Virtual Code Authentication for Temporary Authority Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing OTP authentication methods require users to log in every time, are inconvenient, and lack the ability to grant temporary authentication authority to others without face-to-face interaction, with difficulties in verifying virtual code validity.
Innovation Solution
A method and system for authenticating user setting information using a virtual code that allows temporary and limited authority transfer, includes a virtual code generation device and verification device to search and verify UIDs based on detailed codes, ensuring security and validity without revealing user or device identification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If OTP authentication is performed by logging in first and then generating OTP, then security is enhanced by using one-time passwords, but user convenience deteriorates as users must log in every time authentication is performed
Solution Approach 1:
The system performs preliminary registration of the OTP generation device and stores device information (such as device ID, installation location, etc.) in advance. This preliminary action allows the system to generate and verify OTPs without requiring full login procedures each time, thus maintaining security while improving user convenience.
2Ease of operation
If authentication authority is granted to another person for non-face-to-face business processing, then user convenience is improved by enabling remote access, but security control worsens as it becomes difficult to verify the authenticity and limits of the granted authority
Solution Approach 1:
The system introduces an intermediary verification mechanism where the OTP generation device acts as a trusted mediator. The device stores registered information about the authorized person and uses this information to verify and control the scope of authentication authority. This intermediary approach enables secure remote authentication while maintaining granular control over what actions the authorized person can perform.
3Reliability
If virtual code validity is verified without providing user or device identification information, then security is improved by preventing information leakage, but verification capability deteriorates as it becomes difficult to determine code authenticity
Solution Approach 1:
The system creates a copy of the verification capability by storing the OTP generation algorithm and device information in both the OTP generation device and the verification system. This allows verification to be performed using only the virtual code and stored device information, without needing to access the original user or device identification data, thus maintaining information security while enabling verification.
Data Source
AI summary
A method, program, and device for authenticating user setting information by using a virtual code are proposed. The method includes: receiving, by a virtual code verification means, a virtual code; searching, by the virtual code verification means, a storage location of each of a plurality of UIDs on the basis of the virtual code; verifying, by the virtual code verification means, the virtual code on the basis of the plurality of searched UIDs; and performing, by the virtual code verification means, authority authentication on the basis of the plurality of searched UIDs.