Matrix Barcode URL Verification via Registered Service Provider Check

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current techniques for securing transactions initiated by matrix barcodes using smart devices are inadequate, as they fail to effectively prevent unauthorized access by redirecting devices to untrusted resources.

Innovation Solution

A method that involves scanning a matrix barcode to determine location coordinates, which are then used to verify the legitimacy of the URL pointed to by the barcode. This verification is done by checking against a registered service provider in a knowledge corpus, and if untrusted, access is blocked to prevent unauthorized transactions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of information

If a matrix barcode is used to redirect a smart device to a URL, then the readability and storage capacity are improved, but the security against unauthorized access deteriorates

Engineering Contradiction:
Improvereadability and storage capacityVSAvoidsecurity against unauthorized access
Core Design Contradiction:
Loss of informationVSReliability

Solution Approach 1:

The system performs preliminary verification by checking the URL against a knowledge corpus of registered service providers before allowing access. This advance checking prevents unauthorized redirection by validating the URL's legitimacy before the user is redirected, thus maintaining security while preserving the barcode's redirect functionality

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary verification system that acts as a mediator between the barcode scan and the URL redirection. The system intercepts the URL from the barcode, verifies it against the knowledge corpus, and only then allows the redirection to proceed. This intermediary layer prevents unauthorized access while maintaining the convenience of barcode-based navigation

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If a verification system is implemented to check URL legitimacy, then the security is improved, but the device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The verification system leverages the existing computational resources of the smart device to perform the URL validation locally. The device uses its own processor and memory to compare the URL against the knowledge corpus, reducing the need for additional external verification hardware and minimizing the increase in system complexity

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system integrates the verification functionality into the existing barcode scanning application, allowing the same software to perform both barcode reading and URL verification. This multi-functionality approach avoids creating separate verification hardware or software modules, thus limiting the increase in device complexity

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12309198B2Computer software implemented cybersecurity for matrix barcode interaction with smart device
Publication Date: 2025.05.20 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US12309198B2 patent drawing
  • US12309198B2 patent drawing
  • US12309198B2 patent drawing

AI summary

Cybersecurity is provided for a transaction initiated by a matrix barcode using a smart device connected to a computer network by a device having a computer receiving a reading of a matrix barcode on an item. The matrix barcode electronically pointing to a URL (Uniform Resource Locator) for a web-based resource accessible using the device via a computer network. Using the computer of the device or a service computer, determining information parameters about the matrix barcode, and determining when the URL is identified as a registered service provider in a knowledge corpus communicating with the service computer. The URL can be validated as registered, when the URL is identified as corresponding to the registered service provider and based on the information parameters.