Technologies for secure inter-processor communications
An access control device according to an embodiment includes a lock mechanism, a digital core PCBA including at least one first processor and at least one first memory and is configured to facilitate wireless communications, wherein the at least one first memory is provisioned with a master initialization salt key, and an access core PCBA electrically coupled to the digital core PCBA, that includes at least one second processor and at least one second memory, and is configured to facilitate access control, and wherein the at least one second memory is provisioned with an access core initialization key derived from the master initialization salt key, wherein the digital core PCBA establishes a secure communication channel with the access core PCBA via an electrical connection between the digital core PCBA and the access core PCBA based on the master initialization salt key and the access core initialization key.
1. An electronic lock configured to be secured to a door having an exterior side and an interior side, the electronic lock comprising:
an exterior escutcheon on the exterior side of the door;
an interior escutcheon on the interior side of the door;
a digital core printed circuit board assembly (PCBA) positioned within the interior escutcheon, wherein the digital core PCBA comprises at least one first processor and at least one first memory and is configured to facilitate wireless communications, wherein the at least one first memory is provisioned with a master initialization salt key; and
an access core PCBA electrically coupled to the digital core PCBA and positioned within the exterior escutcheon, wherein the access core PCBA comprises at least one second processor and at least one second memory and is configured to facilitate access control, wherein the at least one second memory is provisioned with an access core initialization key derived from the master initialization salt key;
wherein the digital core PCBA establishes a secure communication channel with the access core PCBA via an electrical connection between the digital core PCBA and the access core PCBA based on the master initialization salt key and the access core initialization key;
wherein the at least one first processor of the digital core PCBA generates the access core initialization key based on a unique identifier of the access core and the master initialization salt key; and
wherein each of the at least one first processor of the digital core PCBA and the at least one second processor of the access core PCBA generates a set of operational keys based on the access core initialization key.
2. The electronic lock of claim 1 , wherein the access core PCBA comprises a capacitive touch keypad.
3. The electronic lock of claim 1 , wherein the access core PCBA comprises at least one of a smart card antenna or a proximity antenna.
4. The electronic lock of claim 1 , wherein the digital core PCBA comprises a wireless communication circuitry.
5. The electronic lock of claim 1 , wherein the access core initialization key is derived based on an HMAC-based key derivation function (HKDF), a unique identifier of the access core, and the master initialization salt key.
6. The electronic lock of claim 1 , wherein the digital core PCBA communicates with the access core PCBA to perform mutual authentication.
7. The electronic lock of claim 1 , wherein each of the at least one first processor of the digital core PCBA and the at least one second processor of the access core PCBA generates a session key based on at least one operational key of the set of operational keys.
8. The electronic lock of claim 7 , wherein each of the at least one first processor of the digital core PCBA and the at least one second processor of the access core PCBA periodically rolls the session key.
9. The electronic lock of claim 1 , wherein the set of operational keys includes a key transfer key; and
wherein the at least one first processor of the digital core PCBA is configured to (i) replace the master initialization salt key with a new master initialization salt key received from a management system, (ii) generate a new access core initialization key based on the new master initialization salt key and the unique identifier of the access core, (iii) encrypt the new access core initialization key using the key transfer key, and (iv) transmit the encrypted new access core initialization key to the access core PCBA.
10. An access control device, comprising:
a lock mechanism adapted to control access to a passageway;
a digital core printed circuit board assembly (PCBA) that includes at least one first processor and at least one first memory and is configured to facilitate wireless communications, wherein the at least one first memory is provisioned with a master initialization salt key; and
an access core PCBA electrically coupled to the digital core PCBA, wherein the access core PCBA includes at least one second processor and at least one second memory and is configured to facilitate access control, and wherein the at least one second memory is provisioned with an access core initialization key derived from the master initialization salt key;
wherein the digital PCBA establishes a secure communication channel with the access core PCBA via an electrical connection between the digital PCBA and the access core PCBA based on the master initialization salt key and the access core initialization key;
wherein the at least one first processor of the digital core PCBA generates the access core initialization key based on a unique identifier of the access core and the master initialization salt key; and
wherein each of the at least one first processor of the digital core PCBA and the at least one second processor of the access core PCBA securely generates a set of operational keys using the access core initialization key.
11. The access control device of claim 10 , wherein the access core PCBA comprises a capacitive touch keypad.
12. The access control device of claim 10 , wherein the access core PCBA comprises at least one of a smart card antenna or a proximity antenna.
13. The access control device of claim 10 , wherein the digital core PCBA comprises a wireless communication circuitry.
14. The access control device of claim 10 , wherein the access core initialization key is derived based on an HMAC-based key derivation function (HKDF), a unique identifier of the access core, and the master initialization salt key.
15. The access control device of claim 10 , wherein the digital core PCBA communicates with the access core PCBA to perform mutual authentication.
16. The access control device of claim 10 , wherein each of the at least one first processor of the digital core PCBA and the at least one second processor of the access core PCBA generates a session key using at least one operational key of the set of operational keys.
17. The access control device of claim 16 , wherein each of the at least one first processor of the digital core PCBA and the at least one second processor of the access core PCBA periodically rolls the session key.
18. The access control device of claim 10 , wherein the set of operational keys includes a key transfer key; and
wherein the at least one first processor of the digital core PCBA is configured to (i) replace the master initialization salt key with a new master initialization salt key received from a management system, (ii) generate a new access core initialization key based on the new master initialization salt key and the unique identifier of the access core, (iii) encrypt the new access core initialization key using the key transfer key, and (iv) transmit the encrypted new access core initialization key to the access core PCBA.