Proximity-Based Door Authentication Using Random Challenge Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The integration of digital keys into electronic devices for security and authentication purposes raises concerns about hacking risks due to exposure, necessitating a high-security processing environment.
Innovation Solution
An authentication method involving a target device generating a random value based on proximity to an electronic device, transmitting this value, and using it to determine whether to open or close a door by comparing encrypted authentication information with server-provided verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If digital key technology is integrated into electronic devices for convenience and functionality extension, then user convenience and industrial effects are improved, but security risks such as hacking exposure increase
Solution Approach 1:
The authentication system is divided into multiple independent components: the target device generates random values, the electronic device signs authentication information, and the server verifies credentials. This segmentation ensures that no single device holds all sensitive data, reducing hacking risk while maintaining user convenience.
Solution Approach 2:
A server acts as an intermediary between the target device and electronic device. The server receives encrypted authentication information, verifies it against stored credentials, and returns verification results. This intermediary layer prevents direct exposure of sensitive keys between devices, mitigating security risks while enabling convenient authentication.
2Reliability
If digital keys are processed in high-security areas to prevent hacking, then security is improved, but device complexity increases
Solution Approach 1:
The most sensitive operation (private key signing) is extracted and performed only by the electronic device's secure environment, while the target device handles random value generation and verification. The server handles credential storage and verification. This extraction distributes complexity across multiple devices, reducing the burden on any single device while maintaining high security.
Solution Approach 2:
Authentication credentials are pre-established between the server and electronic devices. The server stores public keys and authentication templates in advance. When authentication is needed, the system only needs to perform verification operations rather than establishing trust from scratch, simplifying the real-time processing complexity while maintaining security.
3Reliability
If proximity-based authentication with random values is implemented, then security against spoofing is improved, but authentication process complexity increases
Solution Approach 1:
The target device generates a new random value for each authentication attempt. This periodic generation of fresh random challenges ensures that each authentication is unique and cannot be replayed. While this adds a step to the process, it significantly enhances security against spoofing attacks.
Solution Approach 2:
The patent replaces physical key card swiping or biometric scanning with a cryptographic challenge-response mechanism using random values and digital signatures. This substitution eliminates mechanical contact points that could be spoofed, enhancing security while the complexity is managed through automated cryptographic operations.
Data Source
AI summary
The disclosure relates to a method and apparatus for authenticating an electronic device. An operating method of a target device according to an embodiment includes generating a random value based on whether an electronic device is within a certain distance from the target device, transmitting, to the electronic device, first information including the generated random value and identification information of the target device, and receiving, from the electronic device, first authentication information obtained based on the first information, encrypting the received first authentication information and a target device key, transmitting the encrypted target device key and the encrypted first authentication information to a server, and receiving, from the server, second authentication information obtained based on the first authentication information, and determining whether to open or close a door based on a comparison between the second authentication information and the random value.