One-Time Operation Codes for Secure IoT Service Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for authenticating entities accessing service devices, such as IoT devices, are insecure due to the potential misuse of access cards or identification controls, which can be stolen or insufficient for secure operations.
Innovation Solution
A system that generates and manages one-time operation codes, such as dynamic QR codes, with use limitations, allowing secure access to IoT service devices by authenticating entities through mobile devices and imaging devices, and ensuring compliance with entity-defined controls.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access cards or identification controls are used for authentication, then entities can access service devices, but security is compromised because these credentials can be stolen and are insufficient for secure operations
Solution Approach 1:
The system transitions from static access cards to dynamic one-time operation codes that change with each authentication event. The codes are time-limited and single-use, making them dynamically valid only for specific operations within defined parameters, thereby preventing reuse or theft exploitation
Solution Approach 2:
The authentication mechanism changes multiple parameters simultaneously: the code value itself changes with each use, the time window for validity changes, and the operational parameters (amount limits, merchant categories) are dynamically enforced. This multi-parameter approach creates layered security that static cards cannot provide
2Reliability
If one-time operation codes are generated with use limitations, then security is enhanced, but device complexity increases due to code generation, validation, and limitation enforcement mechanisms
Solution Approach 1:
The patent introduces an intermediary computing system that handles the complex code generation, validation, and limitation enforcement. This intermediary sits between the entity and the service device, centralizing the security logic and keeping the service devices themselves relatively simple while maintaining high security standards
Solution Approach 2:
The system replaces physical mechanical authentication (swiping cards, inserting credentials) with digital code generation and validation. The one-time codes are electronically generated and transmitted, eliminating the need for physical security tokens while achieving higher security through digital parameter control
3Ease of operation
If imaging devices are used to capture one-time operation codes, then secure access is enabled without physical contact, but the system requires additional hardware components
Solution Approach 1:
The system creates optical copies (visual representations) of the one-time operation codes that can be captured by imaging devices. Instead of requiring direct electronic communication or physical contact, the authentication data is rendered as visual information that can be copied and transmitted through optical means, enabling contactless operation
Data Source
AI summary
A computer-implemented method includes receiving a request to generate a one-time operation code associated with an entity account. The one-time operation code may be used to facilitate a secure operation between a service device and a recipient of the one-time operation code using the entity account. The method may also include receiving at least one use limitation associated with the one-time operation code and generating the one-time operation code used to access the secure operation at the service device. Further, the method may include transmitting the one-time operation code to the recipient identified in the request to generate the one-time operation code. The one-time operation code may be configured to be captured by an imaging device of the service device to facilitate a one-time secure operation between the service device and the entity account