Dynamic QR Code Two-Factor Authentication Without Manual Entry
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing two-factor authentication methods require manual entry of additional data elements, which are time-consuming, and are ineffective when the second device is not accessible to the user.
Innovation Solution
A system that generates a dynamic QR code on a first computing device, which can be used to authenticate a user to a second computing device, allowing pre-authentication through a central server that manages the QR code's validity based on a selected time period, and optionally includes additional authentication layers using a third device like a smartwatch.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If two-factor authentication requires manual entry of additional data element, then authentication security is improved, but authentication time is increased
Solution Approach 1:
The system performs preliminary actions by generating and storing a digest of the additional data element before the authentication event occurs. The digest is created in advance and stored in a database, so that during actual authentication, the system only needs to compare the newly generated digest with the pre-stored digest, eliminating the need for manual entry and significantly reducing authentication time while maintaining security.
2Reliability
If two-factor authentication requires second device to be in vicinity, then authentication security is improved, but device accessibility is reduced
Solution Approach 1:
The invention extracts the core authentication verification function from the physical presence requirement of the second device. Instead of requiring the second device to be physically present and manually operated during authentication, the system extracts and stores only the essential verification data (digest of the additional data element) in advance. This allows authentication to proceed using automated comparison without requiring the second device to be in the user's vicinity, thereby improving ease of operation while maintaining security through the digest verification mechanism.
Data Source
AI summary
A method for pre-authenticating a user into a secure session on an entity application running on a second computing device leveraging a first computing device of the user as an authenticator may be provided. The method may include generating at the first computing device a dynamic QR code in response to receipt of a request to generate the dynamic QR code and further capturing, by the second computing device, the dynamic QR code from the first computing device. The method may further include storing, but not parsing, the dynamic QR code at the second computing device. Wherein at a time of a retrieval of the dynamic QR code from the second computing device, the method may include parsing the dynamic QR code and accessing a short URL that may either redirect the web browser to an authentication webpage thereby authenticating the secure session, or a denial webpage.