They, and the front desk, talk to a central server. The lock says, "hey server, I'm lock XXXX and I've just been tagged with card YYYY. The server looks in its database, and if the combination is allowed, it tells the lock to unlock. The front desk makes changes to the database as needed.