Abstract: An electronic lock for controlling access to a restricted physical space. The electronic lock comprises: electronically-controllable lock hardware; and a system-on-chip, SoC, comprising a processor and memory. The SoC comprises: a trusted environment comprising a secure data storage and a lock-core software module comprising instructions that, when executed by the processor, cause the electronic lock to: evaluate access for a user based on data stored in the secure data storage and control the lock hardware based on the evaluation; and an untrusted environment comprising untrusted software that is prevented from bypassing the lock-core software module to control the electronically-controllable lock hardware.

Abstract: A gateway for enabling remote access control by an access control server for an electronic lock, wherein the gateway comprises: a battery being a power source for the gateway; a short-range radio communication module for communicating with the electronic lock; a communication module for communicating with the access control server; a location determination module; a processor; and a memory storing instructions that, when executed by the processor, cause the gateway to: transmit uplink location data to the access control server, wherein the uplink location data comprises the first location data; receive an unlock message from the access control server; transmit an unlock command to the electronic lock; and transition from an active state to a low-power state.

Abstract: An electronic lock for controlling access to a restricted physical space. The electronic lock comprises: electronically-controllable lock hardware; and a system-on-chip, SoC, comprising a processor and memory. The SoC comprises: a trusted environment comprising a secure data storage and a lock-core software module comprising instructions that, when executed by the processor, cause the electronic lock to: evaluate access for a user based on data stored in the secure data storage and control the lock hardware based on the evaluation; and an untrusted environment comprising untrusted software that is prevented from bypassing the lock-core software module to control the electronically-controllable lock hardware.