Two-Level QR Authentication for Secure Resource Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing authentication methods using scanned codes, such as QR codes, lack security for accessing sensitive resources.

Innovation Solution

Implement a two-level authentication system where a generated QR code redirects to a second level authentication service for additional verification, using a digital certificate and device token to ensure secure access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a scanned code (e.g., QR code) is used for authentication, then convenience and ease of access are improved, but security level deteriorates

Engineering Contradiction:

Improveease of accessVSAvoidsecurity level

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The authentication process is divided into two distinct levels: first level uses a scanned code for initial authentication, and second level uses additional verification methods for enhanced security. This segmentation allows each level to serve its specific purpose while collectively providing both convenience and security.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces a second dimension of authentication by adding a second level verification process. Instead of relying solely on the scanned code (single dimension), the system now operates in two dimensions: the first level with the code and the second level with additional authentication methods, thereby enhancing security without completely sacrificing convenience.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

2Reliability

If a two-level authentication system is implemented, then security level is improved, but device complexity increases

Engineering Contradiction:

Improvesecurity levelVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a second level authentication service as an intermediary between the user and the protected resource. This intermediary layer handles the additional verification processes, managing the complexity centrally rather than distributing it across multiple components, which helps control overall system complexity while maintaining enhanced security.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary authentication at the first level using the scanned code before proceeding to the second level. This preliminary action filters out unauthorized users early in the process, allowing the system to manage complexity efficiently by only applying the more complex second level verification to users who have already passed the initial check.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS20260019424A1Using Codes to Provide More Secure Authentication

Publication Date: 2026.01.15 MICRO FOCUS LLC

AI summary

A request is received, from a user, to access a first level authentication service. A code associated with the user is generated that causes a redirection to a second level authentication service. The generated code associated with the user is sent. The user is authenticated based on a valid authentication credential of the user. Authenticating the user based on the valid authentication credential is accomplished at one of: the first level authentication service or the second level authentication service. At the first level authentication service, a message is received from the second level authentication service. The message sent from the second level authentication service is sent in response to the second level authentication service validating the generated code associated with user. In response to authenticating the user based on receiving the message from the second level authentication service, access is allowed, by the user to a resource.