Authentication on mobile device using two-dimensional code

• US 9,684,900 B2
• Filed: 07/23/2015
• Issued: 06/20/2017
• Est. Priority Date: 08/07/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Tateno, Dan, Motoki, Toshiyasu
• Primary Examiner(s): Frech, Karl D
• Application Number:
  US14/806,955
• Publication Number:
  US 20160042352A1
• Time in Patent Office: 698 Days
• Field of Search: 235375, 235380, 235382, 2353825
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/3276 using a pictured code, e.g. barcode or QR-code, being read by the M-device
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/4014 Identity check for transactions

Abstract

A two-dimensional code generated from encrypted original authentication data can be displayed on an authentication device. The code is read and decrypted by an authentication application on a mobile device. This can generate and display a new two-dimensional code. The new code can contain additional information, and the new two-dimensional code is read by the two-dimensional code reading unit of an authentication device. It is then authenticated.

Claims

1. A system comprising an authentication device and an authentication server, the system configured to:

access, from an authentication server, original authentication data;

generate, by encrypting the original authentication data, a first image, the first image being a first two-dimensional code image;

display, on a display unit, the first image, the first image configured to be read by a mobile device;

read from a second image from the mobile device, the second image being a second two-dimensional code image and generated by an authentication application in response to the authentication application having decrypted the first image, and the authentication application having combined data from the decrypted first image with registered user information;

determine that the second image includes the original authentication data; and

determine the registered user information in the second image matches the registered user information from the user registration server.

2. The system of claim 1, wherein the authentication application is on a mobile device.

3. The system of claim 1, wherein the authentication application and the mobile device are in separate units.

4. The system of claim 1, wherein the system further comprises the user registration server.

5. The system of claim 4, wherein the system is further configured to update, in response to the determination that the registered user information in the second image matches the server registered user information from the user registration server, the original authentication data.

6. The system of claim 1, wherein the system is further configured to update, in response to the determination that the registered user information in the second image matches the server registered user information from a user registration server, the original authentication data.