WO2013034951A1

WO2013034951A1 - System and method for generation unique secured one-time-barcode and unique quick respond code

Info

Publication number: WO2013034951A1
Application number: PCT/IB2011/053878
Authority: WO
Inventors: Wai Tung CHU
Original assignee: Chu Wai Tung
Priority date: 2011-09-05
Filing date: 2011-09-05
Publication date: 2013-03-14

Abstract

An invention Claims for a method to generate an unique One-Time-Barcode (OTB) utilizing the Quick Respond (QR) code system. The novelty of this invention based on the foundation of requiring two part operations to generated a barcode, the use of Coordinated Universal Time (UTC) as partial data being one of the key component, and explicitly generation of the barcode at the mobile phone or mobile computing device with data derives through internet connection from external system; the barcode is NOT generated and transmitted from the server computer system. With the partial formula of the first part data being encrypted and deliver securely from the platform provider or server computer system through internet connection, and combine first partial data with the optional second part data or feature at the mobile phone or mobile computing device to generate the One-Time-Barcode. By having an unique date and time of the Coordinated Universal Time (UTC) as part of the barcode data formula, the OTB is non- repeatable.

Description

SYSTEM AND METHOD FOR GENERATING AN UNIQUE SECURED ONE-TIME-BARCODE (OTB), AN UNIQUE QUICK RESPOND (QR) CODE, FOR THE PURPOSE OF A PAYMENT SYSTEM, ACCESS SYSTEM, AND ALL ELECTRONIC PROCESSING SYSTEM BY USING A MOBILE COMPUTING DEVICE OR MOBILE PHONE DEVICE WITH INTERNET CONNECTION CAPABILITY.

Technical Field

This invention relates to a method to generate an unique one-time-barcode by utilizing a free license encoding and decoding matrix barcode system, (QR) Quick Respond Code, originally developed by Denso Wave Incorporated.

With my unique method of generating (OTB) one-time-barcode, all electronic processing, payment system and access system can be done securely on a mobile computing device or mobile phone device with internet connection capability, and it also serves as an alternative to other existing method. Decoding the OTB will require a computing device with webcam, or digital camera that connects and communicates to the computer, or mobile phone with built-in camera device as barcode reader or decoder.

Background Art

Barcode is a representation of data. It is widely used for automatic identification and data capture (AIDC). Typical barcodes are produced for the purport of multiple uses, uniform identities and usually require a barcode reading device for decoding. There are also claim of uses, not popular, but in demonstration for the use as representation of people's identification, payment transaction, and access control; commonly by traditional method of manually presetting data into a computer device that is capable to generate a simple barcode.

At US Patent 5939699, a method requiring a time varying nonpredictable code generator as part of the feature enable to generate a barcode. With US patent application US-A-2003230630, barcode generation was used for representation of discount coupon. International Application Number PCT/EP2009/055235 demonstrates a method in producing a secure barcode, which requires server side computing device to prepare the data, then generate the barcode by the server computer before transmitting to a mobile phone device. International Application Number PCT/US2009/062394, where a payment system using a similar model as previously mentioned, which by having a payment provider such as the server computer that holds the account user information to generate a barcode before transmitting to the mobile device. The above mentioned method commonly demonstrates in other barcode generation system found during my patent search, which has a vulerable process in risking data loss during transmission from intrusion of the actual or final barcode. My novelty solution will solve this problem.

Technical Problem

For secure payment, access control and people identity purpose, a secured and an unique one-time-barcode (OTB) is necessary so that data information is useless when duplicated for unintentionally use. If a barcode payment system generates a barcode that can be copied, duplicated and reused; then this will not be a secured financial transaction. Another example, in barcode access control system, if an intruder is capable to duplicate or scan a barcode that contain a user's hotel room access information from their mobile phone device, then, without limitation, intruder can access into the room with the duplicated barcode. Unique one-time-barcode (OTB) generation for every entry is the most secure way to protect data loss or stolen.

Technical Solution

By developing an one-time-barcode (OTB) solution, the data representation for electronic processing will be made available for one time use only. This unique scheme with user preference to set a time limit, which will also allow this OTB to expire if necessary. Unlike other method and system, which might be found in Prior Art, the novel OTB is generated at a mobile computing device or a mobile phone device with internet connection capability. It combines an unqiue formula encrypted with user information, which delivers from the secure server side computer device for preparation of barcode generation at the mobile device, commonly a mobile phone or also known as smart phone.

Advantageous Effects

One-Time-Barcode (OTB) serves as a security system with the ability to allow data information exchange electronically. The advantage of One-Time-Barcode eliminate the potential of fraudulent duplication or reproduction of the barcode. After the unique OTB has been used in a single incident, there will not be possible to reuse or to regenerate the same barcode. If OTB was generated but not used, with the time-limit-to-expire feature, the OTB will not have authentication approval once time expired. With this OTB being invented, there will be a new trend of using barcodes. It will help to evolve many new product and system development. The one-time-barcode method will be an alternative for barcode generation.

Description of Drawings

Enclosed, you can find the drawings / flowchart related to this invention of One-Time-Barcode. The method and system demostrate the ability to produce this unique OTB based on the formula shown.

Figure 1 represent an instruction from user to request for One-Time-Barcode at their mobile phone or mobile computing device.

Figure 2 comprise a partial of the OTB unique formula, which contain a non-duplicate email address of the user. At a computer device, this email address is to be entered as part of registration process through a designated URL or website address that will connects to a platform server computer.

Figure 3 comprise a partial of the OTB unique formula, which is a Coordinated Universal Time (UTC), date and time, that makes it the most important component. At time of request by the user from their mobile phone or mobile computing device, this will be produced and attached with other data component such as email address and account number to form an unqiue sequence of data before encodeing and transmission.

Figure 4 comprise a partial of the OTB unique formula, which a finanacial account number or user's account number, will be included and attached with UTC and email address before encoding and transmission of data.

Figure 5 representing internet connection between the platform server computer and the mobile device.

Figure 6 comprise a password requirement, which was preset by the user at the computer device during registration on an account.

Figure 7 comprise a receiver account number. This is a number that each user is assigned by the network or platform provider at the time the account was registered.

Figure 8, an OTB for a payment system, user must enter a transaction amount to give to the receiver. This information will be embedded as part of the data encodes into the OTB generation.

Figure 9 comprise an optional feature for the user to set a time limit for the OTB. This information will be embedded as part of the data encodes into the OTB generation. The time expiration will funcation as part of authentication process.

Figure 10 comprise a click/push button to generate the One-Time-Code (OTB).

Figure 11 comprise an example of an One-Time-Barcode (OTB) appears on the screen of the mobile computing device or a mobile phone.

Figure 12 is an example of an one time formula to generate the One-Time-Barcode (OTB), which was based from all the data necessary to comprise.

Best Mode

The step-by-step procedure to generate the One-Time-Barcode

1) Mobile computing device or mobile phone device, also known as smart phone, with the ability for internet connection is required.

2) At a computer, user will be required to register information at a designated URL or at a webpage.

3) At a computer, user will enter their unique email address at a designated web page during acount registration.

4) At a computer, user will preset financial accounts, if desired, at a designated web page, and computer server system will also generate an unique user account number.

5) At a computer, user will set a secret password at a designated web page.

6) At a computer, user will set a PIN at a designate web page.

7) User will required to download a special program to their mobile phone device or mobile computing device, also known as phone app, which is a software contain programming languages.

8) At the mobile computing device or a mobile phone device, user will required to enter their email address and password to initailly setup the phone app.

9) At the mobile computing device or a mobile phone device, user will enter a PIN, which was previously registered from a web page with a computer, enable to open the phone app and get connected with the computer server each time.

10) At the mobile computing device or a mobile phone device, user click on a "Request for OTB" button.

11) Platform provider or computer server will begin to formulate a the OTB.

12) Platform provider or computer server using computer programming languages with instruction to retrieve user's "email address" and to be added to the next barcode data.

13) Platform provider or computer server using computer programming languages with instruction to retrieve the "Coordinated Unverisal Time (UTC)" from the computering server's clock with UTC date and time stamped, and to be added to the next barcode data.

14) Platform provider or computer server using computer programming languages with instruction to retrieve the "financial account number or account number" and to be added to the next barcode data.

15) Next, the platform provider requires user to enter the password, which was set up by the user or account owner from registration of the account, enable to receive the encrypted data to the mobile phaone device.

16) If authentication approves, encrypted data will transmit to the mobile phone or mobile computer device. If authentication fails, connection stop, go back to step number 10 to request for OTB again.

17) This step is optional subject to the electronic system for the OTB processing. If for payment system, user will requires to enter "receiver's account number" to be added to the encrypted barcode data.

18) This step is optional subject to the electronic system for the OTB processing. If for payment system, user will requires to enter "payment transaction amount" to be added to the encrypted barcode data.

19) This step is optional subject to the electronic system for the OTB processing. User can select time for the OTB to expire, which can added to the encrypted barcode data.

20) User to push a button "generate OTB". With programming languages in the phone app at user's mobile phone, all the encrypted data will be combined and generate an unique encoded One-Time-Barcode (OTB).

21) Process of generating One-Time-Barcode (OTB) is completed and an unique QR barcode appears on the screen of the mobile phone or mobile computing device.

Mode for Invention

The method to create this unique One-Time-Barcode (OTB) is novel. By combinating the key components' data to formulate a serial chain of data and evolve into one unique data code, which does not repeat or duplicate. The key components such as [email address + Coordinated Universal Time (UTC) + account number (optional subject to industrial application) + reciever account number (optional subject to industrial application) + payment transaction amount (optional subject to industrial application) + time limit to expire the OTB]. For security, this OTB requires to be generated at the mobile computing device or a mobile phone such as smart phone device that retain an unique phone app that was registered to the user with authentication enable for the OTB generation. The partial data formula is produced by the server computer or platform provider system upon request by user through internet connection using their phone app at their mobile phone device. Then, server computer encrypts the partial formula, transmit formula data to the requester or user's mobile computing device, continue to combine additional data for OTB generation. Once the user complete entering the additional data information and push the "generate OTB" button, the process is final. An One-Time-Barcode is generated and appears on the screen of the mobile phone or mobile computing device.

Industrial Applicability

There will be a wide range of industrial application. Following are examples of applications, which can utilize the OTB technique.

For payment system, the secure barcode (OTB) representing payment data exchange during financial transaction. The OTB comprises all necessary information for the payment receiver's mobile computing device or mobile phone such as smart phone device to capture. The decoding process will require a scanner or a webcam, or a built-in camera of a smart mobile phone with internet connectivity. When the OTB is collected by the receiver's device, it will then be submitted to the platform server or payment provider to request for payment transfer from (user) payer's financial account to the payment receiver's financial account.

For access control system, partial OTB data is being transmitted by for the administrator such as a hotel operator, office security operation and transit network etc. User will receive partial OTB data and combine the additional data from their mobile phone device to generate a time limited One-Time-Barcode (OTB). Access point will require a reading or barcode capturing device such as a webcam or built-in camera on computing device. When authentication approves, access permission is allowed to the user.

For electronic redemption process, giver can generate a partial OTB to give to the receiver and combine additional data to generate an OTB for redemption purpose, such as redeeming an electronic coupon or gift voucher.

For identification system, the user will generate an OTB each time when they require to present personal profile electronically. The receiver system will be able to capture the OTB, and profile with photo appears for identity check against system data. This OTB is good for one time use with time limit control, and it must be generated from the user's mobile phone device.

Sequence List Text

SYSTEM AND METHOD FOR GENERATING AN UNIQUE SECURED ONE-TIME-BARCODE, AN UNIQUE (QR) QUICK RESPOND CODE, FOR THE PURPOSE OF A PAYMENT SYSTEM, ACCESS SYSTEM, AND ALL ELECTRONIC PROCESSING SYSTEM BY USING A MOBILE COMPUTING DEVICE OR A MOBILE PHONE DEVICE WITH INTERNET CONNECTION CAPABILITY.

The main feature of this OTB require two part secure data combination, which the server computer generate the initial formula as partial component data. Then, transmitting the initial partial data with encryption through internet connection to a mobile computing device, or a mobile phone, also known as smart phone. The second part of the formula will combine with the initial data to generate the One-Time-Barcode (OTB) at the mobile computing device or mobile phone. NO Barcode is being generated by the server computer or by the system of network provider. The OTB can only be generated at the mobile device.

Also an unique feature to make the One-Time-Barcode non-repeatable is to utilize a Coordinated Universal Time (UTC), which we convert the date and time of the UTC into a partial data formula for the barcode generation.

Claims

A method to generate an unique One-Time-Barcode (OTB) for industrial application.

(a) An unique formula which contain Coordinated Unverisal Time (UTC) converted as barcode data for non-repeatable function

(b) An unique system which combine two part formula data to produce OTB

(c) The two part formula, which the main component of the first part of the formula contain an unique user's "email address" + "Coordinated Universal Time (UTC)" that converts to data + user's "account number" that was given by platform provider at registration.

(d) The two part formula, which the main component of the second part of the formula contain "(optional) receiver account number" + "(optional) payment amount" + "(optional) time limit to expire" that converts to data, and required to enter passcode, which was entered by the user during registration process.

(e) The OTB will be generated at the mobile computing device or the mobile phone. NO barcode transmission from external system such as server computing device or system of the platform.
A method as claimed in Claim 1 wherein: user will first require to prepare the account by registering their unique email address at the provider's designated internet webpage. This URL or webpage is uniquely produced for the exclusive use of registration for OTB function. This step is required enable to complete the OTB generation.
A method as claimed in Claim 1 wherein: user will require to prepare the account by registering a security passcode to gain access into using the OTB system. This unique passcode will be required for authentication as part of the process to combine the two part formula and permission to account management. An URL or webpage is uniquely produced for the exclusive use of registration for OTB function. This step is required enable to complete the OTB generation.
A method as claimed in Claim 1 wherein: user will require to prepare the account by registration, a secure PIN must be set by the user. An URL or webpage is uniquely produced for the exclusive use of registration for OTB function. This step is required enable to complete the OTB generation.
A method as claimed in Claim 1 wherein: user will require to prepare the account by registration to retrieve an unique account number from the platform provider. This unique user account number will be use as part of the combine formula to generate OTB.
A method as claimed in Claim 1 wherein: user will required to download an application or a software that has programming languages with computing instructions to their mobile computing device or mobile phone. An unique URL or webpage of the platform provider exclusively produced for the application download function.
A method as claimed in Claim 1 wherein: user will open or launch the application as in Claim 6, only when the PIN as in Claim 4, entered by the user has authentication approval by platform system.
A method as claimed in Claim 1 wherein: user will press a "Request for OTB" button at their mobile phone device once the application as in Claim 6 is opened.
A method as claimed in Claim 1 wherein: the platform provider or server system to begin formulating the data by retrieving user's email address as in Claim 2 from database.
A method as claimed in Claim 1 wherein: the platform provider or server system to retrieve and convert the date and time of the unique Coordinated Universal Time (UTC) into barcode data.
Claim 2 will be combined with Claim 10 and combined with Claim 5 to form a chain of data for the OTB formula as in Claim 1.
A method as claimed in Claim 1 wherein: Claim 11 will be encrypted before transmission to the user's mobile computing or mobile phone device.
The passcode of Claim 3 will be required enable to recieve the encrypted data in Claim 12 to continue with the OTB generation process.
A method as claimed in Claim 1 wherein: if optional second part of data is required subject to the OTB process for the industrial application, the component of the second part of data will combine with Claim 11 upon receiving the first part of data formula transmitted from the server computer through an internet connection.
A method as claimed in Claim 1 wherein: a button will appear on the screen of the mobile phone or mobile computing device as "Generate OTB" for the user to press or click on.
A method as claimed in Claim 1 wherein: a Quick Respond (QR) code type of barcode appears on the screen of the mobile phone or mobile computing device for use, which was generated based on the unique OTB formula.
For payment system, A method as claimed in Claim 1 wherein: a receiver's account number will be required as partial OTB data.
For payment system, A method as claimed in Claim 1 wherein: a payment transaction amount as partial OTB data will be required and combined with data in Claim 17.
For payment system, A method as claimed in Claim 1 wherein: an optional time-limit expiration feature is offered as partial OTB data and will be combined with data in Claim 18.
For payment system, repeat Claim 2 to Claim13, transmit encrypted data from Claim 2 to Claim 13 through internet connection to mobile computing or mobile phone device, and combine Claim 18, and option to combine with Claim 19.
For payment system, once Claim 20 is completed, per Claim 15, a button will appear on the screen of the mobile phone or mobile computing device as "Generate OTB" for the user to press or click on.
For payment system, upon execution of Claim 21, per Claim16, a Quick Respond (QR) code type of barcode appears on the screen of the mobile phone or mobile computing device for use, which was generated based on the unique two parts OTB formula as demostrated in Claim 2 to Claim 13, and combine with Claim 17 to Claim 19.