Two-Layer Secure Mechanism for Electronic Transactions

E-commerce applications allow merchants to sell the good and consumer to purchase the variety of products. Electronic transactions (e-transaction) used in e-commerce sites currently send the encrypted bank account information in text format using Secure Electronic Transaction (SET). The existing payment transaction contains encrypted information of the bank card information, the security code information, and the order information in the form of text. Quick Response code (QR code) is an image which hides the information in a 2-dimensional (2D) barcode like in steganography technique. This information can be about the product, website, payment, tracker id that links to an application. The static QR code contains only one fixed data which can be hacked in cyber-attacks. Dynamic QR code contains the unique code for the transaction created on the order creation. This paper proposes a secured two-layer mechanism for e-transactions. It proposes to use dynamic QR code as a payload for the payment transaction. The first layer is to enclose the payment information in dynamic QR code. The dynamic QR code is created with the bank information, user information, secure code and order information which is unique for an order. Second layer of security is encryption of this QR code using Secure Electronic Transaction (SET) transactions to secure the payment transaction. The receiver decrypts using the unique public key the payment information which is a 2-D QR code. This image data is decrypted to retrieve the bank information, code, user information and order information. Dynamic unique code per order which would enhance the security to reduce the vulnerability to the cyber-attacks. The two-layer secure payment transactions enhance the security two times by using dynamic QR code image as payment transaction.