Beacon Device Security via Dynamic Identification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Beacon devices transmit fixed identification information, allowing unauthorized terminals to access services, leading to potential misuse.
Innovation Solution
Implement a system where the beacon device dynamically generates identification information using authentication keys and current time information, which is validated by a service device to ensure only authenticated terminals can access services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If fixed identification information is transmitted by beacon device, then ease of operation is improved, but security is worsened
Solution Approach 1:
The beacon device dynamically generates identification information by combining authentication keys with time information (such as current time or elapsed time), causing the identification to change periodically. This dynamic approach maintains ease of operation for authenticated users while preventing unauthorized access, as stolen or captured identification information becomes invalid after a short period.
Solution Approach 2:
The identification information parameters are changed over time through mathematical operations on authentication keys and time values. The service device validates these changing parameters by verifying both the authentication key and time information, ensuring security while allowing legitimate access.
2Reliability
If dynamic identification information is generated using authentication keys and time information, then security is improved, but device complexity is worsened
Solution Approach 1:
The security system is segmented into distinct functional components: the beacon device handles identification generation using authentication keys and time information, while the service device handles validation. This segmentation allows each device to perform its specific function with relatively simple logic, reducing overall system complexity despite the enhanced security requirements.
Solution Approach 2:
Time information serves as an intermediary element that bridges the authentication key and the generated identification information. The service device uses this intermediary to validate the identification by checking both the authentication key and time information, providing a straightforward validation mechanism that doesn't require complex cryptographic protocols.
3Reliability
If validation is performed based on time information and authentication keys, then security is improved, but loss of time is worsened
Solution Approach 1:
Authentication keys and time information are pre-established and synchronized between the beacon device and service device before actual service access. This preliminary setup allows for rapid validation during service access, as the service device can quickly compare the presented identification information against the pre-stored authentication data without requiring complex real-time computation.
Solution Approach 2:
The validation process replaces complex cryptographic verification mechanisms with a simpler comparison-based system. The service device generates identification information using the same authentication key and time information as the beacon device, then directly compares these generated values with the presented identification. This substitution of verification methodology significantly reduces validation time while maintaining security.
Data Source
AI summary
A method, system and apparatus for enhancing the security of a beacon device are herein disclosed. A service device includes a service communication unit and a service control unit. The service communication unit communicates with at least one terminal and a beacon device, and transmits and receives data required to enhance the security of the beacon device. The service control unit performs control so as to receive pieces of identification information from the terminal and the beacon device, to check the received pieces of identification information and then perform validation based on the times at which the pieces of identification information have been generated and whether authentication keys match each other, to extract service information in response to the result of the validation, and to transmit the extracted service information to the terminal.