Secure Element Chip Dynamic QR Code Payment Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current two-dimensional code-based payment systems lack sufficient security, particularly for merchants conducting frequent small-amount transactions, as they require camera precision and manual input, and have potential security risks if security measures are not stringent enough.
Innovation Solution
Implementing a method where a secure element chip generates and signs a dynamic two-dimensional payment code using a private key, which is verified by a public key, ensuring secure transaction processing and enhancing security through digital certificates and electronic signatures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secure element chip with digital signature authentication is implemented, then security of two-dimensional code-based transactions is improved, but device complexity increases
Solution Approach 1:
The patent introduces a secure element chip as an intermediary component between the payment system and the two-dimensional code generation process. This chip contains a private key for digital signature authentication, acting as a trusted mediator that enhances security without requiring the main device to implement complex cryptographic functions itself. The secure element chip handles the sensitive authentication operations independently.
Solution Approach 2:
The patent segments the payment system into distinct functional components: the main device that generates and displays two-dimensional codes, and the secure element chip that provides digital signature authentication. This segmentation isolates the security-critical functions in a dedicated hardware module, improving overall system security while keeping the main device relatively simple.
2Reliability
If dynamic two-dimensional codes with digital signatures are used, then transaction security is improved, but processing time increases
Solution Approach 1:
The patent implements preliminary action by pre-loading the private key into the secure element chip during device initialization or manufacturing. This preparation ensures that when a two-dimensional code needs to be generated and signed, the authentication process can proceed efficiently without delays for key generation or security verification setup.
Solution Approach 2:
The patent replaces traditional mechanical or manual verification methods with electronic digital signature authentication. Instead of manual input verification or camera-based scanning validation, the system uses cryptographic digital signatures that can be automatically verified by payment terminals, significantly reducing processing time while enhancing security.
3Measurement precision
If manual amount input is required for merchants, then transaction accuracy is improved, but ease of operation deteriorates
Solution Approach 1:
The patent implements self-service by enabling the secure element chip to automatically perform digital signature authentication on transaction data. The system autonomously handles the security verification process without requiring manual intervention from merchants, improving ease of operation while maintaining transaction accuracy through automated cryptographic validation.
Data Source
AI summary
Embodiments of the present specification provide methods and apparatuses for generating two-dimensional codes. One method comprising: receiving, by a secure element chip comprised in a two-dimensional code display device, code information comprising an account identifier of an account associated with the two-dimensional code display device; in response to obtaining a digital certificate for a private key stored in the secure element chip, signing, by the security element chip, the code information by using the private key to generate signed code information; and providing, the signed code information to the two-dimensional code display device for the two-dimensional code display device to generate and display a two-dimensional code based on the code information, wherein the two-dimensional code comprises information associated with the account identifier and changes dynamically over time.