SYSTEMS AND METHODS FOR LOCATION AWARE ACCESS CONTROL MANAGEMENT

• US 20110167488A1
• Filed: 01/06/2011
• Published: 07/07/2011
• Est. Priority Date: 01/07/2010
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Roy, Sanjay, Chappidi, Gopi, Reddy, Chandrakantha, Gali, Muneswar Rao, Bhandari, Neelendra
• Granted Patent: US 8,707,414 B2
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 4/02 Services making use of location information

Abstract

Described herein are systems and methods for access control management, these generally being directed towards location aware access control management. Embodiments of the invention have been particularly developed for providing additional functionalities in access control systems having disconnected devices, and the present disclosure is primarily focused accordingly. For example, embodiments include access control devices configured to operate in conjunction with a GPS receiver or other source of geographical positional information, and methods associated with the use of such devices.

Claims

1. An access control device for operation in an access control system including a central server, one or more disconnected access control devices, and one or more connected access control devices, the device including:

an interface for interacting with an access control token for the purposes of an access transaction;

a processor and associated memory configured for processing data received from the access control token in relation to the access transaction thereby to selectively allow or deny access; and

a receiver for determining geographical positional information for the access transaction.

2. A device according to claim 1 wherein, in the case that the device is configured for operation as a disconnected access control device, data indicative of access transactions is written to the access control token for subsequent propagation to the central server.

3. A device according to claim 1 wherein the interface is configured for writing to the access control token data indicative of geographical positional information associated with the access transaction.

4. A device according to claim 3 wherein the device is configures for operation is a disconnected access control device, and the data indicative of geographical positional information associated with the access transaction is propagated back to the central server by subsequent interaction between the access control token and a connected access control device of the access control system.

5. A device according to claim 3 wherein the data indicative of geographical positional information associated with an access transaction is propagated back to the central server for determining transportation information in respect of a holder of the token.

6. A device according to claim 1 including a wireless network interface that is selectively actuated responsive to geographical positional information determined by the receiver.

7. A device according to claim 1 including a wireless network interface for connecting to an access control network thereby to allow the device to function as a connected access control device, wherein the memory module maintains geographical positional information indicative of one or more connectivity zones, and wherein the device is configured to actuate the wireless network device when the receiver indicates that the device is within one or more of the connectivity zones.

8. A device according to claim 1 including a telecommunications interface, wherein the device is configured for providing a signal via the telecommunications interface responsive to an access transaction when predefined conditions are met by reference to geographical positional data.

9. A device according to claim 1 wherein the device is located on a vehicle.

10. A method for operating an access control device, wherein the access control device is part of an access control system including a central server, one or more disconnected access control devices, and one or more connected access control devices, the method including:

interacting with an access control token for the purposes of an access transaction;

processing data received from the access control token in relation to the access transaction thereby to selectively allow or deny access; and

determining, based on data derived by a receiver, geographical positional information for the access transaction.

11. A method according to claim 10 wherein, in the case that the device is configured for operation as a disconnected access control device, data indicative of access transactions is written to the access control token for subsequent propagation to the central server.

12. A method according to claim 10 including a step of writing to the access control token data indicative of geographical positional information associated with the access transaction.

13. A method according to claim 12 wherein the device is configures for operation is a disconnected access control device, and the data indicative of geographical positional information associated with the access transaction is propagated back to the central server by subsequent interaction between the access control token and a connected access control device of the access control system.

14. A method according to claim 12 wherein the data indicative of geographical positional information associated with an access transaction is propagated back to the central server for determining transportation information in respect of a holder of the token.

15. A method according to claim 10 including a step of selectively actuating a wireless network interface that responsive to geographical positional information determined by the receiver.

16. A method according to claim 10, wherein the device includes a wireless network interface for connecting to an access control network thereby to allow the device to function as a connected access control device, wherein the memory module maintains geographical positional information indicative of one or more connectivity zones, and wherein the method includes actuating the wireless network device when the receiver indicates that the device is within one or more of the connectivity zones.

17. A method according to claim 10 wherein the device includes a telecommunications interface, wherein the method includes providing a signal via the telecommunications interface responsive to an access transaction when predefined conditions are met by reference to geographical positional data.

18. A method according to claim 10 wherein the device is located on a vehicle.

19. An access control system including:

a central server;

one or more connected access control devices that are in communication with the central server via a network; and

one or more disconnected access control devices that are not in communication with the central server via the network, wherein the disconnected devices are configured to propagate information back to the central server by writing data to access control tokens presented by users;

wherein at least one disconnected access control device includes a receiver for determining geographical positional information and is configured for writing to an access control token data indicative of the geographical positional information associated with an access transaction.