Vehicle User Authentication Using External Secret Code Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle authentication methods lack sufficient security measures to prevent unauthorized access, as they often store sensitive information within the vehicle, making it vulnerable to compromise and allowing unauthorized users to authenticate and access critical functions.
Innovation Solution
A method involving two tokens with unique secret codes, where the secret codes are combined to generate a new secret code, which is then verified externally, ensuring that both possession and identity are verified before authentication, and the secret codes are transmitted securely and temporarily, reducing the risk of unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If authentication secret code is stored within the vehicle, then authentication process is simplified, but security is compromised and unauthorized access becomes possible
Solution Approach 1:
The authentication secret code is extracted from the vehicle and stored externally in a secure database. During authentication, only token secret codes are transmitted to the vehicle, which are then combined to generate a new secret code that is temporarily used and immediately deleted. This extraction eliminates the security vulnerability of storing the master authentication secret code within the vehicle while maintaining authentication functionality.
Solution Approach 2:
Token secret codes are pre-stored in multiple tokens (e.g., key fobs, mobile devices) before authentication is needed. During the authentication process, these pre-stored token secret codes are combined to generate the authentication secret code on-the-fly. This preliminary preparation of token secret codes enables secure authentication without requiring the vehicle to store the master authentication secret code.
2Reliability
If multiple tokens are required for authentication, then security is enhanced, but device complexity increases
Solution Approach 1:
The authentication system is segmented into multiple independent tokens, each containing a unique token secret code. Instead of requiring one complex authentication device, the system uses multiple simpler tokens that can be distributed to different users or devices. The vehicle's authentication system segments the authentication process into: receiving token secret codes from multiple tokens, combining them to generate a new secret code, and verifying it against the authentication secret code stored externally.
Solution Approach 2:
Multiple token secret codes from different tokens are merged/combined to generate a single new secret code. This combining process occurs in the vehicle's authentication system, which receives token secret codes from multiple tokens, combines them using a defined algorithm, and generates a new secret code that is then verified against the authentication secret code. This merging approach distributes security requirements across multiple simple tokens while achieving strong authentication.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for authenticating a user at a vehicle (5), wherein the vehicle (5) is coupled to an external device (2) in which an authentication secret code (Ca) is stored and at least one token (T1) in which a token secret code (C1) is stored. In the method according to the invention, the token secret code (C1) is transmitted to the vehicle (5) when an operating action performed with the at least one token (T1) has been detected. A new secret code (Ck) is generated from the token secret code (C1). The new secret code (Ck) is compared with the authentication secret code (Ca). Furthermore, if the new secret code (Ck) matches the authentication secret code (Ca), the user is authenticated at the vehicle (5). The invention further relates to a device (1) for authenticating a user at a vehicle (5).