Abstract: An access control request manager based on learning profile based access pathways in a physical access control system (PACS). The access control request manager including an access pathways learning module configured to determine an reachability graph associated with each resource in the PACS, and a permissions request module, the permissions request module including an access request user interface configured to permit a user or an administrator, to provide a request for a permission to permit the user access to, or revoke the user's access to, a resource in the PACS. The permissions request module determines if the requested permission is already granted to the user, computes a pathway to reach the requested resource based on the reachability graph, suggests a permission, if needed, required to satisfy the request based on the computed pathway, and if approved, adds the suggested permission to any permissions granted to the user.

Abstract: A method of operating an access control system containing one or more hierarchies, each of the one or more hierarchies includes one or more access levels is provided. The method including: computing one or more hierarchies; and assigning a primary access level of the one or more access levels within a primary hierarchy of the one or more hierarchies to a first credential; and determining that access levels vertically below the primary access level in the primary hierarchy are implicitly assigned to the first credential when assigning the primary access level of the one or more access levels within the primary hierarchy of the one or more hierarchies to the first credential.

Abstract: A method of operating an access control system containing one or more hierarchies, each of the one or more hierarchies includes one or more access levels is provided. The method including: computing one or more hierarchies; and assigning a primary access level of the one or more access levels within a primary hierarchy of the one or more hierarchies to a first credential; and determining that access levels vertically below the primary access level in the primary hierarchy are implicitly assigned to the first credential when assigning the primary access level of the one or more access levels within the primary hierarchy of the one or more hierarchies to the first credential.

Abstract: A method of providing a seamless hands-free reader route to a destination includes receiving, at a mobile device, a route from a starting point to the destination, the route including an ordered list of access control devices. An event that triggers a start of the route is detected at the mobile device. The method also includes performing, at the mobile device, for each of the access control devices in an order of the access control devices in the ordered list: scanning for a signal from the access control device; and based on receiving the signal from the access control device, transmitting a message to the access control device, the message including a request to unlock the access control device and a credential that is authorized to unlock the access control device, the credential assigned to a user of the mobile device.

Abstract: An access control request manager based on learning profile based access pathways in a physical access control system (PACS). The access control request manager including an access pathways learning module configured to determine an reachability graph associated with each resource in the PACS, and a permissions request module, the permissions request module including an access request user interface configured to permit a user or an administrator, to provide a request for a permission to permit the user access to, or revoke the user's access to, a resource in the PACS. The permissions request module determines if the requested permission is already granted to the user, computes a pathway to reach the requested resource based on the reachability graph, suggests a permission, if needed, required to satisfy the request based on the computed pathway, and if approved, adds the suggested permission to any permissions granted to the user.

Abstract: A framework for access provisioning in a physical access control system (PACS). The framework includes a permissions request interface, the permissions request interface configured to permit a user or an administrator to request for a permission to access/revoke access to a resource, a permissions recommendation module communicating with the permissions request interface to receive the request and recommending a permission to be assigned to, or removed from, the user. The framework also includes a permissions validation module operable to ensure that the permission to be assigned to or to be removed does not violate an existing access control policy, that the permission to be assigned permits access to all permitted resources, or that the permission to be removed from the user denies access to all revoked resources and an approval workflow identification module identifying an approval required to assign or remove the permission.

Abstract: A method of managing access control permissions groups. The method includes acquiring a permissions database having user access control permissions groups and links between a user and at least one permission of a plurality of permissions and the groups. The method may also include revising the access control permissions groups based on at least one of an importance of a permission and an administrator input.

Abstract: A method of providing a seamless hands-free reader route to a destination includes receiving, at a mobile device, a route from a starting point to the destination, the route including an ordered list of access control devices. An event that triggers a start of the route is detected at the mobile device. The method also includes performing, at the mobile device, for each of the access control devices in an order of the access control devices in the ordered list: scanning for a signal from the access control device; and based on receiving the signal from the access control device, transmitting a message to the access control device, the message including a request to unlock the access control device and a credential that is authorized to unlock the access control device, the credential assigned to a user of the mobile device.

Abstract: A system for generating at least one policy includes a static permission database containing a plurality of static permission records identifying access permissions for at least one credential holder to at least one resource, a policy database, and a processor to analyze the plurality of static permission records to generate the at least one policy, wherein an outcome of execution of the at least one policy corresponds to the plurality of static permission records.

Abstract: A system for generating at least one policy includes a static permission database containing a plurality of static permission records identifying access permissions for at least one credential holder to at least one resource, a policy database, and a processor to analyze the plurality of static permission records to generate the at least one policy, wherein an outcome of execution of the at least one policy corresponds to the plurality of static permission records.