Identity Authentication via Cross-App Verification Code Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional identity authentication methods via SMS are vulnerable to interception and deception, leading to security risks as hackers can steal identities or funds by intercepting verification codes.
Innovation Solution
The method involves displaying a verification code within an application scenario and prompting the user to send it via a different application, ensuring the code is compared against the originally generated code, thereby enhancing security by avoiding direct SMS interception.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If verification code is sent via SMS text message, then user authentication can be completed, but security vulnerability increases due to interception and deception risks
Solution Approach 1:
The patent introduces a third-party communication channel (such as instant messaging applications or email) as an intermediary to transmit the verification code. Instead of directly sending the code via SMS which is vulnerable to interception, the system uses an alternative communication medium that is harder to intercept, thereby enhancing security while maintaining the authentication function.
Solution Approach 2:
The patent inverts the traditional authentication flow by having the user initiate the verification process through a different application rather than receiving passive SMS messages. The user actively seeks out the verification code through an alternative channel, reversing the conventional sender-receiver dynamic and reducing vulnerability to SMS-based attacks.
2Productivity
If conventional SMS authentication is used, then implementation is simple and fast, but security reliability deteriorates due to hacker interception
Solution Approach 1:
The patent introduces a third-party communication channel (such as instant messaging applications or email) as an intermediary to transmit the verification code. Instead of directly sending the code via SMS which is vulnerable to interception, the system uses an alternative communication medium that is harder to intercept, thereby enhancing security while maintaining the authentication function.
3Reliability
If verification code is transmitted through multiple channels, then security improves, but system complexity increases
Solution Approach 1:
The patent leverages existing multi-functional communication applications (such as WeChat, QQ, or email clients) that users already have installed and are familiar with. These applications serve multiple purposes including messaging, file transfer, and now authentication verification. By reusing existing infrastructure rather than building dedicated authentication systems, the patent enhances security without significantly increasing system complexity.
Data Source
AI summary
Embodiments of the present application relate to a method for authenticating user identity, a system for authenticating user identity, and a computer program product for authenticating user identity. A method for authenticating user identity is provided. The method includes generating a first verification code by a server, displaying the first verification code to a user in an application scenario of a service requiring user identity authentication, receiving a second verification code sent by the user via another application that is other than the application scenario, comparing the second verification code sent by the user and the first verification code generated by the server, and determining whether the user has passed identity authentication based on a result of the comparison.