Secure QR Code Scanner with Malware Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The widespread use of QR codes has led to prevalent malicious activities, such as hackers embedding malicious URLs or replacing legitimate QR codes, which can compromise users' sensitive data when scanned, highlighting the need for secure QR code scanning systems to differentiate between secure and non-secure QR codes.
Innovation Solution
A method and system that authorize user login to a digital secure client-access platform, verify credentials, and activate a QR code secure scanner with malware filtering applications to verify the authenticity and security of QR code data, including URLs, before releasing readable data and initiating transactions, ensuring two-layer authorization and protection against malicious QR codes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If QR code scanning is made ubiquitous and convenient, then ease of operation is improved, but security against malicious QR codes deteriorates
Solution Approach 1:
The patent introduces a secure QR code scanning system as an intermediary layer between the user's mobile device and the QR code data. This intermediary system performs authentication, authorization, and verification of QR codes before accessing the data, thereby protecting against malicious QR codes while maintaining convenient scanning functionality through automated security checks.
Solution Approach 2:
The system performs preliminary authentication and authorization actions before allowing QR code data access. Users must authenticate themselves and obtain authorization tokens before the secure scanner can process QR codes. This preliminary action ensures that only authorized users can access potentially harmful data, preventing malicious QR code exploitation while maintaining ease of use for legitimate codes.
2Reliability
If QR code scanning requires authentication and authorization, then security is improved, but device complexity increases
Solution Approach 1:
The secure QR code scanning system integrates multiple functions into a single unified platform: authentication, authorization, verification, and data access control. By making the system multi-functional, the patent reduces the need for separate security modules and simplifies the overall architecture while maintaining high security standards through comprehensive security coverage.
Solution Approach 2:
The patent merges the authentication mechanism, authorization system, verification module, and data access control into a single integrated secure scanning platform. This consolidation reduces device complexity by eliminating the need for multiple separate security components and streamlines the security workflow into a unified process that handles all security concerns through one system.
3Object-affected harmful factors
If QR code data is verified for authenticity and security, then harmful factors are reduced, but processing time increases
Solution Approach 1:
The system performs preliminary verification actions by checking authentication status and authorization tokens before processing QR code data. This preliminary action filters out potentially harmful QR codes early in the process, reducing the time spent on verification for legitimate codes while preventing malicious data from reaching the user.
Solution Approach 2:
For authenticated and authorized users, the system implements expedited verification processes that skip unnecessary security checks. The verification process is optimized to rapidly confirm QR code authenticity for trusted users while maintaining thorough security checks for unauthenticated access attempts, thereby reducing processing time for legitimate QR codes while maintaining security.
Data Source
AI summary
A method for increasing a security of sensitive customer data when scanning a quick-response (“QR”) code is provided. The method may include, in response to authorizing login credentials of a user of a digital secure client-access application, deactivating an identified QR code scanner running on the mobile device and further activating a QR code secure scanner. The method may include verifying a first QR code scanned by the QR code secure scanner and in response to the verifying, releasing QR code data embedded in the first QR code, receiving approval from the first user of a transaction included in the QR code data and in response to the approval, generating a second QR code. The method may further include transmitting the second QR code to a second user and in response to an approval of the transaction by the second user, initiating the transaction.