perrugi:brain.
The encrypted lock bus.
An encryption board placed between perrugi:palm and the electronic lock. Every unlock command is signed and encrypted end-to-end — an attacker cannot sniff the code, replay a frame, or modify the signal. Extended with a CAN bus and industrial Ethernet for large facility deployments: hotels, office buildings, factories.
Four layers of cryptographic protection.
No compromises on the bus. Communication between perrugi:palm and the electronic lock is the most fragile part of the system — this is where the unlock authority lives. perrugi:brain closes that channel with concrete architecture: it physically separates the terminal from the lock contacts, and every command is authenticated with AES-256-GCM — key in hardware, replay protection, audit.
AES-256-GCM encryption
Every frame heading toward the lock is encrypted with AES-256 in GCM mode and stamped with an authentication tag. Without a valid tag the lock rejects the command — even if the frame looks correct on the wire.
Key in Secure Element
Session keys and pairing certificates live in a dedicated Secure Element. They cannot be read through the debug interface, by physical disassembly, or via side-channel attacks.
Replay protection
Every frame carries a message counter. Replaying an old "open" command is detected instantly and logged as an attack attempt.
Tamper-evident log
Every operation — unlock, rejected attempt, integrity failure — is written to a signed log. The log cannot be erased selectively; any tampering is immediately visible in the audit.
CAN and Ethernet — one module.
perrugi:brain plugs into places a typical lock cannot reach: large facility deployments, hotels, office buildings, industrial plants. Two buses in one module — pick the one that matches your wiring plan.
CAN 2.0B up to 1 Mb/s
CAN bus with priority arbitration. Dozens of locks on a single bus, deterministic response time, immunity to noise in industrial environments.
Ethernet with PoE
RJ-45 with PoE-in. Power and data over a single cable — convenient for large hotel and office deployments.
Many locks on one bus
One module handles multiple locks on a shared bus — tidying the wiring in large facility installations.
Architecture of the signed frame.
perrugi:palm does not talk to the lock directly. perrugi:brain sits between them — a gateway that translates user intent into a signed, encrypted command. The lock opens only when the frame is fresh, signed, and correctly encrypted.
- Pairing with perrugi:palm via certificates
- Session key exchanged on every boot
- Message counter guarding against replay
- Authentication tag protecting frame integrity
- AES-256-GCM encryption of every frame
For access control system integrators.
perrugi:brain is a module that adds a cryptographic layer to an existing access control system — an OEM component to build into the installation. The board sits "in between" and no one but you needs to know it is there.
Retrofit
Standard industrial and hotel lock connectors. Mounting scope depends on the existing installation.
Custom cryptography
Certificate-based pairing and session-key rotation. Key-management rules are agreed together during integration.
Engineering support
An integration engineer assigned to your project. Mounting diagrams, protocol documentation, evaluation samples.
Enterprise programme
Partner pricing for integrators and dedicated extended-warranty terms. Support terms are set in the contract.
API and documentation
Integration interfaces in preparation. Developer documentation on request.
Compliance and audit
Compliance with GDPR requirements for access logs. Audit documentation available on request.
Full technical specification.
All material parameters of the module — from cryptography and buses to power and certifications. Complete technical documentation available on request for integration partners.
Secure the lock bus across your facility.
perrugi:brain is a module for hotels, office buildings, manufacturing plants, and any deployment where access control is a critical security layer. Write to us — we will prepare a pilot offer and an implementation quote.
Related guides
OEM smart lock for door and window manufacturers — module, ROI and standards
A door maker can add a smart lock to its range without building an R&D department. We explain the OEM model, the return on investment, the standards and in-leaf integration.
ReadSmart lock with Matter, HomeKit and KNX/Loxone — a 2027 integration guide
Matter is tidying up the smart-home market, but a lock also lands in KNX, Loxone and Home Assistant setups. We explain the differences and what to check so the lock does not become an island.
ReadHow does a fingerprint door lock work? Security, offline mode and privacy
A fingerprint reader does not store a photo of your finger — it stores an irreversible mathematical template. We explain how it works, where the data lives and why offline is an advantage.
ReadSee also:perrugi:palm · Products · Contact