Vehicle-Based Passkey Generation for Secure Mobile Pairing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for connecting mobile devices to vehicle systems via wireless connections, such as Bluetooth or Wi-Fi, often require insecure PIN/passcode entry and lack robust out-of-band communication, making them vulnerable to eavesdropping.
Innovation Solution
A method and system that generate a passkey based on vehicle information accessible to the occupant, transmit instructions for composing the passkey to the mobile device without transmitting the passkey itself, and securely pair the device by comparing the user-input passkey to the generated passkey using symmetric-key algorithms cryptography.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a PIN/passcode is transmitted over the air for device pairing, then the pairing process is simplified, but security is compromised due to eavesdropping vulnerabilities
Solution Approach 1:
The patent introduces an intermediary mechanism (out-of-band communication channel) to transfer the passkey between devices. Instead of directly transmitting the passkey over the air through vulnerable wireless communication, the system uses a trusted intermediary channel (such as NFC, QR code, or physical connection) to establish the secure connection, thereby resolving the contradiction between ease of operation and security
Solution Approach 2:
The patent replaces the traditional mechanical/wireless transmission method of passkey delivery with an alternative physical or optical mechanism. By using methods like NFC (near-field communication), QR codes, or other out-of-band channels, the system substitutes the vulnerable air-transmission mechanism with more secure physical or optical intermediaries that are resistant to eavesdropping
2Reliability
If out-of-band communication is implemented for passkey transmission, then security is improved, but device complexity increases
Solution Approach 1:
The patent implements a universal pairing mechanism that can operate through multiple out-of-band channels (NFC, QR code, Bluetooth Low Energy, etc.). By designing a multi-functional system that can use different communication pathways depending on availability, the solution achieves high security without requiring complex specialized hardware for each specific method, thereby managing device complexity while maintaining reliability
3Reliability
If the passkey is generated based on vehicle information, then the passkey becomes random and immune to eavesdropping, but the ease of composition for users decreases
Solution Approach 1:
The patent employs copying mechanisms where the passkey information is displayed or transmitted in a readable format (such as visual display on screens, QR codes, or NFC data exchange) that users can easily copy or transfer. This allows the passkey to be based on random vehicle information while maintaining ease of composition, as users simply need to copy the displayed information rather than manually create it
Solution Approach 2:
The system uses an intermediary display or communication channel to bridge the gap between the randomly generated vehicle-based passkey and the user interface. The intermediary presents the passkey in a user-friendly format (visual, tactile, or audio) that simplifies the composition process while maintaining the security benefits of the vehicle-information-based generation
Data Source
AI summary
A method for connecting a mobile device to a vehicle system of a vehicle. The method includes the following: generating a passkey based on at least one of vehicle information and an image accessible to an occupant of the vehicle; transmitting instructions for composing the passkey to the mobile device; and connecting the mobile device to the vehicle system subsequent to entry of the passkey at the mobile device.