Wireless Lock Asymmetric Cryptography Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional electronic locks used for securing remote or infrequently accessed physical resources are prone to theft and misplacement, and existing security measures are inadequate for ensuring proper locking and access control, as they can be spoofed or bypassed, leading to unauthorized access.
Innovation Solution
A wireless electronic lock that uses digital certificates to authenticate and control access, incorporating parameters such as wait times, scheduled access periods, and re-use limits, which are securely stored and verified using a public key, making it difficult to spoof the unlocking signals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional electronic locks are used for remote or infrequently accessed physical resources, then portability and ease of installation are improved, but security against theft, misplacement, and unauthorized access deteriorates
Solution Approach 1:
The patent introduces a central server as an intermediary that manages digital certificates and communicates with both the portable lock and access devices. This intermediary enables secure authentication and tracking of lock location and status, resolving the security weaknesses of conventional portable locks while maintaining their portability and ease of installation.
Solution Approach 2:
The patent replaces conventional mechanical key-based locking systems with an electronic authentication system using digital certificates, public keys, and wireless communication. This substitution enables enhanced security features including remote authentication, access logging, and real-time monitoring while maintaining the portable nature of the lock system.
2Device complexity
If simple signal-based lock monitoring is used, then system complexity is reduced, but confidence in proper securing and resource identification deteriorates
Solution Approach 1:
The patent implements a feedback mechanism where the portable lock continuously communicates its status, location, and authentication information to a central server, which then provides feedback to authorized users. This feedback loop enables verification that the lock is properly securing the intended resource and provides real-time monitoring capabilities without requiring complex local monitoring systems at the locked location.
Solution Approach 2:
The central server performs multiple functions including digital certificate management, lock status monitoring, location tracking, and access authorization. This multi-functional approach consolidates complexity into a single centralized system rather than requiring separate systems for each function, thereby maintaining low device complexity while enhancing reliability.
3Reliability
If digital certificates with multiple parameters are used for access control, then security against spoofing is improved, but authentication and access control complexity increases
Solution Approach 1:
The patent employs asymmetric cryptography using public and private keys embedded in digital certificates. This asymmetric approach provides strong security against spoofing because the private key remains secret while the public key can be freely distributed. The asymmetry in key distribution and usage enables secure authentication without requiring complex verification protocols at the lock device itself.
Data Source
AI summary
A lock for securing access to a physical resource is provided. The lock includes a wireless interface configured for communication with a plurality of lock access devices in vicinity of the lock. The wireless interface is further configured to receive digital certificates from the plurality of lock access devices. The lock further includes a memory configured to store a public key, and a processor configured to authenticate a digital certificate received from a lock access device using the public key. The processor may further be configured to extract a wait time parameter, scheduled access period parameter, or re-use parameter from the digital certificate. In addition, the processor is configured to unlock the lock after a delay period based on the wait time parameter, during a scheduled access period based on the scheduled access period parameter, or based on the number of times indicated by the re-use parameter.