Electronic Key Permission Updates for Dynamic Access Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional electronic access control systems grant access based solely on authentication of an access credential, leading to potential security risks as unauthorized individuals can gain access with valid credentials, and there is a lack of responsiveness to dynamic access control needs.
Innovation Solution
An access control system with an access validation engine that processes supplemental information beyond authentication credentials, dynamically adjusting access permissions in real-time or periodically, and includes an electronic key that can capture biometric data to validate user authorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If access control systems grant access based solely on authentication credentials, then ease of operation is improved, but security is worsened as unauthorized individuals can gain access with valid credentials
Solution Approach 1:
The patent introduces an access validation engine as an intermediary component between the credential authentication and access grant decisions. This engine receives supplemental information from various sources (user profiles, resource information, environmental sensors) and validates whether access should truly be granted, even when credentials are valid. This mediator prevents unauthorized access while maintaining ease of operation for legitimate users.
Solution Approach 2:
The system implements feedback loops where the access validation engine continuously monitors supplemental information about users and resources, and dynamically adjusts access permissions based on this feedback. The system gathers feedback from multiple sources including user behavior patterns, resource status, and environmental conditions, then uses this feedback to make real-time access control decisions, improving security without significantly impacting ease of operation.
2Reliability
If access control systems process supplemental information dynamically, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent segments the access control system into distinct functional modules: a credential authentication component, an access validation engine, multiple information sources (user profiles, resource information, environmental sensors), and an access decision component. Each module performs a specific function and can be independently configured and maintained. This segmentation reduces overall system complexity by creating manageable, loosely-coupled components while enabling comprehensive security validation.
3Productivity
If access permissions are adjusted dynamically in real-time, then responsiveness is improved, but use of energy is worsened due to continuous processing
Solution Approach 1:
The access validation engine implements periodic action by updating and re-evaluating supplemental information at scheduled intervals rather than continuously. The system determines when updates are necessary based on the nature of the information sources and access patterns, processing data periodically to maintain responsiveness while significantly reducing energy consumption compared to continuous real-time processing.
Data Source
AI summary
Aspects of the disclosure relate to electronic access control. An access control server maintains data associated with a plurality of electronic locks. A user is issued an electronic key for unlocking one or more electronic locks. The user can be assigned to a group. Members of the group are permitted to access a subset of the plurality of electronic locks. A first key configuration is transmitted to the electronic key, the first key configuration permitting the user to access the subset of electronic locks. The access control server accesses personnel data related to the user and determines whether the personnel data satisfies a condition associated with the group. Responsive to determining that the condition is not satisfied, the user is removed from the group and a second key configuration is transmitted to the electronic key, the second key configuration preventing the user from accessing the subset of electronic locks.