Secure storage systems and methods

A secure storage system comprising an initialize lock command and further comprising:

• a plurality of lockable compartments comprising controllable electromechanical locks, the controllable electromechanical locks providing controlled access to the lockable compartments;
• one or more lock access controllers, each configured to control at least one of the controllable electromechanical locks and comprising a verification code generator to generate verification codes useable to process service and access requests to service and access a lockable compartment, wherein the verification code generators of the one or more lock access controllers configured to control at least one controllable electromechanical lock comprise at least one code derivation key, at least one input code and at least one service mode token, and wherein each of the at least one controllable electromechanical locks controlled by the one or more lock access controllers has an associated code derivation key, an associated input code and an associated service mode token, each of which may be a default or pre-established value prior to a lock initialization;
• a server based system comprising a system public key which is made available to devices cooperating in an initialize lock command, a system private key and a challenge code generator to generate challenge codes useable to process service and access requests to service and access a lockable compartment, wherein the challenge code generator of the server based system comprises a plurality of code derivation keys, a plurality of input codes and a plurality of service mode tokens, wherein each of the controllable electromechanical locks of the plurality of lockable compartments has an associated code derivation key, an associated input code and an associated service mode token, each of which may be a default or pre-established value prior to a lock initialization;
• and
• an operator device usable by a user to initialize an electromechanical lock by establishing a new code derivation key and a new input code associated therewith, the operator device comprising an operator device public key which is made available to the server based system in conjunction with an initialize lock command and an operator device private key, wherein in response to a received service request to initialize an electromechanical lock controlled by a lock access controller and comprised by a lockable compartment:
• the challenge code generator of the server based system encrypts the associated input code and service mode token with the associated code derivation key of the electromechanical lock of the initialize lock request generating a challenge code and secure service mode token and provides the challenge code and secure service token to the operator device;
• and
• a verification code generator of the of the lock access controller controlling the controllable electromechanical lock of the initialize lock request encrypts the associated input code and service mode token with the associated code derivation key of the electromechanical lock of the initialize lock request to create a verification code and a secure service mode token, receives from the operator device the provided challenge code and provided secure service mode token and if the verification code equals the provided challenge code and the secure service mode token equals the provided secure service mode token, then the controllable electromechanical lock of the initialize lock request is initialized, wherein:
• the verification code generator of the lock access controller controlling the controllable electromechanical lock of the lockable compartment of the initialize request and or the operator device generate and encrypt a random lock code derivation key component and a random lock input code component using the system based server public key and provides the encrypted lock code derivation key component and the encrypted lock input code component to the challenge code generator of the server based system;
• the challenge code generator of the system server based system generates and encrypts a random system code derivation key component and a random system input code component using the operator device public key and provides the encrypted system code derivation key component and the encrypted system input code component to the operator device;
• the operator device decrypts the encrypted system code derivation key component and the encrypted system input code component using the operator device private key and provides the decrypted system code derivation key component and the decrypted system input code component to the verification code generator of the lock access controller controlling the controllable electromechanical lock of the lockable compartment of the initialize request, which are combined with the lock code derivation key component and the lock input code component to create the new code derivation key component and the new input code associated with the controllable electromechanical lock of the lockable compartment of the initialize request and comprised by the verification code generator of the lock access controller controlling the controllable electromechanical lock of the lockable compartment of the initialize request;
• and
• the challenge code generator decrypts the encrypted lock code derivation key component and the encrypted lock input code component using the system private key and the decrypted lock code derivation key component and the decrypted lock input code component are combined with system code derivation key component and the system input code component to create the new code derivation key component and the new input code associated with the controllable electromechanical lock of the lockable compartment of the initialize request and comprised by the challenge code generator of the system based server.