Carrier Corporation

Tarik Hadzic

Ankit Tiwari

Yuri Novozhenets

Blanca Florentino

Menouer Boubekeur

John Marchioli

Alberto Speranzon

Ed Gauthier

Philip J Harris

Keith J Power

Guoda Kaminske

Suresh B Veluru

Stylianos Basagiannis

Brian Duffy

Gavranovic Haris

An access control request manager based on learning profile based access pathways in a physical access control system (PACS). The access control request manager including an access pathways learning module configured to determine an reachability graph associated with each resource in the PACS, and a permissions request module, the permissions request module including an access request user interface configured to permit a user or an administrator, to provide a request for a permission to permit the user access to, or revoke the user's access to, a resource in the PACS. The permissions request module determines if the requested permission is already granted to the user, computes a pathway to reach the requested resource based on the reachability graph, suggests a permission, if needed, required to satisfy the request based on the computed pathway, and if approved, adds the suggested permission to any permissions granted to the user.

Access control request manager based on learning profile-based access pathways

A physical access control system (PACS) for protecting a resource. The PACS includes a credential including information regarding a user stored thereon, the credential presented to request access to a resource protected by an access point. A reader is in operative communication with the credential and configured to read the user information from the credential. The user information includes at least one attribute. A controller executes a set of access control rules, the rules based on policies extracted from a database of static permissions for the user, the policies defining requirements for permitting access of the user to the resource based on the at least one attribute, the controller configured to permit access to the resource.

Compact encoding of static permissions for real-time access control

A spatio-temporal topology learning system for detection of suspicious access control behavior in a physical access control system (PACS). The spatio-temporal topology learning system including an access pathways learning module configured to determine a set of spatio-temporal properties associated with a resource in the PACS, an inconsistency detection module in operable communication with the access pathways learning module, the inconsistencies detection module configured to analyze a plurality of historical access control events and identify an inconsistency with regard to the set of spatio-temporal properties, and if an inconsistency is detected, at least one of the events is flagged as potentially suspicious access control behavior.

Spatio-temporal topology learning for detection of suspicious access behavior

A system and method for generating at least one policy includes a policy document database containing at least one policy document containing at least one unstructured policy entry, and a natural language processor to analyze the at least one unstructured policy entry to generate least one formal policy, wherein a formal outcome of execution of the at least one formal policy corresponds to the at least one unstructured policy entry, and a rule processor to transform the at least one formal policy entry to generate at least one enforceable policy, wherein an enforcement outcome of execution of the at least one enforceable policy corresponds to the at least one formal policy entry.

Extraction of policies from natural language documents for physical access control

A system for generating at least one policy includes a static permission database containing a plurality of static permission records identifying access permissions for at least one credential holder to at least one resource, a policy database, and a processor to analyze the plurality of static permission records to generate the at least one policy, wherein an outcome of execution of the at least one policy corresponds to the plurality of static permission records.

Extraction of policies from static permissions and access events for physical access control

Growing community of inventors

Cork, Ireland

Tarik Hadzic