Login System Using QR Code Mediator for Identity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional login methods lack sufficient security as they do not verify the identity of the terminal submitting the login request, making them vulnerable to unauthorized access.
Innovation Solution
A login method and system that involves generating a unique identifier, creating a two-dimensional code with this identifier, and performing identity verification through a second server before allowing login, ensuring that only verified identities can bind and use the unique identifier for login.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If identity verification is performed on the terminal submitting the login request, then login security is improved, but the login process complexity increases
Solution Approach 1:
A second server is introduced as an intermediary to perform identity verification on the terminal. The first server generates a unique identifier and two-dimensional code, then the second server verifies the terminal's identity through the code before allowing login. This mediator approach improves security while distributing the complexity across multiple specialized components rather than concentrating it in one system.
Solution Approach 2:
The login system is divided into two separate servers with distinct functions: the first server handles authentication token generation (unique identifier and two-dimensional code), while the second server handles identity verification. This segmentation allows each server to specialize in one aspect of the security process, improving overall reliability while making the complex verification process more manageable and modular.
2Object-affected harmful factors
If a unique identifier and two-dimensional code are generated and verified through a second server, then unauthorized access is reduced, but the time required for login increases
Solution Approach 1:
The first server generates the unique identifier and two-dimensional code in advance before the actual login attempt. The terminal obtains these credentials beforehand, so when login is required, the verification process on the second server can proceed quickly without needing to generate complex authentication data during the critical login moment, reducing the perceived login time while maintaining security.
Solution Approach 2:
The terminal captures or scans the two-dimensional code displayed by the first server, creating a copy of the authentication credential. This copied code can then be quickly submitted to the second server for verification without requiring real-time generation or complex computation during the login process, streamlining the authentication flow while maintaining security through the verified unique identifier.
Data Source
AI summary
A login method is disclosed, including: receiving, by a first server, a login request of a first terminal; generating, by the first server, a unique identifier according to the login request, storing the unique identifier, generating a corresponding two-dimensional code according to the unique identifier, and returning the corresponding two-dimensional code to the first terminal, the two-dimensional code including the unique identifier; receiving, by a second server, the unique identifier that is obtained by a second terminal by scanning the corresponding two-dimensional code and a user name that has been used by the second terminal for logging in to an application, and sending the unique identifier and the user name to the first server; performing, by the first server, identity verification of the second server, and binding, by the first server, the stored unique identifier to the user name when the identity verification of the second server succeeds, to implement login to the first terminal by using the user name; or rejecting, by the first server, the login request when the identity verification of the second server fails.