Abstract: A lock for securing access to a physical resource is provided. The lock includes a wireless interface configured for communication with a plurality of lock access devices in vicinity of the lock. The wireless interface is further configured to receive digital certificates from the plurality of lock access devices. The lock further includes a memory configured to store a public key, and a processor configured to authenticate a digital certificate received from a lock access device using the public key. The processor may further be configured to extract a wait time parameter, scheduled access period parameter, or re-use parameter from the digital certificate. In addition, the processor is configured to unlock the lock after a delay period based on the wait time parameter, during a scheduled access period based on the scheduled access period parameter, or based on the number of times indicated by the re-use parameter.

Abstract: An electronic lock includes a circuit to secure a room, electrical device, or other resource. A controller is coupled to the circuit and to a short-range wireless interface. The controller controls the circuit to provide access to the resource based on cryptographic access data provided by a wireless mobile device via the short-range wireless interface. The controller may be provided to an electrical box (e.g., back box, junction box, etc.) or other type of housing and may be connected to a light switch or fixture circuit.

Abstract: A lock control interface is operably connectable to an electrical actuator of a lock that restricts access to a physical resource. A primary wireless interface communicates with a wireless mobile device within a local vicinity of the primary wireless interface. A primary processor is connected to the primary wireless interface and the lock control interface. A secondary wireless interface communicates with a server via a long-range low-power wireless network. A secondary processor is connected to the secondary wireless interface. The secondary processor communicates with the server using the secondary wireless interface. The secondary processor is not operably connected to lock control interface. The primary processor controls the electrical actuator through the lock control interface to unlock the lock based on communication of cryptographic access data.

Abstract: Devices, systems, and methods for preparing an electronic lock controller to obtain a digital certificate that verifies authenticity of the electronic lock controller are provided. The method involves physically marking an electronic lock controller with a mark containing digitally signed lock information. The digitally signed lock information includes a hardware identifier, and is digitally signed at a server using a private key of the server. The method further involves loading the electronic lock controller with self-provisioning instructions to cause the electronic lock controller to obtain a digital certificate that includes the public key of the electronic lock controller and the hardware identifier, the digital certificate having been signed by a private key of the server.

Abstract: A security device includes a network interface, a short-range wireless interface and a processor coupled to the wireless interface. The short-range wireless interface communicates with a wireless mobile device in a vicinity of a location of the security device. The processor is configured to detect a signal received from the wireless mobile device in the vicinity of the location, receive a cryptographic certificate from the wireless mobile device via the wireless interface and automatically register the user to the location of the security device by sending the cryptographic certificate to a server via the network interface. The cryptographic certificate is associated with an identity of a user of the wireless mobile device.

Abstract: A lock for securing access to a physical resource is provided. The lock includes a wireless interface configured for communication with a plurality of lock access devices in vicinity of the lock. The wireless interface is further configured to receive digital certificates from the plurality of lock access devices. The lock further includes a memory configured to store a public key, and a processor configured to authenticate a digital certificate received from a lock access device using the public key. The processor may further be configured to extract a wait time parameter, scheduled access period parameter, or re-use parameter from the digital certificate. In addition, the processor is configured to unlock the lock after a delay period based on the wait time parameter, during a scheduled access period based on the scheduled access period parameter, or based on the number of times indicated by the re-use parameter.

Abstract: Devices, systems, and methods for preparing an electronic lock controller to obtain a digital certificate that verifies authenticity of the electronic lock controller are provided. The method involves physically marking an electronic lock controller with a mark containing digitally signed lock information. The digitally signed lock information includes a hardware identifier, and is digitally signed at a server using a private key of the server. The method further involves loading the electronic lock controller with self-provisioning instructions to cause the electronic lock controller to obtain a digital certificate that includes the public key of the electronic lock controller and the hardware identifier, the digital certificate having been signed by a private key of the server.