Shared Vehicle Authorization Policies for Operation-Level Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems for managing shared vehicle access lack efficient methods to authenticate users and enforce access permissions, leading to potential misuse and unauthorized vehicle operations.
Innovation Solution
A method and system that utilize multiple authorization policies with distinct authentication schemes and access requirements to control vehicle operations, allowing only authorized users to perform permitted operations based on their access keys and vehicle status.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple authorization policies with distinct authentication schemes are implemented, then security and access control are improved, but device complexity increases
Solution Approach 1:
The authorization system is segmented into multiple independent authorization policies, each with its own authentication scheme and access requirements. This allows the system to manage complex access control by dividing it into manageable policy units that can be independently configured and enforced.
Solution Approach 2:
The system dynamically selects and applies appropriate authentication schemes based on the user and context. Different authentication methods (biometric, token-based, password) are applied dynamically according to the specific authorization policy being evaluated, allowing flexibility without requiring all schemes to be active simultaneously.
2Reliability
If strict authentication and permission verification are performed, then unauthorized access is prevented, but user operation time increases
Solution Approach 1:
Authorization policies are pre-configured with authentication schemes and access requirements before runtime. The system evaluates these pre-defined policies against user requests, which is faster than performing complex authentication and permission checks on-demand. Common authentication factors are also evaluated in advance when possible.
Solution Approach 2:
The system performs partial authentication verification by evaluating authentication factors in order of reliability and relevance. Not all authentication schemes are applied to every access request - only those relevant to the specific policy and user context are evaluated, reducing overall verification time while maintaining security.
3Adaptability or versatility
If multiple authentication schemes are supported, then adaptability to different users is improved, but system complexity increases
Solution Approach 1:
Different authentication schemes are assigned to different authorization policies based on local requirements. Each policy can specify which authentication methods are appropriate for its context (e.g., biometric for high-security operations, token-based for remote access), allowing tailored authentication without requiring all schemes throughout the system.
Solution Approach 2:
The authorization policy framework is designed as a universal structure that can accommodate multiple types of authentication schemes through a common evaluation mechanism. The same policy evaluation logic handles biometric, token, password, and other authentication methods uniformly, reducing the complexity overhead of supporting diverse authentication approaches.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
The present systems, devices, and methods relate to managing shared vehicle access. Authorization policies are stored at a network device, and are provided to vehicle devices. Authorization policies each include an authentication scheme, a list of permitted vehicle operations, and a list of requirements to perform vehicle operations. In this way, whether even if a user is authenticated to access a vehicle, vehicle access is controlled based one whether the user is permitted to perform vehicle operations, and whether requirements are met to perform vehicle operations. This provides a flexible and robust vehicle access system. Authorization Policies are distributed to vehicle device in an Access Configuration, which can be updated.