Imaging-Captured One-Time Codes for Theft-Resistant Service Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for secure digital operations face challenges in authenticating entities effectively, as access cards or identification controls can be stolen and do not provide adequate security.
Innovation Solution
A system that generates and manages one-time operation codes, which are associated with entity accounts and include use limitations, to facilitate secure interactions between service devices and entities, using imaging devices to authenticate and validate these codes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access cards or identification controls are used for authentication, then entity verification is enabled, but security is insufficient due to potential theft
Solution Approach 1:
The system transitions from static access cards to dynamic one-time operation codes that change with each authentication event. The codes are time-limited and single-use, making them dynamic rather than static, which prevents theft and reuse attacks.
Solution Approach 2:
The authentication mechanism changes parameters by using codes with different validity periods (one-time vs. reusable), different formats (digital vs. physical card), and different verification methods (imaging device capture vs. card reader), thereby improving security.
2Reliability
If one-time operation codes are implemented, then security is enhanced, but device complexity increases
Solution Approach 1:
The system replaces physical access cards with digital one-time codes that are transmitted electronically and captured by imaging devices, eliminating the need for physical card readers and reducing mechanical complexity.
Solution Approach 2:
The one-time operation codes serve multiple functions: authentication, authorization, and transaction identification, all in a single digital element. This multi-functionality reduces the need for separate systems for each function.
Data Source
AI summary
A computer-implemented method includes receiving a request to generate a one-time operation code associated with an entity account. The one-time operation code may be used to facilitate a secure operation between a service device and a recipient of the one-time operation code using the entity account. The method may also include receiving at least one use limitation associated with the one-time operation code and generating the one-time operation code used to access the secure operation at the service device. Further, the method may include transmitting the one-time operation code to the recipient identified in the request to generate the one-time operation code. The one-time operation code may be configured to be captured by an imaging device of the service device to facilitate a one-time secure operation between the service device and the entity account


