MANAGEMENT OF ACCESS RIGHTS

• US 20120278901A1
• Filed: 03/28/2012
• Published: 11/01/2012
• Est. Priority Date: 03/29/2011
• Status: Active Grant

• Current Assignee: Inventio AG (Schindler Holding AG)
• Original Assignee: Inventio AG (Schindler Holding AG)
• Inventors: Bünter, Adrian
• Granted Patent: US 8,689,353 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/38 with central registration

Abstract

A system for management of access rights to operating data and/or control data of buildings or building complexes can include a communications release service running on a first server. This release service releases a communication of a user, who is registered with an identity, with the buildings or building complexes filed for him or her in a list when his or her identity corresponds with an identity filed in the list. Also, after release of the communication has taken place by the communications release service, a building authorization service running on a second server releases specific access rights for the user to operating data and/or control data of the building or building complex on the basis of access rights filed in an authorization databank.

Claims

1. An access rights management system for data of one or more buildings, the system comprising:

a first server, the first server being for a building authorization service, the first server comprising an authorization databank for storing respective user-specific access rights of users to the one or more buildings; and

a second server, the second server being for a communications release service, the second server comprising an authentication databank, the authentication databank storing a list of the users and of which of the one or more buildings the users have the respective user-specific access rights for,

the second server being programmed to allow a selected user to communicate with the one or more buildings according to the list stored in the authentication databank, and the first server being programmed to grant one or more of the user-specific access rights for the selected user according to the user-specific access rights stored in the authorization databank.

2. The system of claim 1, further comprising a third server, the third server being for an additional building authorization service for a further building.

3. The system of claim 1, the second server further comprising a data interface, the second server being further programmed to receive identification information for the selected user through the data interface.

4. The system of claim 1, the second server further comprising a user interface, the second server being further programmed to register the selected user through the user interface.

5. The system of claim 4, the user interface being configured to receive information for a user background of the selected user.

6. The system of claim 4, the user interface being configured to receive a selection of a user-specific role for the selected user.

7. The system of claim 1, the data of the one or more buildings comprising operating data.

8. The system of claim 1, the data of the one or more buildings comprising control data.

9. An access rights management method for data of one or more buildings, the method comprising:

receiving, using a first server, a request to allow a user to communicate with a second server, the second server being programmed to provide access to the data of the one or more buildings, the second server storing a description of user-specific access rights to the one or more buildings for the user;

determining, using the first server and based on a list of users having access rights for the one or more buildings, that the user has access rights for the one or more buildings; and

as a result of the determining and using the first server, allowing the user to communicate with the second server.

10. The method of claim 9, the description of user-specific access rights comprising a role for the user.

11. The method of claim 9, the description of user-specific access rights comprising a scope of the access rights for the user.

12. The method of claim 9, the allowing the user to communicated with the second server comprising sending an identity of the user from the first server to the second server.

13. The method of claim 9, the first server being communicatively coupled to the second server and to a third server, the third server storing a description of user-specific access rights to an additional building.

14. One or more computer-readable storage media having encoded thereon instructions that, when executed by a server, cause the server to perform the method of claim 9.