Visual Code Authentication Using Device Orientation Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Visual code authentication systems are vulnerable to replay attacks, where malicious actors impersonate users by displaying a copied visual code, leading to security breaches and financial losses, as existing systems lack robust authentication mechanisms.
Innovation Solution
Implementing a multi-factor authentication approach that utilizes smartphone sensors to verify the orientation of the computing device alongside visual code decoding, using built-in sensors like IMU, accelerometer, and gyroscope to ensure the device's pose matches the estimated orientation, thereby enhancing security against impersonation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If visual code authentication is used, then convenience and speed are improved, but security against replay attacks deteriorates
Solution Approach 1:
The patent adds a spatial dimension to authentication by incorporating device orientation verification. The scanner estimates the 3D pose of the computing device displaying the visual code and compares it with sensor measurements. This dimensional addition transforms the authentication from purely visual code verification to a multi-parameter verification including spatial orientation, thereby preventing replay attacks while maintaining user convenience.
Solution Approach 2:
The patent changes the authentication parameters by incorporating sensor measurements (accelerometer, gyroscope, magnetometer) that capture device orientation and motion characteristics. These dynamic parameters are compared against estimated pose from visual analysis, creating a time-sensitive authentication mechanism that invalidates replayed visual codes regardless of when they were captured.
2Reliability
If sensor verification is added to authenticate device orientation, then security is improved, but device complexity increases
Solution Approach 1:
The patent leverages the existing multi-functional smartphone sensors (accelerometer, gyroscope, magnetometer) that are already present in modern devices for other purposes like screen orientation and step counting. By repurposing these universal components for authentication verification, the system enhances security without adding dedicated hardware, thereby minimizing the increase in device complexity.
Solution Approach 2:
The computing device itself performs the verification by comparing its own sensor measurements with the estimated pose derived from visual analysis of itself. This self-service approach eliminates the need for external verification hardware, reducing system complexity while maintaining enhanced security through multi-factor verification.
Data Source
AI summary
Systems, apparatuses, and methods may provide for technology that identifies user data decoded from a visual code and an orientation of a mobile device that displayed the visual code. The technology identifies based on the user data, a sensor measurement generated by a sensor of the mobile device, and determines whether to perform a computing process based on the sensor measurement and the orientation.


