Revocation of access credentials for a disconnected locking device

A lock system comprising:

• a server;
• and
• a lock disconnected from the server and storing a key;
• wherein the server is configured to:
• receive a request to revoke access rights of a respective user device of a plurality of user devices to the lock, each of the plurality of user devices having an access credential associated with the key and useable to access the lock;
• transmit a revocation command to the respective user device to remove the access credential of the respective user device for the lock in response to receiving the request to revoke the access rights of the respective user device;
• transmit a key change command to the plurality of user devices in response to unsuccessfully transmitting the revocation command to the respective user device, the key change command including an updated key to replace the key;
• wherein a first one of the plurality of user devices to encounter the lock is configured to transmit the key change command to the lock;
• and
• wherein the lock is configured to replace the key with the updated key such that the respective user device is unable to access the lock using the access credential stored thereon.

A method for revoking access rights to a lock, the method comprising:

• receiving, by a server, a request to revoke the access rights of a user device to the lock, the lock disconnected from the server and storing a key, and the user device storing an access credential associated with the key and useable to access the lock;
• transmitting, by the server, a revocation command to the user device to remove the access credential from the user device in response to receiving the request to revoke the access rights of the user device;
• identifying, by the server, one or more trusted devices that have access rights to the lock in response to unsuccessfully transmitting the revocation command to the user device;
• transmitting, by the server, a key change command to the one or more trusted devices, the key change command including an updated key to replace the key, the key change command configured to cause (i) a first one of the one or more trusted devices to encounter the lock to transmit the key change command to the lock and (ii) the lock to replace the key with the updated key such that the user device is unable to access the lock using the access credential.