Vehicle Token Delegation for Multi-Terminal Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle remote control systems face challenges with server overload and personal information leakage when multiple terminals attempt to register and access vehicle controls simultaneously, leading to communication failures and security risks.
Innovation Solution
A vehicle system that delegates authority from a registered mobile terminal to another terminal through a token-based authentication process, using encryption keys and authentication keys to verify and secure transactions, reducing reliance on the server for authentication and minimizing personal information exposure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple terminals access the server simultaneously for authentication, then the authentication coverage increases, but the server enters communication inability state and personal information may leak
Solution Approach 1:
The patent segments the authentication process into two parts: initial authentication with the server (for first terminal) and delegated authentication between terminals (for subsequent terminals). The server only handles initial token generation, while terminal-to-terminal delegation handles subsequent authentications, dividing the authentication load and protecting the server from overload.
Solution Approach 2:
The patent introduces a token-based intermediary mechanism where the first terminal acts as a mediator between the server and the second terminal. The first terminal receives the authentication token from the server and delegates it to the second terminal, eliminating the need for the server to directly communicate with multiple terminals simultaneously.
2Adaptability or versatility
If multiple terminals access the server simultaneously for authentication, then the authentication coverage increases, but personal information of mobile terminals stored in the server may leak
Solution Approach 1:
The patent extracts personal information from the server environment and stores it locally in terminals. The authentication token contains encrypted information that can be verified by the vehicle without requiring the server to store or process sensitive personal data, thereby reducing the attack surface for information leakage.
Solution Approach 2:
The patent uses token copying and delegation instead of repeatedly transmitting personal information. The authentication token can be copied and delegated from the first terminal to the second terminal, allowing multiple terminals to authenticate without the server needing to store or reprocess personal information for each terminal.
3Extent of automation
If the server handles all authentication requests, then centralized control is maintained, but server load increases and authentication efficiency decreases
Solution Approach 1:
The patent implements a dynamic authentication architecture where the authentication path changes based on the terminal's registration status. First terminals authenticate through the server maintaining centralized control, while subsequent terminals authenticate through terminal-to-terminal delegation, dynamically routing authentication requests to optimize efficiency while preserving centralized oversight.
Data Source
AI summary
A vehicle system is provided that performs authentication with a plurality of terminals. The system includes a server that generates a first token and transmits the first token to a first terminal. The first terminal stores the first token and a vehicle verifies the first token using a first encryption key and a first authentication key stored in advance for the first token. A second terminal receives the first token and a second token from the first terminal to be delegated with an authority. The second terminal stores the first token and the second token, and the vehicle verifies the first token stored in the second terminal using the first encryption key and the first authentication key, and verifies the second token stored in the second terminal using a second encryption key and a second authentication key stored in advance for the second token.