Mobilized Secure Login - motionQR Use Case

9
Greg Brinton Chief Executive Officer Palo Alto, California Membership ID Palo Alto, California © Copyright 2014 motionQR, Inc. All rights reserved.

Transcript of Mobilized Secure Login - motionQR Use Case

Greg BrintonChief Executive Officer

Palo Alto, California

Membership ID

Palo Alto, California © Copyright 2014 motionQR, Inc. All rights reserved.

No Special Equipment

Needed

Verification with

BiometricsFull Security and

Authentication Control

Works Online and Offline

Ticket Presentation

Cloud-based

Implementation

Forgery-proof

Fraud-proof

Infinite Data Size

2

Works on and between iOS & Android

QR Code #2motionQR Code

Multiple randomly generated subsets of data

QR Code #1 QR Code #3

Picture Signature Alphanumeric data Digitalized biometric data• Ticket• Membership• Medical

Insurance

• Hotel Reservation

• Building Access• Etc.

01110101010001001111010110101101000111101101010101011100110011110111001111001100111110011100011111011000100010010101111010000110001110000111100011101000110001011001101011000110010111110010110101010000110101101010101011001100110110011010110001111100111100111100100011100011100011111100111100011100000001101010110110101101010101010001001111001011011011010100111010101010

Digitalizedencrypted data set

3

Mobile Authentication Method: PC - to - Mobile Device

• Solution Elements • Provide a platform that can hold/present/scan limitless types of

information– Provide the capability of digitally signing all transactional (session)

information– Avoid the usage of SIM-based private keys (to ensure secure

environment)– Encrypt stored User private keys (leveraging User-created mPIN)

Sample Use Case – Mobilized Secure Login4

The User chooses to login with security management company’s motionQR.

A motionQR Code is presented on the PC monitor containing all necessary info regarding the resource and session.

The User scans security management company’s motionQR from computer monitor via her mobile device.

The User enters her mPIN.

Security management company verifies the mPIN and session info and based on these grants or revoke access.

The User receives notification - result of her login request.

Mobilized Login: PC - to - Mobile Device – Process Flow 5

Mobile Credential: Mobile Device - to - PC

• Solution Elements • Provide a platform that can hold/present/scan limitless types

of information– Provide the capability of digitally signing all transactional information– Avoid the usage of SIM-based private keys (to ensure secure

environment)– Encrypt stored User private keys (leveraging User-created mPIN)

Sample Use Case – Mobilized Secure Login6

The User chooses to login with security management company’s motionQR.

The User presents her motionQR Code on her mobile device to the PC’s web cam the motionQR Code can contain a one-time or permanent credential.

Via web cam, the PC identifies the motionQR Code and forwards the content of it to the security management company server.

Security management company verifies the session, verifies the User’s info and based on these, grants or denies User access.

The User is provided notification on the result of her login.

Mobilized Login: Mobile Device - to - PC – Process Flow 7

Process 8

Step 1 : Step 2 : Step 3 :

Step 4 : Step 5 : Step 6 :

Issuer motionQR(online)ISSUING CREATING

(cloud)

DELIVERINGmotionQR (cloud)

STORINGUser (offline)

PRESENTINGUser (offline)

AUTHORIZINGReceiver (offline)

Membership ID