Machine Access System With Encrypted Electronic Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access systems for machines lack robust security, particularly in protecting against unauthorized access by allowing only qualified personnel, and require separate systems for different user types, leading to high design and operational costs.
Innovation Solution
An access system utilizing electronic keys with encrypted data areas, where each user has unique encryption codes, ensuring secure access control by allowing only authorized users to access specific data areas, and using a control unit connected via a data connection to manage access permissions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If different access systems are used for different user types, then security is improved, but device complexity and design effort increase
Solution Approach 1:
The access system uses a single unified interface that can handle multiple user types (end users, service personnel, administrators) through different authentication methods. The system universally processes access requests from various users without requiring separate physical access systems, thereby maintaining high security while reducing design complexity and operational costs.
Solution Approach 2:
The access system segments authentication methods by user type rather than requiring separate systems. Different authentication mechanisms (transponder, password, PUK code) are segmented and assigned to different user categories, allowing the single system to securely differentiate between end users, service personnel, and administrators while maintaining a unified architecture.
2Ease of operation
If transponder-based access systems are used, then ease of operation is improved, but security is worsened due to lack of confidentiality for access options
Solution Approach 1:
The system applies different authentication qualities to different user types. End users benefit from convenient transponder-based access, while service personnel and administrators require more secure authentication methods (passwords, PUK codes). This local differentiation of authentication strength maintains ease of operation for regular users while ensuring confidentiality and security for sensitive operations.
Solution Approach 2:
The control unit acts as an intermediary that manages multiple authentication methods. It mediates between the convenient transponder system and the need for confidential access control by implementing a hierarchy where transponders provide basic access but require additional authentication (passwords, PUK codes) for sensitive functions, thus maintaining both convenience and security.
3Reliability
If password-protected access systems are used, then security is improved, but ease of operation is worsened due to password management issues
Solution Approach 1:
The system merges multiple authentication methods into a unified access control framework. Transponder technology is combined with password and PUK code authentication, allowing the system to leverage the convenience of transponders while incorporating the security of password protection. The control unit integrates these methods so that users experience seamless authentication without the drawbacks of standalone password systems.
Data Source
Figure 1
Figure 2~4
Figure 5~6
AI summary
The invention relates to an access system (1) for a machine (7) controlled by a control unit (6), comprising a control unit (2) and associated electronic keys (3). The control unit (2) has a read unit (5) by means of which data is read from the electronic keys (3). The control unit (2) is connected to the control unit (6) via a data connection (8). The electronic keys (3) have different data areas, each assigned to a user and secured with an encryption code. The encryption codes of the control unit (2) can be read and stored in a memory 9. The control unit (2) reads data from a data area of an electronic key (3) and transmits it to the control unit (6) only if the encryption code of this data area matches an encryption code read into the electronic keys (3).Furthermore, electronic keys (3) with data areas, each encrypted with a user encryption code of a second type, are available. These encryption codes are stored in the memory (10) of the control unit (6). One of these encryption codes can be transferred to the control unit (2).