Connected Car Authentication via Dynamic QR Code
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional connected vehicle authentication systems are cumbersome and insecure when the service terminal cannot communicate with the external network, requiring users to call a call center or display fixed authentication codes, which can lead to delays and security risks.
Innovation Solution
An authentication system that uses a service terminal to display a dynamically generated optically readable code, such as a QR code, containing encrypted vehicle and terminal identification information, allowing users to scan and transmit this code for authentication, even without network connectivity, and automatically requesting network subscription if needed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a fixed authentication code is displayed on the service terminal, then user authentication can be performed without network connectivity, but security problems arise due to leakage of the authentication code
Solution Approach 1:
The authentication code changes dynamically based on the vehicle identification number and terminal identification number. Instead of using a fixed code, the system generates a unique authentication code for each vehicle-terminal combination, making the code dynamic and adaptive to different contexts, thereby improving security while maintaining ease of operation.
Solution Approach 2:
The authentication code is customized for each specific vehicle and terminal combination. By incorporating the vehicle identification number and terminal identification number into the authentication code generation, the system creates locally unique authentication credentials for each user context, preventing widespread security vulnerabilities from a single fixed code.
2Ease of operation
If the service terminal calls the call center counselor to submit documents for authentication, then user authentication can be performed without network connectivity, but the process becomes cumbersome and time-consuming
Solution Approach 1:
The system enables self-service authentication by allowing users to scan the authentication code with their own terminal devices. This eliminates the need for manual document submission to call center counselors, automating the authentication process and significantly reducing both complexity and time requirements.
Solution Approach 2:
The manual mechanical process of calling a counselor and submitting physical documents is replaced with an automated optical scanning system. The authentication code can be scanned by user terminals to automatically transmit authentication information, substituting human intervention with an automated technical system.
3Adaptability or versatility
If the service terminal displays a fixed authentication code, then user authentication can be performed without network connectivity, but security risks increase due to code leakage
Solution Approach 1:
The authentication code transitions from a static fixed value to a dynamic value that changes based on vehicle and terminal identification. This dynamic nature ensures that even if one authentication code is compromised, it cannot be reused for other vehicles or terminals, significantly reducing security risks while maintaining adaptability for offline authentication.
Solution Approach 2:
The system changes the parameters used to generate the authentication code by incorporating the vehicle identification number and terminal identification number. This parameter transformation creates a unique authentication credential for each vehicle-terminal pair, reducing security risks associated with code leakage while maintaining versatility for offline authentication.
Data Source
AI summary
An embodiment user authentication system for a connected vehicle service includes a service terminal configured to encrypt first vehicle identification information comprising identification information of a vehicle system and terminal identification information comprising identification information of the service terminal to generate a service identification (ID) comprising identification information of the connected vehicle service, and to display the service ID on a display screen as an optically readable code, and a user terminal configured to receive the service ID by scanning the code and to transmit the received service ID to a service server through an external network to request a user authentication.


