ACCESS REQUEST AUTHORIZATION

• US 20140298490A1
• Filed: 03/26/2013
• Published: 10/02/2014
• Est. Priority Date: 03/26/2013
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Gambon, Kenneth T., Lehman, Bret W., Clark, Michael A.
• Granted Patent: US 9,378,600 B2
• Time in Patent Office: Days
• US Class Current: 726/34
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 21/70 Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06Q 10/105 Human resources
• CPC Class Codes: G07C 9/00 Individual registration on entry or exit
• CPC Class Codes: G07C 9/00182 operated with unidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00896 specially adapted for particular uses
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/38 with central registration

Abstract

In a method for controlling physical access to a computing device a first access request to a room containing the computing device is received. In response, a processor determines that the first access request is valid based on the room and the date and time of the first access request and unlocks a door to the room to permit entry to the room. Subsequently, a second access request to a cabinet that is located in the room and contains the computing device is received. In response, a processor determines that the second access request is valid based on the cabinet and the date and time of the second access request and unlocks the cabinet to permit access to the computing device.

Claims

1. A method for controlling physical access to a computing device the method comprising:

receiving a first access request to a room containing the computing device, and in response, one or more processors (a) determining that the first access request is valid based on the room and the date and time of the first access request and (b) unlocking a door to the room to permit entry to the room; and

subsequently, receiving a second access request to a cabinet that is located in the room and contains the computing device, and in response, one or more processors, (a) determining that the second access request is valid based on the cabinet and the date and time of the second access request and (b) unlocking the cabinet to permit access to the computing device.

2. The method of claim 1, wherein the first access request comprises a first identification data and a first change request number and the second access request comprises a second identification data and a second change request number, wherein the first and second change request numbers are associated with one or more conditions.

3. The method of claim 2, wherein the one or more conditions comprises a time range in which access to the computing device is allowed.

4. The method of claim 3, wherein the step of determining, by the one or more processors, that the first access request is valid comprises the step of determining, by the one or more processors, that the date and time of the first access request falls within the time range;

and wherein the step of determining, by the one or more processors, that the second access request is valid comprises the step of determining, by the one or more processors, that the date and time of the second access request falls within the time range.

5. The method of claim 1 further comprising the step of:

receiving a third access request to a specific part of the computing device in the cabinet, and in response, one or more processors (a) determining that the third access request is valid based on the specific part of the computing device and the date and time of the third access request and (b) approving access to the specific part of the computing device.

6. The method of claim 5, wherein the first access request comprises a first identification data and a first change request number, the second access request comprises a second identification data and a second change request number, and the third access request comprises a third identification data and a third change request number wherein the first, second, and third change request numbers are associated with one or more conditions.

7. The method of claim 6, wherein the one or more conditions comprises a time range in which access to the specific part of the computing device is allowed.

8. The method of claim 7, wherein the step of determining, by the one or more processors, that the first access request is valid comprises the step of determining, by the one or more processors, that the date and time of the first access request falls within the time range;

wherein the step of determining, by the one or more processors, that the second access request is valid comprises the step of determining, by the one or more processors, that the date and time of the second access request falls within the time range; and

wherein the step of determining, by the one or more processors, that the third access request is valid comprises the step of determining, by the one or more processors, that the date and time of the third access request falls within the time range.

9. A computer program product for controlling physical access to a computing device, the computer program product comprising:

one or more computer-readable storage devices and program instructions stored on the one or more computer-readable storage devices, the program instructions comprising;

program instructions to receive a first access request to a room containing the computing device, and in response, program instructions to (a) determine that the first access request is valid based on the room and the date and time of the first access request and (b) unlock a door to the room to permit entry to the room; and

subsequently, program instructions to receive a second access request to a cabinet that is located in the room and contains the computing device, and in response, program instructions to (a) determine that the second access request is valid based on the cabinet and the date and time of the second access request and (b) unlock the cabinet to permit access to the computing device.

10. The computer program product of claim 9, wherein the first access request comprises a first identification data and a first change request number and the second access request comprises a second identification data and a second change request number, wherein the first and second change request numbers are associated with one or more conditions.

11. The computer program product of claim 10, wherein the one or more conditions comprises a time range in which access to the computing device is allowed.

12. The computer program product of claim 11, wherein the program instructions to determine that the first access request is valid comprise program instructions to determine that the date and time of the first access request falls within the time range;

and wherein the program instructions to determine that the second access request is valid comprise program instructions to determine that the date and time of the second access request falls within the time range.

13. The computer program product of claim 9 further comprising:

program instructions stored on the one or more computer-readable storage devices, to receive a third access request to a specific part of the computing device in the cabinet, and in response, program instructions to (a) determine that the third access request is valid based on the specific part of the computing device and the date and time of the third access request and (b) approve access to the specific part of the computing device.

14. The computer program product of claim 13, wherein the first access request comprises a first identification data and a first change request number, the second access request comprises a second identification data and a second change request number, and the third access request comprises a third identification data and a third change request number wherein the first, second, and third change request numbers are associated with one or more conditions.

15. The computer program product of claim 14, wherein the one or more conditions comprises a time range in which access to the specific part of the computing device is allowed.

16. The computer program product of claim 9, wherein the program instructions to determine that the first access request is valid comprise program instructions to determine that the date and time of the first access request falls within the time range;

wherein the program instructions to determine that the second access request is valid comprise program instructions to determine that the date and time of the second access request falls within the time range; and

wherein program instructions to determine that the third access request is valid comprise program instructions to determine that the date and time of the third access request falls within the time range.

17. A computer system for controlling physical access to a computing device, the computer system comprising:

one or more computer processors, one or more computer-readable memory devices, one or more computer-readable storage devices, and program instructions stored on the computer-readable storage devices for execution by at least one of the one or more processors via the one or more memory devices, the program instructions comprising;

program instructions to receive a first access request to a room containing the computing device, and in response, program instructions to (a) determine that the first access request is valid based on the room and the date and time of the first access request and (b) unlock a door to the room to permit entry to the room; and

subsequently, program instructions to receive a second access request to a cabinet that is located in the room and contains the computing device, and in response, program instructions to (a) determine that the second access request is valid based on the cabinet and the date and time of the second access request and (b) unlock the cabinet to permit access to the computing device.

18. The computer system of claim 17, wherein the first access request comprises a first identification data and a first change request number and the second access request comprises a second identification data and a second change request number, wherein the first and second change request numbers are associated with one or more conditions.

19. The computer system of claim 18, wherein the one or more conditions comprises a time range in which access to the computing device is allowed.

20. The computer system of claim 19, wherein the program instructions to determine that the first access request is valid comprise program instructions to determine that the date and time of the first access request falls within the time range;

and wherein the program instructions to determine that the second access request is valid comprise program instructions to determine that the date and time of the second access request falls within the time range.