Custom Visual Code Authentication for Low-Friction MFA
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current multi-factor authentication systems introduce friction and inconvenience for users, particularly in transactional applications, as they require multiple steps such as entering credentials and waiting for alphanumeric codes, which can deter users from completing transactions.
Innovation Solution
A method using a custom visual code generated based on encrypted biometric and identification information, allowing for seamless authentication by scanning a QR code or barcode that includes a temporary one-time password and user identification, which is encrypted and encoded using steganography, enabling quick and secure identity verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multi-factor authentication is implemented using traditional methods (username, password, and alphanumeric code), then security against hackers is improved, but user experience friction increases and transaction completion rate decreases
Solution Approach 1:
The patent replaces the mechanical interaction of manually entering alphanumeric codes with an optical system where a visual code is automatically generated and scanned by a camera. The user simply points the camera at the visual code displayed on another device, eliminating the need for manual code entry and reducing user friction while maintaining security through the same multi-factor authentication mechanism
Solution Approach 2:
The patent creates a visual copy (visual code) of the authentication credentials that can be displayed on a screen and scanned optically. Instead of requiring users to interact with physical keyboards to enter codes, the system generates a visual representation of the authentication data that can be captured by a camera, making the authentication process more convenient while preserving security
2Reliability
If multiple authentication steps are required (entering credentials and waiting for codes), then security is improved, but transaction speed and productivity decrease
Solution Approach 1:
The system performs preliminary actions by pre-generating and displaying the visual code on a secondary device before the user needs to authenticate. The visual code is ready in advance, and the user simply needs to point the camera at it, eliminating the waiting time for code generation and entry. This preliminary preparation of authentication credentials accelerates the transaction process while maintaining security
Solution Approach 2:
The patent replaces the time-consuming mechanical process of manually typing alphanumeric codes with a rapid optical scanning process. The camera-based visual code scanning eliminates the need for users to physically enter each character, dramatically reducing the time required for authentication and increasing transaction throughput while preserving security requirements
3Reliability
If visual code is generated based on encrypted information, then security against hackers is improved, but device complexity increases due to encryption and encoding requirements
Solution Approach 1:
The patent employs standard, widely-available encryption libraries and visual code generation algorithms that are already implemented in most modern devices. By using universal, proven cryptographic standards and common visual code formats, the system achieves high security without requiring proprietary or complex custom implementations, thus limiting the increase in device complexity to only what is necessary for the authentication function
Data Source
AI summary
Systems and methods for authenticating user identity using custom visual code is disclosed. One disclosed method includes determining user identification information based on received biometric data; generating a temporary one-time password; encrypting the user identification information and the temporary one-time password; and generating a visual code based in part on the encrypted temporary one-time password and user identification information. The method may further include generating a prompt requesting a passcode or biometric data when a user device is within a predetermined threshold range of an authenticating device.