扫码移动支付存在的安全漏洞已成为电子支付安全迫切需要解决的问题。提出了一种基于三维成像技术的安全二维码系统。首先, 利用集成成像技术生成三维数字水印, 作为商家标识; 其次, 对标识进行基于身份的数字签名; 再次, 在菲涅耳域, 利用安全二维码系统把携带有签名信息的三维数字水印, 经过压缩编码后隐藏到二维码中。最后, 用户扫码识别并提取出隐秘数据, 同时验证签名信息, 如果验证通过, 计算重构并显示出三维数字水印图像, 经用户鉴别后确认是否支付, 完成双向认证过程。实验结果表明, 采用基于身份的数字签名技术可以有效地防止三维数字水印被篡改、伪造、无正当理由式否认等情况。所提方法不仅增强了扫码移动支付的安全性, 而且提高了系统的实时性和便捷性。多个系统参数组合作为密钥, 有效地增加了密钥维度, 拓宽了密钥空间, 增加了攻击的难度, 提高了系统安全性与稳健性。双向认证可信的扫码支付既确保了用户个人资金的安全, 也维护了商家的信誉和财产安全。

The security of electronic payment has become an urgent problem. A secure Quick Response(QR) code system was proposed based on the technology of three-dimensional(3D) imaging and 3D authentication information. Firstly, the integral imaging technology was used to generate 3D digital watermark as the logo of the merchant. Secondly, identity based digital signature was carried out. Then, in the Fresnel domain, the 3D digital watermark with signature information was carried by using a secure QR code system, which was then compressed and hidden in the QR code. Finally, the users scan QR code to identify and extract the hidden data. If the signature information of verification was confirmed by users, the algorithm of reconstruction was executed, and the 3D digital watermark images were displayed. The payments were confirmed after the users were authenticated. The process of interactive authentication was completed. According to the results of experiments, the schemes can effectively prevent the 3D digital watermark from being tamper-bent, falsified, and unjustified. The proposed method not only enhances the security of scanning mobile payment, but also improves the real-time and convenience of the system. When multiple parameters of the proposed system are combined as keys, the dimensions of keys are effectively increased. The key space is broadened. The difficulty of illegal attack is enhanced, and the safety and stability of the system are improved too. It can protect the security of personal fund, and also maintain the reputation and property security of enterprises.