This New Signing Technology Could Stop QR Code Scams—That is, If Apple and Google Get Onboard
Scanning a QR code is as simple as clicking a picture, therefore, they have become widely utilized engrossing an individuals attention when utilized at various stages. Unfortunately, like everything else in the world, QR codes also face fraudulent activities. The same applies for countries like India which have a rising rate of digital transactions. Fraudulent QR codes have already caused mayhem by making it’s way through parking lots in US and UK, where they managed to hoodwink people into parting with their financial details.
Emerging Dangers and Alerts
Internationally, authorities are raising their concerns about QR scams. A few days back, The US Federal trade commission warned everyone to change their passwords, especially if they have unwittingly logged into a wrong web portal. As appealing as it sounds, a form of phishing that revolves around mailing out malicious QR codes aims to capture passwords, has been warned against by Switzerland’s national security agency too, this process has been termed as ‘quishing’ has made waves recently.
Despite the measures that can be taken, researchers from the University of Rochester worked on something that would drastically change the approach towards QR codes, the Self-Authenticating Dual-Modulated QR (SDMQR) code.
Enhancing Security with SDMQR Codes
Rather than blocky QR codes, SDMQR codes differ in design by having elliptical shapes. This new design offers several key advantages:
- Built-in verification: A code’s content cannot be engaged with unless its digital signature has been verified prior.
- Offline validation: Users are able to verify a QR code’s authenticity without an internet connection.
- No additional apps necessary: Existing SDMQR code scanners can SDMQR codes without needing updates to the software.
- Increased Speed Verification: There is no delay introduced when scanning.
- Modifiable appearance: Companies can modify the design as needed in order to maintain their security branding.
- Device Relay: SDMQR codes can be read by standard smartphone cameras without the need for advanced optics.
Association with already existing systems: Companies can embed their digital signatures into SDMQR codes as they register their official website URLs.
The Techniques used for SDMQR Code Technology
SDMQR codes utilize two part encryption system: A part of the code is embedded with a primary message, like a company’s URL.
The primary message is backed up with a cryptographic signature generated by a private key.
A QR code scanner reads a QR code’s contents and verifies them against the business’ public key. If the signature matches the corresponding elements, then the QR code is considered safe. As a result, users are protected from harmful codes before they interact with malicious hyperlinks.
The Integration of Apple and Google
While SDMQR codes offer an excellent solution, success is still dependent on integration. A primary challenge is building a centralized database for businesses to register and authenticate their QR codes. Apple and Google, which own the default QR code scanners for Android and iOS platforms, have the capability to develop this system.
Google and Apple acting as primary signers would make the verification process easier, allowing SDMQR scanners to only need two public keys to check authenticity. This is how Google’s verified badge system in Gmail works by assisting users to differentiate authentic emails from forged ones.
Why This Is Important
Other recommended solutions to QR code fraud had an accompanying set of problems that included tedious updates to systems or added layers of authentication. However, SDMQR codes can be integrated directly into the system without interrupting user workflow.
Moreover, the SDMQR code dual modulating technology is not only applicable to QR codes; it could also be applied to barcodes found on airline boarding passes, package shipments, and even payment systems. Banks and other financial institutions would benefit the most, since SDMQR technology could serve as an essential line of defense from phishing attempts during automated parking payments and other digital transactions.
As Google and Apple scramble to keep up with QR code fraud, they need to take the initiative and start implementing SDMQR technology. Adding this feature would make the life of billions of smartphone users safer when it comes to carrying out digital transactions and interactions.
