What Is Aliro 1.0? Digital Access Control Explained

What Aliro 1.0 is, and what it is not

• A credential and communication standard for the moment a user device meets a reader. It covers the exchange between a phone or wearable and a lock or wall reader (documented, CSA).
• Not a building management system. Aliro does not define how the reader talks to the rest of the building; that link can use Matter, Wi-Fi, Ethernet or a proprietary protocol (documented, CSA position paper and Silicon Labs).
• Meant for many building types. CSA names corporate offices, universities, hospitality venues, and single- and multi-family homes (documented, CSA).
• Backed by a certification programme. Products are tested through CSA Authorized Test Labs and listed in the CSA database with a certificate ID (documented, CSA).

CSA states that Apple, Google and Samsung committed to the standard, so a single credential format can work with the wallets already built into phones. What each wallet supports today is a separate question, covered below.

How Aliro works at the door: NFC, Bluetooth LE and UWB

A certified product does not have to support every transport. The CSA record for each product, and the manufacturer’s documentation, show which ones it actually implements. Always read both for the exact model and firmware.

For a deeper comparison of range, power and security, read NFC, BLE and UWB for building access.

Security and offline operation

• Public-key (asymmetric) cryptography between the user device and the reader (documented, CSA).
• Mutual authentication, certificate-based identities and encrypted communication (documented, Silicon Labs).
• Works without network coverage, for example in underground car parks and lifts, because the phone and reader talk directly (documented, CSA).
• Validity periods can only be enforced by a reader that has a trusted time source, and how revocation is handled depends on the implementation (documented in Nordic Semiconductor’s reference implementation). Ask every vendor how its product handles expiry and revocation.

Which phone wallets support Aliro today

Because support depends on the phone model, region and lock, test with the phones your residents, guests and staff actually carry.

Examples of Aliro-certified products

Novatelia is evaluating these products and is in discussion with the manufacturers. It is not a partner or authorized reseller of either.

What is still on the roadmap

CSA describes Aliro 1.0 as the foundation of a living standard and names secure key sharing as a future phase. Samsung Research also lists server-based provisioning and key sharing as future work (announced). For hotels this matters: issuing a guest key into a phone wallet from a property management system is not yet documented as a standard Aliro workflow. See hotel mobile key options.

What to verify before specifying Aliro in Oman

1. The CSA certificate ID and the transports listed for the exact model and firmware.
2. Which wallets work with that product today, in Oman, on which phone models.
3. Offline behaviour, credential expiry, revocation and audit logs.
4. Integration with the access-control platform or PMS, treated as a verification item, not an assumption.
5. Approval for the radio equipment under Oman TRA rules, plus local warranty, spares and support.
6. Door hardware compatibility and any fire-door requirements.

Novatelia’s technical assessment and BOQ review can turn this list into a written scope for a specific building.