QR Code Transaction Verification via Out-of-Band Channel
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Online transactions are vulnerable to man-in-the-middle (MITM) attacks, where attackers intercept and modify communication between users and transaction servers, compromising transaction integrity.
Innovation Solution
The use of Quick Response (QR) codes to verify transaction details by encoding them into a QR code, which is scanned and decoded by a computing device, allowing for comparison with the original transaction details and confirmation via an out-of-band channel to prevent MITM attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If QR code verification is implemented, then transaction security is improved, but transaction processing time increases
Solution Approach 1:
The system performs preliminary actions by pre-generating and displaying the QR code with encoded transaction details before the user confirms the transaction. The user can scan and verify the QR code in advance, allowing time for verification without delaying the actual transaction execution once confirmed.
Solution Approach 2:
The QR code serves as an intermediary element that bridges the transaction initiation and confirmation stages. It encodes transaction details in a machine-readable format that can be quickly scanned and verified, providing an efficient intermediate verification step without requiring lengthy manual checks.
2Reliability
If out-of-band communication channel is used for confirmation, then authentication reliability is improved, but system complexity increases
Solution Approach 1:
The patent uses the QR code as an intermediary carrier that transports transaction verification data from the initiating device to the confirming device. This intermediary mechanism enables out-of-band verification without requiring direct peer-to-peer communication between devices, simplifying the overall system architecture.
Solution Approach 2:
The system creates a copy of the transaction verification data in QR code format that can be independently transmitted and verified through a separate communication channel. This copying approach allows the same verification information to be validated through multiple paths without duplicating the entire transaction system.
Data Source
AI summary
Embodiments of the present invention provide a method, computer program product, and computer system for verifying transactions over a network. The method includes initiating a proposed transaction with a transaction server. The transaction server provides encoded details of the proposed transaction, in the form of a QR code, to the user. The QR code is scanned using a computing device, and is decoded using an application on the computing device. A set of transaction details associated with the decoded QR code is compared with the details of the proposed transaction. The proposed transaction is then confirmed or aborted using a separate communication channel.