---
description: Manage the security of buildings
---

# BMS

The important requirement mentioned during our interviews is not to forget the physical security aspect.&#x20;

There's not much specific to healthcare, the requirements are similar to large facility management. However, an additional complexity is that workers may be rotating very often, or work at unusual hours. So access management can become quite complex. In practice, due to the limitations of OAuth2 that doesn't provide human friendly delegation (see D4 use cases in contrast), most teams access is made using a smartcard, traced and validated after the fact. The access of patients is managed through dedicated administrative teams. &#x20;

### Use case : manage physical access

The system is also able to manage cyber physical system, and we made a demonstration for the access to buildings (which we saw in the introduction that it is in the security perimeter of healthcare organizations). Studies related to [brick schema](https://brickschema.org/) have shown that most applications are unable to manage [who/what/when conditions](https://brickschema.org/papers/WhoWhatWhen-BuildSys-2019-Koh.pdf).&#x20;

![](https://3178453543-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MRtPf74KcFoj7U-KiQV%2F-MabsJIdJjZ18sm3h7vP%2F-MabsPVIRdxiV836gn81%2Fimage.png?alt=media\&token=8fd69155-26ed-47e6-8c54-26f77eaaac01)

It would be possible to further use our graph layer to represent the physical structure.&#x20;

![Possible extension using graphs](https://3178453543-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MRtPf74KcFoj7U-KiQV%2F-MaYbr9hPqwQl0mjuxY0%2F-MaYfHIxuvJEzjsYDult%2Fimage.png?alt=media\&token=bd171fdb-e669-4ee0-b1cd-6df2fcb1847a)
