Shared Vehicle Access Policies for Operation-Specific Permissions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems for managing shared vehicle access lack efficient methods to authenticate users and enforce access permissions, leading to potential misuse and unauthorized vehicle operations.
Innovation Solution
A method and system that utilize multiple authorization policies with distinct authentication schemes and access requirements to control vehicle operations, allowing or denying user requests based on authentication success and policy permissions, ensuring only authorized users can perform specific vehicle operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple authorization policies with distinct authentication schemes are implemented, then security and access control efficiency are improved, but device complexity increases
Solution Approach 1:
The authorization system is segmented into multiple independent authorization policies, each with its own authentication scheme and access requirements. This allows the system to handle different authentication methods (biometric, PIN, physical key) as separate, manageable units rather than one monolithic complex system.
Solution Approach 2:
The system dynamically selects and applies appropriate authorization policies based on the vehicle operation being requested and user context. The vehicle device can flexibly switch between different authentication schemes depending on the situation, making the system adaptable rather than static.
2Productivity
If multiple authorization policies with distinct authentication schemes are implemented, then access control efficiency is improved, but device complexity increases
Solution Approach 1:
Authorization policies are pre-configured with specific authentication schemes and access requirements before runtime. The system evaluates these pre-defined policies against the requested operation and user credentials, eliminating the need for complex real-time decision-making logic and improving access control efficiency.
Solution Approach 2:
The vehicle device acts as an intermediary that manages multiple authorization policies and mediates between user authentication attempts and vehicle operation execution. This intermediary layer simplifies the overall system architecture by centralizing policy management and authentication logic.
3Reliability
If authentication and permission verification are performed for each vehicle operation, then security is improved, but ease of operation deteriorates
Solution Approach 1:
Authentication and permission verification are merged into a single unified authorization policy evaluation process. When a user successfully authenticates, the system simultaneously determines both authentication success and operation permission based on the same policy, eliminating redundant verification steps and maintaining security while improving ease of operation.
4Adaptability or versatility
If multiple authorization policies are stored and evaluated, then adaptability is improved, but device complexity increases
Solution Approach 1:
The vehicle device is designed with universal capability to store, manage, and evaluate multiple types of authorization policies with different authentication schemes (biometric, PIN, physical key). This multi-functional design allows the same device to handle diverse authentication methods without requiring separate specialized systems for each scheme.
Data Source
AI summary
The present systems, devices, and methods relate to managing shared vehicle access. Authorization policies are stored at a network device, and are provided to vehicle devices. Authorization policies each include an authentication scheme, a list of permitted vehicle operations, and a list of requirements to perform vehicle operations. In this way, whether even if a user is authenticated to access a vehicle, vehicle access is controlled based one whether the user is permitted to perform vehicle operations, and whether requirements are met to perform vehicle operations. This provides a flexible and robust vehicle access system. Authorization Policies are distributed to vehicle device in an Access Configuration, which can be updated.