Trancadura 2.0: A Low-Cost Modular Electronic Lock for Educational Environments

• Victor A. Lima IFS
• Genisson E. dos Santos IFS
• Guilherme da I. Santos IFS
• Felipe C. Leal UFS
• Marcos Vinicius S. Melo IFS
• Silas S. de Jesus IFS
• Rubens de S. Matos Júnior IFS
• Alfredo M. Vieira IFS

DOI: https://doi.org/10.5753/erbase.2025.13706

Abstract

This paper presents the evolution of an open-source, low-cost modular electronic lock for access control in educational institutions. The new version adopts a modern web-based architecture, with a NestJS backend and a Next.js frontend, both in TypeScript. Key enhancements include OTA updates, secure HTTPS communication, JWT-based authentication, and a responsive web app for managing users, devices, and permissions. Powered by the ESP32 microcontroller, the system supports multiple authentication methods, including RFID, a physical button, and remote API commands. The project promotes accessible and scalable physical security solutions for resource-limited public institutions.

References

Bindra, L., Lin, C., Stroulia, E., and Ardakanian, O. (2019). Decentralized access control for smart buildings using metadata and smart contracts. In 2019 IEEE/ACM 5th International Workshop on Software Engineering for Smart Cyber-Physical Systems (SEsCPS), pages 32–38.

Brasil (2018). Lei nº 13.709, de 14 de agosto de 2018. lei geral de proteção de dados pessoais (LGPD). [link]. Acesso em:: 2024-10-01.

EU (2016). Regulation (EU) 2016/679 of the european parliament and of the council of 27 april 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (general data protection regulation - GDPR). [link]. Acesso em:: 2024-10-01.

Geepalla, E., Bordbar, B., and Du, X. (2013). Spatio-temporal role based access control for physical access control systems. In 2013 Fourth International Conference on Emerging Security Technologies, pages 39–42.

IBM (2024). Adopting security ai and automation can cut breach costs. [link]. Acesso em: 2024-09-30.

ITnews (2024). Tangerine telecom says customer data of 232000 affected by ’cyber incident’. [link]. Acesso em: 2024-09-30.

Jornalismo, N. (2024). Falha na rede social spoutible coloca contas em risco. [link]. Acesso em: 2024-10-01.

Kaur, G., Singh, A., and Singh, D. (2022). A comprehensive review on access control systems amid global pandemic. In 2022 International Conference on Emerging Trends in Engineering and Medical Sciences (ICETEMS), pages 15–19.

Leal, F. C., Melo, M. V. S., Matos Júnior, R. S., and Vieira, A. M. (2024). Um protótipo de fechadura eletrônica modular de baixo custo para ambientes acadêmicos. Trabalho não publicado.

TechRepublic (2024). 2024 exposed: The alarming state of australian data breaches. [link]. Acesso em: 2024-09-30.

Terada, R. (2008). Segurança de dados: criptografia em rede de computador. In Segurança de dados: criptografia em rede de computador, pages 15–25. Editora Blucher.