QR Code Threat Screening Through Quarantined Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users are vulnerable to malicious QR codes that can direct them to harmful websites or install malware, compromising their personal information due to the lack of effective security measures in accessing information via QR codes.
Innovation Solution
A system and method that utilizes a quarantined environment for dynamic code analysis, AI/ML, and heuristics to evaluate QR codes, checks for malicious patterns, and provides a neutralization option such as augmented reality overlays or IR light to render QR codes unreadable if malicious, while using external repositories for threat updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users scan QR codes to access information or services, then ease of operation is improved, but security risks increase due to malicious QR codes
Solution Approach 1:
The patent introduces an intermediary analysis system that sits between the user and the QR code destination. When a user scans a QR code, the system intercepts the link, analyzes it in a quarantined environment, and only allows access if deemed safe. This intermediary layer maintains user convenience while blocking malicious content before it can harm the user.
Solution Approach 2:
The system performs preliminary analysis of QR code links before allowing users to access them. By pre-analyzing the destination in a quarantined environment and checking for malicious patterns, the system prevents harmful content from reaching the user, thus maintaining ease of operation while eliminating security risks.
2Productivity
If QR codes are publicly posted for service access, then productivity is improved, but reliability decreases due to fake QR codes circulating
Solution Approach 1:
The system implements feedback mechanisms where analysis results of QR codes are stored and shared. When a QR code is analyzed and determined to be malicious, this information is fed back into the system to block similar QR codes. This feedback loop maintains high productivity by quickly identifying and blocking fake QR codes while allowing legitimate ones to function.
Solution Approach 2:
The intermediary analysis system verifies QR code authenticity before allowing service access. By mediating between the posted QR code and the user device, the system ensures that only reliable QR codes lead to service access, maintaining both productivity and reliability.
3Reliability
If dynamic code analysis is performed in a quarantined environment, then security is improved, but device complexity increases
Solution Approach 1:
The patent extracts the complex analysis functionality from the user device and places it in a separate quarantined environment or server-based system. The user device only needs to interact with the QR code scanning interface, while the heavy lifting of dynamic code analysis, API call monitoring, and malicious pattern detection occurs in the extracted analysis system, reducing device complexity while maintaining high security.
Data Source
AI summary
A system includes a memory that stores a training dataset that includes solutions pertaining to determining malicious quick response (QR) codes; and a processor operably coupled to the memory. The processor receives an image of a QR code, and analyze the image of the QR code using the training dataset to determine whether the QR code is malicious. The analysis is based at least in part upon characteristics of the QR code, and the characteristics include one or more of an identity of a source of the QR code, information that is referenced by the QR code, or a geographical location of the QR code. Upon determining that the QR code is malicious, the processor overlays digital content over the image of the QR code which indicates that the QR code is malicious, and updates the training dataset by storing the malicious QR code in the training dataset.