information from the location detection system regarding the location of the location detection tag; and

based on analysis of information regarding the location of the location detection tag, determine the approximate location of the item of equipment.

19. A system according to claim 18, wherein the convergence system is further configured to:

based on the determined approximate location of the item of equipment, determine if a rule is to be applied; and

enforce the rule in response to a determination is to be applied.

20. A system according to claim 18, wherein the location detection tag comprises one of a smart card, an active radio-frequency identification (RFID) tag, and a passive RFID tag.