Access Control Device Physical Property Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional access control devices fail to reliably determine whether an authentication request originates from a genuine physical ID token, as they lack a method to differentiate between a legitimate ID token and more powerful devices that could mimic its functionality, undermining the 'possession' security feature.

Innovation Solution

The access control device checks for characteristic physical properties of the ID token, such as computing power, power consumption, and resonance frequency, comparing these measurements with stored reference values to verify if the request comes from a system-compliant ID token, thereby implementing an intrusion detection system to prevent unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional access control devices verify digital attributes on ID tokens using cryptographic methods, then authentication can be performed, but the computing power requirements cannot reliably differentiate between genuine ID tokens and more powerful devices that could mimic functionality

Engineering Contradiction:
Improveauthentication reliabilityVSAvoidverification method complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent changes the verification parameter from digital attribute matching to physical characteristic measurement. By measuring computing power, power consumption, and resonance frequency - parameters that inherently differ between genuine ID tokens and mimicking devices - the system achieves reliable authentication without increasing methodological complexity

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent replaces the cryptographic verification mechanism with physical measurement mechanisms. Instead of relying on computationally intensive cryptographic operations that can be replicated, the system uses physical sensors to measure inherent characteristics of the ID token, such as resonance frequency and power consumption, which are difficult to replicate

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Measurement precision

If the access control device measures computing power through cryptographic operations, then genuine ID tokens with limited resources can be identified, but the measurement process consumes significant energy and time

Engineering Contradiction:
Improvecomputing power measurement precisionVSAvoidenergy consumption during measurement
Core Design Contradiction:
Measurement precisionVSUse of energy by moving object

Solution Approach 1:

The patent uses periodic measurement actions where the access control device sends multiple standardized test operations to the ID token and measures the response times and power consumption across these periodic interactions. This allows accurate characterization of computing power while distributing energy consumption over time rather than requiring a single high-energy measurement

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The patent performs partial cryptographic operations or simplified test operations rather than full authentication cryptographic sequences. By measuring the device's response to partial computational tasks, the system can gauge computing power without requiring the ID token to expend full energy resources

Inventive Principle:
Principle #16Partial or excessive action

3Reliability

If the system uses multiple physical characteristics for verification, then unauthorized access attempts can be detected, but the device complexity and measurement requirements increase

Engineering Contradiction:
Improveunauthorized access detectionVSAvoidmeasurement system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges multiple measurement functions into a unified verification process. The access control device simultaneously or sequentially measures computing power, power consumption, and resonance frequency, then combines these measurements into a single authentication decision. This integration reduces the operational complexity compared to implementing separate verification systems for each physical characteristic

Inventive Principle:
Principle #5Merging (Combining)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This approach effectively differentiates between a legitimate ID token and more powerful devices, ensuring secure authentication by measuring processing time, power consumption, and resonance frequency shifts, thereby enhancing security by recognizing and rejecting unauthorized access attempts.

Implementation Method 1

measuring the time it takes to process a characteristic arithmetic operation on the ID token can be a measure of the actual computing power of a requesting ID token

Methodology Applied
Scientific EffectProcessing time measurement:

Implementation Method 2

measuring power consumption via electromagnetic coupling can provide a measure of the actual computing power of a requesting ID token

Methodology Applied
Scientific EffectElectromagnetic coupling: Electromagnetic Induction

Implementation Method 3

measuring a shift in the characteristic resonance frequency of the ID token when coupled with the terminal/reader of the access control device can represent a measure of a characteristic physical property of the system-compliant ID token

Methodology Applied
Scientific EffectResonance frequency shift: Resonance

Data Source

PatentEP3671669A1Access control device and method for checking an access request in an access control device
Publication Date: 2020.06.24 BUNDESDRUCKEREI GMBH
  • EP3671669A1 patent drawingFigure 1
  • EP3671669A1 patent drawing
  • EP3671669A1 patent drawing

AI summary

Method for verifying an access request in an access control device (100) to determine whether the access request originates from a system-compliant physical ID token (110) or not, by verifying at least one characteristic physical property of the system-compliant ID token (110) through the access control device (100).