Dynamic Access Code Generation for QR Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems using QR codes are vulnerable to code copying and forwarding, allowing multiple individuals to use the same access code, despite dynamic generation methods.
Innovation Solution
An access control system and method that involves receiving and verifying an access code, generating a new code upon validation, and transmitting it to the original recipient, with the option to store or activate entities like doors or elevators, using a combination of access control devices, reader devices, and network communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If QR codes are used for access control, then ease of operation is improved, but security deteriorates due to code copying and forwarding
Solution Approach 1:
The access control system transitions from static QR codes to dynamic access codes that are generated in real-time and automatically expire after use. Each access code is valid only for a specific time window and single use, preventing copying and forwarding attacks while maintaining ease of mobile device operation.
Solution Approach 2:
The system pre-generates a pool of valid access codes and stores them in the access control device before they are needed. When a user presents a code, the system verifies it against the pre-stored valid codes and automatically provides the next code in sequence, ensuring continuous secure access without real-time generation delays.
2Reliability
If dynamic generation of QR codes is implemented, then security is improved, but device complexity increases
Solution Approach 1:
The access control device pre-generates and stores a sequence of valid access codes in its memory before deployment. This eliminates the need for complex real-time code generation algorithms during operation, reducing computational complexity while maintaining security through the use of time-limited, single-use codes.
Solution Approach 2:
Instead of implementing complex cryptographic generation algorithms in the access control device, the system uses pre-generated code copies stored in memory. The device simply verifies and distributes these pre-computed codes, significantly reducing the computational complexity required while maintaining the security benefits of dynamic code generation.
3Reliability
If access codes are validated and new codes generated in real-time, then security is improved, but processing time increases
Solution Approach 1:
The system pre-generates a sequence of valid access codes and stores them in the access control device's memory before operation. During access validation, the system only needs to check if the presented code matches the next expected code in the sequence and increment a counter, reducing processing time from complex real-time generation to simple comparison and increment operations.
Solution Approach 2:
The system uses simple, computationally inexpensive operations for code validation - comparing the presented code against a stored value and incrementing a counter. This disposable validation approach processes each access request quickly without requiring complex cryptographic verification, minimizing processing time while maintaining security through the use of single-use codes.
Data Source
AI summary
A method for controlling a generation of at least one access code includes receiving, in an access control device, data representing an access code; verifying the data representing the access code; in response to a detection in a verification that the access code is valid generating a signal causing a generation of data representing a new access code; and generating a signal causing a transmit of the data representing the new access code to a party from whom the data representing the access code is received. An access control device, a computer program product and a system are also disclosed.