Maintenance Authentication via Digital License Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern passenger transportation/access devices face security vulnerabilities due to shared secret techniques and obfuscation methods, which can be compromised by malicious third parties, leading to unauthorized tampering and loss of security.
Innovation Solution
A method using digitally signed license keys with public asymmetric cryptography keys and one-way hashes of unique identifiers to verify the authenticity of maintenance means connected to controllers, ensuring secure communication and authentication through symmetric cryptography.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If shared secret techniques and obfuscation methods are used to secure the controller and maintenance means, then basic security is provided, but the system remains vulnerable to malicious third parties who can decipher the shared secrets and create unauthorized maintenance means
Solution Approach 1:
The patent introduces a license means as an intermediary authority that issues digitally signed license keys to maintenance means. This mediator verifies the authenticity of maintenance means through cryptographic signatures, preventing unauthorized access without requiring the controller to store vulnerable shared secrets. The license means acts as a trusted third party that binds the maintenance means to the controller through unforgeable digital signatures.
Solution Approach 2:
The patent replaces the mechanical/shared secret-based authentication system with a cryptographic public key infrastructure. Instead of relying on shared secrets that can be deciphered, the system uses asymmetric cryptography where the maintenance means presents a digitally signed license key containing its public key and a hash of its unique identifier. The controller verifies this signature using the license means' public key, eliminating the need for vulnerable shared secrets on-site.
2Reliability
If asymmetric cryptography is used for authentication, then security is improved, but the complexity of the system increases due to key management and cryptographic operations
Solution Approach 1:
The patent performs preliminary authentication actions by having the maintenance means present its digitally signed license key before any maintenance operations. The license key is pre-configured with the maintenance means' public key and a digital signature from the license means. This preliminary verification establishes trust before the maintenance session begins, simplifying subsequent authentication steps.
Solution Approach 2:
The patent segments the authentication system into distinct components: the license means that issues credentials, the maintenance means that presents credentials, and the controller that verifies credentials. Each component has a specific cryptographic role, distributing the complexity across multiple entities rather than concentrating it in one device. The license key itself is segmented into the public key and the digital signature portion.
Data Source
Figure 1
Figure 2
AI summary
The invention allows verification of authenticity of a maintenance means connectable to a controller of a passenger transportation/access device of a building. A digitally signed license key including a public asymmetric cryptography key of the maintenance means and optionally a one-way hash of a unique identifier of the maintenance means is used for this verification. Furthermore, an asymmetric cryptography key pair of the maintenance means and a symmetric cryptography key created by the controller are utilized in this verification.