Physical and Logical Threat Analysis in Access Control Systems Using BIM

• US 20160117917A1
• Filed: 10/27/2014
• Published: 04/28/2016
• Est. Priority Date: 10/27/2014
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: PRAKASH, Marakkannu Sakthi, Balaji, B.S., VIBGY, Joseph
• Granted Patent: US 9,799,208 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: G08B 29/12 Checking intermittently signalling or alarm systems
• CPC Class Codes: G08B 29/185 Signal analysis techniques for reducing or preventing false alarms or for enhancing the reliability of the system

Abstract

An apparatus including a building information model (BIM) of a secured area having a plurality of different portions, the BIM embodied in a memory, a processor that identifies portions of the secured area having different levels of security and a processor that alerts a user of a security weakness based upon an interaction between the security levels and physical characteristics of the secured area defined by the BIM.

Claims

1. An apparatus comprising:

a building information model (BIM) of a secured area having a plurality of different portions, the BIM embodied in a memory;

a processor that identifies portions of the secured area having different levels of security; and

a processor that alerts a user of a security weakness based upon an interaction between the security levels and physical characteristics of the secured area defined by the BIM.

2. The apparatus as in claim 1 wherein the security weakness further comprises any one or more of physical strength of dividers among portions having different levels of security, walkways or corridors that lead only to a portion with a different level of security, a mismatch between total authorized users of the secured area and the number of authorized users within a portion with a higher relative level of security and access contradictions.

3. The apparatus as in claim 2 wherein the processor that alerts the user based upon the physical strength of a divider further comprises a processor that compares an impact resistance of a window separating two portions of the secured area with a threshold minimum impact level.

4. The apparatus as in claim 2 wherein the processor that alerts the user based upon the physical strength of a divider further comprises a processor that identifies the absence of or easily removable dividers separating two portions of the secured area having different security levels.

5. The apparatus as in claim 2 wherein the processor that alerts a user based upon a mismatch between total users of the secured area and a number of users within a portion with a higher relative level of security further comprises a processor that detects that the number of authorized users within the portion with the higher relative level of security is equal to or greater than the number of authorized users in adjoining areas.

6. The apparatus as in claim 2 wherein the processor that alerts a user based upon a mismatch between total users of the secured area and a number of users within a portion within a higher relative level of security further comprises a processor that detects that the number of authorized users with the portion with the higher relative level of security is equal to or greater than a predetermined threshold or percentage of the number of authorized users in adjoining areas.

7. The apparatus as in claim 2 wherein the processor that alerts a user based upon access contradictions further comprises a processor that detects users that are members of both a first group of users that are only allowed into the portion of the secured area as a group and a second group that are excluded from the portion.

8. The apparatus as in claim 2 further comprising a processor that determines an access criteria for each of the plurality of different portions of the secured area.

9. The apparatus as in claim 1 wherein the access criteria for the lowest relative level of security further comprises presentation of a valid access card.

10. The apparatus as in claim 9 wherein the access criteria for a higher level of security above the lowest level further comprises an access card and one or more of a personal identification number and a biometric parameter of the user read by a biometric reader.

11. An apparatus comprising:

a security system having a secured area with a number of different portions each with a different security level;

a building information model (BIM) of the secured area embodied in a memory of the security system;

an analysis engine of the security system that identifies the portions of the secured area having different levels of security and a respective partition between the portions having the different levels of security;

a processor of the analysis engine that analyzes a context of each partition and compares the context with a respective rule of a plurality of rules related to the context; and

a processor that alerts a user of a security weakness based upon an interaction between the security levels and physical characteristics of the secured area defined by the BIM.

12. The apparatus as in claim 11 wherein the plurality of rules further comprises any one or more of a minimum physical strength of partitions dividing portions having different levels of security, any walkways or corridors that lead only to a portion with a different level of security, a mismatch between total authorized users of the secured area and the number of authorized users within a portion with a higher relative level of security and access contradictions.

13. The apparatus as in claim 12 wherein the processor that alerts the user based upon the security weakness further comprises a processor that displays a map showing a location of the weakness.

14. The apparatus as in claim 12 further comprising a processor that prompts the user with a correction for the weakness.

15. The apparatus as in claim 12 wherein the processor that alerts a user based upon a mismatch between total users of the secured area and a number of users within a portion with a higher relative level of security further comprises a processor that detects that the number of authorized users within the portion with the higher relative level of security is equal to or greater than the number of authorized users in adjoining areas.

16. The apparatus as in claim 12 wherein the processor that alerts a user based upon a mismatch between total users of the secured area and a number of users within a portion within a higher relative level of security further comprises a processor that detects that the number of authorized users with the portion with the higher relative level of security is equal to or greater than a predetermined threshold or percentage of the number of authorized users in adjoining areas.

17. The apparatus as in claim 12 wherein the processor that alerts a user based upon access contradictions further comprises a processor that detects users that are members of both a first group of users that are only allowed into the portion of the secured area as a group and a second group that are excluded from the portion.

18. The apparatus as in claim 12 further comprising a processor that determines an access criteria for each of the plurality of different portions of the secured area.

19. An apparatus comprising:

a security system;

a building information model (BIM) of a secured area having a plurality of different portions, the BIM embodied in a memory of the security system;

a plurality of rules defining a minimum level of security for each of the plurality of different portions;

an analysis engine of the security system that identifies portions of the secured area having different levels of security and at least one respective rule of the plurality of rules that applies to a partition between the portions having the different levels of security;

a processor of the analysis engine that analyzes a context of each partition and compares the context with the at least one respective rule of the plurality of rules related to the context; and

a processor that alerts a user of a security weakness based upon an interaction between the security levels and at least one respective rule of the secured area.

20. The apparatus as in claim 19 wherein the plurality of rules further comprises any one or more of a minimum physical strength of a partition dividing at least one of the different levels of security, walkways or corridors that lead only to a portion with a different level of security, a mismatch between total authorized users of the secured area and the number of authorized users within a portion with a higher relative level of security and access contradictions.