Vehicle User Authentication Using External Secret Code Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing vehicle authentication methods lack sufficient security measures to prevent unauthorized access, as they often store sensitive information within the vehicle, making it vulnerable to compromise and allowing unauthorized users to authenticate and access critical functions.

Innovation Solution

A method involving two tokens with unique secret codes, where the secret codes are combined to generate a new secret code, which is then verified externally, ensuring that both possession and identity are verified before authentication, and the secret codes are transmitted securely and temporarily, reducing the risk of unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If authentication secret code is stored within the vehicle, then authentication process is simplified, but security is compromised and unauthorized access becomes possible

Engineering Contradiction:
Improveauthentication processVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The authentication secret code is extracted from the vehicle and stored externally in a secure database. During authentication, only token secret codes are transmitted to the vehicle, which are then combined to generate a new secret code that is temporarily used and immediately deleted. This extraction eliminates the security vulnerability of storing the master authentication secret code within the vehicle while maintaining authentication functionality.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

Token secret codes are pre-stored in multiple tokens (e.g., key fobs, mobile devices) before authentication is needed. During the authentication process, these pre-stored token secret codes are combined to generate the authentication secret code on-the-fly. This preliminary preparation of token secret codes enables secure authentication without requiring the vehicle to store the master authentication secret code.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If multiple tokens are required for authentication, then security is enhanced, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication system
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication system is segmented into multiple independent tokens, each containing a unique token secret code. Instead of requiring one complex authentication device, the system uses multiple simpler tokens that can be distributed to different users or devices. The vehicle's authentication system segments the authentication process into: receiving token secret codes from multiple tokens, combining them to generate a new secret code, and verifying it against the authentication secret code stored externally.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Multiple token secret codes from different tokens are merged/combined to generate a single new secret code. This combining process occurs in the vehicle's authentication system, which receives token secret codes from multiple tokens, combines them using a defined algorithm, and generates a new secret code that is then verified against the authentication secret code. This merging approach distributes security requirements across multiple simple tokens while achieving strong authentication.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentEP3416140B1Method and device for authenticating a user on a vehicle
Publication Date: 2024.03.06 VOLKSWAGEN AG
  • EP3416140B1 patent drawingFigure 1
  • EP3416140B1 patent drawingFigure 2
  • EP3416140B1 patent drawingFigure 3

AI summary

The invention relates to a method for authenticating a user at a vehicle (5), wherein the vehicle (5) is coupled to an external device (2) in which an authentication secret code (Ca) is stored and at least one token (T1) in which a token secret code (C1) is stored. In the method according to the invention, the token secret code (C1) is transmitted to the vehicle (5) when an operating action performed with the at least one token (T1) has been detected. A new secret code (Ck) is generated from the token secret code (C1). The new secret code (Ck) is compared with the authentication secret code (Ca). Furthermore, if the new secret code (Ck) matches the authentication secret code (Ca), the user is authenticated at the vehicle (5). The invention further relates to a device (1) for authenticating a user at a vehicle (5).