The document discusses a web-based system for verifying licensing documents using QR codes and Transport Layer Security (TLS) to prevent forgery. It details the implementation of digital signatures and confirms that the combined system allows for quick and accurate verification through a mobile application or website, enhancing document security. Additionally, the configuration achieved an A+ rating for secure communications, ensuring all sessions are encrypted.

1. Irawan Afrianto, Anggi Wibiyanto
Informatics Engineering Department
UNIVERSITAS KOMPUTER INDONESIA
QR Code and Transport Layer Security
For Licensing Documents Verification
ALLPPT.com _ Free PowerPoint Templates, Diagrams and Charts
International Conference On Informatics, Engineering, Science and Technology
(INCITEST) 2018
May, 9th 2018, Grand Cokro Hotel, Bandung, Indonesia

2. Solutions
Problems
Sistem Informasi Manajemen Pelayanan Perizinan
Terpadu Satu Pintu
Introduction
Web Based System
Tools of
Licensing Services
Output is
a licensing document
No Verification featureLots of
Fake Licensing Documents
QR Code
w/ Digital. signature
Online Verification
w/ TLS-SSL

3. Implementation Of QR Code Feature
------------------------------------------------------
Results and Discussion
Back Office
A B C
D
EF
Back office menginputkan
nomor warkah dan tanggal
cetak Sistem membangkitkan
kode akses
Sistem mengabungkan
nomor warkah dan kode
akses menjadi pesan
Sistem menandatangani pesan dengan
menggunakan private key BPMPPT KBB
Sistem mengubah format signature
menjadi format base64 dan
mengabungkan signature dengan
pesan
Sistem menyandikan
QR Code perizinan
Sistem mengirimkan file
perizinan dengan QR
Code dan kode akses
Digital Signature ECDSA Algorithm
Access Code Access Restrictions
Licensing Doc.
With QR Code
QR Code
Characteristics

4. Implementation Of QR Code Feature
------------------------------------------------------
Results and Discussion
Digital Signature ECDSA Algorithm
Access Code Access Restrictions
Licensing Doc.
With QR Code
QR Code
Characteristics
MEQCIOGvARyI7rnkbi0Ab+Sb7ggvlg/jNQH2/Rfe91ybDP
+6AiDH75VasM+Euizy9Eh0PkeWU2CcPUqymVN8nopm
CNHfgw==;00408/10-17/PK/X/2016;51029408
Data Structure Of Licensing QR Code
Signature ; Document Number; Access Code

5. Implementation Of QR Code Feature
Results and Discussion
AfterBefore

6. Implementation Of TLS Feature
TLS Configurations
Results and Discussion
TLS Versions:
1, 1.1, 1.2
Key:
RSA 2048 bit
Cipher Suites Option
HSTS
Activication
“HTTP Strict
Transport Security”
TLS Implementations
Mod SSL Apache Open Port 443
On Firewall
Redirect Request
from port 80  443
Impelemented TLS
on domain
pptsp.bandungbaratkab.go.id
-----------------------------------------------------------------------------

7. Result Of QR Code
Results and Discussion
Aplikasi Mobile
Verifikasi
Perizinan
Internet
SIM PPTSP
C
D
Verifikator
B
A
F
E
Membaca QR Code, memvalidasi digital signature dan
memproses data hasil pembacaan
Mengirimkan data
hasil pembacaan ke
layanan Web
Menerima dan
memproses data
Mengirimkan data
perizinanAplikasi mobile
verifikasi perizinan
menampilkan data
perizinan
Perizinan dengan QR
Code
Verifikator membandingkan data
hasil verifikasi dan data yang
tercantum pada warkah
Verifikator membuka
aplikasi mobile verifikasi
perizinan dan memindai
QR Code

8. Result Of TLS
Results and Discussion
Internet
Verifikator
B
E
F
A
C
D
Perizinan dengan QR
Code
Browser menampilkan
data perizinan
Browser
Verifikator Mengakses halaman
verifikasi perizinan dan mengisi
formulir verifikasi
Mengirimkan
data
Mengirimkan
data perizinan
SIM PPTSP
Menerima dan
memproses data
Verifikator membaca nomor
warkah dan kode akses
Verifikator membandingkan data
hasil verifikasi dan data yang
tercantum pada warkah

9. • The addition of QR code that’s secured using digital signature made the licensing document
significantly harder to forge. Licensing document can be verified quickly and accurately by using
the mobile application or web page.
• The implementation of SSL/TSL on the web server made the communication more secure. The
configuration that implemented on the server gets A+ grade according to Qualsys SSL server
rating. All communication session is encrypted.
Conclution

10. Authors acknowledged to BPMPPT Kabupaten Bandung Barat
for supporting this research as a place for testing and
implementation of the developed system.
Acknowledgements

11. Thank You