Access control flux system
An access control system for enabling access of an attendant to a customer account on a cloud application hosted on a cloud computing system includes a vision sensor coupled with the cloud computing system. The cloud computing system stores customer accounts, an access factorization rule, location-based endpoints, and a supervisor identifier. The system determines that the customer and attendant are at a first endpoint and determines a particular interaction between the attendant and the customer, then factorizes an access indicator and either permits access or denies access of the attendant to the customer account, and may form and send a message comprising a denial of access semantic to the supervisor.
1. An account access control system for enabling access of an attendant to a customer account on a cloud application hosted on a cloud computing system, the system comprising:
a vision sensor communicatively coupled with the cloud computing system;
the cloud computing system having a memory storing a plurality of customer accounts, at least one access factorization rule, a plurality of location-based endpoints, and a supervisor identifier associated with each of the location-based endpoints;
the cloud computing system further having stored programming instructions configured to cause the cloud computing system to:
determine that the customer and the attendant are at a first endpoint amongst the plurality of endpoints based on inputs from the vision sensor, the first endpoint being associated with a computer allowing the access to the cloud application by the attendant, the first endpoint further being associated with a first supervisor identified by the supervisor identifier;
determine a particular interaction between the attendant and the customer at the first endpoint based on inputs from the vision sensor;
factorize an access indicator based on the at least one access factorization rule, the determination that the customer and the attendant are at the first endpoint, and the particular interaction; and
either permit access of the attendant to the customer account or deny access of the attendant to the customer account;
the step of denying access of the attendant to the customer account being based on a determination that the factorized access indicator indicates that the access must be denied, and further including forming a message comprising a denial of access semantic and sending the message to the first supervisor;
the step of permitting access of the attendant to the customer account being based on a determination that the factorized access indicator indicates that the access must be permitted.
2. The system of claim 1 , wherein the factor of the access indicator includes a predefined interval.
3. The system of claim 2 , wherein the predefined interval is a semantic interval.
4. The system of claim 1 , wherein the enablement of access of the attendant to the customer account comprises enablement of access of the attendant to the computer.
5. The system of claim 1 , wherein the enablement of access of the attendant to the customer account comprises enablement of access of the attendant at a client portion of the cloud application.
6. The system of claim 1 , wherein the enablement of access of the attendant to the customer account comprises enablement of access of the attendant at a server portion of the cloud application.
7. An account access control system for enabling access of an attendant to a customer account on a cloud application hosted on a cloud computing system, the system comprising:
a vision sensor communicatively coupled with a first host device,
the first host device having a memory storing a plurality of customer accounts, at least one access factorization rule, a plurality of location-based endpoints and a plurality of supervisor identifiers associated with the location-based endpoints;
the first host device having stored programming instructions configured to cause the first host device to:
determine that the customer and the attendant are at a first endpoint amongst the plurality of endpoints based on inputs from the vision sensor, the first endpoint being associated with the first host device allowing access to the cloud application by the attendant, the first endpoint further being associated with a first supervisor identified by one of the plurality of supervisor identifiers,
determine a particular interaction between the attendant and the customer at the first endpoint based on inputs from the vision sensor;
factorize an access indicator based on the at least one access factorization rule, the determination that the customer and the attendant are at the first endpoint, and the particular interaction; and
either permit access of the attendant to the customer account or deny access of the attendant to the customer account;
the step of denying access of the attendant to the customer account being based on a determination that the factorized access indicator indicates that the access must be denied, and further including forming a message comprising a denial of access semantic and sending the message to the first supervisor;
the step of permitting access of the attendant to the customer account being based on a determination that the factorized access indicator indicates that the access must be permitted.
8. The system of claim 7 , wherein the factor of the access indicator includes a predefined interval.
9. The system of claim 8 , wherein the predefined interval is a semantic interval.
10. The system of claim 7 , wherein the enablement of access of the attendant to the customer account comprises enablement of access of the attendant to the first host device.
11. The system of claim 7 , wherein the enablement of access of the attendant to the customer account comprises enablement of access of the attendant at a client portion of the cloud application.
12. The system of claim 7 , wherein the enablement of access of the attendant to the customer account comprises enablement of access of the attendant at the server portion of the cloud application.
13. The system of claim 11 , wherein the client portion of the cloud application is a thin client application.
14. The system of claim 11 , wherein the client portion of the cloud application is a thick client application.