Portable Device Variable Information Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing portable electronic devices, such as electronic passports, suffer from low entropy in their visible information-based access control mechanisms, making them vulnerable to exhaustive attacks where all possible information combinations need to be tried, potentially allowing unauthorized access to the memory zone.
Innovation Solution
Implementing a process where the visible information presented to the outside environment can vary, increasing the complexity of accessing the memory zone by incorporating dynamic information changes, such as pictograms, alphanumerical characters, or 2D/3D barcodes, which are read by optical or human means, and using this variable information to authorize or prohibit access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a visible information item is used for access control, then the device can be accessed through optical reading, but the entropy is low making it vulnerable to exhaustive attacks
Solution Approach 1:
The patent applies dynamics by making the visible information item variable rather than static. The information presented to the optical reader changes over time or between sessions, so that even if an attacker captures one instance, it becomes invalid for subsequent access attempts. This dynamic characteristic directly addresses the low entropy problem by ensuring that the same physical device presents different information values at different times.
Solution Approach 2:
The patent changes the parameter of the visible information from fixed to variable. Specifically, the information item that is optically readable is made to vary between access sessions, effectively changing the entropy parameter. This allows the system to maintain the same access control mechanism (optical reading) while dramatically improving security through parameter variation.
2Reliability
If variable information is implemented to increase entropy, then security against exhaustive attacks improves, but the device complexity increases
Solution Approach 1:
The patent merges the information generation function with the existing display or presentation mechanism of the portable device. Rather than adding a completely separate variable information generation system, the invention integrates the variable information capability into the existing optical presentation infrastructure, thereby reducing the complexity overhead of implementing security enhancements.
Data Source
AI summary
The invention relates to a method for authorizing a communication with a portable electronic device, such as access to at least one memory area. The portable electronic device has a display for presenting an item of information visible to the outside and an interface for communication with the outside of the portable electronic device. The item of information is at least in part taken into account by the portable electronic device to authorize the communication. The method includes optically reading of the item of information outside the portable electronic device. The method also includes a step of varying the item of information, the step of varying causing the item of information, termed the variable item of information, to vary at least in part. The invention also relates to the portable electronic device, and the system comprising the portable electronic device and an electronic communication or reading device.