Vehicle Access Authentication via Location Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current vehicle authentication systems lack secure and efficient methods to verify the proximity and identity of users attempting to access a vehicle, particularly in ride-share scenarios, which can lead to unauthorized access and relay attacks.
Innovation Solution
A system utilizing a vehicle's wireless communication interface to broadcast an encrypted message with its location, allowing a mobile device to decrypt and confirm the vehicle's identity and proximity, then requesting access only when the device is within a predefined distance, using encryption keys and location offsets to secure the authentication process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional passive entry devices are used for vehicle authentication, then user convenience is improved, but security against relay attacks and unauthorized access deteriorates
Solution Approach 1:
The patent introduces a server as an intermediary between the mobile device and vehicle. The server authenticates the mobile device, obtains location information, and communicates with the vehicle controller to grant or deny access. This intermediary layer prevents direct communication that could be exploited in relay attacks, while still providing convenient keyless entry functionality.
Solution Approach 2:
The patent adds a location dimension to the authentication process by obtaining and verifying location information from GPS or other positioning systems. This spatial verification ensures that the mobile device is physically present near the vehicle, preventing relay attacks that attempt to authenticate without physical proximity.
2Reliability
If encrypted communication is implemented for secure authentication, then security is improved, but communication complexity and processing time increase
Solution Approach 1:
The patent extracts the complex encryption and decryption operations from the vehicle controller and mobile device, performing these operations on the server instead. The server obtains encrypted authentication information, decrypts it using stored keys, and processes the location verification. This distribution of computational complexity reduces the burden on the vehicle and mobile device while maintaining strong security.
Data Source
AI summary
Responsive to location information received from a positioning system indicating a vehicle location corresponding to a predefined location, a controller of a vehicle broadcasts a notification including the vehicle location. Responsive to receiving a request including a device location from a mobile device having interpreted the broadcast, the controller permits access to the vehicle responsive to a difference between the device location and the vehicle location being less than a predefined threshold distance.