QR Code Authenticity Verification via Environmental Data

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The use of machine-readable identifiers like QR codes in advertising and other contexts is vulnerable to fraud, where malicious users can overlay or move legitimate codes to deceive customers, leading to phishing or unauthorized offers, as existing verification methods are inadequate to ensure authenticity.

Innovation Solution

The proposed solution involves verifying the authenticity of machine-readable identifiers by using environmental data such as visual cues, ambient audio, and location-specific characteristics, and submitting these to a trusted authority for cryptographic signature verification, ensuring that the codes are legitimate and have not been tampered with or moved to unauthorized locations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If environmental data collection and cryptographic verification are implemented, then reliability of machine-readable identifier verification is improved, but device complexity increases

Engineering Contradiction:
Improveverification authenticityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a trusted authority as an intermediary that issues cryptographic signatures for verified machine-readable identifiers. This mediator handles the complex verification logic centrally, allowing client devices to verify authenticity through simple signature checking rather than implementing complex environmental analysis themselves, thus improving reliability while managing device complexity

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary verification by collecting environmental data and generating cryptographic signatures before the machine-readable identifier is presented for scanning. This advance preparation stores verification evidence in the identifier itself, enabling fast, simple verification at scan time without requiring complex real-time analysis, thereby improving reliability while keeping the scanning device complexity low

Inventive Principle:
Principle #10Preliminary action

2Reliability

If environmental data and cryptographic verification are used, then reliability is improved, but processing time increases

Engineering Contradiction:
Improveverification authenticityVSAvoidverification time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

Environmental data collection, analysis, and cryptographic signature generation are performed in advance before the QR code is scanned by the user. The verification result is embedded in the identifier itself, so when scanned, the client device only needs to perform a quick cryptographic verification against the trusted authority's public key, dramatically reducing verification time while maintaining high reliability

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent replaces complex real-time environmental analysis and verification mechanics with cryptographic verification. Instead of performing sophisticated environmental matching at scan time, the system uses cryptographic signatures that can be verified rapidly through mathematical operations, substituting mechanical/physical verification processes with efficient computational verification that maintains reliability while minimizing time loss

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS10230705B1Verifying authenticity of machine-readable identifiers
Publication Date: 2019.03.12 AMAZON TECH INC
  • US10230705B1 patent drawing
  • US10230705B1 patent drawing
  • US10230705B1 patent drawing

AI summary

Disclosed are various embodiments for verifying the authenticity of machine-readable identifiers, such as quick response (QR) codes or other identifiers. After data is received corresponding to a machine-readable identifier, environmental data may be acquired with respect to an environment of the machine-readable identifier. The authenticity of the machine-readable identifier may be verified based at least in part on the environmental data. In some embodiments, a verification request may be sent to a trusted authority.