Physical access request authorization

• US 9,626,816 B2
• Filed: 05/16/2016
• Issued: 04/18/2017
• Est. Priority Date: 03/26/2013
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Clark, Michael A., Gambon, Kenneth T., Lehman, Bret W.
• Primary Examiner(s): Parsons, Theodore C
• Application Number:
  US15/155,498
• Publication Number:
  US 20160260273A1
• Time in Patent Office: 337 Days
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 21/70 Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06Q 10/105 Human resources
• CPC Class Codes: G07C 9/00 Individual registration on entry or exit
• CPC Class Codes: G07C 9/00182 operated with unidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00896 specially adapted for particular uses
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/38 with central registration

Abstract

In a method for controlling physical access to a computing device a first access request to a room containing the computing device is received. In response, a processor determines that the first access request is valid based on the room and the date and time of the first access request and unlocks a door to the room to permit entry to the room. Subsequently, a second access request to a cabinet that is located in the room and contains the computing device is received. In response, a processor determines that the second access request is valid based on the cabinet and the date and time of the second access request and unlocks the cabinet to permit access to the computing device.

Claims

1. A method for controlling physical access to a computing device the method comprising:

receiving a first access request to a room containing the computing device, and one or more processors determining whether the first access request is valid based on the room and the date and time of the first access request, wherein responsive to determining the first access request is valid unlocking a door to the room to permit entry to the room;

subsequently, receiving a second access request to a cabinet that is located in the room and contains the computing device, and one or more processors determining whether the second access request is valid based on the cabinet and the date and time of the second access request, wherein responsive to determining the second access request is valid unlocking the cabinet to permit access to the computing device; and

wherein the first access request comprises a first identification data and a first change request number and the second access request comprises a second identification data and a second change request number, wherein the first and second change request numbers are associated with one or more conditions, wherein two or more individuals listed as approvers of the first and second change request numbers agree to all conditions of the one or more conditions of the first and second change request number.

2. The method of claim 1, wherein the one or more conditions comprises a time range in which access to the computing device is allowed.

3. The method of claim 2, wherein the step of determining, by the one or more processors, whether the first access request is valid comprises the step of determining, by the one or more processors, whether the date and time of the first access request falls within the time range;

and

wherein the step of determining, by the one or more processors, whether the second access request is valid comprises the step of determining, by the one or more processors, whether the date and time of the second access request falls within the time range.

4. The method of claim 1 further comprising the step of:

receiving a third access request to a specific part of the computing device in the cabinet, and, one or more processors determining whether the third access request is valid based on the specific part of the computing device and the date and time of the third access request, wherein responsive to determining the third access request is valid approving access to the specific part of the computing device; and

wherein the third access request comprises a third identification data and a third change request number, wherein the third change request numbers are associated with one or more conditions, wherein two or more individuals listed as approvers of the third change request number agree to all conditions of the one or more conditions of the third change request number.

5. The method of claim 4, wherein the one or more conditions comprises a time range in which access to the specific part of the computing device is allowed.

6. The method of claim 5, wherein the step of determining, by the one or more processors, whether the first access request is valid comprises the step of determining, by the one or more processors, whether the date and time of the first access request falls within the time range;

wherein the step of determining, by the one or more processors, whether the second access request is valid comprises the step of determining, by the one or more processors, whether the date and time of the second access request falls within the time range; and

wherein the step of determining, by the one or more processors, whether the third access request is valid comprises the step of determining, by the one or more processors, whether the date and time of the third access request falls within the time range.

7. A computer program product for controlling physical access to a computing device, the computer program product comprising:

one or more computer-readable storage devices and program instructions stored on the one or more computer-readable storage devices, the program instructions comprising;

program instructions to receive a first access request to a room containing the computing device, and program instructions to determine whether the first access request is valid based on the room and the date and time of the first access request, wherein responsive to determining the first access request is valid unlock a door to the room to permit entry to the room;

subsequently, program instructions to receive a second access request to a cabinet that is located in the room and contains the computing device, and program instructions to determine whether the second access request is valid based on the cabinet and the date and time of the second access request, wherein responsive to determining the second access request is valid unlock the cabinet to permit access to the computing device; and

wherein the first access request comprises a first identification data and a first change request number and the second access request comprises a second identification data and a second change request number, wherein the first and second change request numbers are associated with one or more conditions, wherein two or more individuals listed as approvers of the first and second change request numbers agree to all conditions of the one or more conditions of the first and second change request number.

8. The computer program product of claim 7, wherein the one or more conditions comprises a time range in which access to the computing device is allowed.

9. The computer program product of claim 8, wherein the program instructions to determine whether the first access request is valid comprise program instructions to determine whether the date and time of the first access request falls within the time range;

and wherein the program instructions to determine whether the second access request is valid comprise program instructions to determine whether the date and time of the second access request falls within the time range.

10. The computer program product of claim 7 further comprising:

program instructions stored on the one or more computer-readable storage devices, to receive a third access request to a specific part of the computing device in the cabinet, and program instructions to determine whether the third access request is valid based on the specific part of the computing device and the date and time of the third access request, wherein responsive to determining the third access request is valid approve access to the specific part of the computing device; and

wherein the third access request comprises a third identification data and a third change request number, wherein the third change request numbers are associated with one or more conditions, wherein two or more individuals listed as approvers of the third change request number agree to all conditions of the one or more conditions of the third change request number.

11. The computer program product of claim 10, wherein the one or more conditions comprises a time range in which access to the specific part of the computing device is allowed.

12. The computer program product of claim 11, wherein the program instructions to determine whether the first access request is valid comprise program instructions to determine whether the date and time of the first access request falls within the time range;

wherein the program instructions to determine whether the second access request is valid comprise program instructions to determine whether the date and time of the second access request falls within the time range; and

wherein program instructions to determine whether the third access request is valid comprise program instructions to determine whether the date and time of the third access request falls within the time range.

13. A computer system for controlling physical access to a computing device, the computer system comprising:

one or more computer processors, one or more computer-readable memory devices, one or more computer-readable storage devices, and program instructions stored on the computer-readable storage devices for execution by at least one of the one or more processors via the one or more memory devices, the program instructions comprising;

program instructions to receive a first access request to a room containing the computing device, and program instructions to determine whether the first access request is valid based on the room and the date and time of the first access request, wherein responsive to determining the first access request is valid unlock a door to the room to permit entry to the room; and

subsequently, program instructions to receive a second access request to a cabinet that is located in the room and contains the computing device, and program instructions to determine whether the second access request is valid based on the cabinet and the date and time of the second access request, wherein responsive to determining the second access request is valid unlock the cabinet to permit access to the computing device; and

wherein the first access request comprises a first identification data and a first change request number and the second access request comprises a second identification data and a second change request number, wherein the first and second change request numbers are associated with one or more conditions, wherein two or more individuals listed as approvers of the first and second change request numbers agree to all conditions of the one or more conditions of the first and second change request number.

14. The computer system of claim 13, wherein the one or more conditions comprises a time range in which access to the computing device is allowed.

15. The computer system of claim 14, wherein the program instructions to determine whether the first access request is valid comprise program instructions to determine that the date and time of the first access request falls within the time range;

and wherein the program instructions to determine whether the second access request is valid comprise program instructions to determine that the date and time of the second access request falls within the time range.

16. The computer system of claim 15 further comprising:

program instructions stored on the computer-readable storage devices for execution by at least one of the one or more processors via the one or more memory devices, to receive a third access request to a specific part of the computing device in the cabinet, and program instructions to determine whether the third access request is valid based on the specific part of the computing device and the date and time of the third access request, wherein responsive to determining the third access request is valid approve access to the specific part of the computing device; and

wherein the third access request comprises a third identification data and a third change request number, wherein the third change request numbers are associated with one or more conditions, wherein two or more individuals listed as approvers of the third change request number agree to all conditions of the one or more conditions of the third change request number.

17. The computer system of claim 16, wherein the one or more conditions comprises a time range in which access to the specific part of the computing device is allowed.

18. The computer system of claim 17, wherein the program instructions to determine whether the first access request is valid comprise program instructions to determine whether the date and time of the first access request falls within the time range;

wherein the program instructions to determine whether the second access request is valid comprise program instructions to determine whether the date and time of the second access request falls within the time range; and

wherein program instructions to determine whether the third access request is valid comprise program instructions to determine whether the date and time of the third access request falls within the time range.