數字支付系統的未來-Google Tez和音頻快速響應 (The future of digital payment systems — Google Tez and Audio Quick Response)

Google recently marked its entry into the Indian digital payments market by introducing the payment app Tez (Hindi for fast). Since the demonetization of the Indian currency last year, India has seen a tremendous increase in the number of digital payment apps and solutions.

Google最近推出了付款應用程序Tez (快速印地語)，標志著它已進入印度數字支付市場。自去年印度貨幣取消貨幣化以來，印度的數字支付應用程序和解決方案的數量已大大增加。

Almost every bank, e-commerce company, and all major telecom providers have one or more apps that support digital payments and digital wallets.

幾乎每家銀行，電子商務公司和所有主要的電信提供商都擁有一個或多個支持數字支付和數字錢包的應用程序。

So what makes Google Tez different?

那么，什么使Google Tez與眾不同？

This is where Google Tez’s AQR-based solution sounds promising. Users can securely exchange account information using audio to initiate a transaction. And the transaction can be done with a device that has just a microphone and speaker.

這是Google Tez基于AQR的解決方案的地方聽起來很有希望。用戶可以使用音頻安全地交換帳戶信息以發起交易。交易可以通過只有麥克風和揚聲器的設備完成。

Existing digital payment systems use one or more of the following technologies to exchange account information when making transactions.

現有數字支付系統在進行交易時使用以下一種或多種技術來交換帳戶信息。

QR (Quick Response) codes
QR ( Q uick R esponse)碼
UPI ( Unified Payments Interface )
UPI( ünified P ayments 我覆蓋整個院落 )
NFC ( Near Field Communication )
NFC(N耳?Field?ommunication)

This is where Google Tez uses a new alternative, audio-based QR codes (AQR).

Google Tez在此處使用新的替代方法，即基于音頻的QR碼( AQR )。

To understand this, let’s look at the limitations of these digital payment solutions.

為了理解這一點，讓我們看一下這些數字支付解決方案的局限性。

NFC-based solutions require special hardware that supports near-field communications. Thus users with a basic handset can not use it.

基于NFC的解決方案需要支持近場通信的特殊硬件 。因此，使用基本手機的用戶無法使用它。

UPI-based solutions are a hit. However, the pain point lies in the lengthy setup process. Also the UPI is closely tied to the underlying bank that holds your account, so you might end up having one UPI address per account. Apart from this, users need to type their UPI every time a transaction is made (which for people, like me, are too lazy to do ?).

基于UPI的解決方案很受歡迎。但是，痛點在于冗長的設置過程。而且，UPI 與持有您帳戶的基礎銀行緊密相關 ，因此您可能最終每個帳戶只有一個UPI地址。除此之外，用戶每次進行交易時都需要鍵入其UPI(對于像我這樣的人來說，這太懶了？)。

QR-based solutions are the most popular, and seemingly the easiest way to initiate a transaction. All one needs to do is scan a QR code. However, again, QR code-based solutions require devices with cameras and are vulnerable to “attagging” attacks.

基于QR的解決方案是最受歡迎的，而且似乎是發起交易的最簡單方法。所有需要做的就是掃描QR碼。但是，基于QR碼的解決方案再次要求配備攝像頭的設備，并且容易受到“ 標記”攻擊 。

?This is where Google Tez’s AQR sounds promising. Audio is used to start the transaction. Its best selling part is that transactions can be completed with a simple device that has just a microphone and speaker — and isn’t that what phones used to be a decade ago?

這就是Google Tez的A QR聽起來很有希望的地方。音頻用于開始交易。其最暢銷的部分是可以使用帶有麥克風和揚聲器的簡單設備完成交易，這不是十年前的電話嗎？

Yes and no. There are audio-based data exchange apps and solutions. Here are two:

是的，沒有。有基于音頻的數據交換應用程序和解決方案。這是兩個：

Chirp, which provides data over sound solutions
Chirp ，通過聲音解決方案提供數據
Shuttl app, which provides audio boarding passes and is based on Chirp
Shuttl應用程序，基于Chirp提供音頻登機牌

In fact, we have an audio-based payment solution by ToneTag. Infosys has recently announced its partnership with ToneTag for audio-based digital solutions. (Another reason to believe audio-based payment solutions is the future. ?)

實際上，我們有ToneTag提供的基于音頻的支付解決方案。 Infosys最近宣布了與ToneTag的合作伙伴關系，用于基于音頻的數字解決方案。 (相信基于音頻的支付解決方案的另一個原因是未來。)

Using audio to generate QR codes appears to be new. (I have not yet come across an existing solution. Please correct me if I am mistaken.?)

使用音頻生成QR碼似乎是新的。 (我尚未遇到現有的解決方案。如果我弄錯了，請更正我。？)

AQR allows two nearby devices to pair up by using sound. Google Tez uses AQR for cash mode payment transfers.

AQR允許附近的兩個設備通過聲音配對。 Google Tez使用AQR進行現金模式的付款轉帳。

The app uses ultrasound audio to pair up the devices. A random audio is recorded, shuffled, encrypted, and then transmitted in short bursts using the device’s speakers. The other device captures these audio bursts by using its microphone, and then decrypting the audio to get the required data for pairing.

該應用程序使用超聲音頻來配對設備。隨機音頻會被記錄，改組，加密，然后使用設備的揚聲器以短脈沖串傳輸。另一臺設備通過使用其麥克風捕獲這些音頻突發，然后解密音頻以獲得配對所需的數據。

AQR is supposed to be more secure than the QR codes. Also, Google uses its network to detect fraudulent activities.

AQR應該比QR碼更安全。此外，Google使用其網絡來檢測欺詐活動。

At the time of the writing of this article, there is no official documentation about how AQRs are created, encrypted, and decrypted. Let’s take a look at how ToneTag uses audio to complete secure payment transactions. ToneTag’s audio-based payment solution uses the following methods to ensure secure audio-based payments:

在撰寫本文時，尚無有關如何創建，加密和解密AQR的官方文檔。讓我們看一下ToneTag如何使用音頻完成安全的支付交易。 ToneTag的基于音頻的支付解決方案使用以下方法來確保安全的基于音頻的支付：

The device first exchanges dynamic audio data to perform an audio-based handshake. This is called tokenization. Once the handshake is successful, the data is encoded into sound waves, which can then be transferred over a phone’s speakers. The data is encrypted and has an error-detection mechanism built into it. This encrypted data is then exchanged and allows devices to pair with each other. In order to complete the transaction, one-time password (OTP) and pin-based authentication are further required.

該設備首先交換動態音頻數據以執行基于音頻的握手。這稱為令牌化。 握手成功后，數據將被編碼為聲波，然后可以通過電話的揚聲器進行傳輸。數據已加密，并且內置了錯誤檢測機制。然后交換此加密數據，并允許設備相互配對。為了完成交易，還需要一次性密碼 (OTP)和基于密碼的身份驗證。

With Google Tez and Infosys partnering with ToneTag, it seems we have entered into a new era of audio-based digital payments.

通過Google Tez和Infosys與ToneTag的合作，我們似乎已經進入了基于音頻的數字支付的新時代。

Since the Google Tez app uses ultrasound frequency for AQR, the app might not work with phones that do not have ultrasound speakers or microphones. The app claims to support all smartphones.

由于Google Tez應用將超聲頻率用于AQR，因此該應用可能無法與沒有超聲揚聲器或麥克風的手機一起使用。該應用程序聲稱支持所有智能手機。

Originally published at vedify.in on September 25, 2017.

最初于2017年9月25日在vedify.in上發布。