A first network node device, comprising:
- a memory;
- a network interface circuitry operable to communicate over a network;
- a processing circuitry operatively coupled to the memory and the network interface circuitry, the first network node device being communicatively coupled, via the network interface circuitry over the network, to a second network node device associated with a service, a third network node device associated with a fulfillment-side user account of the service, and a fourth network node device associated with a first secured site of a plurality of secured sites;
- and
- wherein the memory includes instructions executable by the processing circuitry, whereby the processing circuitry is configured to:
- receive, via the network interface circuitry over the network, from the second network node device, a first indication including a request to access the first secured site to deliver a deliverable entity to a location within the first secured site identified by geographic coordinates;
- obtain, from among a template repository storing a plurality of access credentialing dataset templates that correspond to the plurality of secured sites, an access credentialing dataset template corresponding to the first secured site to obtain an obtained template, each template including subject attribute user interface elements configured to capture information to complete an access credentialing dataset;
- send, via the network interface circuitry over the network, to the third network node device, a second indication including the obtained template and instructions that cause the third network node device to present the subject attribute user interface elements to capture information to complete the access credentialing dataset corresponding to the first secured site;
- receive, via the network interface circuitry over the network, from the third network node device, a third indication including a completed access credentialing dataset having a self-image captured by the third network node device and an identification document image;
- extract, from the completed access credentialing dataset, machine readable subject attribute values by performing optical character recognition on at least one image of a government issued identification document, normalizing the extracted values to a canonical format to obtain normalized subject attribute values, and computing a facial similarity score between the self-image and the identification document image;
- derive, from the geographic coordinates, a geofence definition including at least one of a polygon and a radius that bounds the location within the first secured site;
- evaluate a risk score based at least in part on the normalized subject attribute values, the facial similarity score, and the geofence definition;
- confirm a user identity associated with the third network node device based at least in part on the risk score;
- in response to confirming the user identity, send, via the network interface circuitry over the network, to the fourth network node device associated with the first secured site, a fourth indication including a request to access the first secured site, the fourth indication including information associated with the confirmed user identity;
- receive, via the network interface circuitry over the network, from the fourth network node device, a fifth indication including a machine verifiable access credential that enables access to the first secured site to deliver the deliverable entity to the location;
- send, via the network interface circuitry over the network, to the third network node device, a sixth indication including the access credential;
- and
- cause the third network node device to present the access credential at an access control device of the first secured site to obtain access to the first secured site to deliver the deliverable entity to the location.