Vehicle Internet Access Validation Through Ground-Based Identity Checks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems face challenges in validating a user's identity before granting internet access on vehicles like aircraft, as manual verification processes are not feasible, and the association between passenger identity and user device identity is unknown to the ISP.

Innovation Solution

A ground-based server retrieves user identity or internet subscription plan information for user devices connected in a vehicle, using a repository that maps onboard IP addresses to a vehicle-based server, and communicates this information to a second server for validation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual identity verification is used, then identity validation can be performed, but the process is not feasible inside an aircraft or vehicle

Engineering Contradiction:
Improveidentity validationVSAvoidfeasibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces a ground-based server as an intermediary to perform identity verification. The server receives user device information (MAC address, IP address) from the aircraft-based system, validates the user's identity against government-issued identification records, and returns validation results. This mediator approach enables reliable identity validation without requiring manual verification processes on the aircraft.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the manual mechanical verification process with an automated electronic system. Instead of manually inspecting government identification documents, the system automatically transmits user device identifiers to a ground-based server that electronically validates identities against stored records, substituting manual mechanical operations with automated digital processing.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If the association between passenger identity and user device identity is established, then identity verification becomes possible, but the system complexity increases

Engineering Contradiction:
Improveidentity verification capabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the identity verification system into distinct functional components: an aircraft-based access control system that collects user device information, a ground-based server that performs identity validation, and a database that stores verification records. This segmentation allows each component to have specialized functionality, reducing overall system complexity while enabling reliable identity verification through clear separation of concerns.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The ground-based server acts as an intermediary that handles the complex identity validation logic remotely. The aircraft-based system only needs to collect basic device identifiers and forward them to the server, avoiding the complexity of implementing comprehensive identity verification systems onboard the aircraft.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of operation

If internet access is granted without prior identity validation, then ease of access is improved, but regulatory compliance is compromised

Engineering Contradiction:
Improveinternet access availabilityVSAvoidregulatory compliance
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements preliminary identity validation before granting internet access. The system checks the user's government-issued identification information against the user device identifiers (MAC address, IP address) in advance, and only after successful verification does it authorize internet access. This preliminary action ensures regulatory compliance is met before the actual internet access begins.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system uses feedback from the ground-based server's identity validation results to control internet access authorization. The server returns validation status information to the aircraft-based system, which then uses this feedback to either grant or deny internet access. This feedback mechanism ensures that access decisions are based on verified identity information, maintaining regulatory compliance.

Inventive Principle:
Principle #23Feedback

Data Source

PatentEP3908936B1Transferring information between a vehicle based user device and a server to validate user information before granting internet access
Publication Date: 2025.08.06 THALES AVIONICS INC
  • EP3908936B1 patent drawingFigure 1
  • EP3908936B1 patent drawingFigure 2
  • EP3908936B1 patent drawingFigure 3

AI summary

An entertainment and connectivity system includes a processor for transferring information between a vehicle based user device and a server to validate a user's government identity before granting the user device access to the internet. The vehicle based server has an internet protocol address and communicates with user devices. The user devices each have an onboard internet protocol address mapped to the internet protocol address of the vehicle based server. A processor associated with the vehicle based server receives requests for internet service originating from the user devices. The requests include travel information or internet subscription plan information for a user of each of the user devices. The vehicle based server, or a ground based server that receives the request, generates an internet connection authorization decision based on validation of the user's government identity or the user's internet subscription plan information. The connection authorization decisions are then used to control whether the internet connections are established to the user devices. If the internet connections are established, internet session information for the user devices, including for each user device the onboard internet protocol address mapped to the internet protocol address of the vehicle based server, is stored in a ground based server and can be retrieved to identify the government identity of a user or a user's internet subscription plan information for each of the user devices.