臺灣博碩士論文加值系統

身分驗證一直是資訊安全領域重要的研究議題之一，在現今高度數位化的時代，大量手持式設備包括手機與筆記型電腦，廣泛被使用在遠距辦公、數位教學與線上交易上，伴隨各項資訊安全漏洞與威脅風險的增加，一個高效率的多重要素認證（MFA）機制可擔任重要資料存取的第一道防線，在網路資訊安全防禦系統扮演著重要的角色。本論文提出一個基於QR碼提示的雙因素認證機制，用戶除了必須提供帳號/密碼，還須選擇一個編碼在認證QR code中問題的正確答案，來通過用戶身份驗證。為了驗證用戶是真人而非機器人程式，使用者必須透過執行掃描認證QR code取得認證問題，與檢視QR code上的視覺圖案取得認證問題答案的行為。這個過程可以降低資訊系統被非法入侵的可能性。經由我們的實驗顯示，所設計的認證QR code與其他常用確認真人之多重要素認證機制比較，在系統建置成本與使用效率都極具競爭力。

Identity verification is one important research topic in information security. In this highly digital era, a large number of handheld devices including mobile phones and notebook computers, are widely used in remote office, digital learning and online transactions. With the increase of vulnerabilities and threats against information security, an efficient multi-factor authentication (MFA) mechanism can serve as the first defense line for important data access. It plays an important role in the network information security system. This paper proposes a two-factor authentication scheme based on QR code prompts. In addition to providing the account name and password, the user must also select the correct answer to a question encoded in the authentication QR code in order to pass the verification process. To verify that a user is a real person and not a robot program, he/she has to scan the authentication QR code to reveal the authentication question, and then check the visual patterns on the QR code to obtain the answer. The process can reduce the possibility of illegal intrusion into the information system. Our experiments show that the designed authentication QR code is very competitive in terms of system construction cost and usage efficiency compared with other commonly used multi-factor authentication mechanisms for authenticating real people.

目錄
摘要 iii
Abstract iv
致謝 v
目錄 vi
表目錄 viii
圖目錄 ix
第一章 簡介 1
1.1 研究動機 1
1.2 研究目的 4
第二章 相關技術 5
2.1 QR碼結構 5
2.2 QR碼相關技術 8
2.3 相關研究文獻 8
第三章 所提方法 15
3.1 認證QR碼系統架構圖 15
3.2 認證QR碼 16
3.3 認證QR碼程式實作流程 17
3.4 認證QR碼讀取測試方法 18
3.5測試螢幕和設備 21
3.6 實驗流程 21
3.7 特定區域QR碼圖案讀取實驗 22
3.7.1 特定區域QR碼紅色圖形讀取實驗 22
3.7.2 特定區域QR碼綠色圖形讀取實驗 23
3.7.3 特定區域QR碼藍色圖形讀取實驗 24
3.8 混色QR碼圖案讀取實驗 25
3.9 其餘區域QR碼圖案讀取實驗 27
3.10 全部區域QR碼圖案讀取實驗 27
3.11 灰階化QR碼圖案讀取實驗 29
3.11.1 紅色圖案灰階化QR碼讀取實驗 29
3.11.2 綠色圖案灰階化QR碼讀取實驗 30
3.11.3 藍色圖案灰階化QR碼讀取實驗 30
3.12 二值化QR碼圖案讀取實驗 31
3.12.1紅色圖案二值化QR碼讀取實驗 31
3.12.2綠色圖案二值化QR碼讀取實驗 32
3.12.3藍色圖案二值化QR碼讀取實驗 32
3.12.4黃色圖案二值化QR碼讀取實驗 33
第四章 實驗結果 34
4.1 特定區域QR碼圖案讀取實驗結果 34
4.2 混色QR碼圖案讀取實驗結果 36
4.3 其餘區域QR碼圖案讀取實驗結果 37
4.4 全部區域QR碼圖案讀取實驗結果 38
4.5 灰階化QR碼圖案讀取實驗結果 39
4.6 二值化QR碼圖案讀取實驗結果 39
4.7 實驗結果總結 40
4.8 多重要素認證機制文獻總結 40
第五章 結論 42
參考文獻 43

[1] https://en.wikipedia.org/wiki/CAPTCHA
[2] QR code [online] Available at: https://www.qrcode.com/en/about/version.html
[3] ISO/IEC 18004, Information technology—automatic identification and data capture techniques—QR Code bar Code symbology specification, 2015.
[4] I. S. Reed and G. Solomon, "Polynomial Codes over certain finite fields," Journal of the Society for Industrial and Applied Mathematics,” Vol. 8, No. 2, pp. 300–304, 1960.
[5] S. Ono, K. Morinage, and S. Nakayama, "Two-dimensional barcode decoration based on real-coded genetic algorithm," IEEE Congress on Evolutionary Computation, pp. 137–146, 2008.
[6] D. Samretwit, and W. Toshihiko, "Measurement of reading characteristics of multiplexed image in QR code," 2011 Third International Conference on Intelligent Networking and Collaborative Systems, 2011.
[7] H. K. Chu, et al. "Halftone QR codes," ACM Transactions on Graphics (TOG) Vol. 32, No.6, pp. 1-8, 2013.
[8] Y. S. Lin, Y. P. Chang, and J. L. Wu, "Appearance-based QR code beautifier," IEEE Transactions on Image Processing, pp. 2198–2207, 2013.
[9] B. Muthukumar, et al. "QR code and biometric based authentication system for trains," IOP Conference Series: Materials Science and Engineering. Vol. 590. No. 1. IOP Publishing, 2019.
[10] A.A. S. AlQahtani, H. Alamlem, and J. Gourd, "Bf2fa: Beacon frame two-factor authentication," 2020 IEEE International Conference on Communication, Networks and Satellite (Comnetsat), 2020.
[11] M. Shirvanian and A. Shashank," 2D-2FA: A new dimension in two-factor authentication," Annual Computer Security Applications Conference. 2021.