Research Of The 2D Codes Generation And Certification System Based On Certificate

With the rapid development of smart mobile phone industry, people have a higher requirement of information transmission. Obviously, the 2D codes have become the perfect transmission tool especially in the field of mobile payment, security traceability, electronic documents or print magazine because of the large information capacity, high storage density, low production cost, etc. But at the same time, 2D codes have become the new ways of spreading virus because of the increasing number of user. The criminals could generate the codes with virus and trick users scan them which could cause economic losses.The present research about 2D codes security defense technology mainly includes cryptography, malicious 2D codes monitoring technology and security server verification. Encryption technology can prevent the 2D codes be cracked. Malicious 2D codes monitoring technology is doing safety assessment through mobile security software when scanning 2D codes. However, these two technologies both cannot determine whether the 2D codes can be trusted. The security server verification technology means the server complete decoding and verifying when clients scanning the 2D codes. But it could increase the burden of server when massive users scanning.Aiming at those problems above, this thesis takes the most widely used QR codes as the research object. Proposing a security 2D codes scheme with the combination of digital certificate and QR codes by using the digital certificate to complete authentication, so as to solve the credibility problems in the application of 2D codes and reduce the burden of the server. The thesis study the QR codes technology and PKI technology, analyzed the principle of identity authentication in QR code system and the key problems of how to combine QR codes technology and PKI framework, then designed a QR codes security system called “Signed_QRScanner And Decoder” and shot for SQD system. The client includes encoder and decoder. The encoder adds the digital certificate into QR codes to prove to be trusted and the decoder verifies the certificate when it scans the QR code. The server complete the certificate issued and management.After the massive tests of coding, it seems that the system can encode the QR code with digital certificate, generate the QR image rapidly and complete the verification of the certificate by scanning. The decoding process of the scheme is carried out locally on the client side, so it could not increase the burden of the server. Compared with the QR code encoding and decoding system without authentication measures, the time loss of this approach is less than 1 sec and the space loss is about 13%. SQD system can solve the problem of the credible issue in the process of 2D codes using with the digital certificate.