QR-Based Access Handover for Passwordless Cross-Device Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for information access, particularly via the Internet, are insecure, especially when using one-factor authentication with username and password, and passwordless authentication requires biometric capabilities which not all devices possess.
Innovation Solution
A method for information access handover between devices with and without biometric capabilities, using a QR code to initiate a web authentication registration flow on a device with biometrics, creating a unique user identifier, and securing access through a web authentication flow without requiring a user account.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If one-factor authentication with username and password is used, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent introduces a QR code as an intermediary element that bridges the first device (without biometrics) and the second device (with biometrics). The QR code contains encoded access parameters that initiate a web authentication flow, allowing secure credential transfer without direct device-to-device communication. This intermediary mechanism enables the system to maintain simple user interaction (scanning QR code) while achieving strong security through biometric verification on the second device.
2Reliability
If passwordless authentication with biometric identification is used, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent segments the authentication system into two distinct device roles: a first device that handles simple QR code display and a second device that performs biometric verification. This segmentation allows the biometric authentication complexity to be isolated to only the second device, while the first device maintains simplicity. The system as a whole achieves passwordless security without requiring every device to have biometric capabilities.
Solution Approach 2:
The patent creates a universal authentication system where the second device with biometric capabilities can serve multiple functions: it can authenticate the user, store biometric credentials, and act as a security token. This multi-functional second device eliminates the need for separate biometric hardware while providing robust security across different access scenarios.
3Reliability
If two-factor authentication with additional credentials is used, then security is improved, but ease of operation is worsened
Solution Approach 1:
The patent implements self-service authentication where the system automatically manages credential verification. Once the QR code is scanned and the web authentication flow is initiated, the system automatically processes the biometric verification on the second device and grants access without requiring the user to manually enter additional credentials or perform complex authentication steps. The user simply needs to authenticate biometrically on their device, and the system handles the rest.
Data Source
AI summary
A computerized method of information access handover between a first device and a second device of a user is presented. The method comprises displaying, on the first device, a QR code generated by a synchronizer. The method further comprises capturing the QR code with the second device for displaying the data record and providing a registration option for associating the data record with the user at a relying party. The method further comprises performing a web authentication registration and, in response to that the web authentication registration flow has been performed successfully, performing an information access handover and securing process. The information access handover and securing process comprises sharing, by the second device, the unique user identifier and the device identifier with the first device, storing them at the first device, and securing access to the data record. A corresponding system and computer program are provided, too.