Contactless IoT Service Access Using Dynamic QR Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current service devices require manual input of PIN numbers or access cards for authentication, which are vulnerable to theft and do not provide sufficient security, leading to potential security breaches in automated service functions.
Innovation Solution
A system utilizing IoT service devices that facilitate secure transactions through contactless authentication via mobile devices, generating dynamic QR codes for access control, which are validated by a computing environment to ensure secure interactions with user accounts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual authentication methods (PIN numbers or access cards) are used at service devices, then ease of operation is maintained, but security is compromised due to vulnerability to theft and insufficient authentication
Solution Approach 1:
The patent replaces manual mechanical authentication (typing PINs, inserting access cards) with automated optical authentication using mobile device cameras to scan contactless codes. The imaging device on the service device captures the contactless authentication code from the mobile device, eliminating the need for manual credential input while enhancing security through dynamic code validation
Solution Approach 2:
The patent introduces a contactless authentication code as an intermediary between the user and the service device authentication system. This code serves as a temporary, dynamic credential that bridges the mobile device and service device, providing enhanced security without requiring direct manual input of sensitive information
2Reliability
If contactless authentication codes are implemented, then security is enhanced through dynamic validation, but device complexity increases due to imaging devices and software integration
Solution Approach 1:
The patent leverages the existing multi-functional capabilities of mobile devices, which already possess cameras and processing power for generating authentication codes. By utilizing these existing components rather than adding dedicated hardware, the system achieves enhanced security while minimizing the increase in overall device complexity
Solution Approach 2:
The patent uses optical copying through the imaging device to capture the contactless authentication code from the mobile device display. This optical copy mechanism provides a simple yet secure method of credential transfer that avoids complex physical connection interfaces while maintaining authentication integrity
3Reliability
If dynamic authentication codes are used instead of static credentials, then security against theft is improved, but loss of time occurs during the authentication process
Solution Approach 1:
The patent implements preliminary action by pre-generating contactless authentication codes on the mobile device before the authentication event. These codes are ready for immediate presentation to the service device, eliminating the need for real-time credential generation or complex verification processes during the actual authentication moment
Solution Approach 2:
The patent enables rapid authentication by skipping traditional multi-step verification processes. The contactless code contains pre-validated authentication information that can be quickly captured by the imaging device and verified, allowing the authentication process to complete in a single swift action rather than multiple time-consuming steps
Data Source
AI summary
A system can be provided that can enable contactless access to service devices to facilitate secure transactions. For example, the system can include Internet of Things (IoT) service devices associated with a service provider. The system can also include a computing environment, which may receive an access request from a mobile device. The access request can be transmitted in response to a user of the mobile device performing a contactless authentication process with an IoT service device. The computing environment can then identify the IoT service device and can identify a user account associated with the mobile device and with the service provider. The computing environment can further provide access for the mobile device to functions of the IoT service device via a software application associated with the service provider. The functions can be used to facilitate secure transactions between the IoT service device and the user account.