Video Conference Identity Verification Using Time-Bound QR Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Video conferencing platforms face vulnerabilities to spoof attacks using deepfake technology and other malicious tactics, compromising identity verification and access control, despite existing security measures like facial recognition and two-factor authentication.
Innovation Solution
Implementing temporally synchronized key tokens, such as QR codes, on mobile devices for video conference attendees, which incorporate user data like geolocation, biometrics, and employment status, and using out-of-band signals like audio frequencies or visual patterns to verify identity and authenticity in real-time.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If facial recognition technology is used to verify user identity, then authentication speed is improved, but vulnerability to deepfake spoofing increases
Solution Approach 1:
The patent introduces an intermediary verification mechanism using a mobile device display and camera system. Instead of directly comparing facial images, the system uses a displayed code pattern as an intermediary that must be both seen and physically replicated, adding a layer of physical verification between the authentication system and the claimant.
Solution Approach 2:
The system performs preliminary actions by displaying a code pattern on the mobile device before the actual authentication occurs. This preliminary display creates a temporal and spatial constraint that prevents pre-recorded deepfakes from succeeding, as the code changes over time and must be physically present during the verification moment.
2Reliability
If verification codes are sent to mobile devices, then security is improved, but complexity of verification process increases
Solution Approach 1:
The patent merges multiple verification functions into a single integrated display element. The mobile device simultaneously handles code generation, display, timing control, and validation, consolidating what would otherwise be separate complex components into one unified system that simplifies the overall verification process.
Solution Approach 2:
The verification code displayed on the mobile device changes periodically or at specific time intervals. This periodic update creates a simple yet effective mechanism where the code must be valid at the moment of verification, eliminating the need for complex one-time passwords or multi-step verification processes.
3Measurement precision
If real-time video analysis is implemented to detect fake videos, then detection accuracy is improved, but processing time increases
Solution Approach 1:
The patent extracts the critical verification element from the continuous video stream and isolates it into a discrete code pattern display. By separating the authentication function from the video transmission, the system achieves high detection accuracy without requiring continuous real-time analysis of the entire video stream, thus reducing processing time.
Solution Approach 2:
Instead of analyzing every frame of the video stream in detail, the system performs partial verification by focusing only on the code pattern display elements that contain the authentication information. This partial action approach provides sufficient detection accuracy while significantly reducing the processing time required.
Data Source
AI summary
Systems, methods, and apparatuses are described for verifying a user identity in a video conference. A computing device may receive user data and a plurality of security parameters associated with accessing a video conference based on a confidentiality level of the video conference. The computing device may generate a security code that is encoded with user data. The computing device might cause the security code to be displayed on the mobile device for a predetermined time period. The computing device may receive an indication that the first device scanned the security code by using a camera. To verify the identity of a user, the computing device may decode the security code, compare the decoded user data of the decoded security code and expected user data associated with the video conference. The computing device may determine the authenticity of a user video and allow access to the video conference.