Passenger and vehicle mutual authentication
Some embodiments include techniques for mutual authentication between a passenger that has requested a transportation service and a dispatched vehicle for providing the requested transportation service. A user device associated with the passenger verifies the dispatched vehicle using a vehicle access token generated by a transportation service platform and sends a secret key to the dispatched vehicle. The dispatched vehicle uses the secret key to recover passenger biometric information from a passenger secret received from the user device through the transportation service platform, captures passenger biometric information on-site, and compares the recovered passenger biometric information and the passenger biometric information collected on-site to verify the passenger.
1. A method comprising:
generating, by a user device associated with a passenger, a secret key and a passenger secret based on biometric information of the passenger and the secret key;
sending, by the user device, a transportation service request and the passenger secret to a transportation service platform;
determining, by the transportation service platform in response to the transportation service request, an autonomous vehicle and a vehicle access token (VAT) for the autonomous vehicle;
sending, by the transportation service platform, a first copy of the VAT to the user device;
sending, by the transportation service platform to the autonomous vehicle, the passenger secret and a second copy of the VAT;
reading, by the user device, the second copy of the VAT from the autonomous vehicle;
sending, by the user device, the secret key to the autonomous vehicle based on determining that the second copy of the VAT read by the user device from the autonomous vehicle matches the first copy of the VAT sent from the transportation service platform to the user device;
recovering, by the autonomous vehicle using the secret key, the biometric information of the passenger from the passenger secret;
capturing, by the autonomous vehicle, biometric information of a user of the user device; and
unlocking the autonomous vehicle based on a matching between the recovered biometric information of the passenger and the captured biometric information of the user.
2. The method of claim 1 , wherein:
the transportation service platform includes an operation server and a security server; and
determining the autonomous vehicle and the VAT includes:
selecting, by the operation server, the autonomous vehicle from a plurality of autonomous vehicles;
sending, by the operation server to the security server, a dispatch request including an identification of the autonomous vehicle and the passenger secret; and
determining, by the security server, the VAT for the autonomous vehicle.
3. The method of claim 1 , further comprising:
determining, by the transportation service platform, an expiration time period for the VAT; and
sending, by the transportation service platform, the expiration time period for the VAT to the user device,
wherein reading, by the user device, the second copy of the VAT from the autonomous vehicle includes reading the second copy of the VAT from the autonomous vehicle only before the expiration time period expires.
4. A method comprising:
capturing, by a sensor on a user device, passenger biometric information of a passenger associated with the user device;
generating, by the user device, a secret key;
generating, by the user device, a passenger secret by encrypting the passenger biometric information using the secret key;
sending, by the user device, a transportation service request and the passenger secret to a transportation service platform;
receiving, by the user device, a first vehicle access token (VAT) from the transportation service platform;
reading, by the user device, a second VAT from a vehicle;
comparing, by the user device, the first VAT and the second VAT; and
sending, by the user device based on determining that the first VAT matches the second VAT, the secret key to the vehicle for decrypting the passenger secret and authenticating the passenger based on the passenger biometric information.
5. The method of claim 4 , further comprising:
receiving, by the user device, an expiration time for the first VAT from the transportation service platform,
wherein comparing the first VAT and the second VAT includes only comparing the first VAT and the second VAT before the expiration time expires.
6. The method of claim 5 , further comprising:
determining, by the user device, that the expiration time has expired; and
sending, by the user device to the transportation service platform, a request for renewing the first VAT or a request for a new VAT.
7. The method of claim 4 , wherein the secret key or the passenger secret has a respective expiration time.
8. The method of claim 4 , wherein the passenger biometric information includes at least one of a fingerprint, an iris pattern, a voice spectrum, or a facial feature.
9. The method of claim 4 , wherein reading the second VAT from the vehicle includes reading the second VAT using a near-field communication receiver, a Bluetooth receiver, a WiFi receiver, a WiMax receiver, or a ZigBee receiver.
10. A method comprising:
receiving, by a vehicle, a passenger secret and a vehicle access token (VAT), wherein the passenger secret includes passenger biometric information of a passenger, the passenger biometric information encrypted using a secret key that is generated by a user device associated with the passenger;
providing, by the vehicle, the VAT to the user device;
receiving, by the vehicle, the secret key from the user device after the user device verifies the vehicle using the VAT;
recovering, by the vehicle using the secret key, the passenger biometric information from the passenger secret;
capturing, by the vehicle, on-site biometric information of a user of the user device; and
unlocking a door of the vehicle by the vehicle based on a matching between the recovered passenger biometric information and the captured on-site biometric information of the user.
11. The method of claim 10 , wherein the passenger biometric information includes at least one of a fingerprint, an iris pattern, a voice spectrum, or a facial feature.
12. The method of claim 10 , wherein the vehicle is an autonomous vehicle.
13. The method of claim 10 , wherein providing the secret key to the user device includes providing the secret key to the user device using a near-field communication receiver, a Bluetooth receiver, a WiFi receiver, a WiMax receiver, or a ZigBee receiver.
14. The method of claim 10 , wherein at least one of the VAT, the passenger secret, or the secret key has an expiration time.