Zero Sign-On Authentication via Scannable Code Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional user authentication methods require users to remember and manually input multiple credentials for various accounts, leading to a cumbersome and time-consuming experience, posing significant burdens on users and service providers in managing and securing multiple accounts.
Innovation Solution
A zero sign-on authentication system that uses a unique authentication code, such as a barcode, provided by an authentication platform to a relying party device, allowing users to log in by scanning the code with their device, eliminating the need for manual credential entry and enabling seamless access across multiple accounts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional user authentication methods are used, then account security is maintained, but user burden and time consumption increase significantly
Solution Approach 1:
The patent introduces an authentication code as an intermediary element between the user and the account system. Instead of directly managing multiple credentials, users interact with a single authentication code that mediates the authentication process across multiple accounts, eliminating the need for users to remember and input multiple passwords while maintaining security
Solution Approach 2:
The patent extracts the credential management burden from the user by separating the authentication code generation and verification processes from user interaction. The authentication code is generated by the system and presented to the user in a scannable format, removing the complex credential management tasks from the user's responsibility
2Reliability
If multiple credentials are required for different accounts, then account security is maintained, but device and system complexity increase
Solution Approach 1:
The authentication code serves multiple functions across different accounts and services. A single authentication code can be used to authenticate users across multiple different accounts and platforms, eliminating the need for separate credential management systems for each account while maintaining the security requirements of each service
Solution Approach 2:
The patent uses visual copies of authentication codes (such as barcodes or QR codes) that can be scanned and verified. These visual representations serve as portable, easily transmissible copies of authentication credentials that maintain security while simplifying the interaction process across different devices and systems
3Reliability
If manual credential entry is required, then authentication security is ensured, but user experience deteriorates
Solution Approach 1:
The patent replaces the mechanical process of manual keyboard entry with optical scanning technology. Instead of requiring users to physically type credentials, the system uses camera-based scanning to capture and verify authentication codes, eliminating the need for manual input while maintaining security through the same authentication verification processes
Data Source
AI summary
An approach for receiving a request for an authentication code for presentation in an authentication user interface, wherein the request is from a relying party and wherein the authentication user interface is presented by the relying party at a first device. The approach further involves transmitting the authentication code to the relying party. The approach also involves authenticating a user with respect to the relying party by determining that a second device associated with the user has read the authentication code from the authentication user interface of the first device, wherein the second device is a previously authenticated device.