Secure Authentication via Visual Codes with Unique Metadata
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods for secure resources are insufficiently secure, inefficient, and vulnerable to phishing attacks, particularly when using traditional barcodes for mobile devices, which can lead to unauthorized access.
Innovation Solution
The use of encoded visual representations containing unique metadata, such as QR codes or barcodes, that include application fingerprints and verification tokens, which are generated and verified using fuzzy hashing techniques to ensure secure authentication and prevent phishing attacks by ensuring the device requesting access is the same device being authorized.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional barcodes are used for authentication, then ease of operation is improved, but security is worsened due to phishing vulnerabilities
Solution Approach 1:
The system performs preliminary verification by comparing device metadata (fingerprint) before granting authentication. The server stores the original device metadata and compares it with the metadata presented during authentication, ensuring the device is the same one that originally received the barcode, thereby preventing phishing attacks where barcodes are stolen and reused on different devices.
2Reliability
If unique metadata verification is implemented, then security is improved, but device complexity is worsened
Solution Approach 1:
The system creates a digital copy of the device's metadata (fingerprint) and stores it on the server. This copy is then used for verification purposes without requiring changes to the actual device hardware or software, maintaining simplicity on the device side while enabling secure verification on the server side.
3Reliability
If device metadata is stored and verified, then phishing prevention is improved, but loss of information is worsened due to metadata collection
Solution Approach 1:
The system collects and stores only specific, necessary device metadata parameters (such as device type, operating system, browser information) that are sufficient for identification and verification purposes, rather than collecting all possible device information. This selective approach maintains security while minimizing privacy intrusion.
Data Source
AI summary
Disclosed embodiments relate to systems and methods for authentication through generating and communicating encoded representations containing unique application fingerprints, e.g., metadata. Techniques include receiving an access request, receiving application metadata, identifying a unique verification token, generating an encoded visual representation including the metadata and verification token, making available to the encoded visual representation for scanning by a user for verification of the metadata. Further techniques include requesting access to a secure resource, transmitting metadata, scanning an encoded visual representation including the metadata and a verification token, and sending the verification token to a security server to complete an authentication process.