Compartment Access Authentication Using Hash-Based Offline Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing compartment systems face challenges in reliably, efficiently, and securely authorizing access to compartments, particularly when multiple devices or systems generate access data, and are vulnerable to unauthorized access and brute force attacks, with limited data processing requirements and independence from continuous data connections.
Innovation Solution
A method involving hash values and information exchange among devices to authenticate access, using a hash value based on first and second pieces of information, with the second information authorizing access to compartments, and limiting data transmission speed to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a long opening code is used for compartment access, then security is improved, but the efficiency of manual entry and data processing deteriorates
Solution Approach 1:
The access authorization system is segmented into multiple independent components: a first device that generates a hash value from access information, a second device that receives and forwards this hash value, and a compartment system that verifies the hash value. This segmentation allows the opening code to remain short for efficient user entry while the hash value provides strong security credentials for verification.
Solution Approach 2:
The patent replaces the direct use of long opening codes with a cryptographic hash value system. Instead of manually entering and processing long codes, the system uses hash functions to transform access information into compact, secure verification data that can be efficiently transmitted and verified.
2Adaptability or versatility
If multiple devices and systems can generate access data for compartments, then flexibility and adaptability are improved, but security risks and difficulty in detecting unauthorized access increase
Solution Approach 1:
The patent introduces a new parameter - the hash value - that remains constant across different devices and systems. Each device generates a hash value from its access information using the same cryptographic function, allowing multiple devices to independently generate valid access data without compromising security. The compartment system verifies all hash values using the same verification process.
Solution Approach 2:
The second device acts as an intermediary that receives hash values from first devices and forwards them to the compartment system. This intermediary layer enables different devices and systems to communicate through a standardized interface while maintaining security, as the second device only handles hash values without accessing the underlying access information.
3Reliability
If the compartment system requires permanent data connection for access verification, then reliability of authorization is improved, but the system's ability to function independently and robustness deteriorates
Solution Approach 1:
The system performs preliminary actions by generating and transmitting hash values before actual compartment access is needed. The hash value contains all necessary verification information in a compact form, allowing the compartment system to verify access authorization offline without requiring permanent data connections. The verification process uses only the pre-transmitted hash value and stored verification data.
Data Source
AI summary
Disclosed is a method in which a hash value and a first piece of information are obtained from a second device. The hash value is associated with a compartment of the compartment system, and the first piece of information is associated with a first device. Further, a second piece of information is obtained from the first device. Based on the first piece of information and the hash value, it is determined whether the second piece of information authorizes access to one or more compartments of the compartment system. Three associated methods, one executed by a first device, one executed by a second device, and one executed by a mobile device, are also disclosed. In addition, corresponding devices, systems, and computer programs for the respective execution and/or control of one or more of the disclosed methods are disclosed.