Secure mobile P2P payment system using dynamic color code

Abstract

Proximity-based mobile payment systems have been dominant in the past decade. However, with the increasing popularity, comes with an increased number of reported property loss due to those systems’ vulnerabilities and poor compliances to security protocol standards. These incidents revealed some of the fundamental flaws of the technology involved as well as how it was used without proper safeguards. This project gives out a solution by integrating an original visual OOB (Out-of-band) channel using dynamic color codes that addresses some of the biggest issues found in modern leading mobile payment systems. The concept is manifested in form of a mobile payment system that consists of mobile application clients and a server. The proposed OOB channel along with the system was able to produce satisfactory result, but only under multiple steps of calibration and user corporation. There is certainly a way to go before calling it perfect, but it proved the OOB channel, under the security protocol given is absolutely secured. From observations based on the actual testing experiments, a conclusion that in near future, this mechanism is guaranteed to work perfectly is drawn. For future development directions and potential improvements idea, some are given in case this subject will be brought up again in the future as well.