Digital Vehicle Key Authentication With Dual Security Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Digital vehicle keys face security risks, allowing unauthorized access to vehicles after the loss of a mobile terminal, compromising user property.
Innovation Solution
Implement dual security authentication conditions for digital vehicle keys, including a first authentication condition and a second authentication condition based on additional state information such as position, trajectory, and identity verification, to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If digital vehicle key authentication is implemented using only basic security functions (SE and TEE), then the ease of operation is improved, but the security reliability deteriorates due to vulnerability to unauthorized access after mobile terminal loss
Solution Approach 1:
The authentication process is segmented into two distinct stages: first authentication condition (basic security verification) and second authentication condition (additional verification such as position, trajectory, or identity verification). This segmentation allows the system to maintain ease of operation for basic access while adding layered security measures to prevent unauthorized access after mobile terminal loss.
Solution Approach 2:
The system performs preliminary verification by checking the first authentication condition (basic security verification) before proceeding to the second authentication condition (additional verification). This preliminary action ensures that only devices passing basic security checks are subjected to further verification, maintaining operational efficiency while enhancing security.
2Reliability
If dual security authentication conditions are implemented including position and trajectory verification, then the security reliability is improved, but the device complexity increases due to additional verification requirements
Solution Approach 1:
The mobile terminal's existing components (GPS for position, motion sensors for trajectory, biometric sensors for identity verification) are utilized for multiple purposes: their primary functions remain intact while simultaneously serving authentication verification. This multi-functionality enhances security reliability without requiring additional dedicated hardware components, thus limiting the increase in device complexity.
Solution Approach 2:
The system uses the mobile terminal's own built-in capabilities (positioning system, motion detection, biometric verification) to perform the second authentication condition verification. This self-service approach allows the terminal to verify itself without external assistance, enhancing security while avoiding the complexity of external verification systems.
3Object-affected harmful factors
If additional verification methods such as position and trajectory are required for authentication, then the security against unauthorized access is improved, but the loss of time increases due to extended authentication process
Solution Approach 1:
The system implements partial verification by selectively applying the second authentication condition only when necessary. The first authentication condition is always performed, and the second condition (position, trajectory, or identity verification) is applied based on risk assessment or specific scenarios. This partial action approach prevents unauthorized access while minimizing the time loss for routine authentications.
Solution Approach 2:
The authentication system operates periodically with varying intensity: routine authentications use only the first authentication condition for quick access, while suspicious or high-risk situations trigger the second authentication condition. This periodic variation in verification depth balances security enhancement with time efficiency.
Data Source
Figure 1A
Figure 1B
Figure 1C
AI summary
Disclosed are a vehicle security authentication method, and a corresponding vehicle, mobile terminal, system, computer program product and electronic device. The vehicle corresponds to at least one digital vehicle key, and the at least one digital vehicle key is located on at least one mobile terminal. The method comprises: receiving a connection request of the at least one mobile terminal; acquiring authentication information of the at least one digital vehicle key on the at least one mobile terminal; and under the condition that the authentication information of the at least one digital vehicle key satisfies security authentication conditions, executing an operation corresponding to the at least one digital vehicle key, wherein the security authentication conditions comprise a first authentication condition and a second authentication condition.