No data plan is needed. You can implement something similar to two factor auth tokens. Then the phones only need to know the correct token to present to the lock.