Mobile-Generated Temporal Credentials for Physical Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing physical access control systems using cipher locks, card keys, and mobile devices are vulnerable to interception and duplication due to reliance on shared secrets, and non-repeating key pairs are computationally intensive and do not scale well.
Innovation Solution
A decentralized physical access control system that generates unpredictable temporal credentials using mobile application devices, where each request is unique and verified based on elapsed time between predecessor and successor access requests, with forward verification of one-time-use codes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If non-repeating key pairs are used for physical access control, then security against code duplication is improved, but computational overhead increases and scalability deteriorates
Solution Approach 1:
The system segments the authentication process into two parts: a static shared secret stored in both the access control system and mobile device, and a dynamic one-time code generated from temporal credentials. This segmentation allows the heavy cryptographic operations to be performed only during initial setup, while subsequent access requests use lightweight temporal validation.
Solution Approach 2:
The system performs preliminary key pair generation and shared secret establishment during initial device setup, before actual access control operations begin. This preliminary action eliminates the need for repeated computational intensive operations during each access request, as the mobile device and access control system already possess the necessary cryptographic materials.
2Ease of operation
If shared secrets are distributed for physical access control, then ease of operation is improved, but vulnerability to interception and duplication increases
Solution Approach 1:
The system transforms static shared secrets into dynamic one-time codes that change with each access request. The mobile device generates temporal credentials based on elapsed time since the last request, creating a dynamic authentication mechanism that is both easy to operate (automatic generation) and secure (cannot be reused or predicted).
Solution Approach 2:
The system changes the temporal parameter of the credential by generating new one-time codes based on elapsed time intervals. Each access request uses a different time window, transforming the static nature of traditional shared secrets into a time-varying authentication mechanism that prevents interception and reuse.
3Ease of operation
If repeated access requests are allowed for mobile devices, then ease of operation is improved, but security against code reuse deteriorates
Solution Approach 1:
The system implements periodic generation of one-time codes based on time intervals since the last access request. Each code is valid only for a specific temporal window, creating a periodic authentication rhythm that allows repeated access (easy operation) while preventing code reuse (security), as each code expires after its designated time window.
Data Source
AI summary
Embodiments of a physical access control system may grant authorized portal entry upon receiving a physical access request by generating a temporal credential based on the elapsed time from a prior access request. The controller processes multiple physical access requests from various mobile application devices. For each mobile application device, embodiments may authenticate an initial (predecessor) access request. For subsequent (successor) access requests, embodiments may use monotonic nonces to advance the range of temporal code matches. Entry code generation is decentralized to distributed application devices and remains unpredictable until a subsequent (successor) access request is initiated by the same mobile application device.