CSA Launches Aliro 1.0 for Unified Smart Lock Access
The Connectivity Standards Alliance has launched Aliro 1.0, a new standard designed to unify digital access for smart locks across different mobile wallets. Backed by Apple, the standard will allow a single digital key to work seamlessly with Apple Wallet, Google Wallet, and Samsung Wallet, regardless of the lock manufacturer. Aliro aims to extend Matter-style interoperability to enterprise and multi-unit residential environments, simplifying access control for both consumers and developers.
Aliro 1.0's specification supports multiple communication transports to accommodate different use cases and power constraints. The standard includes Near Field Communication (NFC) for tap-to-access, Bluetooth Low Energy (BLE) for longer-range user-initiated unlocking, and a combination of BLE and Ultra-Wideband (UWB) for secure, hands-free authentication. This multi-protocol approach is designed to function reliably even in areas without network coverage, such as elevators or underground garages. The security framework is built on asymmetric cryptography to create trusted interactions between a user's device and an access reader while protecting user privacy. To ensure interoperability and security, the Connectivity Standards Alliance (CSA) has also launched a certification program, requiring devices to pass tests in authorized labs before they can carry the Aliro badge. Aliro operates as a parallel project to Matter within the CSA; they are not dependent on each other. Matter focuses on IP-based device control and administration (e.g., "lock the door," "check battery level"), while Aliro is a point-to-point protocol handling access authorization ("is this person allowed in?"). Consequently, a smart lock could be certified for Matter, Aliro, or both. To balance speed and security, especially for offline locks, Aliro defines a "Two-Phase Access Protocol." An "Expedited Phase" performs a quick digital handshake for recognized devices. If the lock is offline or doesn't recognize the device, it can trigger an optional "Step-up Phase" where the mobile wallet presents a more detailed, digitally signed "Access Document" to gain entry. The standard was developed by over 220 member companies to solve the hardware and software fragmentation that has hindered digital key adoption. It aims to replace proprietary systems in enterprise, hospitality, and multi-dwelling units, breaking the vendor lock-in that has characterized the access control industry. For users, this standardizes the experience of Apple's Home Key, making it cross-platform for the first time and available to Android users. The 1.0 release establishes the foundation, with future phases planned to add features like secure key sharing while maintaining backward compatibility.
