Identity Authentication via Mobile Capturing Code
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face inconvenience and security risks due to the tedious process of registering and logging into multiple websites, requiring repeated input of personal information and passwords, and the risk of compromised security if a single password is hacked.
Innovation Solution
A method and system for identity authentication that allows users to log in or register for third-party services by scanning a code displayed on a client device, using an application client that detects login operations, encodes identity information, and sends it to an authentication server for verification, enabling a single login account across multiple services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users manually input personal information and passwords for each website registration, then each website can authenticate users individually, but the operation complexity and time consumption increase significantly
Solution Approach 1:
The patent introduces a code as an intermediary element that carries user identity information. Instead of directly inputting personal information and passwords on each website, users scan a code with their mobile terminal, which automatically transmits the necessary authentication data to the website server, thereby simplifying the registration operation while maintaining authentication reliability
Solution Approach 2:
The patent creates a digital copy of user identity information in the form of a code. This code encapsulates the user's personal information and can be copied and transmitted across different platforms without requiring repeated manual input, thus reducing operational complexity while preserving the ability to authenticate users on each website
2Ease of operation
If users use the same password for all websites, then the ease of operation improves, but the security risk increases significantly
Solution Approach 1:
The patent segments the authentication process into two independent parts: the code containing user identity information and the mobile terminal's account information. Each website receives only the specific data needed for authentication through the code, rather than requiring users to manage multiple passwords. This segmentation allows different websites to authenticate users independently without exposing a single point of failure
Solution Approach 2:
The code serves as an intermediary that transmits user identity information to the website server without requiring the user to input or manage passwords. The mobile terminal's account information acts as a secure credential that is verified by the server, eliminating the need for users to create and remember multiple passwords while maintaining strong security through the server's verification process
3Reliability
If users create different passwords for each website, then the security improves, but the complexity of remembering and managing multiple passwords increases
Solution Approach 1:
The patent enables the mobile terminal to automatically perform the authentication function by scanning the code and transmitting the necessary information to the website server. The system self-services the authentication process without requiring users to manually input or manage multiple passwords, thereby reducing the complexity of the authentication system while maintaining security through the automated verification process
Data Source
AI summary
A method, client device and system of identity authentication are provided. The method may include detecting a login or registration operation, to a server, via a login interface on a user interface of an application client. In response, identity information and an identifier of the application client may be determined. The identity information and the identifier may be encoded into a code displayed on the application client. A mobile terminal may obtain and decode the code to obtain the encapsulated identity information and the identifier. The mobile terminal may also have access to information about an account registered with the authentication server in advance. The mobile terminal may send the identity information, the identifier, and account information to the authentication server for authentication. The application client may then receive an authentication result from the authentication server enabling the user to access the third party service.