Vehicle Access PIN Generation and Validation System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current vehicle telematics systems face errors and security vulnerabilities due to the complexity and length of the Vehicle Identification Number (VIN), which can lead to incorrect access and potential theft, as users must manually input the VIN for remote access, and existing PIN-based systems are prone to brute force attacks.
Innovation Solution
A system that generates a vehicle-access-PIN, associates it with the vehicle, and validates it through a processor to provide secure access credentials, eliminating the need for manual VIN input and enhancing security by using a timeboxed PIN that expires quickly, thus preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If manual VIN input is used for remote access, then users can access vehicle information, but errors occur due to the length and complexity of VIN
Solution Approach 1:
The patent extracts the VIN input task from the user and relocates it to the vehicle system. The vehicle computing system automatically provides the VIN to the remote system, eliminating manual typing errors while maintaining access accuracy.
Solution Approach 2:
The vehicle system performs the VIN provision task itself without requiring user intervention. The vehicle computing system automatically generates and transmits the VIN to the remote system, making the system self-sufficient for this critical identification function.
2Reliability
If traditional PIN-based security is used, then vehicle access can be controlled, but the system is vulnerable to brute force attacks
Solution Approach 1:
The patent changes the fundamental parameter of the security credential from a static PIN to a dynamic token that includes time-based validity. The access token expires after a predetermined time period and can only be used once, transforming the security model to prevent brute force attacks while maintaining controlled access.
Solution Approach 2:
The security credential transitions from a static PIN to a dynamic token system. The token changes over time through expiration and single-use constraints, making the security system adaptive and resistant to traditional attack vectors while maintaining access control.
3Ease of operation
If access tokens have long validity periods, then user convenience is improved, but security risks increase
Solution Approach 1:
The patent implements periodic action through time-based token expiration. Instead of continuous validity, the access token has discrete validity periods that automatically expire, creating a rhythm of secure access windows that balance convenience with security requirements.
Solution Approach 2:
The system uses a predetermined time period that may be shorter than users would prefer for maximum convenience, but this partial action (limited validity period) is necessary to achieve the security goal. The token expires before it could be compromised, accepting reduced convenience as a trade-off for enhanced security.
Data Source
AI summary
A system includes a processor configured to receive a vehicle-access-PIN generation request from a vehicle computing system (VCS). The processor is also configured to generate the vehicle-access-PIN. The processor is additionally configured to associate a vehicle with the vehicle-access-PIN. Further, the processor is configured to return the vehicle-access-PIN to the requesting VCS. Also, the processor is configured to receive a validation request, including a validation-PIN, from a non-vehicle computing system (NVCS). In addition, the processor is configured to validate the validation-PIN by comparison with stored vehicle-access-PINs to find a match and provide access credentials, for a vehicle associated with a stored vehicle-access-PIN that matches the validation-PIN, to the NVCS.