QR Bill-Linked Payment Gateway for Secure Offline Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing QR code-based payment systems face challenges in offline transactions, particularly in environments like restaurants, where customers struggle to select and authenticate payments without prior knowledge of installed apps, making them vulnerable to QRishing attacks.
Innovation Solution
A QR code-based bill-linked payment gateway system that allows users to scan a QR code on their smartphone to view payment details and securely make payments through their preferred payment apps without pre-selection, using a payment server to verify and facilitate transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If a QR code is used for offline payment authentication, then payment speed is improved, but security deteriorates due to QRishing attacks
Solution Approach 1:
The system segments the QR code functionality into two distinct parts: a static QR code containing only payment amount and merchant information (without authentication credentials), and a separate dynamic authentication code generated by the payment app. This segmentation prevents QRishing attacks because the static QR code alone cannot be used for unauthorized payments - it must be combined with the dynamic authentication code that changes with each transaction.
Solution Approach 2:
The system introduces an intermediary verification mechanism where the payment server acts as a mediator between the merchant's static QR code and the user's payment authentication. The server validates the combination of static QR code information and dynamic authentication code before processing payment, preventing fraudulent transactions while maintaining fast payment speed.
2Reliability
If a payment app is pre-selected for QR code scanning, then payment reliability is improved, but ease of operation deteriorates
Solution Approach 1:
The system enables self-service by allowing users to scan and view payment details using any QR code scanner (including camera apps) without needing to pre-install or select a specific payment app. The payment app is automatically invoked only at the authentication stage, giving users flexibility in the scanning step while maintaining security through automatic app selection based on the payment method specified in the QR code data.
3Ease of operation
If payment details are hidden in the QR code, then ease of operation is improved, but loss of information worsens as users cannot verify billing details
Solution Approach 1:
The system segments information display into two stages: first, billing details (merchant name, payment amount, date) are displayed in plain text on the screen for user verification; second, the QR code itself contains only essential data for payment processing. This ensures users can review all billing information before authorizing payment, preventing information loss while maintaining ease of operation.
Data Source
AI summary
A QR code-based bill-linked PG service system and service method for enabling a payer to check a QR code-based bill with his or her smartphone and make payment through a PG linked to the bill. The system includes a service terminal for receiving billing information and requesting generation of an open bill in form of a QR code, a payment server generating the requested open bill and providing the requested open bill to the service terminal, and a smartphone-type payer terminal scanning the open bill displayed on the service terminal. The payment server verifies a payment bill linked to the open bill when the payer terminal scans the open bill, and then allows a mobile PG service to be displayed on the payer terminal such that a payer is able to make mobile payment using a service of a payment company desired by the payer.