Security Analysis of Mobile Authentication Using QR-Codes
Siwon Sung, Joonghwan Lee, Jinmok Kim, Jongho Mun, Dongho Won · 2015
The QR-Code authentication system using mobile application is easily implemented in a mobile device with high recognition rate without short distance wireless communication support such as NFC.This system has been widely used for physical authentication system does not require a strong level of security.The system also can be implemented at a low cost.However, the system has a vulnerability of tampering or counterfeiting, because of the nature of the mobile application that should be installed on the user's smart device.In this paper we analyze the vulnerabilities about each type of architectures of the system and discuss the concerns about the implementation aspect to reduce these vulnerabilities.