Methods and apparatus for management of intrusion detection systems using verified identity
Disclosed are techniques for configuring an intrusion detection system, by receiving from a user device, a set of identity credentials, sending the set of identity credentials to an identity service to verify a user's identity that is associated with the set of credentials, receiving a result of the verification of the identity; and when verified, configuring the intrusion detection system to operate in a mode pre-selected based on the verified identity.
1. A method, comprising:
storing, by one or more processing circuits, a plurality of system modes, wherein each of the plurality of system modes identify one of a plurality of users, identify one or more security components of an intrusion detection system, and identify one or more configurations of the one or more security components, wherein a first system mode of the plurality of system modes activates security at one or more first entrance areas of a building and deactivates security at one or more second entrance areas of the building and a second system mode of the plurality of system modes deactivates security at the one or more first entrance areas of the building and the one or more second entrance areas of the building, wherein the first system mode is associated with a first user and the second system mode is associated with a second user;
receiving, by the one or more processing circuits, from a user device, one or more identity credentials of the second user;
communicating, by the one or more processing circuits, with an identity service to verify an identity of the second user associated with the one or more identity credentials;
receiving, by the one or more processing circuits, a result of a verification of the identity of the second user;
selecting, by the one or more processing circuits, the second system mode of the plurality of system modes based on the identity of the second user; and
configuring, by the one or more processing circuits, the intrusion detection system to operate based on the second system mode to deactivate security at the one or more first entrance areas of the building and the one or more second entrance areas of the building.
2. The method of claim 1 , wherein the one or more processing circuits are part of the intrusion detection system.
3. The method of claim 1 , wherein the one or more identity credentials comprise a plurality of different types of identity credentials.
4. The method of claim 1 , wherein the one or more identity credentials are proxies for identity attributes associated with the identity of the second user.
5. The method of claim 1 , wherein the plurality of system modes are stored as one or more data structures, each data structure defining one or more rules.
6. The method of claim 5 , wherein each rule of the one or more rules comprises one or more parameters for an identity variable, a security component variable, and an action variable associated with the security component variable.
7. The method of claim 6 , wherein the one or more rules further comprise a security level variable.
8. The method of claim 1 , wherein subsequent to receiving, by the one or more processing circuits, the one or more identity credentials,
receiving, by the one or more processing circuits, additional identification information via at least one of a credential reader or the user device, wherein the user device runs an identity wallet application; and
processing, by the one or more processing circuits, the additional identification information as originating from a trusted source based on having received the result of the verification of the identity of the second user, the result indicating the one or more identity credentials are verified.
9. The method of claim 8 , wherein the additional identification information is biometric information.
10. The method of claim 8 , wherein the additional identification information is previously verified by the identity service and is registered mobile credential information stored on the user device.
11. A system comprising one or more memory devices configured to store instructions thereon that, when executed by one or more processing circuits, cause the one or more processing circuits to:
store a plurality of system modes, wherein each of the plurality of system modes identify one of a plurality of users, identify one or more security components of an intrusion detection system, and identify one or more configurations of the one or more security components, wherein a first system mode of the plurality of system modes activates security at one or more first entrance areas of a building and deactivates security at one or more second entrance areas of the building and a second system mode of the plurality of system modes deactivates security at the one or more first entrance areas of the building and the one or more second entrance areas of the building, wherein the first system mode is associated with a first user and the second system mode is associated with a second user;
receive from a user device, one or more identity credentials of the second user;
communicate with an identity service to verify an identity of the second user associated with the one or more identity credentials;
receive, by the one or more processing circuits, a result of a verification of the identity of the second user;
select the second system mode of the plurality of system modes based on the identity of the second user; and
configure the intrusion detection system to operate based on the second system mode to deactivate security at the one or more first entrance areas of the building and the one or more second entrance areas of the building.
12. The system of claim 11 , wherein the one or more identity credentials comprise a plurality of different types of identity credentials.
13. The system of claim 11 , wherein the one or more identity credentials are proxies for identity attributes associated with the identity of the second user.
14. The system of claim 11 , wherein the plurality of system modes are stored as one or more data structures, each data structure defining one or more rules.
15. The system of claim 14 , wherein each rule of the one or more rules comprises one or more parameters for an identity variable, a security component variable, and an action variable associated with the security component variable.
16. The system of claim 15 , wherein the one or more rules further comprise a security level variable.
17. The system of claim 11 , wherein subsequent to receiving, by the one or more processing circuits, the one or more identity credentials,
receiving, by the one or more processing circuits, additional identification information via at least one of a credential reader or the user device, wherein the user device runs an identity wallet application; and
processing, by the one or more processing circuits, the additional identification information as originating from a trusted source based on having received the result of the verification of the identity of the second user, the result indicating the one or more identity credentials are verified.
18. The system of claim 17 , wherein the additional identification information is biometric information.
19. The system of claim 17 , wherein the additional identification information is previously verified by the identity service and is registered mobile credential information stored on the user device.
20. A method, comprising:
storing, by one or more processing circuits, a plurality of system modes, wherein each of the plurality of system modes identify one of a plurality of users, identify one or more security components of an intrusion detection system, and identify one or more configurations of the one or more security components, wherein a first system mode of the plurality of system modes activates security at one or more first entrance areas of a building and deactivates security at one or more second entrance areas of the building and a second system mode of the plurality of system modes deactivates security at the one or more first entrance areas of the building and the one or more second entrance areas of the building, wherein the first system mode is associated with a first user and the second system mode is associated with a second user;
receiving, by the one or more processing circuits, from a user device, one or more identity credentials of the second user;
verifying, by the one or more processing circuits, an identity of the second user associated with the one or more identity credentials;
selecting, by the one or more processing circuits, the second system mode of the plurality of system modes based on the identity of the second user and the plurality of system modes; and
configuring, by the one or more processing circuits, the intrusion detection system to operate based on the second system mode to deactivate security at the one or more first entrance areas of the building and the one or more second entrance areas of the building.