QR Code Authentication for Handheld Device Login

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Establishing communication sessions between devices, such as logging into websites or authorizing transactions, is cumbersome for users due to the need to remember multiple username/password combinations, especially on handheld devices with small input interfaces.

Innovation Solution

A method and system using a network server to generate and display coded images, like 2D or 3D barcodes, that contain embedded data for authentication, allowing devices to capture and send this data back for authentication, thereby eliminating the need for manual entry of credentials.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If users manually enter username/password combinations for authentication, then authentication security is maintained, but user convenience and operation speed deteriorate due to the need to remember multiple credentials

Engineering Contradiction:
Improveauthentication convenienceVSAvoidtime to remember and enter credentials
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The patent uses visual codes (QR codes or similar 2D barcodes) as a copy representation of authentication credentials. Instead of requiring users to remember and manually type multiple username/password combinations, the system generates visual codes that encode authentication information. Users simply capture these visual codes with their mobile devices, and the system automatically extracts and processes the encoded data, eliminating the need for manual credential entry while maintaining security.

Inventive Principle:
Principle #26Copying

2Reliability

If the system requires multiple username/password combinations for different services, then authentication reliability is improved, but device complexity and user burden increase

Engineering Contradiction:
Improveauthentication reliabilityVSAvoiduser interface complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements a universal authentication mechanism using visual codes that can work across multiple different services and platforms. Instead of requiring separate username/password entries for each service, the system generates visual codes that encode authentication information specific to each service. A single mobile device with a camera and code scanning capability can authenticate to any service by capturing its visual code, making the authentication process universal and service-agnostic while maintaining service-specific security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Productivity

If manual credential entry is used on handheld devices, then authentication security is maintained, but input efficiency deteriorates due to small display and keypad limitations

Engineering Contradiction:
Improveauthentication speedVSAvoidinput efficiency on handheld device
Core Design Contradiction:
ProductivityVSEase of operation

Solution Approach 1:

The patent replaces the mechanical input method (manual typing on a small keypad) with an optical input method. Instead of requiring users to physically type credentials into a small display and keypad, the system uses visual codes that users capture with their mobile device camera. The authentication information is encoded in the visual code's spatial patterns, allowing automatic extraction and processing without mechanical input, thereby dramatically improving input efficiency on handheld devices.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentEP3557855B1System and method for establishing a communication session
Publication Date: 2020.12.23 SONY GROUP CORP
  • EP3557855B1 patent drawingFigure 1
  • EP3557855B1 patent drawingFigure 2
  • EP3557855B1 patent drawingFigure 3

AI summary

A server in a communications network establishes a communication channel between a user's device and another device having a display. Particularly, the server generates a Quick Response (QR) code utilizing one or more parameters, and sends it to a device for display to a user. Using his or her device, the user captures an image of the displayed QR code and extracts the parameters using an image analysis technique. The device then sends the extracted parameters back to the server, which then utilizes them to authenticate the user and establish the communications session.