Exploiting the Error Correction Mechanism in QR Codes for Secret Sharing

Chow, Yang-Wai; Susilo, Willy; Yang, Guomin; Phillips, James G.; Pranata, Ilung; Barmawi, Ari Moesriami

doi:10.1007/978-3-319-40253-6_25

Cited by 52 publications

(55 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The use of QR codes in information security has been proposed for a variety of different purposes, such as for authenticating visual cryptography shares [22], e-voting authentication [23], digital watermarking [24], data hiding [7] and secret sharing [10,12,13]. This section presents several studies that are related to the work in this paper.…”

Section: Related Workmentioning

confidence: 99%

“…A cheater prevention mechanism was also incorporated in this approach. A different (n, n) QR code secret sharing technique was presented in Chow et al [12]. This approach also exploits the error correction feature that is a characteristic part of the QR code structure by distributing and embedding information from a secret QR code within n cover QR code shares.…”

Section: Related Workmentioning

confidence: 99%

“…There are also existing (n, n) QR code secret sharing approaches where normal looking QR codes are used [12,13]. However, (n, n) secret sharing requires that all participants must be present to recover the secret.…”

mentioning

confidence: 99%

See 2 more Smart Citations

Cooperative Secret Sharing Using QR Codes and Symmetric Keys

et al. 2018

Self Cite

View full text Add to dashboard Cite

Secret sharing is an information security technique where a dealer divides a secret into a collection of shares and distributes these to members of a group. The secret will only be revealed when a predefined number of group members cooperate to recover the secret. The purpose of this study is to investigate a method of distributing shares by embedding them into cover Quick Response (QR) codes in a secure manner using cryptographic keys. The advantage of this approach is that the shares can be disseminated over public channels, as anyone who scans the QR codes will only obtain public information. Only authorized individuals who are in possession of the required keys will be able to recover the shares. This also means that when group members cooperate to recover a secret, the group can determine the presence of an illegitimate participant if the person does not produce a valid share. This study proposes a protocol for accomplishing this and discusses the underlying security of the protocol.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Cooperative Secret Sharing Using QR Codes and Symmetric Keys

et al. 2018

Self Cite

View full text Add to dashboard Cite

show abstract

“…Solution of this problem is a challenging task that should improve existing equipment for QR code processing. Finally, decoding and visualization of stored in QR code information are provided by using Reed-Solomon error correction procedure that supports accurate data recognition even though 7%, 15%, 25%, or 30% of bits of symbol are damaged [7,17,18].…”

Section: Modern Techniques For Qr Code Detection and Recognitionmentioning

confidence: 99%

Binary Large Object-Based Approach for QR Code Detection in Uncontrolled Environments

López-Rincón

Starostenko

Alarcón-Aquino

et al. 2017

Journal of Electrical and Computer Engineering

View full text Add to dashboard Cite

Quick Response QR barcode detection in nonarbitrary environment is still a challenging task despite many existing applications for finding 2D symbols. The main disadvantage of recent applications for QR code detection is a low performance for rotated and distorted single or multiple symbols in images with variable illumination and presence of noise. In this paper, a particular solution for QR code detection in uncontrolled environments is presented. The proposal consists in recognizing geometrical features of QR code using a binary large object-(BLOB-) based algorithm with subsequent iterative filtering QR symbol position detection patterns that do not require complex processing and training of classifiers frequently used for these purposes. The high precision and speed are achieved by adaptive threshold binarization of integral images. In contrast to well-known scanners, which fail to detect QR code with medium to strong blurring, significant nonuniform illumination, considerable symbol deformations, and noising, the proposed technique provides high recognition rate of 80%-100% with a speed compatible to real-time applications. In particular, speed varies from 200 ms to 800 ms per single or multiple QR code detected simultaneously in images with resolution from 640 × 480 to 4080 × 2720, respectively.

show abstract

“…Any device equipped with a camera and QR code reader can retrieve the information encoded within a QR code. Other than for authentication, QR codes have been used for a variety of security applications including secret sharing [5] and digital watermarking [16]. While our approach does not specifically require the use of QR codes, as any method that is able to pass data to the mobile device will suffice, we chose to adopt the QR code because of its intuitiveness.…”

Section: The Qr Codementioning

confidence: 99%

Authentication and Transaction Verification Using QR Codes with a Mobile Device

Chow

Susilo

Yang

et al. 2016

Security, Privacy, and Anonymity in Computation, Communication, and Storage

Self Cite

View full text Add to dashboard Cite

User authentication and the verification of online transactions that are performed on an untrusted computer or device is an important and challenging problem. This paper presents an approach to authentication and transaction verification using a trusted mobile device, equipped with a camera, in conjunction with QR codes. The mobile device does not require an active connection (e.g., Internet or cellular network), as the required information is obtained by the mobile device through its camera, i.e. solely via the visual channel. The proposed approach consists of an initial user authentication phase, which is followed by a transaction verification phase. The transaction verification phase provides a mechanism whereby important transactions have to be verified by both the user and the server. We describe the adversarial model to capture the possible attacks to the system. In addition, this paper analyzes the security of the propose scheme, and discusses the practical issues and mechanisms by which the scheme is able to circumvent a variety of security threats including password stealing, man-in-the-middle and man-in-the-browser attacks. We note that our technique is applicable to many practical applications ranging from standard user authentication implementations to protecting online banking transactions. Abstract. User authentication and the verification of online transactions that are performed on an untrusted computer or device is an important and challenging problem. This paper presents an approach to authentication and transaction verification using a trusted mobile device, equipped with a camera, in conjunction with QR codes. The mobile device does not require an active connection (e.g., Internet or cellular network), as the required information is obtained by the mobile device through its camera, i.e. solely via the visual channel. The proposed approach consists of an initial user authentication phase, which is followed by a transaction verification phase. The transaction verification phase provides a mechanism whereby important transactions have to be verified by both the user and the server. We describe the adversarial model to capture the possible attacks to the system. In addition, this paper analyzes the security of the propose scheme, and discusses the practical issues and mechanisms by which the scheme is able to circumvent a variety of security threats including password stealing, man-in-the-middle and man-in-the-browser attacks. We note that our technique is applicable to many practical applications ranging from standard user authentication implementations to protecting online banking transactions.

show abstract

Exploiting the Error Correction Mechanism in QR Codes for Secret Sharing

Cited by 52 publications

References 24 publications

Cooperative Secret Sharing Using QR Codes and Symmetric Keys

Cooperative Secret Sharing Using QR Codes and Symmetric Keys

Binary Large Object-Based Approach for QR Code Detection in Uncontrolled Environments

Authentication and Transaction Verification Using QR Codes with a Mobile Device

Contact Info

Product

Resources

About