Vehicle Access Transceiver With Four-Pass Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current vehicle-access systems face challenges with energy consumption and computational constraints, leading to inefficient and insecure authentication procedures that lack data integrity checks, particularly in automotive applications.
Innovation Solution
A transceiver system employing a cipher-module, encryption-module, and hashing-module for secure data exchange, using a cipher code to generate encrypted and hashed data, with a four-pass authentication procedure and energy-efficient design to ensure data integrity and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication procedures are used in vehicle-access systems, then the system can perform basic authentication functions, but energy consumption is excessive and data integrity is not ensured
Solution Approach 1:
The authentication protocol is segmented into four distinct passes, each performing a specific function (challenge generation, response generation, encrypted data transfer, and validation). This segmentation allows the system to perform only necessary computational operations at each stage, reducing overall energy consumption while ensuring data integrity through systematic verification steps.
Solution Approach 2:
The system performs preliminary actions by generating and exchanging authentication credentials (challenge and response values) before actual data transfer. This preliminary authentication phase establishes security parameters in advance, enabling subsequent encrypted communications without repeated heavy computational overhead, thus reducing energy consumption while maintaining reliability.
2Reliability
If strong encryption and hashing functions are implemented, then data security and integrity are enhanced, but computational demands increase
Solution Approach 1:
Different cryptographic operations are applied to different data elements based on their security requirements. The challenge and response values use symmetric encryption with AES-128, while payload data uses authenticated encryption with GCM mode. This localized application of cryptographic strength ensures security where needed without unnecessary computational overhead elsewhere.
Solution Approach 2:
The system dynamically changes cryptographic parameters during the authentication process. The cipher code (encryption key) is derived from the shared secret through a key derivation function, and different initialization vectors are used for each authentication session. These parameter changes enhance security while managing computational demands through efficient key management.
3Reliability
If authentication validation is performed at both transceivers, then mutual authentication and data integrity are ensured, but processing time and energy increase
Solution Approach 1:
The validation process is integrated continuously throughout the four-pass authentication protocol rather than being performed as a separate final step. Each pass builds upon the previous validation results, with the challenge-response mechanism providing continuous verification. This continuous validation approach ensures mutual authentication while minimizing total processing time by avoiding redundant verification steps.
Data Source
AI summary
A first-transceiver for communicating with a second-transceiver is disclosed. The first and second-transceivers are vehicle-access-system transceivers. The transceivers include a cipher-module configured to generate a cipher-code using a cipher key and an input value, an encryption-module configured to generate encrypted-payload-data from payload-data using the cipher-code, a hashing-module configured to hash the payload-data to generate hashed-payload-data using the cipher-code, and a transmitter configured to transmit the encrypted-payload-data and the hashed-payload-data to the second-transceiver. A vehicle including the first-transceiver is also disclosed. Access to one or more systems of the vehicle are controlled in accordance with a validation state.