Anonymous and ephemeral tokens to authenticate elevator calls

A system for authorizing a user securing an elevator call in a building, the system comprising:

• a backend system that generates a secure authorization token that includes an expiration time;
• a property manager that requests the secure authorization token from the backend system, and transmits the secure authorization token from the backend system to a mobile device;
• the backend system configured to connect with the mobile device;
• the backend system configured to verify an authenticity of the secure authorization token from the mobile device based on at least the expiration time, the backend system configured to generate a secure access token and a first random number in response to the authenticity of the secure authorization token being verified, the backend system configured to transmit the secure access token and the first random number to the mobile device for use in generating an elevator service request message;
• an elevator controller that receives the elevator service request message generated by the mobile device;
• and
• an elevator car that is controlled by the elevator controller based on the elevator service request message.

A computer program product for authorizing a user securing an elevator call in a building, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to:

• requesting, by a property manager, a secure authorization token that includes an expiration time from a backend system;
• transmitting, from the property manager, the secure authorization token to a mobile device;
• connecting a backend system to the mobile device using the secure authorization token;
• verify, using the backend system, an authenticity of the secure authorization token from the mobile device based on at least the expiration time;
• generate, at the backend system, a secure access token and a first random number in response to the authenticity of the secure authorization token being verified;
• and
• send, to the mobile device, the secure access token and the first random number for use in making elevator call requests.