Vehicle Authentication System for Multi-User Data Access Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In car-sharing scenarios, managing confidential information across multiple users poses challenges, where improper management can lead to the inability to acquire necessary information for services or the inappropriate disclosure of sensitive data.

Innovation Solution

An authentication system comprising a service application, a vehicle function block, an authentication authorization management unit, a confidential information management table, and an authorization process management table, which determines authorization processes based on user rights and confidential information types to control data access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If confidential information is made accessible to service applications, then service functionality is improved, but data security deteriorates

Engineering Contradiction:

Improveservice functionalityVSAvoiddata security

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The authentication authorization management unit serves as an intermediary between service applications and confidential information. It receives acquisition requests from service applications, determines authorization based on user rights and information sensitivity, and selectively grants access. This mediator prevents direct access to sensitive data while enabling legitimate service functions.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

Different levels of access control are applied to different types of confidential information based on their sensitivity. The system evaluates each information type individually and applies appropriate authorization policies, allowing some information to be accessible while restricting access to highly sensitive data, thus achieving local quality in information protection.

Inventive Principle:

Principle #3Local quality

2Object-affected harmful factors

If strict authorization control is implemented, then data security is improved, but access efficiency deteriorates

Engineering Contradiction:

Improvedata securityVSAvoidaccess efficiency

Core Design Contradiction:

Object-affected harmful factorsVSProductivity

Solution Approach 1:

User rights and authorization policies are determined in advance before actual data access is needed. The authentication authorization management unit pre-establishes the authorization framework based on user identities and information sensitivity levels, so that when access requests occur, the system can quickly evaluate against pre-determined criteria without delay.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system automatically determines authorization status based on pre-stored user rights information and authorization policies. The authentication authorization management unit independently evaluates each request against the established criteria and makes authorization decisions without requiring manual intervention or complex real-time analysis, improving processing efficiency.

Inventive Principle:

Principle #25Self-service

3Ease of operation

If multiple users share vehicle access, then usability is improved, but information management complexity increases

Engineering Contradiction:

ImproveusabilityVSAvoidinformation management complexity

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The authorization management system segments user rights into distinct, manageable categories. Different users are assigned specific rights levels (e.g., full access, limited access, read-only) for different types of information. This segmentation allows multiple users to share the vehicle while maintaining clear, organized control over what each user can access, reducing management complexity.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The authentication authorization management unit serves multiple functions: it authenticates user identities, determines authorization status, manages user rights, and controls information access. This multi-functional approach consolidates what would otherwise be separate complex systems into a single unified management mechanism, improving usability while controlling complexity.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS20250086312A1Authentication system, authentication device, and storage medium storing authentication program

Publication Date: 2025.03.13 DENSO CORP

AI summary

An authentication system includes at least one service application, a vehicle function block, an authentication authorization management unit, a confidential information management table, and an authorization process management table. The at least one service application provides a service to a user utilizing a vehicle. The vehicle function block acquires the vehicle information. The authentication authorization management unit determines whether to authorize a confidential information acquisition request. The confidential information management table defines a user who has authorization rights for each confidential information. The authorization process management table defines an authorization process for authorizing the confidential information acquisition request for each of a plurality of users and for each of the plurality of confidential information. The authentication authorization management unit determines the authorization process based on the confidential information management table and the authorization process management table, and determines whether to authorize the confidential information acquisition request.