Air conditioning control system and storage medium storing authentication program product
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing air conditioning control systems that allow remote operation via the Internet face security risks due to the ease of unauthorized access when using traditional user ID and password authentication, as these can be leaked or accidentally matched, leading to unintended remote control of air conditioners.
Innovation Solution
An air conditioning control system that employs a two-dimensional code displayed on a device for authentication, where the authentication information is unique and changes each time, requiring the operation terminal to image the code and transmit registration information including terminal-specific data for authentication and registration, ensuring only authorized terminals can perform remote operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If user ID and password authentication is used for remote operation, then ease of operation is improved, but security deteriorates due to risk of leakage or accidental matching
Solution Approach 1:
The authentication process is segmented into multiple independent steps: displaying authentication information on the air conditioning control device, capturing it with the operation terminal, and performing verification. This segmentation prevents single-point compromise that occurs with traditional username/password systems.
Solution Approach 2:
Authentication information displayed as a code serves as an intermediary between the air conditioning control device and the operation terminal. This intermediary mechanism transfers authentication credentials securely without requiring direct input of sensitive data like passwords.
2Device complexity
If traditional authentication methods are used, then device complexity is reduced, but security deteriorates due to unauthorized access risks
Solution Approach 1:
Authentication information is displayed preliminarily on the air conditioning control device before the actual authentication operation. The operation terminal captures this pre-displayed information, ensuring that authentication credentials are established before any remote operation can occur.
Solution Approach 2:
The traditional mechanical input method (typing username and password) is replaced with an optical capture method. The operation terminal uses its camera to capture the authentication code displayed on the control device, substituting manual input with automated optical recognition.
3Ease of operation
If user ID and password are required for authentication, then ease of operation is improved, but reliability worsens due to potential for accidental duplication
Solution Approach 1:
The authentication code displayed on the air conditioning control device is dynamic and changes with each authentication attempt. This dynamic characteristic prevents accidental duplication because each code is unique to a specific time and operation, unlike static usernames and passwords that can be accidentally repeated.
Data Source
AI summary
An air conditioning control system includes an air conditioner, an air conditioning control device with a display, and an operation terminal with a camera. First authentication information included in a two-dimensional code displayed in the display in the air conditioning control device is collated with second authentication information acquired from the two-dimensional code imaged by the camera in the operation terminal and included in registration information transmitted from the operation terminal, to determine whether the first authentication information and the second authentication information match with each other. In response to the first authentication information and the second authentication information being determined to match with each other, the operation terminal that has terminal information included in the registration information is successfully authenticated and registered as an operation terminal that is enabled to perform a remote operation of the air conditioning control device.