CSA Aliro 1.0: Standardized Access Control Between Mobile Devices and Door Locks

CSA Aliro is an access control standard created to reduce fragmentation in the mobile-based digital key market. Rather than being locked into manufacturer-specific closed ecosystems as before, the goal is to let mobile devices and readers communicate using a common specification, so doors can be opened the same way in any environment.

The core of this is a combination of three wireless technologies: NFC, Bluetooth Low Energy (BLE), and Ultra-Wideband (UWB).

• NFC handles the basic tap-to-open experience and is a mandatory feature of Aliro.
• Thanks to Power Reserve mode, access is possible in emergencies even when the device battery is nearly depleted.
• BLE handles proximity detection and initial signal exchange, preparing the authentication process before the user approaches the door.
• UWB uses precise distance measurement to ensure automatic opening only when the user is directly in front of the door, strengthening both the hands-free experience and security.

On the security side, Aliro adopts a point-to-point direct communication structure that doesn't rely on a constant internet connection, reducing the attack surface. It also uses UWB-based distance measurement to prevent relay attacks, and asymmetric cryptography-based cryptographic handshaking to prevent credential duplication and forgery. Privacy is also maintained under a privacy-first principle, designed so that only minimal authorization tokens are exchanged.

Aliro also plays a role alongside Matter in completing smart home infrastructure. While Matter manages the lock's status, battery, and automation triggers, Aliro handles the mobile identity of the person at the door. For example, after setting up Aliro-certified devices and readers via Matter, it becomes possible to recognize a specific family member's device to open the door and automatically adjust lighting and temperature as well.

Samsung Research is making key contributions to both the Matter and Aliro specifications, and Aliro 1.0 is scheduled to be released on February 26, 2026. Initial products began being announced from early 2026, and expanded features such as server-based provisioning and key sharing will continue to be refined by the Working Group afterward.