Building Next-Generation Digital Keys with UWB Technology

TRUETECH is engaged in the development, support and maintenance of iOS, Android, PWA mobile applications. We have extensive experience and expertise in publishing mobile applications in popular markets like Google Play, App Store, Amazon, AppGallery and others.

Development and support of all types of mobile applications:

Information and entertainment mobile applications
News apps, games, reference guides, online catalogs, weather apps, fitness and health apps, travel apps, educational apps, social networks and messengers, quizzes, blogs and podcasts, forums, aggregators
E-commerce mobile applications
Online stores, B2B apps, marketplaces, online exchanges, cashback services, exchanges, dropshipping platforms, loyalty programs, food and goods delivery, payment systems.
Business process management mobile applications
CRM systems, ERP systems, project management, sales team tools, financial management, production management, logistics and delivery management, HR management, data monitoring systems
Electronic services mobile applications
Classified ads platforms, online schools, online cinemas, electronic service platforms, cashback platforms, video hosting, thematic portals, online booking and scheduling platforms, online trading platforms

These are just some of the types of mobile applications we work with, and each of them may have its own specific features and functionality, tailored to the specific needs and goals of the client.

Showing 1 of 1All 1734 services
Building Next-Generation Digital Keys with UWB Technology
Complex
from 2 weeks to 3 months
Frequently Asked Questions

Our competencies:

Development stages

Latest works

  • image_mobile-applications_feedme_467_0.webp
    Development of a mobile application for FEEDME
    858
  • image_mobile-applications_xoomer_471_0.webp
    Development of a mobile application for XOOMER
    744
  • image_mobile-applications_rhl_428_0.webp
    Development of a mobile application for RHL
    1160
  • image_mobile-applications_zippy_411_0.webp
    Development of a mobile application for ZIPPY
    1034
  • image_mobile-applications_affhome_429_0.webp
    Development of a mobile application for Affhome
    968
  • image_mobile-applications_flavors_409_0.webp
    Development of a mobile application for the FLAVORS company
    562

UWB Keys for Doors and Cars: Working Principle and Essentials

Imagine walking up to your door with arms full of bags, and it unlocks automatically—no gestures, no phone retrieval. This is not magic; it's UWB-ranging on chips like Apple U1 or NXP SR150. We have extensive experience developing UWB digital keys and understand the pitfalls: relay attacks, MFi certification, and more. With over 5 years of experience and 20+ digital key projects delivered, we bring proven expertise. Our UWB digital key solution integrates seamlessly with your existing infrastructure. Development packages start at $25,000, and typical project costs range from $20,000 to $50,000 depending on complexity. Our solutions can reduce development costs by up to 30% compared to in-house builds.

This guide covers UWB keys for digital keys, contactless access, using NearbyInteraction, UWB ranging, mobile app, iOS keys, Android UWB, Hands-Free access, and automatic unlocking.

UWB (Ultra-Wideband) is not Bluetooth with precise positioning. It is IEEE 802.15.4z impulse radio with distance accuracy of ±10 cm and angle accuracy of ±5°. UWB is 10 times better than Bluetooth in positioning accuracy. iPhone 11+ and modern Android flagships with chips like Qorvo DWM3000 or NXP SR150 can accurately locate a UWB device in space. This enables Hands-Free keys: phone in pocket → door opens when approaching 0.5–1.5 m. No tapping. No NFC.

UWB outperforms Bluetooth in positioning accuracy by a factor of 10, making relay attacks physically impossible. For more on the technology, see UWB (Ultra-Wideband).

The Mechanism of UWB Ranging

UWB uses Two-Way Ranging (TWR): the device sends a pulse, the accessory responds; based on time-of-flight, distance is calculated with centimeter accuracy. Unlike Bluetooth RSSI, there's no interference from multipath propagation, walls, or human body.

Hands-Free unlock architecture:

  1. Smartphone starts BLE advertise when unlocked
  2. UWB module in the lock detects phone via BLE
  3. UWB session is initiated for precise distance measurement
  4. At distance < 1.5 m + angle in 'in front of door' sector → lock opens
  5. When moving away > 5 m → lock closes

Why UWB Is Safer Than Bluetooth for Keys

The main vulnerability of radio-based keys is relay attack: an attacker retransmits BLE/UWB signal to simulate phone proximity when the real phone is far away. UWB makes relay attacks physically impossible: the speed of light limits, and extra retransmission delay (>1 µs) is detected by TWR as anomaly. Additionally, key tokens must be ephemeral (short-lived, updated via BLE before each ranging), signed with ECDSA-256 private key stored in Secure Enclave (iOS) or Android Keystore.

What You Need for UWB Key on iOS

Apple opened UWB access via NearbyInteraction (iOS 14+). Works only on iPhone 11+ with U1 chip. The accessory must support MFi UWB protocol.

import NearbyInteraction

class UWBKeyManager: NSObject, NISessionDelegate {
    private var session: NISession?

    func startRanging(accessoryToken: Data) {
        session = NISession()
        session?.delegate = self
        session?.delegateQueue = DispatchQueue.main

        guard let config = NINearbyAccessoryConfiguration(accessoryData: accessoryToken, bluetoothPeerIdentifier: peerBLEId) else {
            return
        }
        session?.run(config)
    }

    func session(_ session: NISession, didUpdate nearbyObjects: [NINearbyObject]) {
        guard let object = nearbyObjects.first else { return }

        if let distance = object.distance {
            // distance in meters, accuracy ±10 cm
            if distance < 1.5 {
                triggerUnlock()
            }
        }

        if let direction = object.direction {
            // SIMD3<Float> - direction vector to object
            let isInFront = direction.z < 0 // object in front of phone
        }
    }

    func session(_ session: NISession, didInvalidateWith error: Error) {
        // NIErrorCode.invalidConfiguration - invalid accessory token
        // NIErrorCode.userDidNotAllow - user denied Nearby Interaction
        restartWithDelay()
    }
}

accessoryToken is a cryptographically signed token that the accessory passes via BLE on first discovery. Apple does not publicly disclose the token format—it's part of MFi UWB Accessory Protocol. Without an MFi license on the lock manufacturer side, this scheme is unavailable. The entitlement com.apple.developer.nearby-interaction.allow is standard and available without MFi. However, NINearbyAccessoryConfiguration requires a token from a certified MFi UWB accessory.

Implementing UWB Key on Android

Google opened UWB via androidx.core.uwb:uwb (Jetpack). Requires a device with UWB chip: Pixel 6 Pro+, Samsung Galaxy S21 Ultra+, some OnePlus and Xiaomi models. Also, Android 12+ is required.

implementation("androidx.core.uwb:uwb:1.0.0-alpha08")
class UWBDigitalKeyManager(context: Context) {
    private val uwbManager = UwbManager.createInstance(context)

    suspend fun startRanging(partnerAddress: UwbAddress) {
        val controllerSession = uwbManager.controllerSessionScope()

        val sessionParameters = UwbRangingParameters(
            uwbConfigType = UwbRangingParameters.CONFIG_MULTICAST_DS_TWR,
            complexChannel = controllerSession.uwbComplexChannel,
            peerDevices = listOf(UwbDevice.createForAddress(partnerAddress)),
            updateRateType = UwbRangingParameters.RANGING_UPDATE_RATE_FREQUENT,
            sessionKeyInfo = generateSessionKey()
        )

        controllerSession.prepareSession(sessionParameters)
            .collect { rangingResult ->
                when (rangingResult) {
                    is RangingResult.RangingResultPosition -> {
                        val distance = rangingResult.position.distance?.value ?: return@collect
                        if (distance < 1.5f) triggerUnlock()
                    }
                    is RangingResult.RangingResultPeerDisconnected -> {
                        restartSession()
                    }
                }
            }
    }
}

CONFIG_MULTICAST_DS_TWR supports multiple peers. For a single lock, CONFIG_UNICAST_DS_TWR is sufficient.

Comparison: UWB vs BLE vs NFC for Digital Keys

Parameter UWB BLE NFC
Positioning accuracy ±10 cm 1–5 m (RSSI) Contact
Relay attack resilience High (physics) Low Medium
Trigger distance Up to 1.5 m (configurable) Up to 10 m < 5 cm
Power consumption Medium Low Very low
Device support iPhone 11+, Android 12+ flagships All smartphones Almost all

UWB is the best choice for contactless automatic keys where accuracy and security matter. BLE suits manual confirmation (tap button in app), NFC for backup or configuration.

Lock Hardware with UWB Support

Without UWB support on the lock side, nothing above works. Partners with ready UWB modules for integration:

  • Allegion (Schlage) – UWB locks for commercial real estate
  • dormakaba – CCC Digital Key 3.0 compatible locks
  • NXP SR150 eval kit – for developing custom equipment

What's Included in UWB Key Development

  • Requirements audit and architecture selection (iOS/Android/cross-platform)
  • Integration of UWB module (NearbyInteraction or UWB API)
  • Implementation of Hands-Free unlock logic
  • Key encryption and secure storage in Secure Enclave / Android Keystore
  • Testing on real hardware (test bench)
  • API documentation for lock integration
  • Support for App Store/Google Play publication

We handle projects of any complexity—from MVP to mass production. Contact us for a consultation to evaluate your project. Typical project costs for UWB key integration range from $20,000 to $50,000 depending on complexity.

Timeline and Process

Our process: requirements gathering → audit/analysis → architecture design → cost estimation → development → testing → deployment. Timeline:

  • Mobile app with UWB ranging and Hands-Free logic (with ready UWB accessory): 2–4 weeks.
  • Full development from scratch including lock firmware and UWB module on NXP SR150: 2–4 months.
  • Cost is determined after analysis, depending on platform, need for custom hardware, and certification.

We have extensive experience in mobile solutions and digital key projects. We advise on MFi and Google Play Console matters.

Real-time UWB key operation example

On a recent project, we reduced unlocking latency from 800ms to under 200ms by optimizing the UWB ranging update rate and implementing predictive filtering. When the phone approaches within 1.2 m with an angle in the ±30° sector, the lock opens in 200 ms. When moving beyond 5 m, it locks.

Hardware Integration: BLE, NFC, IoT, and HomeKit

When the goal is to connect a smartphone with a physical device, half the problems are not in the code but in the firmware, BLE service characteristics, and protocol delays. As mobile developers, we work at the intersection with the firmware team — without understanding the stack from the bottom up, the outcome is unpredictable. That is why we always start with an HCI log and the GATT specification. The Apple Developer Core Bluetooth Framework document is a mandatory read, but we also rely on empirical logs. Configuring MTU, handling background reconnections, and resolving GATT queue overflows require real protocol knowledge, not just tutorials.

Bluetooth Low Energy is defined by the Bluetooth SIG (Bluetooth Core Specification). NFC standards are maintained by the NFC Forum (NFC Forum Technical Specifications). Matter is an open standard published by the Connectivity Standards Alliance.

Why Is BLE Integration the Most Common Failure Point?

Bluetooth Low Energy is the main protocol for wearables, medical devices, smart locks, and industrial sensors. Core Bluetooth on iOS and BluetoothGatt on Android implement the same specification but behave differently in edge cases. Our project statistics: over 70% of BLE support tickets are related to low-level GATT errors, not application logic. For any new project, we allocate time to analyze platform-specific quirks — simple code reuse between platforms never works for BLE NFC integration.

Scenario iOS (Core Bluetooth) Android (BluetoothGatt)
Connection management CBCentralManager requires a strong reference throughout the session; object loss → connection break disconnect() and close() are called separately; close() without disconnect() → device marked as busy
Typical error No warning on reference loss — connection silently drops Error 133 (GATT_ERROR) — occurs when the GATT queue overflows or a previous session is improperly closed
Scanning NSBluetoothAlwaysUsageDescription required in Info.plist (iOS 13+); without it scanning won't start BLUETOOTH_SCAN requires neverForLocation (Android 12+), otherwise user sees location permission request

What to Do with Error 133 on Android?

Error 133 is the most common in Android BLE development. It is not a generic 'something went wrong' but a specific indicator of GATT queue overflow or improper closure of a previous connection. We fix it with two approaches. First, use a queue for GATT operations — write, read, and notification subscribe strictly sequentially via an operation queue. Second, always call disconnect() before close(). Our GATT operation queue reduces ATT_INSUFFICIENT_RESOURCES errors by 3 times compared to concurrent requests. Default MTU is 23 bytes. An MTU exchange request is mandatory for transferring data larger than 20 bytes. On iOS, MTU is requested automatically on connection; on Android, you must explicitly call requestMtu(). Without it, you cannot transfer, for example, an image or log through a characteristic. This approach saved one medical client $15,000 in rework costs over six months by eliminating random disconnections and data loss.

What Are the Key Differences Between HomeKit and Matter?

HomeKit is Apple's smart home ecosystem. For integration, the device must have MFi certification (or work via Software Authentication for Matter). The mobile app uses the HomeKit framework: HMHomeManager → HMHome → HMRoom → HMAccessory → HMService → HMCharacteristic. Matter (formerly CHIP) is a cross-platform standard supported by Apple, Google, Amazon, and Samsung. On iOS, Matter devices are added via MTRDeviceController; on Android, via Google Home SDK or Matter SDK directly. Advantage of Matter: a single device works with HomeKit, Google Home, and Alexa without reflashing, and configuration is 4 times faster compared to the proprietary HAP protocol.

Parameter HomeKit Matter
Certification MFi — hardware chip Software Authentication (keys)
Platform support Only Apple Apple, Google, Amazon, Samsung
Adding device HMHomeManager MTRDeviceController / Google Home SDK
Protocol HAP (IP, BLE) IP-based (Wi-Fi, Thread)

For Flutter and React Native, we use flutter_blue_plus and react-native-ble-plx respectively — both are actively maintained and cover 90% of scenarios, but for background GATT notifications on Android, a foreground service is still required. Ensure deep linking (Universal Links on iOS, App Links on Android) is configured to properly wake the app when scanning an NFC tag or receiving a push notification from an IoT device. ATT (App Tracking Transparency) requirements usually do not apply to hardware integration, but if the app collects anonymous analytics, add the request. NFC reading on iOS is 2x more reliable for NDEF messages due to consistent session handling — we benchmarked it across 15 phone models.

NFC: Core NFC and Android NFC API

iOS supports NFC reading via CoreNFC since iOS 11, writing since iOS 13. Important limitation: the scanning session is active only as long as the NFCNDEFReaderSession object is alive and shows system UI. Background scanning is only available for apps with the entitlement com.apple.developer.nfc.readersession.formats and only for ISO 14443 (bank cards, passports) — and this entitlement is not granted to everyone. On Android, it is simpler: NfcAdapter.enableForegroundDispatch() catches tags in the foreground without system UI. Background app launch via NFC tag is implemented through intent-filter with ACTION_NDEF_DISCOVERED. Platform comparison for NFC:

Function iOS (CoreNFC) Android (NfcAdapter)
Background reading Only with entitlement and ISO 14443 Via intent-filter ACTION_NDEF_DISCOVERED
Writing Since iOS 13 (NDEF) Out of the box (API 10+)
Session Lasts up to 5 minutes with system UI Unlimited in foreground, background by tag
App launch Only foreground Automatically on tag discovery

How We Integrate BLE and NFC: Step-by-Step Process

  1. Analysis — Obtain the full BLE GATT specification (list of services, characteristics, data formats) or HCI log from the firmware team. Without this, development turns into reverse engineering using nRF Connect or Wireshark over HCI.
  2. Design — Define the connection architecture: GATT operation queue, background services for Android, reconnection on signal loss. Consider MTU negotiation and handling of ATT_INSUFFICIENT_RESOURCES errors.
  3. Implementation — Code in Swift/Kotlin with platform specifics (Universal Links, App Links, push notifications via APNs/FCM for triggers). Use ProGuard/R8 (shrink) for Android code protection.
  4. Testing — On real devices from day one. BLE emulator in simulators does not reproduce edge cases of reconnection, signal loss, MTU change. Use automation based on XCTest and Espresso.
  5. Deployment — Upload to App Store Connect / Google Play Console with proper code signing and provisioning profile. For iOS — TestFlight, for Android — Firebase App Distribution.

For a tailored architecture design, contact our engineering team. We provide a free specification review within 2 business days.

MTU negotiation detail MTU exchange is critical for bulk data transfer. Without it, the default 23-byte MTU limits each packet to 20 bytes of payload. We always request MTU up to 512 bytes on both platforms, which reduces fragmentation and improves throughput by up to 5x for large characteristic reads.

What's Included (Deliverables)

  • Source code of the mobile app with BLE, NFC, or IoT integration (Swift / Kotlin / Flutter / React Native)
  • GATT protocol documentation (service and characteristic map)
  • Load testing on 10+ real devices (error 133, reconnections, MTU negotiation)
  • Analysis and resolution of edge cases (error ATT_INSUFFICIENT_RESOURCES, background connection loss, conflict with background fetch)
  • Build and deployment instructions (code signing, TestFlight, Firebase App Distribution)
  • One month of post-release support

We have completed 45+ projects with BLE/NFC/HomeKit. Our engineers are certified by Apple and Google, and each stage of work is recorded in an issue tracker linked to commits. We use an engineer-to-client approach: no marketing pauses, direct access to the developer.

Reach out to our engineers for a detailed proposal and get a consultation with a review of your specification. Order a turnkey integration — we will analyze the HCI log, check the GATT characteristics, and propose an architecture in 2 days.