SECURED QR CODE

PANKAJ JESWANI

INTRODUCTION

• QRCodes which Encode AES Encrypted user Information with One Time Password.

• Similarities and differences between the QRLogin systems and traditional OTP systems.

• Developments within two factor identification systems are significantly increasing the application of security systems to protect personal information.

• Our implementation is about new authentication scheme for secure OTP distribution in net banking through QR codes.

INTRODUCTONProblem Definition

• To avoid remembering username and password and also to ease

online transactions, QRLogin is developed. • The main aim is to provide secured login systems which also

perform online transactions. The QRLogin includes 2D barcode ‘QRCode’ which consists of encrypted user information with time-sensitive One Time Password (OTP) by using well known Asymmetric Encrypted Standard (AES) algorithm.

• The objective of our project is to come up with banking website and online shopping website that implement and demonstrates how QR Code can be used with Encryption algorithms to ensure data security as it provides dual security with data optimization.

INTRODUCTONRelevance of Project

• Our project “Secured QRCode” includes Encryption which changes

data or information that is normally plaintext through the usage of an algorithm so that someone must possess certain knowledge to access it.

• The bank can make Secured QR codes of Costumers which includes confidential data such as user information and one time password. This means people outside the bank cannot decode the Encrypted QR code without unique key.

INTRODUCTIONScope of the Project

• QRLogin system revolutionizes web site login and authentication. It eliminates many problems inherent in traditional login techniques.

• It is more secure as it involves AES encryption technique and it is easy to use also gives freedom from remembering so many username and password for different websites.

• The simple and straightforward SECURED QRLogin system yields a surprising array of features and benefits and can be used in various applications like e-commerce, e-retail, e-booking, e-learning and many more

BLOCK DIAGRAM

Encrypted QR-Code

Plain OTP +Key

AES Algorithm

QR Code +Key

PHPPlain OTP

Encrypted Text

KEY PROCESS

• Encryption & Decryption• QR-Code Generation• QR-Encoding• Decoding

ENCRYPTION & DECRYPTION

• A message that is completely readable and is in no way scrambled or disguised is called plaintext. Plaintext is unencrypted data. •Encryption is the process of scrambling or disguising plaintext by applying a cryptographic algorithm to produce cipher text.•Cipher text is encrypted data.•Decryption reverses the encryption process and turns cipher text back into its original plaintext form

ENCRYPTION & DECRYPTION

QR CODE GENERATION

• To create a QR code, we need string of data in this case the encrypted message.

• The method is discussed in details below:• The Encrypted file, which is created using the method AES is

now treated as the input file and the string is extracted from the file to generate the QR Code.

• Step 1: call function file_read(output_file)• Step 2: call function generate_QRCode( str[] )

QR CODE DECODING

• We here follow the reverse process of the above generateQRCode() Algorithm to detect the QR Code Image using Library Class and get back the encrypted message.

Design Approach

• PHP

• YII Framework

• XAMPP

PHP (Hypertext Pre-Processor)

PHP is a scripting language designed to fill the gap between SSI (Server Side Includes) and Perl, intended for the web environment. Its principal application is the implementation of web pages having dynamic content. PHP is currently divided into two major versions: PHP 4 and PHP5 , although PHP 4 is deprecated and is no longer developed or supplied with critical bug fixes. PHP 6 is currently under development.

YII(Yes It Is)

• Yii is an open source, object-oriented, component-based  MVC PHP web application framework. Yii is pronounced as "Yee" and it's an acronym for “Yes It Is!”

XAMPP

• XAMPP is a free and open source cross-platform web server solution stack package, consisting mainly of the Apache HTTP Server, MySQL database, and interpreters for scripts written in the PHP and Perl programming languages.

DEMONSTRATION

• Shopping Cart [Whole Demonstration]

• QR Code Auth System [QR Login System]

• QR Decoding [Decoder]

CONCLUSION

• In our project “Secured QRCode” we have proposed a secure and reliable authentication scheme for net-banking through QR code based OTPs. In recent years there has been a steep increase in the number of net-banking users.

• Hence the proposed system satisfies the high security requirements of the online us and protects them against various security attacks. Also the system does not require any technical pre-requisite and this makes it very user-friendly.

• Hence QR code proves to be versatile at the same time beneficial for both the customers in terms of security and vendors in terms of increasing their efficiency. Hence it is most widely used to advertise and market the products by most businesses.

CONCLUSION

• In future, we will like to enhance our project by creating an android application which will be used as way of retrieving OTP by just scanning a QRCode.

• It will be more easier and at the tip of the user’s fingers as all the bank transactions will be done by Smartphone which will save users time and will be more secure than traditional transaction system.

REFERENCE

Reference

Thanks

Vishal ChhabriaSagar Chawla

Pankaj Jeswani

For your valuable time and attention!

From Secure QR-Code Team