QR Code Authentication via Mobile ID Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional methods of user authentication for websites are burdensome, requiring users to create and remember complex passwords, which are vulnerable to theft and fraud.
Innovation Solution
A method that uses a QR code to authenticate users by scanning a code with their mobile device, eliminating the need for password entry and incorporating additional security checks, such as verifying the mobile ID and detecting suspicious activity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional password-based authentication is used, then security verification is achieved, but user convenience deteriorates due to complex password creation, memorization, and regular changes
Solution Approach 1:
The patent replaces the mechanical system of manual password entry and verification with an automated optical recognition system. Users scan a QR code displayed on the website using their mobile device camera, and the mobile device automatically transmits authentication data through the cellular network. This substitution eliminates the need for users to manually type passwords while maintaining security through automated verification of the mobile device's identity.
Solution Approach 2:
The authentication system enables self-service by allowing the user's mobile device to automatically perform the authentication process without manual intervention. Once the QR code is scanned, the mobile device autonomously communicates with the authentication server, transmits the mobile identifier, and completes the verification process. The user simply needs to scan the code, and the system handles all subsequent authentication steps automatically.
2Reliability
If complex passwords are required to prevent theft, then security is improved, but usability deteriorates due to the burden of creating and remembering long, complex passwords
Solution Approach 1:
The patent extracts the password element from the authentication process entirely. Instead of requiring users to create, remember, and enter complex passwords, the system uses the mobile device's existing cellular identifier (phone number or mobile ID) as the authentication credential. The QR code serves only as a trigger to initiate the automated transmission of this extracted identifier, eliminating the complexity of password management while maintaining security.
3Reliability
If additional authentication factors are implemented, then security against fraud is improved, but the authentication process becomes more time-consuming and cumbersome
Solution Approach 1:
The system performs preliminary action by pre-registering the user's mobile identifier with the authentication server before the actual login process. When the user scans the QR code, the server already has the expected mobile ID stored, allowing for immediate automated verification without requiring the user to manually provide additional information. This preliminary setup enables rapid authentication while maintaining multiple-factor security through the use of the mobile device's unique cellular identifier.
Data Source
AI summary
A method of authenticating a customer to allow the customer to log in to an account, includes the steps of: in response to a request to authenticate the customer based on a first mobile identifier (ID), generating a code that encodes a uniform resource locator (URL), and then transmitting the generated code to a computer that is managing access to the account; examining a network packet routed according to the URL and determining a second mobile ID using the network packet; comparing the first mobile ID to the second mobile ID; and based on a determination that the first mobile ID matches the second mobile ID, determining that the customer is authenticated, and then transmitting a message to the computer that the customer is permitted to log in to the account.