QR Code and Face Authentication for Reliable User Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods lack a reliable and efficient way to combine possession-based and biometric authentication, leading to potential security vulnerabilities and user inconvenience.
Innovation Solution
A user authentication apparatus that utilizes a two-dimensional code to encode unique user identification information and a session ID, combined with biometric face recognition, to ensure secure and efficient authentication through a two-step process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple authentication factors are combined to improve security, then authentication reliability is improved, but device complexity increases
Solution Approach 1:
The patent combines possession-based authentication (QR code on mobile device) and biometric authentication (face recognition) into a single integrated authentication flow. The QR code contains encrypted user identification information that, when scanned, triggers automatic face recognition verification, merging two authentication factors into one unified process that improves security without requiring separate manual steps for each factor.
Solution Approach 2:
The QR code serves as an intermediary element that bridges possession-based and biometric authentication. It contains encrypted user identification information that mediates between the mobile device and the authentication server, automatically initiating the face recognition process and coordinating the verification of multiple authentication factors without increasing user burden.
2Reliability
If traditional multi-step authentication is used to ensure security, then authentication reliability is improved, but ease of operation deteriorates
Solution Approach 1:
The system performs preliminary actions by pre-generating and displaying the QR code containing encrypted user identification information on the mobile device before the authentication process begins. When the QR code is scanned, the system has already prepared the authentication context, enabling automatic initiation of face recognition without requiring the user to manually input credentials or navigate through multiple authentication screens.
Solution Approach 2:
The patent merges possession-based authentication (scanning QR code) and biometric authentication (face recognition) into a single seamless operation. The QR code scan automatically triggers the face recognition process, combining what would traditionally be separate authentication steps into one unified action that maintains security while dramatically simplifying the user experience.
3Measurement precision
If separate authentication processes are used for different factors, then measurement precision of each factor is maintained, but productivity deteriorates
Solution Approach 1:
The authentication process maintains continuity by seamlessly transitioning from QR code scanning to face recognition verification without interruption. The system continuously processes authentication factors in sequence, with the QR code scan immediately triggering the face recognition process, eliminating idle time between verification steps and maintaining continuous useful action throughout the authentication flow.
Solution Approach 2:
The QR code with encrypted user identification information acts as an intermediary that efficiently coordinates the verification of multiple authentication factors. It enables the system to rapidly transition between verification steps by pre-containing user identification data, allowing the authentication server to quickly retrieve and verify associated biometric data without requiring separate manual initiation for each factor.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
A user authentication apparatus includes a photographing unit which photographs a two-dimensional code displayed on a user authentication support terminal, wherein the two-dimensional code is formed by encoding at least first identification information that uniquely identifies the user, and second identification information that uniquely identifies all user authentication performed using the user authentication support terminal collectively, into the two-dimensional code, an authentication factor acquisition unit which acquires an authentication factor, a decoding unit which acquires the first identification information and the second identification information by decoding the two-dimensional code, a first identification information inquiry unit which inquires as to an existence of the first identification information by referring to a storage unit, a second identification information collation unit which, when the inquiry issued by the first identification information inquiry unit is successful, reads from the storage unit the second identification information and collates the second identification information acquired by the decoding unit with the second identification information read from the storage unit, an authentication factor collation unit which, when the inquiry issued by the first identification information inquiry unit is successful, reads from the storage unit the authentication factor and collates the authentication factor acquired by the authentication factor acquisition unit with the authentication factor read from the storage unit, and a determination unit which determines that authentication of the user has been performed successfully when the collation performed by both the second identification information collation unit and the authentication factor collation unit are successful.