Universal credential

An access control system for leveraging a universal credential, the access control system comprising:

• a cloud system comprising at least one first processor and at least one first memory having a first plurality of instructions stored thereon that, in response to execution by the at least one first processor, causes the cloud system to:
• generate a CBOR web token for user access to at least one electronic lock, wherein the CBOR web token includes (i) a group tag that is associated with a set of access rights to the at least one electronic lock for a group of users and (ii) a cryptographic signature of the cloud system;
• and
• transmit the CBOR web token to a user mobile device;
• and
• a first electronic lock of the at least one electronic lock comprising a lock mechanism, at least one second processor, and at least one second memory having a second plurality of instructions stored thereon that, in response to execution by the at least one second processor, causes the first electronic lock to:
• receive the CBOR web token from the user mobile device for access to a passageway secured by the first electronic lock;
• verify an authenticity of the cryptographic signature of the CBOR web token;
• verify that the group tag of the CBOR web token is associated with a group authorized to access the passageway secured by the first electronic lock;
• and
• unlock the lock mechanism in response to verification of the authenticity of the cryptographic signature of the CBOR web token and verification that the group tag of the CBOR web token is associated with a group authorized to access the passageway secured by the first electronic lock.

A method for leveraging a universal credential in an access control system, the method comprising:

• generating, by a cloud system, a CBOR web token for user access to a passageway secured by an electronic lock;
• cryptographically signing, by the cloud system, the CBOR web token with a private cryptographic key of the cloud system;
• encrypting, by the cloud system, the CBOR web token using a public cryptographic key of the electronic lock;
• transmitting, by the cloud system, the signed and encrypted CBOR web token to a user mobile device;
• receiving, by the electronic lock, the signed and encrypted CBOR web token from the user mobile device for access to the passageway secured by the electronic lock;
• decrypting, by the electronic lock, the signed and encrypted CBOR web token using a private cryptographic key of the electronic lock;
• verifying, by the electronic lock, an authenticity of the cryptographic signature of the CBOR web token;
• and
• unlocking a lock mechanism of the electronic lock in response to decrypting the signed and encrypted CBOR web token and verifying the authenticity of the cryptographic signature of the CBOR web token.