Locker Access Tokens With MAC Validation Against Code Copying
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing locker systems face challenges in ensuring secure access, as simple locker codes are vulnerable to security attacks, leading to unauthorized access and potential theft or damage of delivered goods.
Innovation Solution
A token-based system is implemented, utilizing a one-time cryptographic token with a message authentication code (MAC) generated using a secret key derived from a unique derivation key, which includes locker-specific data and a validity counter, ensuring secure access through contactless methods like NFC or QR codes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If simple locker codes are used for access, then ease of operation is improved, but security reliability deteriorates due to vulnerability to security attacks
Solution Approach 1:
The patent replaces traditional mechanical or simple digital locker codes with a cryptographic token-based access system. The token includes a message authentication code (MAC) generated using cryptographic functions (HMAC-SHA256 or similar) that securely authenticate the user without exposing simple codes. This substitution maintains ease of operation through contactless methods (NFC, QR codes) while dramatically improving security against attacks.
2Reliability
If cryptographic tokens with MAC are implemented, then security reliability is improved, but device complexity increases due to cryptographic processing requirements
Solution Approach 1:
The system performs preliminary cryptographic key generation and token creation in advance. The server generates cryptographic key pairs and stores public keys, while the locker system pre-configures MAC verification capabilities. Tokens are created with embedded MAC values before delivery to the user, so that during actual access, the cryptographic verification is already prepared and streamlined, reducing real-time processing complexity.
Solution Approach 2:
The token-based system is designed to be self-verifying through embedded MAC codes. The locker system independently verifies token authenticity using the pre-configured public key and MAC algorithm, without requiring continuous server connection or complex real-time authentication protocols. This self-service capability reduces system complexity while maintaining high security.
3Ease of operation
If contactless access methods like NFC or QR codes are used, then ease of operation is improved, but vulnerability to unauthorized copying increases
Solution Approach 1:
The patent transforms the access token from a static code into a dynamic cryptographic parameter structure. Each token contains a unique MAC generated by HMAC functions that changes with each transaction. The token parameters include time-sensitive or transaction-specific values that prevent copying, as each token becomes invalid after use or outside its validity window. This parameter transformation maintains contactless convenience while eliminating copying vulnerabilities.
Data Source
AI summary
Disclosed herein are system, method, and computer program product embodiments for providing secure access to a locker of a locker system based on a token that includes token data and a message authentication code (MAC) to authenticate the token data. The token data includes at least the unique locker identifier for the locker. The MAC can be generated using a secret key. The secret key can be obtained based on a unique derivation key associated with a master key. The locker system can determine whether the token is valid based on the token data, the MAC, and the secret key. In response to a determination that the token is valid, the locker system can send a signal to unlock the locker.