Abstract
A rapidly growing social interaction technology is the use of Quick Response (QR) codes as physical entrances (i.e. the encoded URL address) to Internet resources. However, there exist various kind of security problems, for example, the URL may point to some phishing web sites. A digital certificate based signature and verification QR code is proposed in this paper. The public and private keys are generated by the authentication mechanism, which using the Public Key Infrastructure (PKI) technology. The public key can be published with the designed scanning application (App). An authenticated QR code can be created based on the private key and the merchant information. Clients can authenticate the codes by the public key and scanning App. Test results prove that the security QR code designed by this system, which binds the digital certificate, can be verified by the decoding scanner.
J. Zhang—The authors wish to thank National Natural Science Foundation of China (Grant No: 61072080, 61572010), Natural Science Foundation of Fujian Province of China (2017J05098), The Education Department of Fujian Province science and technology project (JAT160328, JZ160461), and the science research project in Fujian University of Technology (GY-Z160066, GY-Z160130, GY-Z160138).
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Krombholz, K., Frhwirt, P., Kieseberg, P., Kapsalis, I., Huber, M., Weippl, E.: QR code security: a survey of attacks and challenges for usable security. In: Human Aspects of Information Security, Privacy, and Trust, HAS 2014. LNCS, vol. 8533, pp. 79–90 (2014)
Krombholz, K., Frühwirt, P., Rieder, T., Kapsalis, I., Ullrich, J.: QR code security–how secure and usable apps can protect users against malicious QR codes. In: International Conference on Availability, Reliability and Security, pp. 230–237. IEEE (2015)
Mary, G., Rani, M.S.: Security augmentation of visual cryptography using watermarking embedded QR code. In: International Conference on Signal Processing, Control and Data Analytics (2016)
Wane, A.R., Jamankar, S.P., Chandure, O.V.: An effective mechanism for ensuring security of QR code. Int. J. Adv. Res. Comput. Sci. 04(06), 34 (2013)
Umaria, M.M., Jethava, G.B.: Enhancing the data storage capacity in QR code using compression algorithm and achieving security and further data storage capacity improvement using multiplexing. In: International Conference on Computational Intelligence and Communication Networks, pp. 1094–1096 (2015)
Kartheshwar, S.: QR code based security system to prevent unauthorized access. Int. J. Stud. Res. Technol. Manag. 3(04), 336–339 (2015)
Wang, Z.P., Zhang, S., Liu, H.Z., Qin, Y.: Single-intensity-recording optical encryption technique based on phase retrieval algorithm and QR code. Opt. Commun. 332(332), 36–41 (2014)
Huang, H.C., Chang, F.C., Fang, W.C.: Reversible data hiding with histogram-based difference expansion for QR code applications. IEEE Trans. Consum. Electron. 57(2), 779–787 (2011)
Barrera, J.F., Vlez, A., Torroba, R.: Experimental scrambling and noise reduction applied to the optical encryption of QR codes. Opt. Express 22(17), 20268 (2014)
Information technology-Automatic identification and data capture techniques-QR Code 2005 bar code symbology specification. ISO/IEC 18004 (2006)
Sahu, R.A., Padhye, S.: Provable secure identity-based multi-proxy signature scheme. Int. J. Commun. Sys. 28(3), 497–512 (2015)
Shamir, A.: Identity-based cryptosystems and signature schemes. In: Proceedings of Advances in Cryptolog, CRYPTO 1984. LNCS, vol. 196, pp. 47-53. Springer, Heidelberg (1984)
Mittra, P., Rakesh, N.: A desktop application of QR code for data security and authentication. In: International Conference on Inventive Computation Technologies. IEEE (2017)
Purnomo, A.T., Gondokaryono, Y.S., Kim, C.S.: Mutual authentication in securing mobile payment system using encrypted QR code based on public key infrastructure. In: International Conference on System Engineering and Technology, pp. 194–198. IEEE (2017)
Aulya, R., Hindersah, H., Prihatmanto, A.S., Rhee, K.H.: An authenticated passengers based on dynamic QR code for Bandung smart transportation systems. In: Engineering Seminar. IEEE (2017)
Lu, J., Yang, Z., Li, L., Yuan, W., Li, L., Chang, C.C.: Multiple schemes for mobile payment authentication using QR code and visual cryptography. Mob. Inf. Syst. 2017, 1–12 (2017)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2018 Springer International Publishing AG
About this paper
Cite this paper
Zhang, J., Liu, SJ., Pan, JS., Ji, XR. (2018). Digital Certificate Based Security Payment for QR Code Applications. In: Krömer, P., Alba, E., Pan, JS., Snášel, V. (eds) Proceedings of the Fourth Euro-China Conference on Intelligent Data Analysis and Applications. ECC 2017. Advances in Intelligent Systems and Computing, vol 682. Springer, Cham. https://doi.org/10.1007/978-3-319-68527-4_10
Download citation
DOI: https://doi.org/10.1007/978-3-319-68527-4_10
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-319-68526-7
Online ISBN: 978-3-319-68527-4
eBook Packages: EngineeringEngineering (R0)