Split QR Code Authentication for Unauthorized Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing QR codes are vulnerable to unauthorized access, allowing individuals to scan and access sensitive information, posing a risk of information leakage.
Innovation Solution
QR codes are split into two portions, with one portion being scanned to identify the source and the second portion sent upon successful authentication of the user device, requiring both parts for complete QR code assembly and access to information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If QR codes are used to transmit sensitive information, then information transmission efficiency is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The QR code is divided into multiple portions (first portion displayed on QR display device, second portion sent to user device). Each portion alone is insufficient to access the sensitive information, requiring both portions to be combined. This segmentation prevents unauthorized access while maintaining information transmission capability.
Solution Approach 2:
A computing platform acts as an intermediary between the QR display device and the user device. It validates authentication credentials before releasing the second portion of the QR code, thereby mediating the security verification process and enabling controlled access to sensitive information.
2Reliability
If QR codes are split into multiple portions with authentication requirements, then security is improved, but device complexity increases
Solution Approach 1:
The computing platform performs multiple functions: generating the QR code, splitting it into portions, displaying the first portion, validating authentication credentials, and releasing the second portion. This multi-functionality consolidates complex security operations into a single platform, managing complexity rather than increasing it.
Solution Approach 2:
The QR code is pre-split into multiple portions before transmission. The first portion is displayed in advance on the QR display device, and the second portion is prepared to be sent only after authentication. This preliminary preparation simplifies the real-time processing requirements during the actual access process.
Data Source
AI summary
Methods and systems for enhanced QR code security are described herein. A computing platform may generate a QR code that includes an information code and a server code. The computing platform may split the QR code into first and second portions, where the first portion includes at least the server code. The computing platform may send, to a QR display device, the first portion for display. The computing platform may receive, from a user device, authentication credentials and a request for the second portion, sent to the computing platform based on identification of the computing platform through scanning, by the user device, the server code at the QR display device. The computing platform may send, based on validating the authentication credentials and to the user device, the second portion, where the user device is configured to re-assemble the QR code based on the first and second portions.