Compartment Access Codes With Encrypted Authorization Indicators
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing compartment installations face security vulnerabilities due to the use of easily guessable collection codes and shared user identifiers, which increase the risk of unauthorized access and compromise the reliability and efficiency of access control.
Innovation Solution
Implement a method involving encryption of access information with a key, associating an indicator, and using a code word generated from decrypted access information to authorize access to compartments, ensuring secure and efficient access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a collection code is used for access authorization, then ease of operation is improved, but security deteriorates because the code is easily guessable and shared across multiple compartments
Solution Approach 1:
The patent divides the single shared collection code into multiple individual access codes, each uniquely assigned to a specific compartment. This segmentation allows each compartment to have its own secure access mechanism while maintaining ease of operation for users.
Solution Approach 2:
The patent implements different access authorization characteristics for different compartments. Each compartment has its own locally optimized access code that is tailored to its specific security requirements and user authorization level, rather than using a uniform global code.
2Ease of operation
If a short collection code is used, then ease of operation is improved, but security deteriorates due to increased vulnerability to brute force attacks
Solution Approach 1:
The patent segments the access authorization into multiple individual codes rather than using a single short code. This increases the total security space while keeping each individual code manageable in length for user input.
Solution Approach 2:
The patent changes the parameters of the access code system by assigning unique identifiers to each compartment and creating individualized access codes. This transforms the security parameter from a single short code to multiple differentiated codes with varying characteristics.
3Ease of operation
If access information is stored centrally in a system, then ease of operation is improved, but security deteriorates because unauthorized access to the system compromises all compartments
Solution Approach 1:
The patent segments the centralized access information storage into distributed individual access codes for each compartment. This eliminates the single point of failure in centralized storage while maintaining efficient access management through localized code verification.
Solution Approach 2:
The patent extracts the critical access information from the centralized system and stores it locally in the compartment installation. This extraction removes the vulnerability of centralized storage while preserving the ability to manage access efficiently at the compartment level.
4Reliability
If a compartment installation operates independently without continuous system connection, then reliability is improved, but access authorization complexity increases
Solution Approach 1:
The patent performs preliminary action by pre-generating and storing individual access codes for each compartment before independent operation is needed. This allows the compartment installation to operate autonomously with simplified authorization checks, as the complex code generation and distribution is completed in advance during system setup.
Data Source
AI summary
Disclosed is a method in which a key is acquired; access information is generated; and the access information is encrypted with the key. Further, an indicator is associated with the access information and first data is output. The first data includes the access information encrypted with the key and the indicator. Third data is acquired from an apparatus having a key for decrypting the encrypted access information, and the third data includes a code word and an indicator. Access information is determined from the third data, and it is ascertained whether the code word authorizes access. Access is granted to a compartment installation if it was ascertained that the code word authorizes access. Two associated methods, one performed by a mobile apparatus, and another performed by a system are disclosed. Furthermore, corresponding apparatuses, systems, and computer programs are disclosed.