Car Sharing Security Protocol Using Dynamic Random Code Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current car sharing systems face security risks due to the limitations of wireless transmission protocols and Bluetooth technology, which can lead to intercepted data and compromised authentication processes.
Innovation Solution
A security processing method is introduced that enhances near-field communication security by using an additional communication link protocol, where a smart terminal and vehicle exchange unique encryption keys for data encryption and decryption, ensuring identity authentication and secure data exchange through a symmetric encryption algorithm like AES.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If SSL/TLS protocols are used for encrypted communication between smart terminal and cloud server, then communication security is improved, but the protocol is vulnerable to interception and server deception attacks due to operating above unreliable wireless datagram protocol
Solution Approach 1:
The patent introduces an intermediary authentication mechanism using device identifiers and random codes that act as mediators between the smart terminal and cloud server. The authentication request includes device identifier, random code, and timestamp, which are verified by the server to establish secure communication without relying solely on SSL/TLS that can be deceived. This intermediary layer prevents server impersonation attacks.
Solution Approach 2:
The patent performs preliminary authentication actions before actual data transmission. The smart terminal and cloud server exchange authentication information including device identifiers, random codes, and timestamps in advance to establish trusted communication channels. This preliminary authentication prevents interception attacks by verifying the identity of communication parties before sensitive data is transmitted.
2Ease of operation
If Bluetooth technology is used for near-field communication, then convenience is improved, but security is compromised due to limited transmission distance and signal interception risks
Solution Approach 1:
The patent combines multiple communication technologies and authentication mechanisms into a composite security system. It integrates Bluetooth near-field communication with HTTPS encrypted transmission and multi-factor authentication (device identifier, random code, timestamp). This composite approach maintains the convenience of Bluetooth while adding layers of security to prevent signal interception and unauthorized access.
Solution Approach 2:
The patent implements dynamic authentication parameters including random codes and timestamps that change with each authentication session. The authentication request includes a random code generated by the smart terminal and a timestamp, ensuring that even if Bluetooth signals are intercepted, the authentication credentials are invalid for subsequent attempts. This dynamic approach prevents replay attacks while maintaining Bluetooth convenience.
3Reliability
If symmetric password system with encryption key is used for identity authentication, then authentication capability is improved, but security is weakened due to vulnerability to diassembly and static analysis of binary documents
Solution Approach 1:
The patent changes the authentication parameters from static passwords to dynamic combinations of device identifiers, random codes, and timestamps. Instead of using fixed encryption keys that can be extracted through binary analysis, the system uses ever-changing authentication credentials that are valid only for specific sessions. This parameter change makes password extraction through static analysis ineffective while maintaining strong authentication capability.
Solution Approach 2:
The patent uses device identifiers as unique copies of device identity rather than storing or transmitting actual passwords. The authentication mechanism relies on verifying the device identifier and generated random codes rather than checking against stored password hashes. This copying approach eliminates the need for vulnerable password storage in binary documents while maintaining authentication security.
Data Source
Figure 1
Figure 2
AI summary
The present invention relates to the technical field of motor vehicle control, and in particular discloses a security processing method for a car sharing service, comprising: a smart terminal encrypting a second random code according to a first smart terminal encryption key, to obtain a first cyphertext, the first smart terminal encryption key comprising a first random code and order form information sent by a cloud server; the smart terminal receiving a third random code sent by a vehicle, the third random code being obtained by the vehicle by decrypting the first cyphertext according to a first vehicle encryption key, the first vehicle encryption key comprising the first random code and the order form information sent by the cloud server; the smart terminal subjecting the second random code and the third random code to comparative verification, to obtain an identity authentication result; when the identity authentication result has passed, the smart terminal sending encrypted service data to the vehicle; and the vehicle decrypting the service data to execute the service data. By introducing an additional communication link security protocol, the security of near-field communication between the smart terminal and the vehicle is ensured, and the level of security with which vehicles can be used is increased.