Mobility Access Permission Using Dual Security Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Zero trust architecture applied to mobility entities like vehicles faces challenges in maintaining security and ease of security maintenance.

Innovation Solution

An access permission device and method that verify the security status of both the access source and the mobility entity based on first and second verification results to determine access permissions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If zero trust architecture is applied to mobility entities, then security of the mobility entity is improved, but ease of maintaining security deteriorates

Engineering Contradiction:

Improvesecurity of mobility entityVSAvoidease of maintaining security

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The access permission determination is segmented into multiple independent verification components: first verification of access source security status, second verification of mobility entity security status, and function-based security status determination. This segmentation allows each verification aspect to be independently managed and maintained, improving ease of security maintenance while preserving comprehensive security.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system performs preliminary verification of security statuses before granting access permissions. By conducting first verification of access source and second verification of mobility entity in advance, the system establishes security prerequisites that simplify ongoing security management and reduce the complexity of real-time security decisions.

Inventive Principle:

Principle #10Preliminary action

2Measurement precision

If multiple verification results are used to determine access permission, then security status verification is improved, but system complexity increases

Engineering Contradiction:

Improvesecurity status verification accuracyVSAvoidsystem complexity

Core Design Contradiction:

Measurement precisionVSDevice complexity

Solution Approach 1:

The system applies different verification requirements locally based on the function being accessed. The security status determination is tailored to each specific function of the mobility entity, meaning that different functions may require different levels or types of verification. This local differentiation improves verification accuracy for each function while avoiding the need for uniformly complex verification across all functions.

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The system performs verification beyond simple access permission checks by conducting both first verification of access source and second verification of mobility entity. This partial excessive action ensures comprehensive security status verification while the results are integrated into a unified access permission decision, managing overall system complexity through integrated processing.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS20250296529A1Access permission device and access permission method

Publication Date: 2025.09.25 PANASONIC INTELLECTUAL PROPERTY MANAGEMENT CO LTD

AI summary

An access permission device includes: an obtainer that obtains, from an access source, an access request to access an access destination included in a mobility entity; and a permitter that permits the access source to access a function of the access destination, based on a first verification result of first verification of a security status of the access source and a second verification result of second verification of a security status of the mobility entity. The security status of the mobility entity depends on the function of the access