Abstract: Methods, systems, apparatuses, and computer-readable media for updating an operational parameter of a device of a local network of interconnected devices are provided. A user-operated device, in association with an attempt to access the device, may provide an update to the operational parameter of the device. The user-operated device may send the update to the operational parameter before sending the device an operational command. The device may apply the update received from the user-operated device before performing an operation corresponding to the operational command.

Abstract: An access control system may be deployed at a location in a multi-tenant environment. The access control system may store access control information at one or more of an access control device, an access control bridge device, or an access control server. Tenant-specific access control information may be respectively stored at tenant-specific access control devices to control access to tenant-specific areas of the location. Shared access control information may be stored at shared access control devices to control access to common areas of the location. The access control system may be selectively configured such that an access device, an access control bridge device, or the access control server processes requests for access that are received at the location.

Abstract: Systems, methods, and devices are described herein for executing a lockdown of electronic locks deployed in a local network of interconnected devices. In example implementations, each electronic lock is provided with a unique encryption key specific to that electronic lock and is provided with a shared encryption key. To execute a lockdown of all electronic locks in the local network, a server generates a locking instruction and encrypts it using the shared encryption key. The server then transmits the encrypted locking instruction to the gateway devices of the local network which, in turn, transmit it to each of the electronic locks. Upon receipt of the encrypted locking instruction, the electronic locks attempt to decrypt it using the shared encryption key. Upon successful decryption of the encrypted locking instruction, an electronic lock toggles to a lock state.

Abstract: Systems, methods, and apparatus for using a message broker that implements a publish-subscribe messaging protocol to exchange messages between a remote server and a bridge computing device of a local network of interconnected devices are disclosed. In one example, a bridge computing devices transmits to a remote server, a provisioning request in response to achieving a power-on state. The server generates and transmits, to the bridge computing device, a provisioning response that includes information indicating a channel to which the remote server will publish messages and a channel to which the bridge computing device should publish messages. The bridge computing device subscribes to the channel the server will publish to, and the server subscribes to the channel the bridge computing device will publish to. Third-party computing devices may also subscribe and publish to the channels in order to receive and provide messages to the bridge computing device.

Abstract: An access control system may be deployed at a location in a multi-tenant environment. The access control system may store access control information at one or more of an access control device, an access control bridge device, or an access control server. Tenant-specific access control information may be respectively stored at tenant-specific access control devices to control access to tenant-specific areas of the location. Shared access control information may be stored at shared access control devices to control access to common areas of the location. The access control system may be selectively configured such that an access device, an access control bridge device, or the access control server processes requests for access that are received at the location.

Abstract: An encrypted security system and associated methods for controlling physical access. The system includes a security server configured to receive a request for authentication from a mobile device, the request having information identifying the mobile device and a physical access control device. The security server forwards an encryption message having a plurality of unique identifiers to the physical access control device via the mobile device. The physical access control device is configured to authenticate the plurality of unique identifiers in the encryption message and operate an access control mechanism.

Abstract: An access card may store an encrypted operation key and a key used to read the encrypted operation key from the access card. The encrypted operation key and the key may be based on a unique identifier (UID) of the access card. The encrypted operation key may be obtained by encrypting an operation key using a cryptographic key that is also based on the UID of the access card. An access card reader may read the UID from the access card and use it to generate the key used to read the encrypted operation key from the access card. The access card read may also use the UID read from the access card to generate a cryptographic key used to decrypt the encrypted operation key. The access card reader may validate the decrypted operation key and determine whether to grant or deny access, for example, via an access control device.

Abstract: An access control system may be deployed at a location in a multi-tenant environment. The access control system may store access control information at one or more of an access control device, an access control bridge device, or an access control server. Tenant-specific access control information may be respectively stored at tenant-specific access control devices to control access to tenant-specific areas of the location. Shared access control information may be stored at shared access control devices to control access to common areas of the location. The access control system may be selectively configured such that an access device, an access control bridge device, or the access control server processes requests for access that are received at the location.

Abstract: An encrypted security system and associated methods for controlling physical access are described. The system includes a security server configured to receive a request for authentication from a mobile device, the request including information identifying the mobile device and a physical access control device. The security server forwards an encryption message including a plurality of unique identifiers to the physical access control device via the mobile device. The physical access control device is configured to authenticate the plurality of unique identifiers in the encryption message and operate an access control mechanism.

Abstract: Systems, methods, and apparatus for using a message broker that implements a publish-subscribe messaging protocol to exchange messages between a remote server and a bridge computing device of a local network of interconnected devices are disclosed. In one example, a bridge computing devices transmits to a remote server, a provisioning request in response to achieving a power-on state. The server generates and transmits, to the bridge computing device, a provisioning response that includes information indicating a channel to which the remote server will publish messages and a channel to which the bridge computing device should publish messages. The bridge computing device subscribes to the channel the server will publish to, and the server subscribes to the channel the bridge computing device will publish to. Third-party computing devices may also subscribe and publish to the channels in order to receive and provide messages to the bridge computing device.

Abstract: An access card may store an encrypted operation key and a key used to read the encrypted operation key from the access card. The encrypted operation key and the key may be based on a unique identifier (UID) of the access card. The encrypted operation key may be obtained by encrypting an operation key using a cryptographic key that is also based on the UID of the access card. An access card reader may read the UID from the access card and use it to generate the key used to read the encrypted operation key from the access card. The access card read may also use the UID read from the access card to generate a cryptographic key used to decrypt the encrypted operation key. The access card reader may validate the decrypted operation key and determine whether to grant or deny access, for example, via an access control device.

Abstract: An access control system may be deployed at a location in a multi-tenant environment. The access control system may store access control information at one or more of an access control device, an access control bridge device, or an access control server. Tenant-specific access control information may be respectively stored at tenant-specific access control devices to control access to tenant-specific areas of the location. Shared access control information may be stored at shared access control devices to control access to common areas of the location. The access control system may be selectively configured such that an access device, an access control bridge device, or the access control server processes requests for access that are received at the location.

Abstract: A system is described for controlling an actuating unit that restricts physical access such as a motorized garage door actuator unit. The system comprises a mobile wireless communication device, an electro-mechanical access control security device, and a receiving unit controlling the electro-mechanical access control security device, the receiving unit paired with the mobile wireless communication device for receiving user input for activating the electro-mechanical access control security device via a peer-to-peer communication directly with the mobile wireless communication device, and a pre-authorization of communication of the receiving unit with the mobile wireless communication device, the mobile wireless communication device receiving the pre-authorization from a central security server.

Abstract: An access card may store an encrypted operation key and a key used to read the encrypted operation key from the access card. The encrypted operation key and the key may be based on a unique identifier (UID) of the access card. The encrypted operation key may be obtained by encrypting an operation key using a cryptographic key that is also based on the UID of the access card. An access card reader may read the UID from the access card and use it to generate the key used to read the encrypted operation key from the access card. The access card read may also use the UID read from the access card to generate a cryptographic key used to decrypt the encrypted operation key. The access card reader may validate the decrypted operation key and determine whether to grant or deny access, for example, via an access control device.

Abstract: An encrypted security system and associated methods for controlling physical access. The system includes a security server configured to receive a request for authentication from a mobile device, the request comprising information identifying the mobile device and a physical access control device. The security server forwards an encryption message comprising a plurality of unique identifiers to the physical access control device via the mobile device. The physical access control device is configured to authenticate the plurality of unique identifiers in the encryption message and operate an access control mechanism.

Abstract: Systems, methods, and apparatus for using a message broker that implements a publish-subscribe messaging protocol to exchange messages between a remote server and a bridge computing device of a local network of interconnected devices are disclosed. In one example, a bridge computing devices transmits to a remote server, a provisioning request in response to achieving a power-on state. The server generates and transmits, to the bridge computing device, a provisioning response that includes information indicating a channel to which the remote server will publish messages and a channel to which the bridge computing device should publish messages. The bridge computing device subscribes to the channel the server will publish to, and the server subscribes to the channel the bridge computing device will publish to. Third-party computing devices may also subscribe and publish to the channels in order to receive and provide messages to the bridge computing device.

Abstract: A system is described for controlling an actuating unit that restricts physical access such as a motorized garage door actuator unit. The system comprises a mobile wireless communication device, an electro-mechanical access control security device, and a receiving unit controlling the electro-mechanical access control security device, the receiving unit paired with the mobile wireless communication device for receiving user input for activating the electro-mechanical access control security device via a peer-to-peer communication directly with the mobile wireless communication device, and a pre-authorization of communication of the receiving unit with the mobile wireless communication device, the mobile wireless communication device receiving the pre-authorization from a central security server.

Abstract: Systems, methods, and apparatus for using a message broker that implements a publish-subscribe messaging protocol to exchange messages between a remote server and a bridge computing device of a local network of interconnected devices are disclosed. In one example, a bridge computing devices transmits to a remote server, a provisioning request in response to achieving a power-on state. The server generates and transmits, to the bridge computing device, a provisioning response that includes information indicating a channel to which the remote server will publish messages and a channel to which the bridge computing device should publish messages. The bridge computing device subscribes to the channel the server will publish to, and the server subscribes to the channel the bridge computing device will publish to. Third-party computing devices may also subscribe and publish to the channels in order to receive and provide messages to the bridge computing device.

Abstract: An encrypted security system and associated methods for controlling physical access are described. The system includes a security server configured to receive a request for authentication from a mobile device, the request including information identifying the mobile device and a physical access control device. The security server forwards an encryption message including a plurality of unique identifiers to the physical access control device via the mobile device. The physical access control device is configured to authenticate the plurality of unique identifiers in the encryption message and operate an access control mechanism.

Abstract: An encrypted security system and associated methods for controlling physical access are described. The system includes a security server configured to receive a request for authentication from a mobile device, the request including information identifying the mobile device and a physical access control device. The security server forwards an encryption message including a plurality of unique identifiers to the physical access control device via the mobile device. The physical access control device is configured to authenticate the plurality of unique identifiers in the encryption message and operate an access control mechanism.