Animated QR Code Payment Security via Frame Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
QR code-based mobile payments are vulnerable to theft and manipulation, as they can be easily scanned and used by unauthorized parties, posing a significant risk to users, especially with the widespread adoption of QR codes in China.
Innovation Solution
The system breaks down a QR code into a sequence of animation frames, which are scanned and reassembled by a cashier device using an air-gapped sequencer, ensuring secure payment processing by filtering out duplicate frames and requiring a hex encoded checksum or Base64 value for validation, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If QR code is used for mobile payment, then payment convenience is improved, but security vulnerability increases
Solution Approach 1:
The QR code is segmented into multiple sequential frames that must be captured in order. Instead of a single static QR code that can be easily copied, the payment code is divided into a sequence of frames (e.g., 30 frames at 30fps for a 1-second animation), making it impractical for unauthorized parties to steal and reuse the complete code.
Solution Approach 2:
The QR code transitions from a static image to a dynamic animation sequence. The animated QR code changes over time with each frame, requiring the cashier device to capture multiple sequential frames and reassemble them. This dynamic nature prevents unauthorized replication since a screenshot of a single frame is insufficient for payment.
2Reliability
If QR code is broken into animation frames, then security is improved, but device complexity increases
Solution Approach 1:
The air-gapped sequencer automatically performs the complex tasks of capturing screenshots, converting them to base64 format, splitting frames, and playing the animation sequence without requiring user intervention. The system self-manages the entire animated QR code generation and playback process, reducing the burden on users despite the increased underlying complexity.
Solution Approach 2:
The air-gapped sequencer acts as an intermediary device between the mobile payment app and the cashier device. It handles the complex processing of converting QR codes to animated sequences, while maintaining air-gap isolation for security. The cashier device similarly acts as an intermediary by capturing frames and reassembling them without direct network connection to the payment app.
3Reliability
If air gap isolation is implemented, then security is improved, but communication efficiency decreases
Solution Approach 1:
The system replaces traditional network-based communication with a mechanical/optical transmission method. Instead of transmitting data electronically over networks (which would be efficient but insecure), the QR code information is transmitted by displaying it as an animated sequence that is captured by the camera of the cashier device. This substitutes electronic communication with an optical/mechanical process that inherently provides air-gap isolation.
Data Source
AI summary
A mobile computing system comprises a transitory memory storing QR code animation information, wherein the QR code animation information comprises reassembling QR codes from a plurality of animation frames. A mobile payment provider generates a QR code, wherein the QR code authorizes a payment transaction between a shopper and a merchant. The QR code is split into a plurality of frames for animation display. The plurality of frames is reassembled to obtain a second QR code. The second QR code is provided to the mobile payment provider. The mobile payment provider generates information to enable the merchant to conduct the payment transaction with the shopper on the second device, wherein the information uniquely identifies the merchant account and ties the payment transaction to the shopper device. Further, the mobile payment provider provides the transactional information to the merchant.