Visitor access management
Methods, systems and computer readable media for managing access of visitors to a facility as described herein can provide a seamless process by which a visitor of an organization may be granted access not only to the physical facility but also automatically granted network access (e.g., granted access to an enterprise network) with limited or no external human touch points and without compromising security.
1. A method comprising:
providing an electronic invitation communication to a visitor device, the electronic invitation communication including a computer readable indicium;
determining physical presence of the visitor device by sensing, at a computer readable indicium sensor system, the computer readable indicium presented by the visitor device;
validating the computer readable indicium;
in response to determination that the computer readable indicium is valid, transmitting an authentication token to the visitor device;
receiving, at a visitor input device, a user input including the authentication token;
in response to determination that the authentication token in the received user input is valid, creating a visitor account by utilizing visitor information associated with the computer readable indicium, wherein the visitor information comprises one or more of visitor name, authentication information, and visitor email to permit the visitor device to automatically connect to a computer network without visitor intervention;
providing a network connection from the computer network to the visitor device;
causing a captive portal landing page that corresponds to a captive portal associated with the computer network to be displayed on the visitor device;
automatically searching for an electronically stored version of the computer readable indicium on the visitor device, wherein the automatically searching is in response to loading and displaying of the captive portal landing page on the visitor device;
in response to determination that the electronically stored version of the computer readable indicium is found on the visitor device, determining, using the captive portal, the visitor information based on the electronically stored version of the computer readable indicium;
performing a login process, using the visitor information, from the captive portal to a policy server to login the visitor device to the computer network; and
upon successfully performing the login process, granting the visitor device access to the computer network upon successful matching of the visitor information associated with the visitor account and based on an authentication policy evaluation.
2. The method of claim 1 , wherein the computer readable indicium includes one of a quick response (QR) code, a two-dimensional barcode, and a three-dimensional barcode.
3. The method of claim 1 , wherein validating the computer readable indicium includes determining that the computer readable indicium is being sensed at a date and time within a period of validity indicated in the electronic invitation communication.
4. The method of claim 1 , wherein the authentication token includes a one time password.
5. The method of claim 1 , further comprising:
when the electronically stored version of the computer readable indicium is not found on the visitor device, receiving a manually provided indication of a location of the electronically stored version of the computer readable indicium on the visitor device.
6. The method of claim 1 , further comprising:
providing a second level authentication request to the visitor device;
receiving second level authentication information from the visitor device; and
granting access to the computer network based on the second level authentication.
7. The method of claim 1 , wherein the captive portal is displayed automatically or in response to a user attempt to access the computer network.
8. The method of claim 1 , wherein causing the captive portal landing page that corresponds to the captive portal associated with the computer network to be displayed comprises causing the captive portal landing page that corresponds to the captive portal associated with the computer network to be displayed via a browser on the visitor device.
9. A system comprising:
one or more hardware processors; and
a non-transitory computer readable medium, coupled to the one or more hardware processors, the non-transitory computer readable medium having stored thereon on software instructions that, when executed by the one or more hardware processors, cause the one or more hardware processors to perform operations including:
providing an electronic invitation communication to a visitor device, the electronic invitation communication including a computer readable indicium;
determining physical presence of the visitor device by sensing, at a computer readable indicium sensor system, the computer readable indicium presented by the visitor device;
validating the computer readable indicium;
in response to determination that the computer readable indicium is valid, transmitting an authentication token to the visitor device;
receiving, at a visitor input device, a user input including the authentication token;
in response to determination that the authentication token in the received user input is valid, creating a visitor account by utilizing visitor information associated with the computer readable indicium, wherein the visitor information comprises one or more of visitor name, authentication information, and visitor email to permit the visitor device to automatically connect to a computer network without visitor intervention;
providing a network connection from the computer network to the visitor device;
causing a captive portal landing page that corresponds to a captive portal associated with the computer network to be displayed on the visitor device;
automatically searching for an electronically stored version of the computer readable indicium on the visitor device, wherein the automatically searching is in response to loading and displaying of the captive portal landing page on the visitor device;
in response to determination that the electronically stored version of the computer readable indicium is found on the visitor device, determining, using the captive portal, the visitor information based on the electronically stored version of the computer readable indicium;
performing a login process, using the visitor information, from the captive portal to a policy server to login the visitor device to the computer network; and
upon successfully performing the login process, granting the visitor device access to the computer network upon successful matching of the visitor information associated with the visitor account and based on an authentication policy evaluation.
10. The system of claim 9 , wherein the computer readable indicium includes one of a quick response (QR) code, a two-dimensional barcode, and a three-dimensional barcode.
11. The system of claim 9 , wherein validating the computer readable indicium includes determining that the computer readable indicium is being sensed at a date and time within a period of validity indicated in the electronic invitation communication.
12. The system of claim 9 , wherein the authentication token includes a one time password.
13. The system of claim 9 , wherein the operations further include:
when the electronically stored version of the computer readable indicium is not found on the visitor device, receiving a manually provided indication of a location of the electronically stored version of the computer readable indicium on the visitor device.
14. The system of claim 9 , wherein the operations further include:
providing a second level authentication request to the visitor device;
receiving second level authentication information from the visitor device; and
granting access to the computer network based on the second level authentication.
15. A non-transitory computer readable medium having stored thereon software instructions that, when executed by one or more processors, cause the one or more processors to perform operations including:
providing an electronic invitation communication to a visitor device, the electronic invitation communication including a computer readable indicium;
determining physical presence of the visitor device by sensing, at a computer readable indicium sensor system, the computer readable indicium presented by the visitor device;
validating the computer readable indicium;
in response to determination that the computer readable indicium is valid, transmitting an authentication token to the visitor device;
receiving, at a visitor input device, a user input including the authentication token;
in response to determination that the authentication token in the received user input is valid, creating a visitor account by utilizing visitor information associated with the computer readable indicium, wherein the visitor information comprises one or more of visitor name, authentication information, and visitor email to permit the visitor device to automatically connect to a computer network without visitor intervention;
providing a network connection from the computer network to the visitor device;
causing a captive portal landing page that corresponds to a captive portal associated with the computer network to be displayed on the visitor device;
automatically searching for an electronically stored version of the computer readable indicium on the visitor device, wherein the automatically searching is in response to loading and displaying of the captive portal landing page on the visitor device;
in response to determination that the electronically stored version of the computer readable indicium is found on the visitor device, determining, using the captive portal, the visitor information based on the electronically stored version of the computer readable indicium;
performing a login process, using the visitor information, from the captive portal to a policy server to login the visitor device to the computer network; and
upon successfully performing the login process, granting the visitor device access to the computer network upon successful matching of the visitor information associated with the visitor account and based on an authentication policy evaluation.
16. The non-transitory computer readable medium of claim 15 , wherein the computer readable indicium includes one of a quick response (QR) code, a two-dimensional barcode, and a three-dimensional barcode.
17. The non-transitory computer readable medium of claim 15 , wherein validating the computer readable indicium includes determining that the computer readable indicium is being sensed at a date and time within a period of validity indicated in the electronic invitation communication.
18. The non-transitory computer readable medium of claim 15 , wherein the authentication token includes a one time password.
19. The non-transitory computer readable medium of claim 15 , wherein the operations further include:
when the electronically stored version of the computer readable indicium is not found on the visitor device, receiving a manually provided indication of a location of the electronically stored version of the computer readable indicium on the visitor device.
20. The non-transitory computer readable medium of claim 15 , wherein the operations further include:
providing a second level authentication request to the visitor device;
receiving second level authentication information from the visitor device; and
granting access to the computer network based on the second level authentication.