Systems and methods for location aware access control management

• US 8,707,414 B2
• Filed: 01/06/2011
• Issued: 04/22/2014
• Est. Priority Date: 01/07/2010
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Roy, Sanjay, Gali, Muneswar Rao, Bhandari, Neelendra, Chappidi, Gopi, Reddy, Chandrakantha
• Primary Examiner(s): Khoshnoodi, Nadia
• Application Number:
  US12/986,096
• Publication Number:
  US 20110167488A1
• Time in Patent Office: 1,202 Days
• Field of Search: None
• US Class Current: 726/9
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 4/02 Services making use of location information

Abstract

Described herein are systems and methods for access control management, these generally being directed towards location aware access control management. Embodiments of the invention have been particularly developed for providing additional functionalities in access control systems having disconnected devices, and the present disclosure is primarily focused accordingly. For example, embodiments include access control devices configured to operate in conjunction with a GPS receiver or other source of geographical positional information, and methods associated with the use of such devices.

Claims

1. An access control device for operation in an access control system including a central server, one or more disconnected access control devices, and one or more connected access control devices, the device including:

an interface for interacting with an access control token for the purposes of an access transaction;

a processor and associated memory configured for processing data received from the access control token in relation to the access transaction thereby to selectively allow or deny access;

a receiver for determining geographical positional information for the access transaction;

wherein when the access control device is operating as a disconnected access control device, the access control device is configured to;

in respect of a first access transaction initiated by a first access control token at a first location, write to the first access control token a first set of data indicative of geographical positional information representing the first location;

in respect of a second access transaction initiated by the first access control token at a second location, write to the first access control token a second set of data indicative of geographical positional information representing the second location; and

wherein the first set of data and second set of data are configured to subsequently be read from the access control token by a connected access control device, thereby to facilitate propagation of the first set of data and second set of data to the central server, such that the central server calculates transportation information for a user associated with the first access control token based upon the geographical positional information representing the first location and geographical positional information representing the second location.

2. A device according to claim 1 including a wireless network interface that is selectively actuated responsive to geographical positional information determined by the receiver.

3. A device according to claim 1 including a wireless network interface for connecting to an access control network thereby to allow the device to function as a connected access control device, wherein the memory of the device maintains geographical positional information indicative of one or more connectivity zones, and wherein the device is configured to actuate the wireless network device when the receiver indicates that the device is within one or more of the connectivity zones.

4. A device according to claim 1 including a telecommunications interface, wherein the device is configured for providing a signal via the telecommunications interface responsive to an access transaction when predefined conditions are met by reference to geographical positional data.

5. A device according to claim 1 wherein the device is located on a vehicle.

6. A method for operating an access control device, wherein the access control device is part of an access control system including a central server, one or more disconnected access control devices, and one or more connected access control devices, the method including:

interacting with an access control token for the purposes of an access transaction;

processing data received from the access control token in relation to the access transaction thereby to selectively allow or deny access;

determining, based on data derived by a receiver, geographical positional information for the access transaction;

wherein when the access control device is operating as a disconnected access control device, the access control device is configured to;

in respect of a first access transaction initiated by a first access control token at a first location, write to the first access control token a first set of data indicative of geographical positional information representing the first location;

in respect of a second access transaction initiated by the first access control token at a second location, write to the first access control token a second set of data indicative of geographical positional information representing the second location; and

wherein the first set of data and second set of data are configured to subsequently be read from the access control token by a connected access control device, thereby to facilitate propagation of the first set of data and second set of data to the central server, such that the central server calculates transportation information for a user associated with the first access control token based upon the geographical positional information representing the first location and geographical positional information representing the second location.

7. A method according to claim 6 including a step of selectively actuating a wireless network interface that is responsive to geographical positional information determined by the receiver.

8. A method according to claim 6, wherein the device includes a wireless network interface for connecting to an access control network thereby to allow the device to function as a connected access control device, wherein the memory of the device maintains geographical positional information indicative of one or more connectivity zones, and wherein the method includes actuating the wireless network device when the receiver indicates that the device is within one or more of the connectivity zones.

9. A method according to claim 6 wherein the device includes a telecommunications interface, wherein the method includes providing a signal via the telecommunications interface responsive to an access transaction when predefined conditions are met by reference to geographical positional data.

10. A method according to claim 6 wherein the device is located on a vehicle.

11. An access control system including:

a central server;

one or more connected access control devices that are in communication with the central server via a network;

one or more disconnected access control devices that are not in communication with the central server via the network, wherein the disconnected devices are configured to propagate information back to the central server by writing data to access control tokens presented by users;

wherein at least one disconnected access control device includes a receiver for determining geographical positional information and is configured for writing to an access control token data indicative of the geographical positional information associated with an access transaction;

wherein at least one of the disconnected access control devices is configured to;

in respect of a first access transaction initiated by a first access control token at a first location, write to the first access control token a first set of data indicative of geographical positional information representing the first location;

in respect of a second access transaction initiated by the first access control token at a second location, write to the first access control token a second set of data indicative of geographical positional information representing the second location; and

wherein the first set of data and second set of data are configured to subsequently be read from the access control token by a connected access control device, thereby to facilitate propagation of the first set of data and second set of data to the central server, such that the central server calculates transportation information for a user associated with the first access control token based upon the geographical positional information representing the first location and geographical positional information representing the second location.