Passenger and vehicle mutual authentication

A method comprising:

• capturing, by a sensor on a user device, passenger biometric information of a passenger associated with the user device;
• generating, by the user device, a secret key;
• generating, by the user device, a passenger secret by encrypting the passenger biometric information using the secret key;
• sending, by the user device, a transportation service request and the passenger secret to a transportation service platform;
• receiving, by the user device, a first vehicle access token (VAT) from the transportation service platform;
• reading, by the user device, a second VAT from a vehicle;
• comparing, by the user device, the first VAT and the second VAT;
• and
• sending, by the user device based on determining that the first VAT matches the second VAT, the secret key to the vehicle for decrypting the passenger secret and authenticating the passenger based on the passenger biometric information.

A method comprising:

• receiving, by a vehicle, a passenger secret and a vehicle access token (VAT), wherein the passenger secret includes passenger biometric information of a passenger, the passenger biometric information encrypted using a secret key that is generated by a user device associated with the passenger;
• providing, by the vehicle, the VAT to the user device;
• receiving, by the vehicle, the secret key from the user device after the user device verifies the vehicle using the VAT;
• recovering, by the vehicle using the secret key, the passenger biometric information from the passenger secret;
• capturing, by the vehicle, on-site biometric information of a user of the user device;
• and
• unlocking a door of the vehicle by the vehicle based on a matching between the recovered passenger biometric information and the captured on-site biometric information of the user.