Token based secure access to a locker system

A computer-implemented method, the method comprising:

• receiving a token to unlock a locker identified by a unique locker identifier, wherein the token includes token data, and a message authentication code (MAC) to authenticate the token data, wherein the MAC is generated using a secret key obtained based on a unique derivation key (UDK) associated with a master key, and wherein the token data includes at least the unique locker identifier, wherein the locker is located in a locker bank identified by a unique locker bank identifier, and wherein the UDK is generated based on the master key and the unique locker bank identifier, and the secret key is a session key generated based on the UDK and a transaction counter;
• determining whether the token is valid based on the token data, the MAC, and the secret key;
• and
• sending a signal to unlock the locker in response to a determination that the token is valid.

A non-transitory computer-readable medium storing instructions, the instructions, when executed by a processor, cause the processor to perform operations comprising:

• receiving a token to unlock a locker identified by a unique locker identifier, wherein the token includes token data, and a message authentication code (MAC) to authenticate the token data, wherein the MAC is generated using a secret key obtained based on a unique derivation key (UDK) associated with a master key, and wherein the token data includes at least the unique locker identifier, wherein the locker is located in a locker bank identified by a unique locker bank identifier, and wherein the UDK is generated based on the master key and the unique locker bank identifier, and the secret key is a session key generated based on the UDK and a transaction counter;
• determining whether the token is valid based on the token data, the MAC, and the secret key;
• and
• sending a signal to unlock the locker in response to a determination that the token is valid.