Offline SAR Code Transfer for Secure Device Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transfer methods require active network connections for authentication and security operations, failing to ensure secure data transfer without network connectivity, particularly in scenarios like financial transactions.
Innovation Solution
The use of Secure Animated Response (SAR) codes, which are encrypted QR codes displayed as a video, allowing devices to validate and decrypt data without network connections through optical reading, using encryption keys and frame numbers for secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If active network connection is used for data transfer, then authentication and security operations can be performed, but the device requires network connectivity which limits offline capability
Solution Approach 1:
The patent introduces an intermediary mechanism (local secure storage and offline authentication protocols) that enables security operations without requiring direct network connection. The system stores authentication credentials and security tokens locally, allowing devices to perform secure data transfer operations offline while maintaining security integrity.
Solution Approach 2:
The system performs preliminary authentication and security setup actions before network disconnection occurs. By pre-establishing security credentials, storing authentication tokens locally, and preparing security contexts in advance, the device can maintain reliable security operations even when network connectivity is unavailable.
2Reliability
If QR codes are used for data transfer, then optical reading enables secure transmission, but the codes can be decrypted by third-party devices
Solution Approach 1:
The patent implements dynamic QR codes that change continuously through animation sequences. Each frame in the animation represents a different encoded state, making it extremely difficult for third-party devices to capture and decrypt the information. The dynamic nature ensures that even if one frame is captured, the complete information remains secure.
Solution Approach 2:
The system uses periodic animation frames where information is encoded across multiple sequential images rather than a single static code. This periodic presentation of encoded data requires sophisticated capture and reconstruction capabilities, significantly increasing the difficulty of unauthorized decryption while maintaining secure transmission.
3Reliability
If static QR codes are displayed for limited time, then security is improved, but the transfer speed and user experience are reduced
Solution Approach 1:
By transitioning from static to dynamic animated QR codes, the system achieves both security and speed improvements. The animation plays continuously within a secure time window, allowing multiple capture opportunities without extending the overall security risk exposure. This enables faster transfer while maintaining or enhancing security compared to static codes with extended display times.
Solution Approach 2:
The animated QR code provides continuous useful action by maintaining the encoded information in a constantly changing visual state throughout the animation sequence. This allows the receiving device to capture and process data at any point during the animation, effectively increasing transfer speed while the animation itself remains within secure time parameters.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Method, apparatus, and system for transfering data A method and system for transferring encrypted data from a first electronic device to a second electronic device, each of the electronic devices including an input/output interface, a memory and a processor. The method can be carried out without the first and/or second electronic device having an active data signal. The method includes the steps of displaying a first encrypted two-dimensional code at the output interface of the first electronic device, reading the first encrypted two-dimensional code with the input interface of the second electronic device, and decrypting the first two-dimensional code with the processor and memory of the second electronic device, generating a second encrypted two-dimensional code with the processor and memory of the second electronic device in response to the first decrypted two-dimensional code, and displaying the second encrypted two-dimensional code on the output interface of the second electronic device, reading the second encrypted two-dimensional code with the input interface of the first electronic device and decrypting the second two-dimensional code with the processor of the first electronic device and generating an action on the first electronic device based on the second decrypted two-dimensional code. The second two-dimensional code is a plurality of two-dimensional codes.