IP Library Granted Patent US 12682711
Granted Patent B2
US 12682711 · App. 18/587,933 · Granted Jul 14, 2026

Intelligent access control system

Inventors: Jeremy R. Fox (Georgetown, TX); Suman Patra (Kolkata, IN); Logan Bailey (Atlanta, GA); Zachary A. Silverstein (Georgetown, TX)
Assignee: International Business Machines Corporation
G07C9/28G07C9/21G07C9/215
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12682711
App. No.
18/587,933
Granted
Jul 14, 2026
Kind
B2
Abstract

A method, by an intelligent access control system, of implementing access control to a controlled area having a plurality access areas divided by at least one access point includes the following operations. A security token is generated. The security token is transmitted to a client module executing on a client device associated with a first user, and the client module is caused to pair with an access control device associated with the first user. The client module is caused to transfer the security token to the access control device. A physical location of the client device within the controlled area is monitored. A determination is made, by an access control system and based upon the physical location, that the first user is to be revalidated. The client module causes, based upon the determining, the client device to generate an alert.

Claims (51)

1 . A computer-implemented method, by an intelligent access control system, of implementing access control to a controlled area having a plurality of access areas divided by at least one access point, the computer-implemented method comprising:

generating a security token;

transmitting the security token to a client module executing on a first client device associated with a first user;

causing the client module to pair with an access control device associated with the first user;

causing the client module to transfer the security token to the access control device;

monitoring a physical location of the first client device within the controlled area; and

determining, based on the physical location of the first client device, that the first user is to be validated, wherein the client module causes, based on the determining that the first user is to be validated, the first client device to generate an alert.

2 . The computer-implemented method of claim 1 , wherein

the security token is regenerated and transmitted to the client module based on the access control device being used at one of the at least one access point.

3 . The computer-implemented method of claim 1 , wherein the transmitting of the security token includes transmitting a policy associated with the controlled area to the client module.

4 . The computer-implemented method of claim 1 , wherein:

the determining that the first user is to be validated is based on a second user with a second client device being at least a certain distance away from the first client device,

the first user is a controlling user, and

the second user is a controlled user.

5 . The computer-implemented method of claim 1 , wherein the determining that the first user is to be validated is based on a time in which the first user is within one of the plurality of access areas.

6 . The computer-implemented method of claim 1 , wherein a policy is based on one of the plurality of access areas corresponding to the physical location of the first user.

7 . The computer-implemented method of claim 1 , further comprising receiving, from the client module, a request to opt into using the intelligent access control system.

8 . An intelligent access control system configured to implement access control to controlled area having a plurality of access areas divided by at least one access point, intelligent access control system comprising:

a hardware processor configured to perform operations comprising:

generating a security token;

transmitting the security token to a client module executing on a first client device associated with a first user;

causing the client module to pair with an access control device associated with the first user;

causing the client module to transfer the security token to the access control device;

monitoring a physical location of the first client device within the controlled area; and

determining, based on the physical location of the first client device, that the first user is to be validated, wherein the client module causes, based on the determining that the first user is to be validated, the first client device to generate an alert.

9 . The intelligent access control system of claim 8 , wherein the security token is regenerated and transmitted to the client module based on the access control device being used at one of the at least one access point.

10 . The intelligent access control system of claim 8 , wherein the transmitting of the security token includes transmitting a policy associated with the controlled area to the client module.

11 . The intelligent access control system of claim 8 , wherein the determining that the first user is to be validated is based on:

a second user with a second client device being at least a certain distance away from the first client device;

the first user is a controlling user; and

the second user is a controlled user.

12 . The intelligent access control system of claim 8 , wherein the determining that the first user is to be validated is based on a time in which the first user is within one of the plurality of access areas.

13 . The intelligent access control system of claim 8 , wherein a policy is based on one of the plurality of access areas corresponding to the physical location of the first user.

14 . The intelligent access control system of claim 8 , wherein the operations further comprise receiving, from the client module, a request to opt into using the intelligent access control system.

15 . A computer program product, comprising:

a computer readable storage medium having stored therein program code for implementing access control to a controlled area having a plurality of access areas divided by at least one access point,

the program code, which when executed by an intelligent access control system, causes the intelligent access control system to perform operations comprising:

generating a security token;

transmitting the security token to a client module executing on a first client device associated with a first user;

causing the client module to pair with an access control device associated with the first user;

causing the client module to transfer the security token to the access control device;

monitoring a physical location of the first client device within the controlled area; and

determining, based on the physical location of the first client device, that the first user is to be validated, wherein the client module causes, based on the determining that the first user is to be validated, the first client device to generate an alert.

16 . The computer program product of claim 15 , wherein the security token is regenerated and transmitted to the client module based on the access control device being used at one of the at least one access point.

17 . The computer program product of claim 15 , wherein the transmitting of the security token includes transmitting a policy associated with the controlled area to the client module.

18 . The computer program product of claim 15 , wherein the determining that the first user is to be validated is based on:

a second user with a second client device being at least a certain distance away from the first client device;

the first user is a controlling user; and

the second user is a controlled user.

19 . The computer program product of claim 15 , wherein the determining that the first user is to be validated is based on a time in which the first user is within one of the plurality of access areas.

20 . The computer program product of claim 15 , wherein a policy is based upon one of the plurality of access areas corresponding to the physical location of the first user.