Optical OTP Capture for Secure Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional authentication systems requiring manual entry of one-time use passcodes (OTPs) are burdensome, prone to errors, and can lead to lockouts, with limited security due to the short length of alphanumeric characters.

Innovation Solution

A method involving a user taking a picture of an OTP using a camera, where optical character recognition (OCR) extracts the code for authentication, allowing for longer character sets and reduced error risk.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If manual typing of OTP is required, then authentication can be performed, but user burden and error rate increase

Engineering Contradiction:

Improveease of OTP entryVSAvoidauthentication accuracy

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent replaces the mechanical typing action with an optical scanning system. A camera captures an image of the OTP displayed on the token, and OCR (optical character recognition) technology automatically extracts and transmits the code, eliminating the need for manual keyboard input and thereby reducing both user burden and typing errors.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent creates a visual copy of the OTP by capturing an image of the displayed code. This image copy is then processed through OCR to extract the authentication data, replacing the need for the user to manually replicate the code through typing.

Inventive Principle:

Principle #26Copying

2Ease of operation

If manual typing is required, then authentication can occur, but lockout risk increases due to accidental errors

Engineering Contradiction:

Improveauthentication processVSAvoidlockout risk

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

By replacing manual typing with automated optical recognition, the system eliminates the human errors that lead to accidental lockouts. The camera and OCR system accurately capture and transmit the OTP without the mistakes inherent in manual entry.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Ease of operation

If OTP length is limited to 6-8 characters, then typing is manageable, but security strength is reduced

Engineering Contradiction:

Improvetyping easeVSAvoidsecurity strength

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The optical capture system removes the constraint of OTP length. Since the camera captures the entire displayed code regardless of length, the system can support longer OTPs (12-16 characters or more) that provide stronger security, while the OCR technology maintains ease of extraction without requiring user typing.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

4Reliability

If longer and more complex OTPs are used, then security is enhanced, but manual entry becomes more difficult

Engineering Contradiction:

Improvesecurity strengthVSAvoidentry difficulty

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent uses optical capture and OCR technology to automatically handle OTPs of any length or complexity. The camera captures the entire code display, and the OCR system extracts the characters regardless of their number or complexity, allowing the use of longer, more secure OTPs without increasing entry difficulty for the user.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This approach alleviates user frustration, prevents accidental lockouts, and enhances security by enabling longer, more complex OTPs.

Implementation Method 1

taking a picture of a current OTP displayed on a display of a token

Methodology Applied

Scientific EffectLight reflection: Reflection

Implementation Method 2

extracting the current OTP from the picture (e.g., using optical character recognition or OCR operations)

Methodology Applied

Scientific EffectOptical character recognition: Image Processing

Data Source

PatentUS9614838B1Taking a picture of a one-time use passcode and using the picture to authenticate

Publication Date: 2017.04.04 EMC IP HLDG CO LLC

AI summary

Techniques involve a user taking a picture of a current one-time use passcode (OTP) and using the picture to authenticate. Such techniques alleviate the burden and frustration of the user having to manually type in the current OTP. Additionally, the user will not trigger a lockout via accidental typing errors. Furthermore, the current OTP can be augmented to include more than a string of six or eight alphanumeric characters for stronger security (e.g., by using non-alphanumeric characters, by capturing multi-digit seven-segment LCD display patterns, by using a QR code, by using a randomly selected image, etc.). One technique involves taking a picture of an OTP provided by a user. The particular technique further involves extracting the OTP from the picture and performing an authentication operation based on the OTP extracted from the picture to determine whether the user is authentic.