On 04/02/2011 04:36 PM, Patrick Kobly wrote:
Now... I could imagine a use for this tech for auth. With a mobile
device, you could create a soft token - where the qr code changes frequently - like with a
securid. Maybe even as part of a challenge response scheme - where the challenge is
displayed to the mobile device as a qr code and the device displays the response as a qr
code. I am unaware of anything existing that does this. But I certainly wouldn't see a
static printed qr code as useful for AuthN in just about any scenario.
I was thinking of the same thing until I saw OP mention it will be on ID
cards.
If it were on a cell phone, one could type in a PIN to make it somewhat
more secure (otherwise copying the QR-generator program would be too easy)