Location based access

1. A non-transitory computer readable medium comprising instructions which, when executed by one or more devices, causes the one or more devices to:

identify a physical location of a first client device and a second physical location of a second client device;

determine that the physical location of the first client device and the second physical location of the second client device meet a first criterion for allowing access through an entryway;

identify a permission level associated with the first client device and a second permission level associated with the second client device;

determine that the permission level associated with the first client device meets a second criterion for allowing access through the entryway and that the second permission level associated with the second client device does not meet the second criterion;

calculate a distance between the first client device and the second client device;

responsive at least to a determination that the first criterion and the second criterion have been met by the first client device, allow the first client device access through the entryway;

determine based on the calculated distance, that the second client device gained unauthorized access through the entryway due to proximity with the first client device; and

present an alert regarding the unauthorized access through the entryway of the second client device.

2. The non-transitory computer readable medium of claim 1 , wherein to determine that the physical location of the first client device meets the first criterion, the instructions are further to cause the one or more devices to determine that a distance between the physical location of the first client device and a location of the entryway is below a threshold value.

3. The non-transitory computer readable medium of claim 1 , wherein to determine that the permission level meets the second criterion, the instructions are further to cause the one or more devices to determine that the first client device has successfully connected to a particular WiFi network associated with access for the entryway.

4. The non-transitory computer readable medium of claim 1 , wherein to determine that the physical location of the first client device meets the first criterion, the instructions are further to cause the one or more devices to determine that the physical location of the first client device is within a particular zone associated with the entryway.

5. The non-transitory computer readable medium of claim 1 , wherein the instructions are further to cause the one or more devices to:

subsequent to allowing access: responsive to determining that the physical location of the first client device no longer meets the first criterion, block access through the entryway.

6. The non-transitory computer readable medium of claim 1 , wherein to allow access, the instructions are further to cause the one or more devices to open a physical lock controlling the access through the entryway.

7. The non-transitory computer readable medium of claim 1 , wherein the physical location of the first client device is determined based on one or more WiFi signals transmitted by the first client device and received by one or more access points installed on a ceiling near the entryway.

8. The non-transitory computer readable medium of claim 1 , wherein to determine the physical location of the first client device, the instructions are further to cause the one or more devices to:

receive, by a plurality of access points, wireless signals from the first client device;

determine a distance of the first client device from each of the plurality of access points; and

compute a location of the first client device based at least on: the distance of the first client device from each of the plurality of access points and a location of each of the plurality of access points.

9. The non-transitory computer readable medium of claim 1 , wherein to determine the physical location of the first client device, the instructions are further to cause the one or more devices to:

receive, by at least one access point, wireless signals from the first client device;

determine a distance of the first client device from the at least one access point and a direction of the first client device from the at least one access point; and

compute a location of the first client device based at least on: the distance of the first client device from the at least one access point and the direction of the first client device from the at least one access point.

10. A system comprising:

at least one network device including a hardware processor;

a memory on which is stored instructions that are to cause the hardware processor to:

identify a physical location of a first client device and a second physical location of a second client device;

determine that the physical location of the first client device and the second physical location of the second client device meet a first criterion for allowing access through an entryway;

identify a permission level associated with the first client device and a second permission level associated with the second client device;

determine that the permission level associated with the first client device meets a second criterion for allowing access through the entryway and that the second permission level associated with the second client device does not meet the second criterion for access through the entryway;

calculate a distance between the first client device and the second client device;

responsive at least to a determination that the first criterion and the second criterion have been met by the first client device, allow the first client device access through the entryway;

determine based on the calculated distance, that the second client device gained unauthorized access to the entryway due to proximity with the first client device; and

present an alert regarding the unauthorized access through the entryway of the second client device.

11. The system of claim 10 , wherein to determine that the physical location meets the first criteria, the instructions are further to cause the hardware processor to: determine that a distance between the physical location of the first client device and a location of the entryway is below a threshold value.

12. The system of claim 10 , wherein to determine that the permission level meets the second criterion, the instructions are further to cause the hardware processor to: determine that the first client device has successfully connected to a particular WiFi network associated with access to the entryway.

13. The system of claim 10 , wherein to determine that the physical location meets the first criterion, the instructions are further to cause the hardware processor to determine that the physical location of the first client device is within a particular zone associated with the entryway.

14. The system of claim 10 , wherein the instructions are further to cause the hardware processor to:

subsequent to allowing access: responsive to determining that the physical location of the first client device no longer meets the first criterion, block access through the entryway.

15. The system of claim 10 , wherein to allow access, the instructions are further to cause the hardware processor to open a physical lock controlling the access through the entryway.

16. The system of claim 10 , wherein the physical location of the first client device is determined based on one or more WiFi signals transmitted by the first client device and received by one or more access points installed on a ceiling near the entryway.

17. The system of claim 10 , wherein to determine the physical location of the first client device, the instructions are further to cause the hardware processor to:

receive, by a plurality of access points, wireless signals from the first client device;

determine a distance of the first client device from each of the plurality of access points; and

compute a location of the first client device based at least on: the distance of the first client device from each of the plurality of access points and a location of each of the plurality of access points.

18. The system of claim 10 , wherein to determine the physical location of the first client device, the instructions are further to cause the hardware processor to:

receive, by at least one access point, wireless signals from the first client device;

determine a distance of the first client device from the at least one access point and a direction of the first client device from the at least one access point; and

compute a location of the first client device based at least on: the distance of the first client device from the at least one access point and the direction of the first client device from the at least one access point.

19. A method, comprising:

identifying respective physical locations of a first client device and a second client device;

determining that the respective physical locations of the first client device and the second client device meet a first criterion for access through an entryway;

determining, based on respective permission levels associated with the first client device and the second client devices, that the first client device meets a second criterion for authorized access through the entryway and that the second client device does not meet the second criterion for access through the entryway;

determining, by a hardware processor, based on a distance between the first client device and the second client device, that the second client device is piggybacking onto the first client device for unauthorized access through the entryway; and

transmitting an alert regarding the unauthorized of the second client device to the entryway.