Firmware Authentication via QR Code Timestamps

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing firmware setup utilities are vulnerable to unauthorized access due to compromised passwords, lacking robust security measures.

Innovation Solution

Implementing user authentication using two-dimensional barcodes, where a computer displays an encrypted timestamp barcode that a mobile device scans, creating a passcode using pre-exchanged keys, and verifying access by comparing original and retrieved timestamps.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a simple password is used for firmware setup utility access, then ease of operation is improved, but security is worsened due to password theft or compromise

Engineering Contradiction:

Improveease of access to firmware setup utilityVSAvoidsecurity of firmware setup utility access

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The authentication process is segmented into multiple independent components: a timestamp component displayed as barcode on the computer screen, and a cryptographic verification component executed by the mobile device. The password is segmented into a stored hash and a runtime comparison, never transmitted in plaintext. This segmentation prevents single-point compromise that would affect traditional password systems.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A timestamp serves as an intermediary element between the computer and mobile device authentication process. The timestamp is displayed as a barcode on the computer screen, scanned by the mobile device, and used as a temporary credential for verification. This intermediary mechanism enables secure authentication without transmitting the actual password over communication channels.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If a two-dimensional barcode authentication system is implemented, then security is improved, but device complexity is worsened due to additional components and processes

Engineering Contradiction:

Improvesecurity of firmware setup utility accessVSAvoidcomplexity of authentication system

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The mobile device serves multiple functions: it acts as a barcode scanner, a cryptographic processor, and a verification system. The same mobile device can be used across different computers and firmware setups, providing universal authentication capability. The computer's display system also serves dual purposes by showing both the timestamp barcode and serving as the firmware setup interface.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

Instead of transmitting the actual password or complex cryptographic keys over communication channels, the system transmits a visual copy in the form of a barcode representing the timestamp. The mobile device creates a cryptographic copy of the authentication credential by hashing the timestamp locally, avoiding the need to transmit sensitive data while maintaining authentication security.

Inventive Principle:

Principle #26Copying

3Ease of operation

If password transmission is performed over communication channels, then ease of operation is improved, but security is worsened due to potential interception

Engineering Contradiction:

Improveconvenience of authenticationVSAvoidinterception of authentication data

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The sensitive password element is extracted from the authentication transmission process entirely. Instead of transmitting the password over communication channels, only a non-sensitive timestamp barcode is transmitted visually from the computer screen to the mobile device. The actual authentication credential (hashed timestamp) is generated and verified locally on each device, eliminating the security vulnerability of password transmission.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The potential harm of communication channel interception is converted into benefit by using the communication channel only for transmitting non-sensitive timestamp data in barcode form, while the sensitive cryptographic verification occurs through local processing. The system design accepts that communication may be intercepted but ensures the intercepted data (timestamp barcode) is useless without the corresponding local cryptographic context.

Inventive Principle:

Principle #22Blessing in disguise (Convert harm into benefit)

Data Source

PatentUS9213825B1User authentication using two-dimensional barcodes

Publication Date: 2015.12.15 AMERICAN MEGATRENDS

AI summary

A login interface provided by a firmware setup utility is configured to display a two-dimensional barcode, such as a quick response (“QR”) code. The barcode is scanned by a mobile device configured to retrieve a timestamp encrypted within the barcode. The mobile device creates a passcode by re-encrypting the timestamp using a firmware setup password and a master key. The passcode is provided to the firmware setup utility, which retrieves the timestamp and compares it to a stored timestamp. If the timestamp values match, access to the firmware setup utility is permitted.