Image-Based Authentication Using QR Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Password-based authentication is cumbersome for users, requiring multiple usernames and passwords, and is vulnerable to security issues like keystroke logging and phishing, complicating access to online resources.
Innovation Solution
Image-based authentication methods using QR codes or other non-alphanumeric encodings, where a computing device scans an image to obtain a code or identifier, allowing access to online resources without entering usernames and passwords, and enabling secure sharing of personal information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password-based authentication is used, then security verification is achieved, but user convenience deteriorates due to multiple usernames and passwords to remember
Solution Approach 1:
The patent introduces an image code (QR code or barcode) as an intermediary element between the user and the authentication system. The image code contains encoded authentication data that can be scanned by a mobile device, serving as a mediator that transfers authentication information without requiring the user to manually input multiple passwords. This resolves the contradiction by maintaining security verification while dramatically improving user convenience.
Solution Approach 2:
The patent creates a visual copy (image code) of the authentication credentials instead of requiring direct input of passwords. The image code is a graphical representation that encodes the necessary authentication information, allowing the system to verify identity through image scanning rather than password entry. This copying approach maintains authentication reliability while eliminating the burden of remembering multiple passwords.
2Reliability
If password-based authentication is used, then account access control is achieved, but security vulnerabilities increase due to keystroke logging and phishing attacks
Solution Approach 1:
The patent replaces the mechanical keyboard input system with an optical scanning system. Instead of requiring users to type passwords that can be intercepted by keystroke loggers, the system uses image scanning to capture authentication data. This substitution eliminates the vulnerability to keystroke logging attacks while maintaining access control functionality. The optical recognition system processes the image code without exposing sensitive password data to potential interceptors.
Solution Approach 2:
The image code serves as an intermediary that carries authentication information in an encoded visual format, preventing direct exposure of passwords to phishing attacks. When the mobile device scans the image code, it retrieves the embedded authentication data through optical recognition rather than user input, creating a secure channel that bypasses traditional phishing vulnerabilities associated with password entry forms.
3Ease of operation
If image-based authentication is implemented, then user convenience is improved through simplified access, but system complexity increases due to image processing requirements
Solution Approach 1:
The patent leverages the universal capability of mobile device cameras to capture images and the widespread availability of image processing algorithms. By using a standard camera function that already exists in virtually all mobile devices, the system avoids adding specialized hardware complexity. The image processing is performed using existing software libraries and algorithms, making the system universally applicable without significantly increasing device complexity.
Data Source
AI summary
Disclosed techniques provide an image-based process that allows a computing device to obtain content from a content provider. Identification data is obtained from processing image data. Using the obtained identification data and access data, the content is provided to the computing device. The image data and the identification data obtained from processing the image data are linked to the computing device.