Multi-Factor Authentication for Secure Self-Service Energy Replenishing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current energy replenishing stations lack robust multi-factor authentication systems, leading to security vulnerabilities such as password hijacking and unauthorized access during self-service energy replenishing transactions.
Innovation Solution
A multi-factor authentication system incorporating user devices, image identification devices, biometric devices, and cloud servers to process and authenticate transaction and biometric data, ensuring secure identity verification through facial recognition and vehicle entrance data without storing biometric features.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional single-factor authentication (credit card, PIN, account deposit) is used for energy replenishing, then ease of operation is improved, but security is worsened due to password hijack and unauthorized access risks
Solution Approach 1:
The authentication process is segmented into multiple independent factors: biometric authentication (facial recognition), vehicle identification (license plate recognition), and transaction verification. Each factor operates independently through dedicated devices (biometric device, image identification device, user device), and all must be satisfied for successful authentication, thereby enhancing security without significantly impacting user convenience
Solution Approach 2:
The system introduces a multi-factor authentication service platform as an intermediary between the energy replenishing apparatus and the user. This platform coordinates multiple authentication factors (biometric data, vehicle entrance data, transaction data) and manages the authentication workflow, providing enhanced security while maintaining ease of operation through automated processing
2Reliability
If biometric data is stored for authentication purposes, then authentication reliability is improved, but data security is worsened due to potential data leakage
Solution Approach 1:
The system extracts only the essential biometric features (facial recognition data) needed for authentication from the user's biometric information. These extracted features are stored in an encrypted manner in the multi-factor authentication service platform, while the original comprehensive biometric data remains on the user's device. This extraction approach minimizes stored data volume and reduces data leakage risk while maintaining authentication reliability
Solution Approach 2:
The system transforms biometric data into a different parameter form through encryption and feature extraction. Instead of storing raw biometric images or data, the system converts them into encrypted feature vectors or templates that can still be used for authentication but are significantly more difficult to reverse-engineer or leak, thereby reducing data security risks while preserving authentication functionality
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A multi-factor authentication system for self-service energy replenishing and method thereof is provided. A user may acquire a multi-factor authentication service by an application for experiencing a convenient and safe self-service energy replenishing service. During the registration stage, registration stage upon the user logging into the application of the multi-factor authentication system, the user may complete tasks of identity authentication, account setup, and obtain permission of use for the account, thereby enabling the user to access services provided by the multi-factor authentication service platform. During an authentication stage for performing self-service energy replenishing service, the user may obtain the self-service energy replenishing service from the multi-factor authentication service platform in less steps and a much secure manner to improve identity authentication security for the self-service energy replenishing service. The system and method can overcome the problems of self-service energy replenishing service in the art which lacks of identity recognition security.