Vehicle Access Secure Element Merging Authentication and Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle access systems are vulnerable to attacks due to the separation of authentication and access decision-making processes between secure elements and less secure general-purpose processors, leading to increased complexity and potential security breaches.
Innovation Solution
An access system where a secure element performs both credential verification and access decision-making, eliminating the need for a less secure general-purpose processor to handle access operations, thereby enhancing security and reducing system complexity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a general-purpose processor is used to handle access operations, then system complexity increases and security vulnerabilities arise, but if a secure element performs all functions, then processing flexibility is reduced
Solution Approach 1:
The patent merges the authentication function and the access decision-making function into a single secure element. This eliminates the need for communication between separate secure element and general-purpose processor, thereby reducing system complexity while maintaining high security. The secure element now performs both credential verification and makes access decisions based on verification results.
Solution Approach 2:
The secure element is designed to perform multiple functions: it acts as both the authentication module (verifying credentials) and the access control decision module (granting or denying access). This multi-functionality eliminates the need for separate dedicated components, reducing overall system complexity while ensuring all critical functions occur within the secure environment.
2Adaptability or versatility
If credential verification and access decision-making are separated into different components, then system flexibility is improved, but security resistance is reduced due to communication vulnerabilities
Solution Approach 1:
By combining credential verification and access decision-making within the same secure element, the patent eliminates the communication interface between separate components that would be vulnerable to attacks. The secure element processes both functions internally without exposing credentials or decision logic to external communication channels.
Solution Approach 2:
The patent introduces an intermediary approach where the secure element acts as a self-contained unit that internally mediates between credential verification and access decision-making. This internal mediation eliminates the need for external communication between authentication and control functions, thereby securing the system against attacks on communication channels.
3Reliability
If multiple communication protocols are integrated for enhanced security, then security resistance increases, but device complexity increases
Solution Approach 1:
The communication unit is designed with multi-functionality to support multiple communication protocols (NFC, Bluetooth Low Energy, Ultra-Wideband). Rather than implementing separate dedicated communication modules for each protocol, the single communication unit handles all protocols, thereby providing enhanced security through protocol diversity while minimizing the increase in device complexity.
Data Source
AI summary
In accordance with a first aspect of the present disclosure, an access system is provided for gaining access to a vehicle, comprising: a communication unit configured to establish a communication channel with an external device and to receive at least one credential from the external device through said communication channel; a secure element configured to perform a verification of said credential and to grant or deny access to the vehicle in dependence on a result of the verification of the credential. In accordance with further aspects of the present disclosure, a corresponding method of operating an access system for gaining access to a vehicle is conceived, as well as a computer program for carrying out said method.