Door Lock Secure Offline Operation via Dynamic Variable Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional electronic door locks rely on internet connectivity for remote operation, making them vulnerable when Wi-Fi networks fail and limiting the ability to dynamically manage access rights without an internet connection.
Innovation Solution
A system that enables a lock to communicate securely with mobile devices using Near Field Communication or Bluetooth protocols, allowing for locking and unlocking operations without internet connectivity, by generating and verifying dynamic variables using stored encryption keys, ensuring secure and reliable access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If electronic door locks are connected to the Internet via wireless local area network for remote operation, then the locks can be operated remotely and access rights can be dynamically managed, but the locks become vulnerable when Wi-Fi network fails and cannot operate without internet connectivity
Solution Approach 1:
The system segments the access control functionality into two independent parts: (1) Internet-connected server for dynamic access rights management, and (2) standalone lock device with offline capability. The lock can operate independently using stored credentials, while the server provides supplemental management when available. This segmentation resolves the contradiction by allowing remote operation through multiple independent pathways.
Solution Approach 2:
The patent introduces an intermediary component - a portable computing device (smartphone/tablet) that acts as a bridge between the lock and the server. This intermediary enables communication between the lock and external systems through near-field communication protocols without requiring the lock itself to have internet connectivity, thus maintaining reliability while enabling remote management.
2Reliability
If a device is added to make conventional electric door locks into smart locks without internet connection, then the locks can operate independently, but it becomes challenging to communicate quickly and securely with mobile phones and execute instructions
Solution Approach 1:
The patent replaces complex mechanical/internet-based communication systems with near-field communication technology (such as Bluetooth or NFC). This substitution enables secure, quick communication between the lock and mobile devices without requiring internet infrastructure, thus maintaining independent operation while simplifying the communication mechanism.
Solution Approach 2:
The system uses cryptographic key pairs where the server holds a public key and the lock holds a private key. The lock generates encrypted messages using its private key, and the server verifies these messages using the public key. This cryptographic copying mechanism enables secure authentication and instruction execution without direct internet connectivity between the lock and server.
3Reliability
If encryption keys are stored in the lock for secure communication, then the lock can verify user credentials securely, but the mobile device would need to store the same keys which creates security vulnerabilities
Solution Approach 1:
The patent implements asymmetric cryptography where the lock holds a private key and the server holds a public key. These keys are mathematically related but cannot be derived from each other. The lock uses its private key to sign messages, and the server verifies these signatures using the public key. This asymmetric key storage resolves the contradiction by allowing secure verification without requiring the mobile device to store sensitive private keys.
Data Source
AI summary
A lock stores two keys and can wirelessly communicate with a mobile device. After the mobile device obtains a lock instruction from a user, the lock generates a dynamic variable, encrypts it with a first key, and produces a first encrypted message including the encrypted dynamic variable. The first encrypted message is transmitted to the mobile device, which forwards it to a server. The server decrypts the first encrypted message with the first key, retrieves the dynamic variable, and encrypts the dynamic variable with a second key. The server produces a second encrypted message with the encrypted dynamic variable and sends the same to the mobile device, which forwards it to the lock. The lock decrypts the second encrypted message with the second key and determines that the decrypted dynamic variable is the same as was produced by the lock earlier. Based on the determination, the lock locks/unlocks a door.