Vehicle Access Security via Periodic Data Synchronization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current vehicle access security methods, particularly using mobile devices, are vulnerable to cloning attacks, where malicious parties can create exact copies of smartphones, compromising security by intercepting and manipulating hardware IDs, which existing systems fail to detect and prevent.

Innovation Solution

Implementing a method where a smartphone repeatedly synchronizes data with a remote location, such as a central platform or vehicle control system, at varying intervals, storing and comparing distinct data characteristics like timestamps to ensure consistency, thereby blocking access if inconsistencies are detected, thus preventing cloned devices from gaining unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If mobile devices are used for vehicle access authorization, then ease of operation is improved, but security against cloning attacks deteriorates

Engineering Contradiction:
Improvevehicle access convenienceVSAvoidsecurity against cloning
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements periodic synchronization of authorization data between the mobile device and remote location at defined intervals. This periodic action ensures that the mobile device receives updated authorization data regularly, making cloned devices obsolete after synchronization intervals pass, thus maintaining security while enabling convenient mobile access

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The system employs feedback mechanisms where the control unit verifies authorization data against current vehicle data before granting access. This feedback loop detects inconsistencies that would indicate a cloned device, preventing unauthorized access while maintaining legitimate mobile device functionality

Inventive Principle:
Principle #23Feedback

2Reliability

If repeated synchronization is implemented, then security is improved, but use of energy increases

Engineering Contradiction:
Improveauthorization securityVSAvoidmobile device energy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

Synchronization is performed periodically at predetermined intervals rather than continuously. This reduces energy consumption by keeping the mobile device in low-power states between synchronization events, while still maintaining security through regular updates of authorization data

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The mobile device autonomously manages synchronization timing and power states without requiring continuous user interaction or high-power processing. The device self-regulates its communication activities to balance security requirements with energy conservation

Inventive Principle:
Principle #25Self-service

3Reliability

If data verification is performed at each contact, then security is improved, but device complexity increases

Engineering Contradiction:
Improveaccess authorization reliabilityVSAvoidsynchronization system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The complex verification and synchronization logic is extracted from the mobile device and implemented in the control unit and remote location systems. The mobile device retains only simple functions for initiating contact and receiving authorization data, reducing its complexity while maintaining overall system security through centralized verification

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS10321319B2Securing access to vehicles
Publication Date: 2019.06.11 HUF HÜLSBECK & FÜRST GMBH & CO KG
  • US10321319B2 patent drawing
  • US10321319B2 patent drawing
  • US10321319B2 patent drawing

AI summary

A method for securing an access method for vehicles includes a mobile device and a remote control device for administration of access rights. The mobile device is repeatedly connected to the remote control device and characteristic synchronizing data are generated for each connection. One part of the synchronization data is stored in the mobile device and in the remote control device. Characteristic prior synchronization data of a preceding connection is transmitted from the mobile device to the remote control device. A consistency check is performed in the remote control device between the prior synchronization data received from the mobile device and the prior synchronization data stored in the remote control device. If the data are consistent, the connection is terminated and a synchronization interval is waited before the connection is restored for the next synchronization. If the data are inconsistent, the mobile device is blocked from further access to vehicles.