Dynamic Token Image Capture for Secure Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current information security systems, such as Challenge/Response identity authenticating systems, require manual input of transaction data using dynamic tokens, leading to errors and non-automatic operation during transactions.
Innovation Solution
An image collection based information security method where a server generates transaction data, converts it into an image, and sends it to a client for confirmation, using a dynamic token to preprocess and convert the image into usable data, generating a dynamic password for authentication, ensuring automatic operation and improved security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual input of transaction data is used with dynamic token, then authentication can be performed, but error rate increases and automatic operation is lost
Solution Approach 1:
The patent replaces the manual mechanical input process with an automatic image recognition and data extraction system. The dynamic token captures the transaction image, automatically extracts transaction data through image processing, and generates the dynamic password without requiring manual typing, thus eliminating input errors while maintaining authentication functionality
Solution Approach 2:
The system enables the dynamic token to perform self-service by automatically capturing the transaction image, extracting relevant data, and generating the authentication password. This self-automated process eliminates the need for user intervention in data entry, reducing errors and improving operational efficiency
2Extent of automation
If transaction data is manually input, then authentication process can proceed, but operation is not executed automatically
Solution Approach 1:
The patent replaces manual data entry operations with automated image capture and processing. The dynamic token automatically captures the transaction image, extracts data through optical character recognition, and generates the dynamic password, achieving full automation of the authentication process and eliminating time loss associated with manual input
3Reliability
If dynamic password is generated from transaction image, then security is improved, but device complexity increases
Solution Approach 1:
The patent introduces an intermediary image as a carrier between the transaction data and the dynamic password generation. The transaction image serves as a visual representation that can be captured by the dynamic token, which then extracts the necessary information to generate the password. This intermediary approach enhances security while keeping the device complexity manageable by leveraging existing image processing capabilities
Data Source
AI summary
An image collection based information security method and system is disclosed. The method includes a server side receiving a first transaction data sent by a client side and generating a second transaction data with the first data. The server converts the second data into an image, and sends the image to the client. A dynamic token collects the image, pre-processes, and converts the image into a third transaction data, and displays the third data for user's confirmation. The token generates and displays a second dynamic password according to the third data. The client receives the second password input by a user and sends same to the server. The server receives the second password and generates a first dynamic password, determines whether the first password is identical to the second password; if yes, the authentication is successful and the transaction is executed; if no, the transaction is cancelled.