From porch pirate problem to IoT smart padlock solution
Digital Scientists designed and built the mobile app, cloud infrastructure, and Bluetooth integration for BoxLock -- the first internet-connected padlock that safeguards home deliveries and tracks package status in real time.
2
Platforms (iOS & Android)
356
Dev Hours Estimated for V1
6+
Carrier Integrations
10+
Major Press Outlets
End-to-end IoT product development from prototype to market
BoxLock is the first internet-connected padlock specifically designed to safeguard home deliveries and track package status. It provides IoT security for last-mile delivery -- protecting deliveries at home, at work, and everywhere in between. The product was featured on Shark Tank and covered by TechCrunch, CNET, Mashable, Digital Trends, and Business Insider.
Given the connected nature of IoT products and the complexities of hardware, multiple software applications, and firmware integration, finding a single partner for IoT development is challenging. BoxLock came to Digital Scientists with an early functional prototype and needed a local team to build the production version. Digital Scientists collaborated with other Atlanta-based teams specializing in industrial design, electrical, and mechanical engineering, while focusing on software design and development.
Digital Scientists designed and built the complete platform: native mobile apps for iOS and Android using React Native, an admin app, and back-end cloud infrastructure on AWS -- including a novel email-based package tracking system that worked before shipping providers offered public APIs.
Building an IoT ecosystem from hardware prototype to production platform
The BoxLock product required coordination across hardware, firmware, mobile software, and cloud services -- with no existing shipping provider APIs available for real-time package validation. Digital Scientists needed to architect a complete solution that could securely communicate between the physical lock, the mobile app, and package delivery services.
Cross-Platform Mobile
Needed a single codebase to support both iOS and Android with native device capabilities including Bluetooth Low Energy communication.
BLE + Wi-Fi Hardware
The lock communicates via Bluetooth for nearby unlock and 2.4 GHz Wi-Fi for cloud connectivity -- requiring a secure handshake protocol and encrypted data exchange.
No Shipping APIs Available
At the time of engagement, UPS, FedEx, and USPS did not offer functional delivery status APIs. DS had to engineer a novel email-based package tracking solution.
Secure Device Pairing
Required a secure encryption key exchange during initial configuration, with all subsequent BLE commands encrypted to prevent unauthorized access.
Multi-Carrier Tracking
Needed to support UPS, FedEx, USPS, and Amazon tracking numbers -- each with unique barcode taxonomies and delivery confirmation formats.
CES Deadline
The product needed to be ready for the Consumer Electronics Show, creating a compressed timeline with parallel hardware and software development streams.
A complete IoT product platform from design to deployment
Digital Scientists created the mobile app and cloud infrastructure to support the BoxLock device. The engagement covered the full product lifecycle: UX research, competitive analysis, persona development, workflows, wireframes, visual design, user stories, solution architecture, and cross-platform app development.
Design & Research
Persona and stakeholder assessment across 3 user types
Competitive research across 15+ apps: postal carriers, package trackers, smart locks, and smart home platforms
Detailed workflows for onboarding, device setup, package tracking, and lock management
Customer journey mapping from package theft to secured delivery
Complete wireframe and visual design prototype
Development & Infrastructure
React Native mobile app for iOS and Android
Bluetooth Low Energy schema and secure device pairing
Email scanner for automated package tracking via IMAP and Gmail integration
Package delivery status API with real-time notifications via AWS Pinpoint
Admin backend and cloud infrastructure on AWS
A guided setup flow from account creation to first unlock
Digital Scientists designed a step-by-step onboarding experience that walks users through account setup, Bluetooth pairing, Wi-Fi configuration, and carrier account connections -- getting them from unboxing to a secured delivery in under 5 minutes.
Welcome & Introduction
Account Setup
Bluetooth Pairing
Wi-Fi Configuration
Gmail-First Design
Gmail signup was prioritized to promote automated collection of package tracking numbers, providing the best user experience with minimal manual entry.
Contextual Device Setup
Illustrated instructions guide users through button press sequences and BLE pairing, with clear feedback for connecting, connected, and error states.
Carrier Account Linking
Users are prompted to set up UPS MyChoice, FedEx Delivery Manager, and USPS Informed Delivery for richer tracking data across all major carriers.
Email-based package tracking when no shipping APIs existed
To secure BoxLock-protected packages, the app needed timely notification of delivery status so it knew exactly when to allow the lock to be opened. With no functional APIs available from shipping providers at the time, Digital Scientists created a robust email scanner to reliably collect shipping updates from user inboxes.
The system used XOAUTH2 for Gmail and GSuite, IMAP for other providers, and a Cheerio-based crawler for Amazon tracking pages. Package status updates were delivered via AWS Pinpoint push notifications and email alerts.
Package Tracking Methods
Automatic via Gmail -- XOAUTH2 integration scans shipping confirmation emails for tracking numbers
IMAP Email Scan -- Serverless Node.js imapper retrieves tracking data from any IMAP-compatible email
Email Forwarding -- Users who prefer inbox privacy can forward shipping emails to [email protected]
Manual Entry -- Direct package tracking number input for any carrier
Real-time lock status, barcode scanning, and multi-user access
The lock overview dashboard provides at-a-glance status for Wi-Fi connectivity, battery level, and lock state. Users can unlock via Bluetooth proximity or barcode scan, manage multiple locks, and control access for family members and temporary users.
Lock Dashboard
Real-time lock status with Wi-Fi, battery, and lock state indicators. Animated lock metaphor affirms open/closed state.
Barcode Scan to Unlock
Delivery drivers scan the package tracking barcode on the lock's built-in scanner. The cloud validates the tracking number and unlocks if matched.
Full Navigation
Navigation drawer provides access to lock overview, packages, users, multiple locks, settings, and support from any screen.
A connected ecosystem bridging hardware, mobile, and cloud
The BoxLock system architecture connects four components: the physical lock device, the user's mobile phone, the BoxLock cloud service, and postal provider services. The lock communicates via Wi-Fi to the cloud every 4 hours and on each barcode scan, while Bluetooth provides proximity-based unlock for authenticated users.
React Native
Cross-platform development for quick, cost-effective delivery of the user experience on both iOS and Android.
Bluetooth Low Energy
Secure encrypted communication allows users to unlock when nearby. Commands and user tokens sent encrypted after configuration.
Package Delivery API
Email scanning, IMAP integration, and carrier API validation provide real-time package notifications and delivery status.
Wi-Fi (2.4 GHz)
Connects over 2.4 GHz Wi-Fi for maximum distance and reliability. Supports Open, WEP, WPA, and WPA2-Personal networks.
System Architecture
BoxLock Device
Communicates with router every 4 hours. Posts stats on barcode scan, BLE unlock, master barcode, and lock close events.
Mobile App
React Native app handles BLE pairing, lock control, package management, user access, and push notifications.
BoxLock Cloud (AWS)
Authenticates tracking numbers from postal services. Manages manifest of package barcodes and user barcodes.
Postal Provider Services
UPS, FedEx, USPS API feeds centralized through AfterShip/Shippo for tracking validation. Amazon via Cheerio crawling.
From package theft to secured delivery in a single workflow
Digital Scientists mapped the end-to-end customer journey to understand every touchpoint from the initial package theft experience through BoxLock purchase, setup, and first protected delivery.
Before BoxLock
Makes an online order
Receives notification of order shipment
Receives notification of order delivery
Discovers package has been stolen
Contacts delivery service and credit card company
With BoxLock
Receives BoxLock and sets up account and device
Places an online order and receives shipping notification
Confirms tracking number is automatically added in app
Receives notification when delivery driver scans and drops off package
Uses app to open lock and retrieve delivered package securely
Analyzing 15+ competitors across smart locks, package trackers, and smart home platforms
Digital Scientists conducted extensive competitive research across four categories to inform the product strategy and identify market positioning opportunities for BoxLock.
Package Tracking Apps
Analyzed AfterShip, ParcelTrack, Parcel, and Rakuten Slice for tracking UX, notification patterns, and carrier coverage.
Key insight: Difficulty with Amazon AMZL tracking numbers was a common limitation across all competitors.
Postal Carrier Apps
Reviewed UPS, FedEx, USPS, and My USPS for delivery management features, barcode scanning, and notification options.
Key insight: FedEx Delivery Manager and UPS MyChoice offered the most useful pre-delivery control features.
Bluetooth Padlocks
Evaluated MasterLock, Dog&Bone LockSmart, Noke, and Noke Pro for BLE pairing UX, sharing features, and battery management.
Key insight: Proximity locking/unlocking and shareable access were expected baseline features.
Smart Home Platforms
Studied Amazon Alexa, Nest, Eero, Arlo, August, Ring, and Lockitron for onboarding flows and IoT device setup patterns.
Key insight: Amazon Alexa's ultrasonic-detection onboarding set the gold standard for frictionless device setup.
"By building key parts of the app, Digital Scientists has been critical in bringing the solution to market. Internal and external feedback has been overwhelmingly positive. Digital Scientists keeps the project moving through constant communication, providing critical status updates throughout the engagement. Their ability to work well with others makes them a valuable partner."
Brad Ruffkess
Founder, BoxLock
Bluetooth commands, on-device indicators, and smart notifications
The app manages a complete set of device interactions including lock/unlock commands, factory reset, barcode validation feedback, battery monitoring, and Wi-Fi connectivity status -- all communicated through a secure BLE channel with encrypted user tokens.
App Notifications
- Package delivered
- Authorized user opens lock
- Battery low
- Device disconnected
- Lock left open too long
BLE Commands
- Unlock (with user token)
- Factory reset (login required)
- Test Wi-Fi connection
- All commands encrypted post-config
On-Device Indicators
- Barcode reader lights on scan
- Wi-Fi/BLE validation lights
- Audible processing tone
- Accept/decline sounds
Building an IoT product?
Digital Scientists designs and builds connected products from concept to market -- mobile apps, cloud infrastructure, BLE integration, and everything in between. Let's discuss your IoT opportunity.