Systems and methods to manage access to a physical space

摘要

In one embodiment, a lock comprises a locking mechanism selectively positionable between a locked position and an unlocked position, a user interface to receive a first user input which uniquely identifies a first user, a communication interface to enable electronic communication with a remote computer system and a controller comprising logic to generate a query to a directory service, wherein the query comprises the first user input, and open the locking mechanism in response to a signal from the directory service indicating that that the first user is authorized to open the lock and that a set of conditions required to open the lock are satisfied.

主权项

1. A lock, comprising:
a locking mechanism selectively positionable between a locked position and an unlocked position; a user interface configured to receive a first user input that identifies a first user; a communication interface configured to enable electronic communication with a remote computer system; and a controller configured to:
transmit a query to a directory service, wherein the query comprises first user input data based on the first user input;receive a first signal from the directory service indicating that the first user is authorized to open the lock;determine whether a set of conditions are satisfied by:
transmitting a second query to a policy decision server, wherein the policy decision server is distinct from the directory service, and wherein the second query comprises the first user input and authorization policy data that identifies the set of conditions; andreceiving a second signal from the policy decision server indicating whether the set of conditions are satisfied; andopen the locking mechanism in response to the first signal and in response to determining that the set of conditions required to open the lock are satisfied.