QR Code Login Authentication via Mobile Device Scanning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face challenges in securely and efficiently logging into websites due to the need to remember and manually enter different usernames and passwords, which can lead to security vulnerabilities and increased resource expenditure for account management.
Innovation Solution
A method using a mobile device to scan a QR code displayed on a login webpage, allowing the device to supply identification information to a website server, which links the device ID to login credentials for secure authentication without requiring manual entry of credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users manually enter login credentials through keyboard or keypad, then login process can be completed, but security is compromised due to keylogger spyware or shoulder surfing
Solution Approach 1:
The patent replaces the mechanical keyboard/keypad input system with an optical scanning system using QR code. Instead of manually typing credentials through a physical interface that is vulnerable to keyloggers and shoulder surfing, the system uses a mobile device camera to scan a visual code, substituting mechanical input with optical recognition to eliminate security vulnerabilities.
Solution Approach 2:
The patent introduces a QR code as an intermediary element between the user and the login system. Rather than directly entering credentials into a vulnerable interface, the user scans a QR code that acts as a secure mediator, transferring authentication information without exposing it to traditional input vulnerabilities.
2Reliability
If users use different usernames and passwords for different sites, then security is improved, but remembering and managing credentials becomes challenging
Solution Approach 1:
The patent implements preliminary action by pre-generating and displaying a QR code that contains encoded authentication information before the user needs to login. The system prepares the credentials in advance in a secure, machine-readable format, eliminating the need for users to remember multiple passwords while maintaining security through pre-configured authentication data.
Solution Approach 2:
The patent uses copying by creating a visual replica (QR code) of the authentication credentials. Instead of requiring users to memorize and manually type complex passwords, the system creates a scannable visual copy of the authentication data that can be rapidly processed by a mobile device, significantly reducing the time and cognitive load required for login.
3Reliability
If special hardware such as biometrics readers or NFC devices is used for secure authentication, then security is enhanced, but device complexity and cost increase
Solution Approach 1:
The patent applies universality by using a QR code scanning function that is already universally available in most mobile devices. Instead of requiring specialized authentication hardware like biometric readers or NFC devices, the system leverages the multi-functional camera and processing capabilities of standard smartphones to achieve secure authentication, eliminating the need for additional specialized components.
Solution Approach 2:
The patent implements self-service by enabling the mobile device itself to perform the authentication function using its existing camera and processing capabilities. The device serves its own authentication purpose without requiring external specialized hardware, leveraging its inherent functionalities to provide secure login capability.
Data Source
AI summary
Systems and methods are disclosed for a user to use a mobile device such as a smart phone to scan a QR (Quick Response) code displayed on a login webpage of a website. The QR code may encode a server URL of the website. The mobile device decodes the QR code and transmits a device ID and other decoded information to a service provider. The service provider locates login credentials of the user linked to the device ID and communicates the login credentials to a website server for user authentication. Alternatively, the mobile device may transmit its device ID to the website server for the website server to locate a user account linked to the device ID for user login. Alternatively, the mobile device may transmit stored login credentials to the website server. Advantageously, a user may access a website without the need to provide any login credentials.