SYSTEMS AND METHODS OF OPERATING A SECURED FACILITY

• US 20120098638A1
• Filed: 12/31/2011
• Published: 04/26/2012
• Est. Priority Date: 06/18/2005
• Status: Abandoned Application

• Current Assignee: Crawford C.S. Lee
• Original Assignee: Crawford C.S. Lee
• Inventors: Crawford, C.S. Lee
• Application Number:
  US13/341,981
• Publication Number:
  US 20120098638A1
• Time in Patent Office: Days
• US Class Current: 340/5.6
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/22 in combination with an identity check of the pass holder
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

In one embodiment, a method of providing security operations in a secured facility in which access control operations are performed, wherein the secured facility includes a plurality of access control units physically distributed at different physical locations within the secured facility, comprises: performing access control decisions for the user of the at least one card according to the first data and the second data, wherein (i) the access control decisions determine whether a dynamic event variable set to a value determined by the second data satisfies a constraint defined by the first data or whether temporary tolerance data permits deviation from an applicable access control parameterized rule, and (ii) the access control decisions are performed in a de-centralized manner substantially where the access cards are presented to access control units without requiring access control logic being involved at a central access control system.

Claims

1. A method of performing access control in a secured facility, wherein the secured facility includes a plurality of access control units physically distributed at different physical locations within the secured facility, the method comprising:

providing access control cards to users who are granted access to respective portions of the secured facility;

defining dynamic, de-centralized access control policies that define conditions for access for the users through access control units in the secured facility, wherein at least some of the de-centralized access control policies are dynamic role-based policies for dynamic evaluation within the secured facility;

storing data on at least one of the access control cards that includes first data reflective of one or more of the dynamic access control policies, wherein (i) the first data includes a plurality of rules for managing access for the user of the at least one of the access cards, wherein at least two of the rules define access conditions for different portions of the secured facility, (ii) the at least two of the rules are parameterized for evaluation according to variables reflecting dynamic events within the secured facility, and (iii) the first data includes tolerance data for temporary deviation from the at least two of the rules;

generating second data reflective of dynamic events within the secured facility; and

performing access control decisions for the user of the at least one card according to the first data and the second data, wherein (i) the access control decisions determine whether a dynamic event variable set to a value determined by the second data satisfies a constraint defined by the first data or whether temporary tolerance data permits deviation from an applicable access control parameterized rule, and (ii) the access control decisions are performed in a de-centralized manner substantially where the access cards are presented to access control units without requiring access control logic being involved at a central access control system.

2. The method of claim 1 wherein the tolerance data defines a distance parameter for deviation from a defined area or path within the secured facility.

3. The method of claim 1 wherein dynamic access control policies include policies for access infrastructure assets.

4. The method of claim 1 wherein at least some of the at least dynamic access control policies are role based policies.

5. The method of claim 1 wherein the events are user-related events.

6. The method of claim 1 wherein at least some of the dynamic access control policies comprise plurality of event nodes and required transitions between the event nodes.

7. The method of claim 1 wherein at least some of the dynamic access control policies involve multiple event sequences for a respective user whereby the user is permitted to perform activities for a given event sequence at a given time.