perrugi:brain.
The encrypted lock bus.
An encryption board placed between perrugi:palm and the electronic lock. Every unlock command is signed and encrypted end-to-end — an attacker cannot sniff the code, replay a frame, or modify the signal. Extended with a CAN bus and industrial Ethernet for large facility deployments: hotels, office buildings, factories.
Four layers of cryptographic protection.
No compromises on the bus. Communication between perrugi:palm and the electronic lock is the most fragile part of the system — this is where the unlock authority lives. perrugi:brain closes that channel with concrete architecture: it physically separates the terminal from the lock contacts, and every command is authenticated with AES-256-GCM — key in hardware, replay protection, audit.
AES-256-GCM encryption
Every frame heading toward the lock is encrypted with AES-256 in GCM mode and stamped with an authentication tag. Without a valid tag the lock rejects the command — even if the frame looks correct on the wire.
Key in secured memory
Cryptographic keys are held in secured memory. They cannot be read via the debug interface, disassembly or a side-channel attack.
Replay protection
Every command uses a 96-bit nonce; a replayed message is rejected and logged.
Tamper-evident log
Every operation — unlock, rejected attempt, integrity failure — is written to a signed log. The log cannot be erased selectively; any tampering is immediately visible in the audit.
CAN and Ethernet — one module.
perrugi:brain plugs into places a typical lock cannot reach: large facility deployments, hotels, office buildings, industrial plants. Two buses in one module — pick the one that matches your wiring plan.
CAN 2.0B up to 1 Mb/s
CAN bus with priority arbitration. Dozens of locks on a single bus, deterministic response time, immunity to noise in industrial environments.
Ethernet with PoE
RJ-45 with PoE-in. Power and data over a single cable — convenient for large hotel and office deployments.
Many locks on one bus
One module handles multiple locks on a shared bus — tidying the wiring in large facility installations.
Architecture of the signed frame.
perrugi:palm does not talk to the lock directly. perrugi:brain sits between them — a gateway that translates user intent into a signed, encrypted command. The lock opens only when the frame is fresh, signed, and correctly encrypted.
- Pairing and key-management details — in the integration documentation for partners
- Cryptographic key stored in secured memory
- 96-bit nonce protecting against replay
- Authentication tag protecting frame integrity
- AES-256-GCM encryption of every frame
For access control system integrators.
perrugi:brain is a module that adds a cryptographic layer to an existing access control system — an OEM component to build into the installation. The board sits "in between" and no one but you needs to know it is there.
Retrofit
Standard industrial and hotel lock connectors. Mounting scope depends on the existing installation.
Custom cryptography
We share key-management and pairing details with partners in the integration documentation. The rules are agreed together at the integration stage.
Engineering support
An integration engineer assigned to your project. Mounting diagrams, protocol documentation, evaluation samples.
Enterprise programme
Partner pricing for integrators and dedicated extended-warranty terms. Support terms are set in the contract.
API and documentation
Integration interfaces in preparation. Developer documentation on request.
Compliance and audit
Certification, warranty terms and compliance documentation: available on request.
Full technical specification.
All material parameters of the module — from cryptography and buses to power and certifications. Complete technical documentation available on request for integration partners.
Secure the lock bus across your facility.
perrugi:brain is a module for hotels, office buildings, manufacturing plants, and any deployment where access control is a critical security layer. Write to us — we will prepare a pilot offer and an implementation quote.
Phone
Address
Bielsko-Biała, Poland
Response time
1 business day
Related guides
OEM smart lock for door and window manufacturers — module, ROI and standards
A door maker can add a smart lock to its range without building an R&D department. We explain the OEM model, the return on investment, the standards and in-leaf integration.
Read the guideSmart lock with Matter, HomeKit and KNX/Loxone — a integration guide
Matter is tidying up the smart-home market, but a lock also lands in KNX, Loxone and Home Assistant setups. We explain the differences and what to check so the lock does not become an island.
Read the guideHow does a fingerprint door lock work? Security, offline mode and privacy
A fingerprint reader does not store a photo of your finger — it stores an irreversible mathematical template. We explain how it works, where the data lives and why offline is an advantage.
Read the guideSee also:perrugi:palm · Products · Contact
See perrugi:palm live before you decide
A short online meeting with our team. We show the device in action and answer your questions about using it in your project.
- 15 minutesThat's how long it takes. No 40-slide deck.
- A technical talkInstallation, power, control, documentation — ask about anything.
- No commitmentYou pick the slot yourself and can change it at any time.
Pick a slot in the calendar — the confirmation arrives by email.
Book a demoThe calendar opens in a window on this page.
Prefer to write?Contact form+48 690 694 213