Methods and system for controlling access to enterprise resources based on tracking
Methods and systems for controlling access to enterprise resources based on tracking are disclosed. In one implementation, an enterprise security system includes one or more tracking systems, an information technology (IT) system, and a security integration system (SIS). The one or more tracking systems track movement of individuals throughout the enterprise. The SIS blocks access to the computer resources based on the tracked movement of the individuals within the enterprise.
1. An enterprise security system, comprising:
one or more tracking systems for tracking, using facial recognition to identify individuals based on images captured using one or more surveillance cameras installed in multiple rooms of an enterprise building, movement of the individuals throughout the multiple rooms, wherein the one or more tracking systems include an access control system for controlling physical access of the individuals through access points within the enterprise building, a first access point of the access points permitting physical access to a room of the enterprise building and having a reader device that is included in the access control system;
an information technology (IT) system for providing access to computer resources within the enterprise building; and
a security integration system for one of:
receiving, from the IT system, a list of authorized computers for each of the individuals, and providing, to the IT system based on the list of authorized computers, a white list identifying one or more of the individuals that are determined, based on a metadata stream of the tracked movement of the individuals, to be in a same room as the authorized computers; or
receiving, from the IT system, a list of unauthorized computers for each of the individuals, and providing, to the IT system based on the list of unauthorized computers, a black list identifying one or more the individuals that are determined, based on the metadata stream of the tracked movement of the individuals, to be in a same room as the unauthorized computers;
wherein the metadata stream includes location within the enterprise building and time stamp for each identified individual,
wherein the IT system allows or blocks access, requested by the one or more of the individuals, to at least a portion of the computer resources based on the white list or the black list.
2. The system as claimed in claim 1 , wherein the security integration system determines at least the portion of the computer resources as authorized computer systems for the one or more of the individuals identified in the white list, and wherein the IT system blocks access to the authorized computer systems, for one of the individuals that is not identified in the white list.
3. The system as claimed in claim 1 , wherein the security integration system accesses an asset management database to determine locations of computer systems within the enterprise building.
4. An enterprise security system, comprising:
one or more tracking systems for tracking, using facial recognition to identify an individual based on images captured using one or more surveillance cameras installed in multiple rooms of an enterprise building, movement of the individual throughout the multiple rooms, wherein the one or more tracking systems include an access control system for controlling physical access of individuals through access points within the enterprise building, a first access point of the access points permitting physical access to a room of the enterprise building and having a reader device that is included in the access control system;
an employee resource management system including an employee database indicating location of a desk of the individual;
a security integration system for determining, based on receiving a metadata stream of the tracked movement of the individual, whether the individual is moving to and/or from the desk of the individual, wherein the metadata stream includes location within the enterprise building and time stamp for the individual;
providing, based on a list of authorized computer resources, a white list identifying the individual determined, based on the metadata stream, to be moving to the desk of the individual associated with the authorized computer resources; and
providing, based on the white list, access for the individual to the authorized computer resources.
5. A method, comprising:
tracking, using facial recognition to identify an individual based on images captured using one or more surveillance cameras installed in multiple rooms of an enterprise building, movement of the individual throughout the multiple rooms, wherein tracking movement includes controlling and reporting, via an access control system and to a metadata stream, physical access of individuals through access points within the enterprise building, a first access point of the access points permitting physical access to a room of the enterprise building and having a reader device that is included in the access control system, wherein the metadata stream includes location within the enterprise building and time stamp for the individual;
providing, based on a list of authorized computer resources, a white list identifying the individual determined, based on the metadata stream, to be in a same room as the authorized computer resources;
providing, based on a list of unauthorized computer resources, a black list identifying the individual determined, based on the metadata stream, to be in a same room as the unauthorized computer resources;
providing, based on the white list, access for the individual to the authorized computer resources within the enterprise building using an authentication server; and
blocking, based on the black list, access for the individual to the unauthorized computer resources determined, based on the tracked movement of the individual within the enterprise building, to be in a same room as the individual.
6. The method as claimed in claim 5 , further comprising instructing an IT system to block access to the authorized computer resources, based on the tracked movement of the individual, when individual is not present.
7. The method as claimed in claim 6 , further comprising accessing an asset management database to determine locations of computer systems within the enterprise building.
8. A method, comprising:
tracking, using facial recognition to identify an individual based on images captured using one or more surveillance cameras installed in multiple rooms of an enterprise building, movement of the individual throughout the multiple rooms, wherein the tracking movement includes controlling and reporting, via an access control system, physical access of individuals through access points within the enterprise building, a first access point of the access points that permits physical access to an area of the enterprise building and having a reader device that is included in the access control system;
receiving a metadata stream of the tracked movement of the individual, wherein the metadata stream includes location within the enterprise building and time stamp for the individual;
determining, based on the metadata stream of the tracked movement of the individual, whether the individual is moving to and/or from a desk of the individual based on information from an employee resource management system including an employee database indicating location of the desk of the individual;
providing, based on a list of authorized computer resources, a white list identifying the individual determined, based on the metadata stream, to be moving to the desk of the individual associated with the authorized computer resources; and
providing, based on the white list, access for the individual to the authorized computer resources.
9. The method as claimed in claim 8 , further comprising determining an assigned desk location of the desk of the individual and comparing the tracked movement to the assigned desk location.
10. The method of claim 8 , wherein the controlling the physical access of the individuals through the access points within the enterprise building comprises:
receiving, from a reader device installed at the first access point, one or more credentials of the individual proximate to the first access point; and
causing, based on the one or more credentials, the first access point to grant physical access to the at least one of the multiple rooms.
11. The method of claim 10 , where the first access point is a door, and the causing comprises sending a signal to unlock a door lock of the door.
12. A method, comprising:
tracking, by tracking systems, using facial recognition to identify an individual based on images captured using one or more surveillance cameras installed in multiple rooms of an enterprise building, movement of the individual throughout the multiple rooms, wherein the tracking systems include an access control system for controlling physical access of individuals through access points within the enterprise building, a first access point of the access points that permits physical access to a room of the enterprise building and having a reader device that is included in the access control system;
obtaining, via an employee resource management system, location of a desk of the individual, the employee resource management system including an employee database indicating the location of desks of the individuals;
receiving, by a security integration system, a metadata stream of the tracked movement of the individual, wherein the metadata stream includes location within the enterprise building and time stamp for the individual;
determining, based on the metadata stream of the tracked movement of the individual, whether the individual is moving to and/or from the desk of the individual by reference to information stored in the employee database;
providing, based on a list of authorized computer resources, a white list identifying the individual determined, based on the metadata stream, to be moving to the desk of the individual associated with the authorized computer resources; and
providing, based on the white list, access for the individual to the authorized computer resources.