Dynamic QR Code Payment Security via Segmented Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current payment two-dimensional code systems face security risks due to inability to distinguish between original and screenshot/photographed codes, and require two-step authentication which increases network instability and failure rates.
Innovation Solution
Generating a pair of two-dimensional bar codes where account and payment information are split and encrypted, with each code containing a key to parse the other, allowing for secure verification without two-step authentication by alternately displaying and scanning the codes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If two-step authentication is added to distinguish original two-dimensional bar code from screenshot, then payment security is improved, but network stability requirement increases and authentication failure rate increases
Solution Approach 1:
The payment verification process is segmented into two independent phases: (1) behavioral authentication during code generation that detects whether the code is original or screenshot without requiring network communication, and (2) payment verification that proceeds directly if behavioral authentication passes. This segmentation eliminates the need for two-step authentication while maintaining security by embedding security checks within the code generation process itself.
Solution Approach 2:
The system performs preliminary behavioral authentication during the code generation phase by analyzing touch patterns, holding time, and interaction characteristics before the actual payment verification occurs. This preliminary action identifies and blocks screenshot attempts in advance, preventing them from reaching the payment verification stage and eliminating the need for subsequent two-step authentication.
2Reliability
If two-step authentication is implemented, then ability to distinguish original code from screenshot is improved, but payment process time increases
Solution Approach 1:
The system performs preliminary behavioral authentication during the code generation phase by analyzing touch patterns, holding time, and interaction characteristics before the actual payment verification occurs. This preliminary action identifies and blocks screenshot attempts in advance, preventing them from reaching the payment verification stage and eliminating the need for subsequent two-step authentication.
Solution Approach 2:
For codes that pass the preliminary behavioral authentication, the system skips the intermediate two-step authentication process and proceeds directly to payment verification. This rushing through of the verification process for legitimate codes significantly reduces payment processing time while maintaining security through the initial behavioral filter.
3Reliability
If two-step authentication is added, then security against embezzlement is improved, but network stability requirement increases
Solution Approach 1:
The system performs self-service security verification by analyzing behavioral characteristics (touch patterns, holding time, interaction sequences) locally during code generation without requiring network communication. This self-service approach embeds security checks within the client-side code generation process, eliminating dependence on network stability for authentication while maintaining robust security against screenshot and embezzlement attempts.
Data Source
AI summary
A payment two-dimensional code secure payment method and system without two-step authentication. The method comprises the following steps: by means of a payment application, producing a first payment two-dimensional code and a second payment two-dimensional code, and alternately displaying the first payment two-dimensional code and the second payment two-dimensional code; respectively identifying the first payment two-dimensional code and the second payment two-dimensional code to acquire complete payment information; sending the complete payment information to a payment centre for verification; when verification is successful, the payment is complete. The present method effectively avoids the property loss incurred by users due to scanning of payment two-dimensional code pictures, and increases payment security.