Vehicle Mobile Activation Using In-Car Code Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional authentication methods for activating mobile devices in vehicles are not sufficiently secure, lacking robustness in ensuring legitimate access and control.
Innovation Solution
A computer-based method involving a mobile device that provides credentials to a computer system, receives a code from the vehicle's user interface, and generates remote commands for vehicle control, using an authentication token that includes activation information to authenticate and authorize the mobile device for vehicle operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional username and password authentication is used for mobile device activation, then the authentication process is simple and easy to operate, but the security level is insufficient
Solution Approach 1:
The authentication process is divided into multiple independent steps: (1) user enters credentials on mobile device, (2) system generates and presents a time-limited code on vehicle display, (3) user enters the code on mobile device, (4) system verifies and provides authentication token. This segmentation transforms a single complex secure authentication into multiple simpler steps, enhancing security while maintaining ease of operation.
Solution Approach 2:
The system performs preliminary actions by generating and presenting the authentication code on the vehicle display before the user completes the mobile device authentication. This preliminary presentation of the code ensures that the authentication process is guided and controlled, preventing unauthorized access while keeping the user interface simple.
2Reliability
If a multi-step authentication process with code verification is implemented, then security is enhanced, but the authentication time and process complexity increase
Solution Approach 1:
The authentication code is designed with a time-limited validity period, creating a periodic authentication mechanism. The code is presented for a specific duration and must be entered within that window, which accelerates the process by creating urgency and preventing indefinite delays, thus reducing overall authentication time while maintaining security.
Solution Approach 2:
The vehicle display acts as an intermediary that presents the authentication code to the user. This intermediary component facilitates the authentication process by providing a trusted source for the code, enabling rapid verification without requiring complex communication protocols between the mobile device and authentication system, thereby reducing authentication time.
3Reliability
If authentication token with activation information is required for remote commands, then unauthorized command execution is prevented, but the system complexity and verification processes increase
Solution Approach 1:
The activation information is extracted and embedded within the authentication token structure. Rather than creating a completely separate verification system, the critical security data (activation information) is taken out and integrated into the existing token mechanism, allowing secure remote command execution without substantially increasing system complexity.
Solution Approach 2:
The authentication token is enhanced by adding activation information as an additional parameter or field within the token structure. This parameter change allows the system to verify both authentication credentials and device activation status using the same token verification process, maintaining system simplicity while enhancing security for remote commands.
Data Source
AI summary
A computer-based method of obtaining activation of a mobile device for a vehicle comprises: providing, to a computer system and by a mobile device, credentials for an application on the mobile device, the application to generate remote commands to the computer system for controlling the vehicle: prompting, by the mobile device, a user to invoke a user interface of the vehicle: receiving, by the mobile device, a code that the user obtained using the user interface of the vehicle: providing, by the mobile device, the code to the computer system; and receiving, by the mobile device and from the computer system, an authentication token that includes activation information identifying the vehicle, the mobile device to provide the authentication token and the activation information to the computer system in connection with generating the remote commands.