ScreenID: Enhancing QRCode Security by Utilizing Screen Dimming Feature

Quick response (QR) codes have been widely used in mobile applications, especially mobile payments, such as Alipay, WeChat, PayPal, etc due to their convenience and the pervasive built-in cameras on smartphones. Recently, however, attacks against QR codes have been reported and attackers can capture...

Full description

Saved in:
Bibliographic Details
Published in:IEEE/ACM transactions on networking 2023-04, Vol.31 (2), p.862-876
Main Authors: Xue, Guangtao, Li, Yijie, Pan, Hao, Yang, Lanqing, Chen, Yi-Chao, Ji, Xiaoyu, Yu, Jiadi
Format: Article
Language:English
Subjects:
Applications programs
Cameras
Codes
Cybersecurity
Dimming
Hardware
Image color analysis
Mobile commerce
Mobile computing
Pulse width modulation
QR codes
Screen-camera communication
Screens
secure QR code
Smart phones
Smartphones
Watermarking
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Quick response (QR) codes have been widely used in mobile applications, especially mobile payments, such as Alipay, WeChat, PayPal, etc due to their convenience and the pervasive built-in cameras on smartphones. Recently, however, attacks against QR codes have been reported and attackers can capture a QR code of the victim and replay it to achieve a fraudulent transaction or intercept private information, just before the original QR code is scanned. In this study, we enhance the security of a QR code by identifying its authenticity. We propose ScreenID, which embeds a QR code with information of the screen which displays it, thereby the QR code can reveal whether it is reproduced by an adversary or not. In ScreenID, PWM frequency of screens is exploited as the unique screen fingerprint. To improve the estimation accuracy of PWM frequency, ScreenID incorporates a model for the interaction between the camera and screen in the temporal and spatial domains. Extensive experiments demonstrate that ScreenID can differentiate screens of different models, types, and manufacturers and thus improve the security of QR codes.
ISSN:1063-6692
1558-2566
DOI:10.1109/TNET.2022.3203044