MurQRI: Encrypted Multi-layer QR Codes for Electronic Identity Management

Abstract

Quick Response (QR) codes are widely used due to their versatility and low deployment cost. However, the existing QR code standard is ineffective for security-critical applications (e.g., electronic identity management) as the stored information can be easily exposed to unauthorized parties. Moreover, it does not provide sufficient storage capacity to employ robust encryption schemes for complex access control and authentication. In this paper, we present a novel approach of employing encrypted multi-layer QR codes, MurQRI (pronounced “Mercury”), for secure user authentication and fine-grained access control in various domains (e.g., airport and hospital). MurQRI is designed to store up to 45 kilobytes of data and protect the stored information via biometric authentication and encryption. To support fine-grained access control, we employ attribute-based encryption. We also introduce real-world applications where MurQRI can be used effectively and discuss possible methods to enhance security. © 2021, Springer Nature Switzerland AG.