Systems and methods for controlling access
The disclosed computer-implemented method for controlling access may include (i) installing on a personal mobile device a mobile device application that enforces an authorization security policy for protected premises, (ii) checking, by the mobile device application and in response to installing the mobile device application, whether the personal mobile device satisfies a condition of the authorization security policy, (iii) granting authorization for the personal mobile device to function as an access card based on a result of checking whether the personal mobile device satisfies the condition of the authorization security policy, and (iv) enforcing an additional access security policy on the personal mobile device after granting authorization for the personal mobile device to function as the access card. Various other methods, systems, and computer-readable media are also disclosed.
1. A computer-implemented method for controlling access, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:
installing on a personal mobile device a mobile device application that enforces an authorization security policy for protected premises;
checking, by the mobile device application and in response to installing the mobile device application, whether the personal mobile device satisfies a condition of the authorization security policy;
granting authorization for the personal mobile device to function as an access card based on a result of checking whether the personal mobile device satisfies the condition of the authorization security policy; and
enforcing an additional access security policy on the personal mobile device after granting authorization for the personal mobile device to function as the access card;
wherein the additional access security policy maps a specific location within the protected premises protected by the mobile device application to a security condition of disabling an input device of the personal mobile device.
2. The computer-implemented method of claim 1 , wherein enforcing the additional access security policy on the personal mobile device includes dynamically enforcing a sublocation-specific condition within the protected premises protected by the mobile device application based on the mobile device application detecting that a location of the personal mobile device matches the sublocation-specific condition.
3. The computer-implemented method of claim 1 , wherein an external security server to which the personal mobile device connects does not consume information indicating a more specific and granular location of the personal mobile device than information indicating a sublocation that a user of the personal mobile device attempted to access using the personal mobile device as the access card.
4. The computer-implemented method of claim 1 , wherein:
the additional access security policy specifies varying location-specific security conditions for differing locations within the protected premises protected by the mobile device application; and
the mobile device application applies the location-specific security conditions dynamically based on location information indicating a location of the personal mobile device that was detected by the personal mobile device.
5. The computer-implemented method of claim 4 , wherein the mobile device application applies the location-specific security conditions dynamically without providing the location information indicating the location of the personal mobile device to an external security server to protect the privacy of a user of the personal mobile device by keeping the location information contained within the personal mobile device rather than exposing the location information to the external security server.
6. The computer-implemented method of claim 1 , wherein the mobile device application prevents an external security server protecting the protected premises from consuming information indicating a location of the personal mobile device that is more specific than access card entry information.
7. The computer-implemented method of claim 1 , wherein the input device comprises a microphone.
8. The computer-implemented method of claim 1 , wherein the additional access security policy maps the specific location within the protected premises protected by the mobile device application to a security condition of disabling a wireless network component of the personal mobile device.
9. The computer-implemented method of claim 1 , wherein enforcing the additional access security policy is enabled through a push notification that is triggered through a local wireless network beacon.
10. The computer-implemented method of claim 1 , wherein the authorization security policy specifies a biometric security condition.
11. A system for controlling access, the system comprising:
an installation module, stored in memory, that installs on a personal mobile device a mobile device application that enforces an authorization security policy for protected premises;
a checking module, stored in memory, that checks, as part of the mobile device application and in response to installing the mobile device application, whether the personal mobile device satisfies a condition of the authorization security policy;
a granting module, stored in memory, that grants authorization for the personal mobile device to function as an access card based on a result of checking whether the personal mobile device satisfies the condition of the authorization security policy;
an enforcement module, stored in memory, that enforces an additional access security policy on the personal mobile device after granting authorization for the personal mobile device to function as the access card; and
at least one physical processor configured to execute the installation module, the checking module, the granting module, and the enforcement module;
wherein the additional access security policy maps a specific location within the protected premises protected by the mobile device application to a security condition of disabling an input device of the personal mobile device.
12. The system of claim 11 , wherein the enforcement module enforces the additional access security policy on the personal mobile device at least in part by dynamically enforcing a sublocation-specific condition within the protected premises protected by the mobile device application based on the mobile device application detecting that a location of the personal mobile device matches the sublocation-specific condition.
13. The system of claim 11 , wherein an external security server to which the personal mobile device connects does not consume information indicating a more specific and granular location of the personal mobile device than information indicating a sublocation that a user of the personal mobile device attempted to access using the personal mobile device as the access card.
14. The system of claim 11 , wherein:
the additional access security policy specifies varying location-specific security conditions for differing locations within the protected premises protected by the mobile device application; and
the mobile device application applies the location-specific security conditions dynamically based on location information indicating a location of the personal mobile device that was detected by the personal mobile device.
15. The system of claim 14 , wherein the mobile device application applies the location-specific security conditions dynamically without providing the location information indicating the location of the personal mobile device to an external security server to protect the privacy of a user of the personal mobile device by keeping the location information contained within the personal mobile device rather than exposing the location information to the external security server.
16. The system of claim 11 , wherein the mobile device application prevents an external security server protecting the protected premises from consuming information indicating a location of the personal mobile device that is more specific than access card entry information.
17. The system of claim 11 , wherein the input device comprises a microphone.
18. The system of claim 11 , wherein the additional access security policy maps the specific location within the protected premises protected by the mobile device application to a security condition of disabling a wireless network component of the personal mobile device.
19. The system of claim 11 , wherein the enforcement module enforces the additional access security policy through a push notification that is triggered through a local wireless network beacon.
20. A non-transitory computer-readable medium comprising one or more computer-readable instructions that, when executed by at least one processor of a computing device, cause the computing device to:
install on a personal mobile device a mobile device application that enforces an authorization security policy for protected premises;
check, by the mobile device application and in response to installing the mobile device application, whether the personal mobile device satisfies a condition of the authorization security policy;
grant authorization for the personal mobile device to function as an access card based on a result of checking whether the personal mobile device satisfies the condition of the authorization security policy; and
enforce an additional access security policy on the personal mobile device after granting authorization for the personal mobile device to function as the access card;
wherein the additional access security policy maps a specific location within the protected premises protected by the mobile device application to a security condition of disabling an input device of the personal mobile device.