1. Digital Certificate Based Security Payment for QR Code Applications
Jing Zhang,
Shi-Jian Liu,
Jeng-Shyang Pan,
and Xiao-Rong Ji

2. Outline Introduction Problem Statement and Preliminaries
Authenticated QR code based on Digital Signatures
Experimental results
Conclusions
Q. & A.

3. Introduction
In this increasingly interconnected world, it is the second nature for people to communicate, socialize and share information through a huge number of media platforms, often simultaneously.
A rapidly growing social interaction technology is the use of Quick Response (QR) codes as physical shortcuts to Internet resources.

4. Introduction
In the meanwhile, attacks also gain in conveniences from the popularity of QR codes, and the public should concern about the security of the widespread used QR codes.
authentication
mechanism
merchant
client

5. Contributions
An authenticated QR code generating method is proposed in this paper, digital signatures techniques are involved to ensure the authentication.
An authentication scheme is introduced, including the Certificate Authority based authentication mechanism and the way of certification based on the proposed QR code.

6. Outline Introduction Problem Statement and Preliminaries
Authenticated QR code based on Digital Signatures
Experimental results
Conclusions
Q. & A.

7. The QR standard
[1] Information technology-Automatic identication and data capture techniques-QR
Code 2005 bar code symbology specication, ISO/IEC 18004, (2006).

8. Outline Introduction Problem Statement and Preliminaries
Authenticated QR code based on Digital Signatures
Experimental results
Conclusions
Q. & A.

9. A three-phases basis workflow
digital certificate generation
authenticated QR code generation
authenticated QR code certification
The frame
can be divided into three phases. The rst phase is named the digital certicate
generation (Section 3.1), in this phase public and private keys are generated
according to a authentication mechanism, which using the Public Key Infras-
tructure (PKI) technology. The public key can be published with the designed
Ph.2
Ph.3

10. P1. Digital certificate generation
ID-based cryptography
Certification Authorities (CA)
private key
public key : Keyword (merchant's identity)

11. P2. Authenticated QR code generation

12. P3. Authenticated QR code verification

13. Outline Introduction Problem Statement and Preliminaries
Authenticated QR code based on Digital Signatures
Experimental results
Conclusions
Q. & A.

14. Environments

15. Results All forged QR codes can be detected successfully.
If the authentication fails, entrance of the web site through the URL will be forbidden, which can make sure the security of the QR code.

16. Outline Introduction Problem Statement and Preliminaries
Authenticated QR code based on Digital Signatures
Experimental results
Conclusions
Q. & A.

17. Conclusions
Aiming for guarantee the QR Code based payment security, authenticated QR codes along with both the generating and resolving methods are proposed in this paper.
Digital signatures techniques are involved to ensure the certificate information of goods delivered by QR code.
One limitation of the proposed QR codes is that, since the signature is encoded along with the original message, a much larger capacity for QR code is required comparing with the traditional one.

18. Digital Certificate Based Security Payment for QR Code Applications
Q. & A.
Digital Certificate Based Security Payment for QR Code Applications
Jing Zhang*, Shi-Jian Liu,
Jeng-Shyang Pan, and Xiao-Rong Ji