QR Code Authentication System for Secure User Login

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Traditional password-based authentication methods are weak and vulnerable to hacking, requiring users to input usernames and passwords each time, which is inconvenient and insecure, especially in scenarios where strong passwords can still be compromised.

Innovation Solution

A system where a user scans a QR code received from a web server using their mobile device, which generates and sends login credentials for authentication, eliminating the need for username and password input, and using a one-time code that changes within a short time frame for enhanced security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional username/password authentication is used, then users can log in to systems, but the authentication is vulnerable to hacking and password theft

Engineering Contradiction:

Improveauthentication securityVSAvoidhacking vulnerability

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system generates a one-time code in advance that is displayed as a QR code on the user's screen. This code is created before the authentication moment and is valid only for that specific instance, eliminating the need for users to manually enter passwords and preventing password theft through automated attacks

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent uses disposable one-time codes that expire after a single use or short time period. Each QR code is unique and cannot be reused, making it economically and security-wise advantageous to generate new codes continuously rather than relying on reusable passwords

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

2Ease of operation

If users must input username and password each time, then authentication can be performed, but the process is inconvenient and time-consuming

Engineering Contradiction:

Improvelogin convenienceVSAvoidauthentication time

Core Design Contradiction:

Ease of operationVSLoss of time

Solution Approach 1:

The patent replaces the mechanical process of manual keyboard input with automated optical recognition. The QR code is scanned automatically by the system's camera or image capture device, and the code is processed automatically through image recognition algorithms, eliminating manual typing and reducing authentication time

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system automatically captures the QR code image, extracts the one-time code, and submits it for authentication without requiring user intervention beyond pointing the camera at the screen. The entire process is self-executing once the user initiates it by scanning the code

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS11665156B2Method and system for securely authenticating a user by an identity and access service using a pictorial code and a one-time code

Publication Date: 2023.05.30 XIID CORP

AI summary

The present invention comprises scanning, by a mobile device of the user, a QR code generated by a server application when the user requests access to a secure web portal and generating, within a client application, a login code which is used to authenticate the user within an authentication service and then being redirected to the requested portal.