Vehicle Authentication via SMS Cross-Channel Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing risk of personal information leakage and malicious vehicle use due to hacking, particularly in vehicles connected to networks, necessitates improved security measures for authentication systems.
Innovation Solution
An authentication system and method that utilizes multiple channels, including SMS messages and different cellular wireless communications, to verify the authenticity of authentication requests, ensuring the legitimacy of vehicle control devices through unique information exchange and validation processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If single-channel authentication is used, then authentication speed is fast, but security is weak and vulnerable to hacking
Solution Approach 1:
The authentication system is segmented into multiple independent channels: a first channel for initial authentication requests and a second channel for verification. This segmentation allows each channel to have specialized functions, improving overall security without requiring every component to be complex. The first channel handles rapid initial authentication while the second channel provides security verification, resolving the contradiction between speed and security.
Solution Approach 2:
A server acts as an intermediary between the vehicle control device and the authentication verification system. The server receives authentication requests through the first channel, generates unique information, and coordinates with the second channel for verification. This intermediary structure manages the complexity centrally rather than distributing it across all authentication components, improving security while maintaining system manageability.
2Reliability
If multiple authentication channels are implemented, then security is improved, but system complexity increases
Solution Approach 1:
The server performs multiple functions within the authentication system: it receives initial authentication requests, generates unique information, coordinates between channels, and manages verification processes. By consolidating these diverse functions into a single multi-functional server rather than requiring separate specialized devices for each function, the system achieves high security through multiple channels while managing complexity through functional integration.
3Ease of manufacture
If traditional authentication methods are used, then implementation is simple, but personal information is vulnerable to leakage
Solution Approach 1:
The system performs preliminary actions by generating and transmitting unique information through the first channel before actual authentication occurs. This preliminary transmission of encrypted unique information through a secure first channel establishes a foundation for secure authentication, preventing information leakage from the outset while maintaining implementation simplicity through a structured sequence of operations.
Solution Approach 2:
The system changes the parameter of information representation by using unique information that is encrypted or coded rather than transmitting plain personal information. This parameter change from plaintext to encrypted format maintains implementation simplicity while fundamentally reducing information leakage risk, as the unique information can be processed and verified without exposing sensitive personal data.
Data Source
AI summary
An authentication system includes a vehicle control device and a server, a first processor and a second processor. The first processor included in the vehicle control device may transmit a signal for requesting authentication information to the server, receive a signal containing first unique information from the server, receive a short message service (SMS) message containing second unique information, transmit a signal containing third unique information to the server based on identifying the second unique information corresponding to the first unique information, receive the authentication information from the server based on the transmitted signal containing the third unique information, and perform a service based on the authentication information. The second processor included in the server may transmit the authentication information to the vehicle control device.