Should be too hard to do. Setup the lock as an OAuth endpoint and then you just encode that website with a QR code. The software side would be relatively easy to do.
One thing I’d question though is the usefulness of it vs. a physical key. It’s easier to hand onto, I guess, but also a lot more complicated to use. If you have a key it’s simple and easy to get in the door: Pull out the key, unlock, you’re in. With this method you have to pull out the QR code… pull out your phone… open the app or navigate through your menu to the right place, take a picture… wait for the site to pull up… wait for ST to respond to the OAuth and send the unlock code to your door.
The up side is your have more security: If it’s lost, no one really knows what it’s for or what it does. This is especially true if they don’t know WHO lost it. On the other hand, a lost key is useless if the finder doesn’t know who lost it either. You’re not going to randomly check house around a city hoping that you get lucky!
The downside with the QR code idea that I can see are:
- Some people (like older, less tech saavy individuals… same… mother- or father-in-law?) might not understand that ANYONE could use this code and therefore may not be as protective of it as they would a physical key.
- If someone finds a lost QR code, even if they don’t know what it does, they might scan it just to see what it’s about and then you have your door randomly unlocking at odd times of the day. (The likelihood that someone find the code, randomly scans it, and your door unlock right at the time that a burglar happens to check your door to see if it’s unlocked is probably pretty low… but it is an added safety concern.)