Using a private key of a cryptographic key pair accessible to a service provider device

An access coordinator for providing access to a physical space, secured by a lock, for provision of a service, the lock being associated with a service consumer, the access coordinator comprising:

• a processor;
• and
• a memory storing instructions that, when executed by the processor, cause the access coordinator to:
• receive an approval signal from a service consumer device of the service consumer, the approval signal indicating that the service consumer allows a service provider agent of a service provider to open the lock;
• receive, from a service provider device of the service provider, a request to assign a service provider agent to open the lock;
• communicate with the service provider device to provide service agent access data that is specific for the service provider agent, to allow the service provider agent to open the lock;
• and
• transmit the service agent access data to a service provider agent device associated with the service provider agent;
• wherein the approval signal comprises a first access delegation, from the service consumer to the service provider, and the service agent access data comprises a second access delegation, from the service provider to the service provider agent, wherein the second access delegation includes the first access delegation.

A non-transitory computer-readable medium comprising a computer program stored thereon configured to provide access to a physical space, secured by a lock, for provision of a service, the lock being associated with a service consumer, the computer program comprising computer program code which, when run on an access coordinator, causes the access coordinator to:

• receive an approval signal from a service consumer device of the service consumer, the approval signal indicating that the service consumer allows a service provider agent of a service provider to open the lock;
• receive, from a service provider device of the service provider, a request to assign a service provider agent to open the lock;
• communicate with the service provider device to provide service agent access data that is specific for the service provider agent, to allow the service provider agent to open the lock;
• and
• transmit the service agent access data to a service provider agent device associated with the service provider agent;
• wherein the approval signal comprises a first access delegation, from the service consumer to the service provider, and the service agent access data comprises a second access delegation, from the service provider to the service provider agent, wherein the second access delegation includes the first access delegation.