数字支付系统的未来-Google Tez和音频快速响应 (The future of digital payment systems — Google Tez and Audio Quick Response)

Google recently marked its entry into the Indian digital payments market by introducing the payment app Tez (Hindi for fast). Since the demonetization of the Indian currency last year, India has seen a tremendous increase in the number of digital payment apps and solutions.

Google最近推出了付款应用程序Tez (快速印地语)，标志着它已进入印度数字支付市场。自去年印度货币取消货币化以来，印度的数字支付应用程序和解决方案的数量已大大增加。

Almost every bank, e-commerce company, and all major telecom providers have one or more apps that support digital payments and digital wallets.

几乎每家银行，电子商务公司和所有主要的电信提供商都拥有一个或多个支持数字支付和数字钱包的应用程序。

So what makes Google Tez different?

那么，什么使Google Tez与众不同？

This is where Google Tez’s AQR-based solution sounds promising. Users can securely exchange account information using audio to initiate a transaction. And the transaction can be done with a device that has just a microphone and speaker.

这是Google Tez基于AQR的解决方案的地方听起来很有希望。用户可以使用音频安全地交换帐户信息以发起交易。交易可以通过只有麦克风和扬声器的设备完成。

Existing digital payment systems use one or more of the following technologies to exchange account information when making transactions.

现有数字支付系统在进行交易时使用以下一种或多种技术来交换帐户信息。

QR (Quick Response) codes
QR ( Q uick R esponse)码
UPI ( Unified Payments Interface )
UPI( ünified P ayments 我覆盖整个院落 )
NFC ( Near Field Communication )
NFC(N耳˚FieldÇommunication)

This is where Google Tez uses a new alternative, audio-based QR codes (AQR).

Google Tez在此处使用新的替代方法，即基于音频的QR码( AQR )。

To understand this, let’s look at the limitations of these digital payment solutions.

为了理解这一点，让我们看一下这些数字支付解决方案的局限性。

NFC-based solutions require special hardware that supports near-field communications. Thus users with a basic handset can not use it.

基于NFC的解决方案需要支持近场通信的特殊硬件 。因此，使用基本手机的用户无法使用它。

UPI-based solutions are a hit. However, the pain point lies in the lengthy setup process. Also the UPI is closely tied to the underlying bank that holds your account, so you might end up having one UPI address per account. Apart from this, users need to type their UPI every time a transaction is made (which for people, like me, are too lazy to do ?).

基于UPI的解决方案很受欢迎。但是，痛点在于冗长的设置过程。而且，UPI 与持有您帐户的基础银行紧密相关 ，因此您可能最终每个帐户只有一个UPI地址。除此之外，用户每次进行交易时都需要键入其UPI(对于像我这样的人来说，这太懒了？)。

QR-based solutions are the most popular, and seemingly the easiest way to initiate a transaction. All one needs to do is scan a QR code. However, again, QR code-based solutions require devices with cameras and are vulnerable to “attagging” attacks.

基于QR的解决方案是最受欢迎的，而且似乎是发起交易的最简单方法。所有需要做的就是扫描QR码。但是，基于QR码的解决方案再次要求配备摄像头的设备，并且容易受到“ 标记”攻击 。

?This is where Google Tez’s AQR sounds promising. Audio is used to start the transaction. Its best selling part is that transactions can be completed with a simple device that has just a microphone and speaker — and isn’t that what phones used to be a decade ago?

这就是Google Tez的A QR听起来很有希望的地方。音频用于开始交易。其最畅销的部分是可以使用带有麦克风和扬声器的简单设备完成交易，这不是十年前的电话吗？

Yes and no. There are audio-based data exchange apps and solutions. Here are two:

是的，没有。有基于音频的数据交换应用程序和解决方案。这是两个：

Chirp, which provides data over sound solutions
Chirp ，通过声音解决方案提供数据
Shuttl app, which provides audio boarding passes and is based on Chirp
Shuttl应用程序，基于Chirp提供音频登机牌

In fact, we have an audio-based payment solution by ToneTag. Infosys has recently announced its partnership with ToneTag for audio-based digital solutions. (Another reason to believe audio-based payment solutions is the future. ?)

实际上，我们有ToneTag提供的基于音频的支付解决方案。 Infosys最近宣布了与ToneTag的合作伙伴关系，用于基于音频的数字解决方案。 (相信基于音频的支付解决方案的另一个原因是未来。)

Using audio to generate QR codes appears to be new. (I have not yet come across an existing solution. Please correct me if I am mistaken.?)

使用音频生成QR码似乎是新的。 (我尚未遇到现有的解决方案。如果我弄错了，请更正我。？)

AQR allows two nearby devices to pair up by using sound. Google Tez uses AQR for cash mode payment transfers.

AQR允许附近的两个设备通过声音配对。 Google Tez使用AQR进行现金模式的付款转帐。

The app uses ultrasound audio to pair up the devices. A random audio is recorded, shuffled, encrypted, and then transmitted in short bursts using the device’s speakers. The other device captures these audio bursts by using its microphone, and then decrypting the audio to get the required data for pairing.

该应用程序使用超声音频来配对设备。随机音频会被记录，改组，加密，然后使用设备的扬声器以短脉冲串传输。另一台设备通过使用其麦克风捕获这些音频突发，然后解密音频以获得配对所需的数据。

AQR is supposed to be more secure than the QR codes. Also, Google uses its network to detect fraudulent activities.

AQR应该比QR码更安全。此外，Google使用其网络来检测欺诈活动。

At the time of the writing of this article, there is no official documentation about how AQRs are created, encrypted, and decrypted. Let’s take a look at how ToneTag uses audio to complete secure payment transactions. ToneTag’s audio-based payment solution uses the following methods to ensure secure audio-based payments:

在撰写本文时，尚无有关如何创建，加密和解密AQR的官方文档。让我们看一下ToneTag如何使用音频完成安全的支付交易。 ToneTag的基于音频的支付解决方案使用以下方法来确保安全的基于音频的支付：

The device first exchanges dynamic audio data to perform an audio-based handshake. This is called tokenization. Once the handshake is successful, the data is encoded into sound waves, which can then be transferred over a phone’s speakers. The data is encrypted and has an error-detection mechanism built into it. This encrypted data is then exchanged and allows devices to pair with each other. In order to complete the transaction, one-time password (OTP) and pin-based authentication are further required.

该设备首先交换动态音频数据以执行基于音频的握手。这称为令牌化。 握手成功后，数据将被编码为声波，然后可以通过电话的扬声器进行传输。数据已加密，并且内置了错误检测机制。然后交换此加密数据，并允许设备相互配对。为了完成交易，还需要一次性密码 (OTP)和基于密码的身份验证。

With Google Tez and Infosys partnering with ToneTag, it seems we have entered into a new era of audio-based digital payments.

通过Google Tez和Infosys与ToneTag的合作，我们似乎已经进入了基于音频的数字支付的新时代。

Since the Google Tez app uses ultrasound frequency for AQR, the app might not work with phones that do not have ultrasound speakers or microphones. The app claims to support all smartphones.

由于Google Tez应用将超声频率用于AQR，因此该应用可能无法与没有超声扬声器或麦克风的手机一起使用。该应用程序声称支持所有智能手机。

Originally published at vedify.in on September 25, 2017.

最初于2017年9月25日在vedify.in上发布。