Vehicle Storage Authentication via Server-Mediated One-Time Passwords
Solution Overview
Problem
Existing trunk unlocking systems for vehicles lack sufficient security, particularly when using one-time passwords, as they are vulnerable to unauthorized access through spoofing and falsification.
Innovation Solution
A multi-layered authentication system involving a server and two terminal devices, where unique identification information from users and delivery drivers is verified through a combination of biological and unique device information, generating and verifying authentication codes to securely unlock vehicle storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a fixed authentication code is used for trunk unlocking, then the operation is simple and convenient, but the security is insufficient and vulnerable to unauthorized access
Solution Approach 1:
The patent implements dynamic authentication by using one-time passwords that change with each authentication attempt, rather than static fixed codes. The system generates time-limited authentication codes that are valid only for a single use or specific time window, making unauthorized access difficult while maintaining user-friendly operation through automated code generation and verification
2Reliability
If a one-time password system is implemented to improve security, then unauthorized access is suppressed, but the system complexity increases
Solution Approach 1:
The patent introduces a server as an intermediary component that centralizes the generation, distribution, and verification of one-time passwords. This mediator handles the complex cryptographic operations and authentication logic remotely, allowing the client devices (mobile phones and vehicle systems) to remain relatively simple while achieving high security through the centralized authentication service
3Reliability
If terminal device information is included in authentication to enhance security, then spoofing is prevented, but the authentication process becomes more complex
Solution Approach 1:
The patent merges multiple authentication factors including one-time passwords, terminal device identification information, and user credentials into a unified authentication process. By combining these elements into a single integrated verification flow handled by the server, the system achieves enhanced security against spoofing while maintaining a streamlined user experience where multiple checks occur transparently in the background
Data Source
Figure 1
Figure 2~3
Figure 4~5
AI summary
A server (3) receives first identification information (A) unique to a user (5) of a vehicle (4) from a first terminal device (1), receives second identification information (B) unique to a user (6) of a second terminal device (2) from the second terminal device (2), generates second authentication information based on the first identification information (A), the second identification information (B), and first authentication information stored in a first storage unit (10), and transmits the second authentication information to the second terminal device (2). A vehicle (4) verifies authenticity of the second authentication information acquired from the second terminal device (2) based on the first identification information (A) and the second identification information (B) acquired from the second terminal device (2), and the first authentication information stored in a second storage unit (22), and in a case where authenticity is confirmed, unlocks a storage (20).