Patent ID: 8549584

Claim:
A system that facilitates management of information in a network, the system comprising: an access control device configured to generate a physical access control event in response to input received at the access control device from a user in physical proximity to the access control device, the physical access control event including physical location information indicating the user's ingress to or egress from a particular physical location; one or more processing units; a unified access control component, executable by the one or more processing units, configured to enforce one or more network access policies of the network, the one or more network access policies defining a subset of network access privileges granted to the user based on a combination of varying levels of physical access rights and varying levels of network access rights, the physical access rights determined based on the physical access control event indicating the particular physical location of the user and the network access rights determined based on a network access event of the user, the one or more network access policies further including a policy to cause the unified access control component to deny network access to the user when the unified access control component detects a mismatch between the varying levels of physical access rights and the varying levels of network access rights; and a dynamic authentication component, associated with the unified access control component, configured to request authentication of the user prior to the subset of network access privileges being granted to the user and is further configured to requests re-authentication of the user, after the subset of network access privileges have been granted to the user, when at least one of the network access event of the user and the physical access control event of the user indicates a change in at least one of the particular physical location of the user and network access rights of the user.