Dynamic Media Element Authentication via Cross-Device Capture
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional software solutions for user authentication are insecure due to reliance on static methods like usernames and passcodes, which can be vulnerable to cyber-attacks and compromise sensitive data.
Innovation Solution
A multi-device authentication method where a central server generates a media element, displayed on a first computing device, and the user captures an image of it using a second device, with the server verifying the match and granting access to the associated account if the elements match.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If static authentication methods (username and passcode) are used, then ease of operation is improved, but security is worsened
Solution Approach 1:
The authentication system is divided into two separate devices: a first computing device for displaying the media element and a second computing device for capturing it. This segmentation ensures that even if one device is compromised, the authentication remains secure because the other device holds the necessary component. The username and passcode static authentication is replaced by this dynamic two-device process.
2Ease of operation
If internal database storing user credentials is used, then ease of operation is improved, but vulnerability to cyber-attacks increases
Solution Approach 1:
The system extracts the authentication verification process from the traditional client-server database model. Instead of storing credentials in a centralized database that becomes a target for attacks, the authentication data (media element) is generated dynamically on the server and displayed only on the user's first computing device. The verification occurs by comparing the captured media element with the generated one, eliminating the need for a vulnerable credential database.
3Reliability
If multi-device authentication method is implemented, then security is improved, but device complexity increases
Solution Approach 1:
The media element serves multiple functions within the authentication system. It acts as both the authentication challenge (displayed on the first device) and the authentication proof (captured by the second device). This multi-functionality reduces the need for additional complex components while maintaining security. The same media element is used for both generating the authentication challenge and verifying the user's possession of the second device.
Data Source
AI summary
An exemplary method comprises generating receiving an authentication request from a graphical user interface on a first computing device; generating a first encrypted media element; displaying the encrypted media element on the GUI; receiving a second encrypted media element from a second computing device; upon determining that the first and second encrypted media elements have a positive match, querying an identification value associated with the second computing device; receiving the identification value associated with the second computing device; upon the identification value matching a data record within a database, determining an account associated with the data record within the database; and authenticating the first computing device by granting the first computing device access to the account associated with the second computing device.