Tokenized PIN Authentication for Vehicle Service Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Customers are required to repeatedly enter their personal identification number (PIN) for each service request when interacting with third-party platforms for vehicle-related services, creating an inconvenient and potentially insecure process.
Innovation Solution
A system and method that generates a tokenized PIN based on a customer's PIN and authorization token, which is transmitted to and stored by the third-party platform, allowing for secure decryption and use for real-time transactions without storing the original PIN on any system, ensuring seamless access to vehicle services while maintaining security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If customers enter their PIN each time a service request is submitted, then security is maintained through direct authentication, but convenience deteriorates due to repeated manual entry requirements
Solution Approach 1:
The system performs preliminary authentication by obtaining customer approval during an initial setup phase. The processed PIN is then generated and stored in the vehicle system before any service requests are made. This preliminary action eliminates the need for repeated PIN entry during subsequent service requests while maintaining security through the initial customer approval.
Solution Approach 2:
The system creates a processed version of the PIN (processed PIN) that serves as a copy or representation of the original customer PIN. This processed PIN is stored in the vehicle system and used for authentication during service requests, replacing the need to store or repeatedly enter the original customer PIN while maintaining authentication functionality.
2Ease of operation
If the original PIN is stored in the vehicle system for automatic authentication, then convenience improves by eliminating repeated entry, but security deteriorates due to potential unauthorized access from stored credentials
Solution Approach 1:
The system stores a processed PIN in the vehicle system rather than the original customer PIN. This processed PIN is a transformed version that can be used for authentication but cannot be reverse-engineered to reveal the original customer PIN. This copying approach enables automatic authentication while mitigating the security risk of storing sensitive credentials.
Solution Approach 2:
The system transforms the customer PIN into a processed PIN by applying a processing function that changes the parameters or form of the authentication credential. This parameter change ensures that the stored value in the vehicle system is not the original sensitive PIN but a transformed version that maintains authentication capability while reducing security risks.
3Reliability
If a tokenized PIN system is implemented, then security improves by not storing the original PIN, but device complexity increases due to encryption and decryption processes
Solution Approach 1:
The system introduces a processed PIN as an intermediary between the customer PIN and the vehicle authentication system. The processed PIN acts as a mediator that enables communication and authentication without exposing the original customer PIN to the vehicle system or third-party platforms. This intermediary approach enhances security while managing complexity by creating a clear separation between sensitive data and system operations.
Data Source
AI summary
Systems and methods for authorizing a real-time transaction with a third party platform (TPP). The system includes a memory that stores instructions for authorizing the real-time transaction with the TPP. The system also includes a processor configured to execute the instructions. The instructions cause the processor to: generate a tokenized personal identification number (PIN) based on a request to register with the TPP, the request including a customer PIN and an authorization token; transmit the tokenized PIN and the authorization token to the TPP, wherein the TPP stores the tokenized PIN and the authorization token; in response to receipt, at the TPP, of a request for the real-time transaction from a customer, receive the tokenized PIN from the TPP; decrypt the tokenized PIN to extract the customer PIN; and transmit instructions including the customer PIN to a service provider, the instructions comprising a command to provide access to a vehicle.