In-Vehicle Link Key Authentication for Secure Data Retrieval
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing in-vehicle information registering and retrieving systems lack secure mechanisms to prevent unauthorized access to registered information, allowing unauthorized retrieval of phone number information stored in the system.
Innovation Solution
An information registering and retrieving system that uses a link key generation mechanism between the portable apparatus and the in-vehicle apparatus, where a link key is generated based on both apparatus IDs, allowing only authorized retrieval of associated information by ensuring that the new link key matches the previously generated link key for secure information access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If phone number information is registered in the in-vehicle apparatus without authentication, then ease of operation is improved, but information security deteriorates
Solution Approach 1:
The system performs preliminary authentication by generating and verifying link keys before allowing information registration or retrieval. The in-vehicle apparatus generates a link key based on its own ID and the portable apparatus ID, stores it securely, and uses it to authenticate subsequent operations. This preliminary security measure prevents unauthorized access while maintaining ease of operation for authenticated devices
Solution Approach 2:
The link key serves as an intermediary authentication mechanism between the portable apparatus and the in-vehicle apparatus. Instead of directly trusting any connecting device, the system uses the link key as a mediator to verify the identity and authorization of the portable apparatus, thereby securing information access without complicating the user interface
2Reliability
If link key verification is implemented for information retrieval, then information security is improved, but device complexity increases
Solution Approach 1:
The link key generation mechanism serves multiple functions: it authenticates the portable apparatus, encrypts the information storage, and controls retrieval permissions. By using a single authentication mechanism for multiple security purposes, the system improves information security without proportionally increasing device complexity
Solution Approach 2:
The in-vehicle apparatus automatically generates and manages its own link keys based on its unique ID and the portable apparatus ID. The system performs self-authentication without requiring manual intervention or complex external verification processes, thereby enhancing security while keeping the operational complexity low
Data Source
AI summary
When an in-vehicle apparatus receives an information retrieval request from a portable cellular phone along with a phone ID of the cellular phone, a link key is generated in the in-vehicle apparatus based on the phone ID and an apparatus ID of the in-vehicle apparatus. When the link key coincides with a previously generated link key that is associated with information stored in the in-vehicle apparatus, the in-vehicle apparatus permits the cellular phone to retrieve only the associated information, which is stored in the in-vehicle apparatus and is associated with the previously generated link key, so that retrieval of information other than the associated information from the in-vehicle apparatus by the cellular phone is prohibited.