Transaction Code Authentication for Secure Remote Command Release
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In remotely controlled transport systems, the failure of uplink connections can lead to security risks due to open data connections being vulnerable to interference, causing incorrect command data transmission and increasing the workload for air traffic control units, which lack the necessary training, thereby increasing the risk of accidents.
Innovation Solution
An apparatus comprising a receiving unit, processor unit, and memory unit that generates a transaction code and authentication codes, allowing for secure command data release via an unsecured data connection by matching internal and external authentication codes, ensuring only authorized commands are executed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If an unsecured data connection is used to transmit commands when the uplink connection fails, then the remote operator can still control the remotely controlled means of transport, but the connection becomes vulnerable to interference and falsified commands from third parties
Solution Approach 1:
The patent introduces an intermediary authentication mechanism that mediates between the unsecured data connection and the command execution system. The authentication code, generated based on transaction-specific parameters and a secret key, acts as a mediator that verifies the legitimacy of commands before execution, thereby securing the otherwise vulnerable unsecured connection without preventing remote control capability
Solution Approach 2:
The system performs preliminary authentication before command execution by generating and verifying authentication codes in advance. The receiving unit generates an authentication code based on the transaction code, command data, and secret key before releasing the command for execution. This preliminary verification action prevents unauthorized commands from being executed, addressing the security vulnerability of unsecured connections
2Adaptability or versatility
If air traffic control units assume the role of remote operator to forward commands, then commands can be transmitted during uplink failure, but the workload increases and accident risk rises due to lack of training
Solution Approach 1:
The remotely controlled means of transport performs self-verification of command authenticity through the authentication code mechanism. The control unit independently verifies whether the received authentication code matches the generated authentication code before executing commands, eliminating the need for air traffic control units to manually verify or assume the remote operator role. This self-service capability reduces their workload and eliminates safety risks associated with untrained personnel
Solution Approach 2:
The authentication code serves as an intermediary that automates the command verification process previously requiring human intervention from air traffic control units. This intermediary mechanism handles the complex authentication logic automatically, freeing air traffic control units from the role of remote operator and reducing both their workload and the associated safety risks
3Device complexity
If consistency checking is not performed on received commands, then the system remains simple, but incorrect command data can be executed due to interference or falsification
Solution Approach 1:
The patent transforms the command data by generating authentication codes based on specific parameters including the transaction code, command data itself, and a secret key. This parameter-based transformation creates a unique authentication signature for each command, enabling verification without requiring complex consistency checking systems. The authentication code embeds verification information that simplifies the checking process while ensuring execution accuracy
Solution Approach 2:
The system implements feedback through the authentication code verification process. The receiving unit generates an authentication code and compares it with the received authentication code, providing feedback on whether the command is authentic before execution. This feedback mechanism ensures command execution accuracy by preventing incorrect or falsified commands from being executed, while maintaining relatively simple system complexity through automated comparison
Data Source
Figure 1~2
Figure 3~5a
Figure 5b~7
AI summary
The invention relates to an apparatus (20) for releasing received command data, comprising a processor unit (24) which has a code generator (240), a cryptography module (242) and a comparison module (244), wherein the code generator (240) generates a transaction code (246), a transmitting unit (26) which provides the transaction code (246) via an unsecured data connection (56), a receiving unit (22) which receives an external authentication code (464) and command data (442) via the unsecured data connection, and a memory unit (28) which stores data of a predefined private key (282), wherein the cryptography module generates an internal authentication code (248) based on the transaction code, the command data and the private key, and wherein the comparison module generates a release signal (250) to release the command data if the external authentication code matches the internal authentication code. The invention furthermore relates to a transmission apparatus (40) for command data, comprising a basic receiving unit (42) which receives the transaction code via the unsecured data connection, an input unit (44) which receives the command data, a basic memory unit (41) which stores the data of the predefined private key, a basic processor unit (46) which has a basic cryptography module (462), wherein the basic cryptography module generates the external authentication code based on the transaction code, the command data and the private key, and a basic transmitting unit (48) which provides the external authentication code and the command data via the unsecured data connection. A secure remote control of means of transport via an open data connection is enabled with the invention.