PACS modification to incorporate LACS authentication

A method comprising:

• receiving a soft token from a client device of a user, the soft token having been generated or received at the client device based on an accessing of a logical profile of the user by the client device via one or more services of a logical access control system, the soft token including a payload, the payload including information about the user that is stored in the logical profile, the soft token being a JWE token that is decrypted using a private RSA key stored in a secure element of a hardware accessory;
• based on a verifying of the soft token using a certificate extracted from a trust store of the hardware accessory, parsing the information about the user that is included in the payload;
• and
• based on the information about the user satisfying one or more access criteria of a reader associated with a physical access control system, triggering the reader, the triggering including emulating a transaction associated with the physical access control system.

A non-transitory machine-readable medium storing a plurality of instructions that, when implemented by one or more computer processors, cause the one or more computer processors to perform operations, the operations comprising:

• receiving a soft token from a client device of a user, the soft token having been generated or received at the client device based on an accessing of a logical profile of the user by the client device via one or more services of a logical access control system, the soft token including a payload, the payload including information about the user that is stored in the logical profile, the soft token being a JWE token that is decrypted using a private RSA key stored in a secure element of a hardware accessory;
• based on a verifying of the soft token using a certificate extracted from a trust store of the hardware accessory, parsing the information about the user that is included in the payload;
• and
• based on the information about the user satisfying one or more access criteria of a reader associated with a physical access control system, triggering the reader, the triggering including emulating a transaction associated with the physical access control system.