Vehicle Key Unit Single-Use Authentication Logic
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing key management systems for vehicles and facilities are vulnerable to unauthorized use when authentication information is intercepted by malicious third parties, as they do not effectively prevent the reuse of intercepted authentication data.
Innovation Solution
A locking and unlocking system that includes a mobile terminal and a key unit, where the key unit performs authentication and locks/unlocks doors only if the authentication is successful, and once authenticated, it prohibits further authentication using the same information, even if intercepted, and updates encryption keys upon communication state changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If authentication information is transmitted from mobile terminal to key unit for unlocking, then user convenience is improved, but security is worsened because intercepted authentication information can be reused for unauthorized access
Solution Approach 1:
The system performs preliminary authentication before granting access, and critically, it pre-establishes that authentication information becomes invalid immediately after use. This preliminary validation and single-use designation prevents intercepted authentication data from being reused, as the system is already configured to reject subsequent presentations of the same credentials.
Solution Approach 2:
The authentication information dynamically changes state from valid to invalid immediately after authentication occurs. This dynamic invalidation ensures that even if authentication data is intercepted during transmission, it becomes useless for future access attempts, as the system continuously updates the validity status of credentials based on their usage history.
2Ease of operation
If the system allows repeated authentication with the same information, then ease of operation is improved, but security is worsened due to potential unauthorized use of intercepted data
Solution Approach 1:
The system treats authentication information as a disposable credential that is valid for exactly one use. After authentication occurs, the credentials are immediately discarded and cannot be reused. This disposable approach ensures that even low-cost interception of authentication data provides no long-term benefit to attackers, as the credentials expire instantly after use.
Solution Approach 2:
The system changes the validity parameter of authentication information from a persistent state to a transient state. Authentication credentials transition from being reusable to being single-use only, fundamentally altering their parameter of validity. This parameter change ensures that intercepted data cannot be used for unauthorized access, as the system detects and rejects repeated presentations of the same credentials.
Data Source
AI summary
A locking and unlocking system includes: a mobile terminal; and a key unit, wherein the mobile terminal includes a terminal transmission unit configured to transmit first authentication information and a first request signal to the key unit, the key unit includes: a key unit reception unit configured to receive the first authentication information and the first request signal from the mobile terminal; a first authentication unit configured to perform authentication; and a locking and unlocking processing unit configured to perform a process of unlocking or locking the door, and the first authentication unit is configured to prohibit the authentication of the mobile terminal in a case where the first authentication unit has once performed the authentication.