Academic Document Authentication using Elliptic Curve Digital Signature Algorithm and QR Code

Theophilus Wellem - Satya Wacana Christian University, Diponegoro 52-60 Salatiga, 50711, Indonesia
Yessica Nataliani - Satya Wacana Christian University, Diponegoro 52-60 Salatiga, 50711, Indonesia
Ade Iriani - Satya Wacana Christian University, Diponegoro 52-60 Salatiga, 50711, Indonesia


Citation Format:



DOI: http://dx.doi.org/10.30630/joiv.6.2.872

Abstract


Paper-based documents or printed documents such as recommendation letters, academic transcripts, and diplomas are prone to forgery. Several methods have been used to protect them, such as watermarking, security holograms, or using paper with specific security features. This paper presents a document authentication system that utilizes QR code and ECDSA as the digital signature algorithm to protect this kind of document from counterfeiting. A digital signature is a well-known technique in modern cryptography used for providing data integrity and authentication. The idea proposed herein is to put a QR code in the printed documents where the QR code includes a digital signature. The signature can later be authenticated using the proposed system by uploading the document for authentication or scanning the document's QR code. The proposed system is particularly developed for digital signature generation and verification of students' final project approval documents as the case study. In traditional settings, the approval form is typically signed directly by the student's advisor dan co-advisor using handwritten signatures. However, using the conventional handwritten signature, the signature on the approval form can be falsified. Therefore, a digital signature generation and verification system is implemented herein to avoid handwritten signature falsification. The advisors can use this system to sign the approval form using a digital signature instead of a handwritten one. The signature is stored in a QR code and is generated using ECDSA with SHA-256 as the hash function. The proposed system is evaluated using documents (i.e., approval forms) with genuine and forged QR codes.  The evaluation results showed that the system could verify the authenticity of the approval forms, which contain genuine QR codes. The approval forms that contained forged QR codes were correctly identified.


Keywords


Digital signature; QR code; elliptic curve cryptography; authentication.

Full Text:

PDF

References


N. Dlamini, S. Mthethwa, and G. Barbour, "Mitigating the Challenge of Hardcopy Document Forgery," 2018 Int. Conf. Adv. Big Data, Comput. Data Commun. Syst. icABCD 2018, Sep. 2018, doi: 10.1109/ICABCD.2018.8465401.

A. Singhal and R. S. Pavithr, "Degree Certificate Authentication using QR Code and Smartphone," Int. J. Comput. Appl., vol. 120, no. 16, pp. 38–43, 2015.

H. A. Ahmed and J.-W. Jang, "Higher Educational Certificate Authentication System Using QR Code Tag," Int. J. Appl. Eng. Res., vol. 12, no. 20, pp. 9728–9734, 2017.

S. K. Thamer and B. N. Ameen, "A New Method for Ciphering a Message Using QR Code," Comput. Sci. Eng., vol. 6, no. 2, pp. 19–24, 2016.

R. Focardi, F. L. Luccio, and H. A. M. Wahsheh, "Usable cryptographic QR codes," Proc. IEEE Int. Conf. Ind. Technol., vol. 2018-February, pp. 1664–1669, Apr. 2018, doi: 10.1109/ICIT.2018.8352431.

A. Wibiyanto and I. Afrianto, "QR code and transport layer security for licensing documents verification," IOP Conf. Ser. Mater. Sci. Eng., vol. 407, pp. 1–8, 2018, doi: 10.1088/1757-899X/407/1/012069.

M. A. Sadikin and S. U. Sunaringtyas, "Implementing digital signature for the secure electronic prescription using QR-code based on android smartphone," Proc. - 2016 Int. Semin. Appl. Technol. Inf. Commun. ISEMANTIC 2016, pp. 306–311, Mar. 2017, doi: 10.1109/ISEMANTIC.2016.7873856.

F. F. Rochman, I. K. Raharjana, and T. Taufik, "Implementation of QR Code and Digital Signature to Determine the Validity of KRS and KHS Documents," Sci. J. Informatics, vol. 4, no. 1, pp. 8–19, May 2017, doi: 10.15294/SJI.V4I1.7198.

A. Apriansyah, F. Fauziah, and N. Hayati, “Implementasi Algoritma Reed Solomon Codes Pada Proses Encoding QR Code pada Sistem Absensi,†J. InfomediaTeknik Inform. Multimed. Jar., vol. 4, no. 2, pp. 75–80, 2019, doi: 10.30811/JIM.V4I2.1572.

F. Nuraeni, H. Agustin, I. M. Muharam, T. Informatika, and T. Tasikmalaya, “Implementasi Tanda Tangan Digital Menggunakan RSA dan SHA-512 Pada Proses Legalisasi Ijazah,†in Konferensi Nasional Sistem Informasi (KNSI) 2018, Mar. 2018, pp. 864–869.

E. Ardhianto and N. Wakhidah, “Pengembangan Metode Otentikasi Keaslian Ijasah dengan Memanfaatkan Gambar QR Code,†J. Transform., vol. 13, no. 2, pp. 35–41, Jun. 2016, doi: 10.26623/TRANSFORMATIKA.V13I2.325.

A. Suratma, A. G. P. Suratma, and A. Azis, “Tanda Tangan Digital Menggunakan QR Code dengan Metode Advanced Encryption Standard,†Techno (Jurnal Fak. Tek. Univ. Muhammadiyah Purwokerto), vol. 18, no. 1, pp. 59–68, Jun. 2017, doi: 10.30595/techno.v18i1.1482.

O. Lewis and S. Thorpe, "Authenticating Motor Insurance Documents using QR Codes," Apr. 2019, doi: 10.1109/SOUTHEASTCON42311.2019.9020614.

K. Pal and C. R. S. Kumar, "QR Code Based Smart Document Implementation Using Blockchain and Digital Signature," Adv. Intell. Syst. Comput., vol. 1174, pp. 449–465, 2021, doi: 10.1007/978-981-15-5616-6_32.

S. M. Farooq, S. M. Suhail Hussain, and T. S. Ustun, "Elliptic Curve Digital Signature Algorithm (ECDSA) Certificate Based Authentication Scheme for Advanced Metering Infrastructure," 2019 Innov. Power Adv. Comput. Technol. i-PACT 2019, Mar. 2019, doi: 10.1109/I-PACT44901.2019.8959967.

N. Teraura, I. Echizen, and K. Iwamura, "A QR Symbol with ECDSA for Both Public and Secret Areas using Rhombic Sub-cells," 2020.

C. F. Kerry and P. D. Gallagher, "Digital Signature Standard (DSS)," 2013. doi: 10.6028/NIST.FIPS.186-4.

N. Koblitz, "Elliptic Curve Cryptosystems," Math. Comput., vol. 48, no. 177, pp. 203–209, 1987.

V. S. Miller, "Use of Elliptic Curves in Cryptography," Adv. Cryptol., vol. 218, pp. 417–426, 1986.

R. Munir, Kriptografi, 1st ed. Bandung: Informatika, 2019.

D. Wave, “QR Code development story.†.

E. F. Nurdiansyah and I. Afrianto, “Implementasi QR Code Sebagai Tiket Masuk Event dengan Memperhatikan TIngkat Koreksi Kesalahan,†J. Teknol. dan Inf., vol. 7, no. 2, pp. 25–44, Sep. 2017, doi: 10.34010/JATI.V7I2.491.

ISO/IEC 18004:2015, "ISO - ISO/IEC 18004:2015 - Information technology — Automatic identification and data capture techniques — QR Code bar code symbology specification," 2015. .

"PHP QR Code - QR code generator, an LGPL PHP library.".

"GitHub - zxing/zxing: ZXing ('Zebra Crossing') barcode scanning library for Java, Android.".

"OpenSSL: Cryptography and SSL/TLS Toolkit.".