IoT Service Access via Mobile QR Authentication for Secure Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current service devices require users to input PIN numbers or access cards for authentication, which can be stolen and are insufficient for secure user verification, leading to security concerns in automated service functions.
Innovation Solution
A system utilizing IoT service devices that enable dynamic access through contactless authentication codes, such as QR codes, scanned by an imaging device to identify user accounts and validate access, allowing secure transactions via a computing environment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If contactless authentication codes are used instead of PIN numbers or access cards, then security is improved, but device complexity increases
Solution Approach 1:
The patent introduces a mobile device as an intermediary that generates and displays contactless authentication codes (such as QR codes). This intermediary transfers the authentication function from the service device to the user's mobile device, improving security by using dynamically generated codes that are harder to steal than static PINs or cards, while the imaging device on the service device scans these codes to complete authentication
Solution Approach 2:
The patent replaces the mechanical/authentication system of physical access cards and manual PIN entry with an optical system. The mobile device displays visual authentication codes (QR codes or similar graphical codes) that are scanned by an imaging device using optical recognition technology, substituting mechanical card readers and keypads with non-contact optical scanning to improve security and hygiene
2Reliability
If dynamic access control based on location and time is implemented, then security is improved, but ease of operation decreases
Solution Approach 1:
The system performs preliminary actions by pre-configuring access rules with location and time parameters before the authentication event occurs. The mobile device generates authentication codes that are already validated against predetermined location and time criteria, so when the code is scanned, the system has already determined whether access should be granted based on pre-set conditions, maintaining ease of operation while improving security
Solution Approach 2:
The system implements feedback by continuously monitoring the location and time context during the authentication process. The mobile device and service device exchange information about current location and time, and the system provides feedback on whether these conditions meet the pre-set access criteria, automatically accepting or rejecting the authentication code without requiring additional user input, thus maintaining ease of operation while enforcing security rules
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances security by transferring control from the IoT service device to a mobile device, requiring verified authentication and limiting access based on location and time, thus preventing unauthorized use and improving security measures.
Implementation Method 1
a mobile device displaying a contactless authentication code to the imaging device of the IoT service device
Data Source
AI summary
A system can be provided that can enable contactless access to service devices to facilitate secure transactions. For example, the system can include Internet of Things (IoT) service devices associated with a service provider. The system can also include a computing environment, which may receive an access request from a mobile device. The access request can be transmitted in response to a user of the mobile device performing a contactless authentication process with an IoT service device. The computing environment can then identify the IoT service device and can identify a user account associated with the mobile device and with the service provider. The computing environment can further provide access for the mobile device to functions of the IoT service device via a software application associated with the service provider. The functions can be used to facilitate secure transactions between the IoT service device and the user account.