Trusted QR code generation for financial transactions
In some embodiments, a computer-implemented method includes receiving, at an acquirer, a trust-verification-use-case-specific root certificate from a certificate authority of a payment processing network, the trust-verification-use-case-specific root certificate being associated with a trust verification use case; receiving an intermediate certificate from the certificate authority, the intermediate certificate being associated with the trust-verification-use-case-specific root certificate; generating, at the acquirer, a key pair for identity associated with an end-entity; signing the key pair for identity associated with the end-entity using the intermediate certificate; generating a digital certificate based upon the signing of the key pair for identity; generating a secure QR code utilizing the digital certificate, identify information associated with the end-entity, and an associated certificate chain; and providing the secure QR code to the end-entity for scanning by a user of a communication device to allow the user to provide financial compensation to the end-entity.
1 . A computer-implemented method, comprising:
receiving, at an acquirer computer, a trust-verification-use-case-specific root certificate from a certificate authority of a payment processing network, the trust-verification-use-case-specific root certificate being associated with a trust verification use case;
installing, at the acquirer computer, the trust-verification-use-case-specific root certificate;
receiving, at the acquirer computer, an intermediate certificate from the certificate authority, the intermediate certificate being associated with the trust-verification-use-case-specific root certificate;
installing, at the acquirer computer, the intermediate certificate;
after installing the intermediate certificate, configuring, by the acquirer computer, the acquirer computer to use the intermediate certificate to communicate with the payment processing network by testing a network connection between the acquirer computer and the payment processing network and determining that the network connection is secure and functioning;
generating, at the acquirer computer, a key-pair-for-identity associated with an end-entity;
signing, at the acquirer computer, the key-pair-for-identity associated with the end-entity using the intermediate certificate;
generating, at the acquirer computer, a secure quick response (QR) code utilizing a digital certificate, identity information associated with the end-entity, and an associated certificate chain; and
providing the secure QR code to the end-entity for scanning by a camera of a mobile device of a user to allow the mobile device to communicate with the end-entity and allow the user to provide financial compensation to the end-entity.
2 . The computer-implemented method of claim 1 , further comprising:
generating, at the acquirer, a certificate signing request to sign the key-pair-for-identity.
3 . The computer-implemented method of claim 2 , further comprising:
signing the certificate signing request utilizing an intermediate certificate private key of the intermediate certificate.
4 . The computer-implemented method of claim 3 , wherein:
the key-pair-for-identity includes a public key and private key with identity information associated with the end-entity.
5 . The computer-implemented method of claim 4 , wherein:
the digital certificate includes the public key of the end-entity, identity information of the end-entity, and a digital signature.
6 . The computer-implemented method of claim 5 , wherein:
the associated certificate chain includes the trust-verification-use-case-specific root certificate and the intermediate certificate.
7 . The computer-implemented method of claim 6 , wherein:
the end-entity is a content provider.
8 . A system, comprising:
a processor; and
a non-transitory computer readable medium coupled to the processor, the non-transitory computer readable medium including code that:
receives a trust-verification-use-case-specific root certificate from a certificate authority of a payment processing network, the trust-verification-use-case-specific root certificate being associated with a trust verification use case;
installs the trust-verification-use-case-specific root certificate;
receives an intermediate certificate from the certificate authority, the intermediate certificate being associated with the trust-verification-use-case-specific root certificate;
installs the intermediate certificate;
after installing the intermediate certificate, configures the processor to use the intermediate certificate to communicate with the payment processing network by testing a network connection between the processor and the payment processing network and determining that the network connection is secure and functioning;
generates a key-pair-for-identity associated with an end-entity;
signs the key-pair-for-identity associated with the end-entity using the intermediate certificate;
generates a secure quick response (QR) code utilizing a digital certificate;
identifies information associated with the end-entity, and an associated certificate chain using the secure QR code; and
provides the secure QR code to the end-entity for scanning by a camera of a mobile device of a user to allow the mobile device to communicate with the end-entity and allow the user to provide financial compensation to the end-entity.
9 . The system of claim 8 , wherein:
the code generates a certificate signing request to sign the key-pair-for-identity.
10 . The system of claim 9 , wherein:
the code utilizes an intermediate certificate private key of the intermediate certificate to sign the certificate signing request.
11 . The system of claim 10 , wherein:
the key-pair-for-identity includes a public key and private key with identity information associated with the end-entity.
12 . The system of claim 11 , wherein:
the digital certificate includes the public key of the end-entity, identity information of the end-entity, and a digital signature.
13 . The system of claim 12 , wherein:
the associated certificate chain includes the trust-verification-use-case-specific root certificate and the intermediate certificate.
14 . The system of claim 13 , wherein:
the end-entity is a content provider.