Secure Mobile Money 
QR code Payment 
www.jrsys.com.tw
Mobile Payments 
QR code payments 
2 
http://www.pressherald.com/2014/09/14/apple-pay-getting-a-run-for-its-money/ 
http://www.accucode.com/apple-pay-best-solution-retailers/#.VEdID1ckS7E
Compare to others 
• Secure PKI QR code contains 
– 
Not only an URL NNNooottt ooonnnlllyyy aaannn UUURRRLLL oooorrrr aaaannnn IIIIDDDD////OOOOTTTTPPPP sssshhhhoooorrrrtttt ccccooooddddeeee – 
Date:2014/10/02 
Time:11:50 
Amount: US$25 
OTP 
Consumer’s 
Digital Signature 
Patented O2O Payment 
technology 
– BBBBuuuutttt aaaallllssssoooo tttthhhheeee 3 
ttttrrrraaaannnnssssaaaaccccttttiiiioooonnnn ddddaaaattttaaaa wwwwiiiitttthhhh ddddiiiiggggiiiittttaaaallll ssssiiiiggggnnnnaaaattttuuuurrrreeee 
NNAAAANNuuuuoooottttnnnnhhhh----eeeerrrreeeennnnppppttttiiiiuuuuccccddaaddaaiittiittaaaaiiiioooottttiinniinnoooo,,,,nnnn IIII nnnnsssstttteeeeeeeeccccgggguuuurrrriiiirrrrtttteeeeyyyy ,,,,tttt rrrrCCCCaaaaoooonnnnnnnnssssffffaaaaiiiiddddcccceeeettttiiiinnnnoooottttnnnniiiiaaaalllliiiittttyyyy aaaannnndddd
QR code Offline Payment 
Before Mobile 
4 
Out-of-band 
authentication 
HHHHaaaannnnddddwwwwrrrriiiittttiiiinnnngggg 
ssssiiiiggggnnnnaaaattttuuuurrrreeee 
Most of the QR payment is not digital 
signed and user must be online 
Card can 
be Cloned 
Merchant 
cannot clone 
any card ! 
Sign a Credit 
card e-Check 
Merchant scan it
Offline Payment Process 
Consumer Merchant 
1.Select Virtual credit card 
2.Enter the amount 
3.Input PIN to make a digital signature 
4.Generate a QR code 
5 
5.Scan the QR code 
6.Make a Digital Signature 
7.Connect to Payment Gateway 
Date:2014/10/02 
Time:11:50 
Amount: US$25 
OTP 
Consumer’s 
Digital Signature 
Merchant 
cannot clone 
any card !
QR code Online Payment 
Online Shopping 
Card Not Present Transaction 
Before Mobile 
Secure ! 
6 
User scan the QR code and make a digital 
signature to confirm the payment 
Input Credit Card data 
Card Number + Expiration Date + CVV 
Dual Channels Two Factors 
digital signed transaction Risky !
Online Payment Process 
7 
Consumer 
3.User scan the checkout QR code 
4.Select virtual credit card 
5.Input PIN code to confirm the 
payment 
Merchant 
1.Merchant prepare the 
checkout data 
2.Merchant make a Digital 
Signed Checkout QR code on 
the screen 
Date:2014/10/02 
Time:11:50 
Amount: US$1,193 
OTP 
Merchant’s Digital 
Signature
The Differences 
Traditional Payment & 
QR code Payment 
Weak Strong 
8 
AAAAuuuutttthhhhoooorrrriiiizzzzaaaattttiiiioooonnnn 
jrsys 
QR code Payment 
DDDDaaaattttaaaa 
URL or a short ID/OTP 
code 
Digital Signed Transaction 
data and OTP 
AAAAuuuutttthhhheeeennnnttttiiiiccccaaaattttiiiioooonnnn 
Weak Strong 
EEEEnnnnccccrrrryyyyppppttttiiiioooonnnn 
Weak Strong 
NNNNoooonnnn-rrrreeeeppppuuuuddddiiiiaaaattttiiiioooonnnn 
No Yes 
Merchant can get Credit 
Card data 
CCCCrrrreeeeddddiiiitttt CCCCaaaarrrrdddd DDDDaaaattttaaaa 
Encrypted & Merchant 
cannot get it
Secure Tokenization Payment 
9 
No credit card 
number store in 
the eWallet 
3rd party cannot 
get consumer’s 
Credit Card Data 
All transaction is 
confirmed by 
digital signatures
10 
e-Wallet 
 NFC MicroSD 
 Bank A 
 Bank B 
 Credit Card 
 Bank C 
 Bank D 
 Debit Cards 
 Bank A 
 Bank E 
 Loyalty card 
 McDonald Card 
 Burger King Card 
 Transportation Card 
 Subway Card 
 Railway Card 
 QR Shopping 
 LBS Promotion
Payment Process
System Architecture 
Jrsys Payment Authentication Servers 
Jrsys provides: 
Mobile iOS/Android Client SDK 
Backend Authentication Servers
About jrsys 
Innovative 
Mobile and Cloud 
Security-Enable 
Company 
13
Within 4 years 
Gained 2 U.S. Patents 
5 Taiwan Patents 
14
Worldwide Awards 
One of the 7 innovative ideas to provide 
greater access to financial services from 98 
best ideas of 26 countries 
BY: MIF, IDB, CAF and GSMA 
2012 ASIA PKI 
Innovation Award 
2012 Mobile Money 
Innovation AAAAPPPPIIIICCCCTTTTAAAA AAAAwwwwaaaarrrrdddd 2222000011113333 Award SSSSeeeeccccuuuurrrriiiittttyyyy CCCCaaaatttteeeeggggoooorrrriiiieeeessss 15
Foxit Security Partner 
27,500 Millions 
PDF users 
use jrsys Security Suite 
16

Secure QR code payment

  • 1.
    Secure Mobile Money QR code Payment www.jrsys.com.tw
  • 2.
    Mobile Payments QRcode payments 2 http://www.pressherald.com/2014/09/14/apple-pay-getting-a-run-for-its-money/ http://www.accucode.com/apple-pay-best-solution-retailers/#.VEdID1ckS7E
  • 3.
    Compare to others • Secure PKI QR code contains – Not only an URL NNNooottt ooonnnlllyyy aaannn UUURRRLLL oooorrrr aaaannnn IIIIDDDD////OOOOTTTTPPPP sssshhhhoooorrrrtttt ccccooooddddeeee – Date:2014/10/02 Time:11:50 Amount: US$25 OTP Consumer’s Digital Signature Patented O2O Payment technology – BBBBuuuutttt aaaallllssssoooo tttthhhheeee 3 ttttrrrraaaannnnssssaaaaccccttttiiiioooonnnn ddddaaaattttaaaa wwwwiiiitttthhhh ddddiiiiggggiiiittttaaaallll ssssiiiiggggnnnnaaaattttuuuurrrreeee NNAAAANNuuuuoooottttnnnnhhhh----eeeerrrreeeennnnppppttttiiiiuuuuccccddaaddaaiittiittaaaaiiiioooottttiinniinnoooo,,,,nnnn IIII nnnnsssstttteeeeeeeeccccgggguuuurrrriiiirrrrtttteeeeyyyy ,,,,tttt rrrrCCCCaaaaoooonnnnnnnnssssffffaaaaiiiiddddcccceeeettttiiiinnnnoooottttnnnniiiiaaaalllliiiittttyyyy aaaannnndddd
  • 4.
    QR code OfflinePayment Before Mobile 4 Out-of-band authentication HHHHaaaannnnddddwwwwrrrriiiittttiiiinnnngggg ssssiiiiggggnnnnaaaattttuuuurrrreeee Most of the QR payment is not digital signed and user must be online Card can be Cloned Merchant cannot clone any card ! Sign a Credit card e-Check Merchant scan it
  • 5.
    Offline Payment Process Consumer Merchant 1.Select Virtual credit card 2.Enter the amount 3.Input PIN to make a digital signature 4.Generate a QR code 5 5.Scan the QR code 6.Make a Digital Signature 7.Connect to Payment Gateway Date:2014/10/02 Time:11:50 Amount: US$25 OTP Consumer’s Digital Signature Merchant cannot clone any card !
  • 6.
    QR code OnlinePayment Online Shopping Card Not Present Transaction Before Mobile Secure ! 6 User scan the QR code and make a digital signature to confirm the payment Input Credit Card data Card Number + Expiration Date + CVV Dual Channels Two Factors digital signed transaction Risky !
  • 7.
    Online Payment Process 7 Consumer 3.User scan the checkout QR code 4.Select virtual credit card 5.Input PIN code to confirm the payment Merchant 1.Merchant prepare the checkout data 2.Merchant make a Digital Signed Checkout QR code on the screen Date:2014/10/02 Time:11:50 Amount: US$1,193 OTP Merchant’s Digital Signature
  • 8.
    The Differences TraditionalPayment & QR code Payment Weak Strong 8 AAAAuuuutttthhhhoooorrrriiiizzzzaaaattttiiiioooonnnn jrsys QR code Payment DDDDaaaattttaaaa URL or a short ID/OTP code Digital Signed Transaction data and OTP AAAAuuuutttthhhheeeennnnttttiiiiccccaaaattttiiiioooonnnn Weak Strong EEEEnnnnccccrrrryyyyppppttttiiiioooonnnn Weak Strong NNNNoooonnnn-rrrreeeeppppuuuuddddiiiiaaaattttiiiioooonnnn No Yes Merchant can get Credit Card data CCCCrrrreeeeddddiiiitttt CCCCaaaarrrrdddd DDDDaaaattttaaaa Encrypted & Merchant cannot get it
  • 9.
    Secure Tokenization Payment 9 No credit card number store in the eWallet 3rd party cannot get consumer’s Credit Card Data All transaction is confirmed by digital signatures
  • 10.
    10 e-Wallet NFC MicroSD Bank A Bank B Credit Card Bank C Bank D Debit Cards Bank A Bank E Loyalty card McDonald Card Burger King Card Transportation Card Subway Card Railway Card QR Shopping LBS Promotion
  • 11.
  • 12.
    System Architecture JrsysPayment Authentication Servers Jrsys provides: Mobile iOS/Android Client SDK Backend Authentication Servers
  • 13.
    About jrsys Innovative Mobile and Cloud Security-Enable Company 13
  • 14.
    Within 4 years Gained 2 U.S. Patents 5 Taiwan Patents 14
  • 15.
    Worldwide Awards Oneof the 7 innovative ideas to provide greater access to financial services from 98 best ideas of 26 countries BY: MIF, IDB, CAF and GSMA 2012 ASIA PKI Innovation Award 2012 Mobile Money Innovation AAAAPPPPIIIICCCCTTTTAAAA AAAAwwwwaaaarrrrdddd 2222000011113333 Award SSSSeeeeccccuuuurrrriiiittttyyyy CCCCaaaatttteeeeggggoooorrrriiiieeeessss 15
  • 16.
    Foxit Security Partner 27,500 Millions PDF users use jrsys Security Suite 16