Use of identity and access management for service provisioning
Described is a system for monitoring provisions of services. The system includes a work order system for producing one or more work orders, an identity and access management system to verify information regarding a service provider and a system that receives a produced work order associated with a service provider upon receipt of a service request. The system requests information regarding service provider attributes from the identity and access management system, and receives from the identity and access management system information regarding at least some of the attributes of the service provider. The system determines a requisite level of expertise required for the service and determines whether the attributes received from the identity and access management system indicate that the service provider has the requisite level of attributes.
1 . A system, comprising:
one or more processors to:
send, to a device of a service provider, a beacon signal to initiate a transaction with the one or more processors;
receive, from the device of the service provider, a certification of the service provider for the transaction;
encrypt the certification to determine an encrypted certification;
compare the encrypted certification with a hash of the certification stored by a distributed ledger separate from the one or more processors and from the device;
determine, responsive to the comparison, that the service provider meets one or more criteria associated with servicing a type of equipment, the equipment located in a building;
configure, responsive to determining that the service provider meets one or more criteria associated with servicing the type of equipment, at least one electronic credential that provides access to one or more specified doors of the building related to the equipment and to one or more data elements of a building management system (BMS) database for servicing the equipment and not to one or more other parts data elements of the BMS database;
provide the at least one electronic credential to the device of the service provider; and
unlock the one or more specified doors responsive to a signal that comprises the at least one electronic credential received from the device of the service provider.
2 . The system of claim 1 , wherein the certification comprises an expertise level.
3 . The system of claim 1 , wherein the one or more processors are to provide the access for a duration corresponding to an estimate of a period of time for performing the servicing of the type of equipment.
4 . The system of claim 1 , wherein the one or more processors are to transmit a request for the certification to the device.
5 . The system of claim 1 , wherein the one or more processors use public-key encryption to encrypt the certification.
6 . The system of claim 1 , wherein the distributed ledger comprises a plurality of distributed databases.
7 . The system of claim 1 , wherein the equipment comprises building automation equipment.
8 . The system of claim 1 , wherein the one or more processors are to provide a work order regarding the type of equipment to the device.
9 . The system of claim 1 , wherein the distributed ledger comprises a signature of an attester corresponding to the hash of the certification.
10 . A method, comprising:
sending, by one or more processors to a device of a service provider, a beacon signal to initiate a transaction with the one or more processors;
receiving, by the one or more processors from the device of a service provider, a certification of the service provider;
encrypting, by the one or more processors, the certification to determine an encrypted certification;
comparing, by the one or more processors, the encrypted certification with a hash of the certification stored by a distributed ledger separate from the one or more processors and from the device;
determining, by the one or more processors, responsive to the comparison, that the service provider meets one or more criteria associated with servicing a type of equipment, the equipment located in a building;
providing, by the one or more processors, to the device of the service provider, responsive to determining that the service provider meets one or more criteria associated with servicing the type of equipment, a credential for access to one or more specified doors of the building related to the equipment and a credential for access only to one or more a software component related to the equipment; and
unlocking, by the one or more processors, the one or more specified doors responsive to receiving a signal from the device of the service provider.
11 . The method of claim 10 , wherein the certification comprises an expertise level.
12 . The method of claim 10 , wherein providing, by the one or more processors, access to the one or more doors comprises providing access for a duration corresponding to an estimate of a period of time for performing the servicing of the type of equipment.
13 . The method of claim 10 , further comprising transmitting, by the one or more processors, a request for the certification.
14 . The method of claim 10 , wherein encrypting the certification comprises using public-key encryption.
15 . The method of claim 10 , wherein the distributed ledger comprises a plurality of distributed databases.
16 . The method of claim 10 , wherein the equipment comprises building automation equipment.
17 . The method of claim 10 , further comprising providing, by the one or more processors, a work order regarding the type of equipment to the device.
18 . The method of claim 10 , wherein the distributed ledger comprises a signature of an attester corresponding to the hash of the certification.