OTP Authentication via Color Code Display and Capture
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional one-time password (OTP) authentication methods lack security due to repeated password usage and require separate generators, which can be inconvenient and less secure.
Innovation Solution
A method and system for OTP authentication using a color code, where an OTP terminal generates a color code corresponding to a binary code representing the OTP, which is displayed and captured by a camera, allowing an authentication server to perform authentication by comparing the generated OTP with the decoded color code.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional OTP authentication methods are used, then authentication can be performed, but security is compromised due to repeated password usage and requirement of separate generators
Solution Approach 1:
The patent combines the OTP generation function and the smartphone application into a single integrated system. The server generates OTPs and immediately encodes them as color codes that are displayed within the same smartphone application interface, eliminating the need for separate OTP generator devices and improving both security and convenience.
Solution Approach 2:
The smartphone application serves multiple functions: it acts as both the OTP display device and the interface for color code capture and authentication. The same application that displays the color code also provides the camera functionality to capture it, reducing device complexity while maintaining security.
2Ease of operation
If separate OTP generators are used, then OTP authentication can be performed, but convenience is reduced due to additional hardware requirements
Solution Approach 1:
The patent merges the OTP generation, display, and capture functions into a single smartphone application. The server generates OTPs and encodes them as color codes displayed within the app, while the same app uses the device's camera to capture the color code for authentication, eliminating separate hardware devices.
Solution Approach 2:
The smartphone application performs multiple functions independently: it displays the color code generated by the server and simultaneously provides the camera functionality to capture that same color code for authentication. This self-service approach within a single application improves convenience by eliminating the need to handle separate OTP generator devices.
Data Source
AI summary
A method of performing one-time password (OTP) authentication using a color code is provided. The method includes generating, by an OTP terminal and an authentication server, an OTP using a reference time, generating, by the OTP terminal, a color code corresponding to a binary code representing the OTP, displaying, by a display device, the color code, obtaining, by a camera, the displayed color code, decoding, by the authentication server, the obtained color code into the color code and generating a password which refers to the decoded binary code, and performing, by the authentication server, authentication by comparing the generated OTP and the password.