Secure qr code service

A directory service computer comprising:

• a directory service processor;
• a communications device operably connected to the directory service processor;
• at least one input device operably connected to the directory service processor;
• at least one output device operably connected to the directory service processor;
• and
• a storage device operably connected to the directory service processor, wherein the storage device comprises instructions configured to cause the directory service processor to:
• receive a secure QR code request from a merchant device, the secure QR code request comprising an acquirer financial institution (FI)-signed certificate;
• verify the identity of a merchant based on a match between the acquirer FI-signed certificate and a stored certificate;
• identify a merchant identifier (ID);
• establish an encrypted and Pinned SSL tunnel with the merchant device;
• receive via the encrypted and Pinned SSL tunnel from the merchant device, a transaction message comprising a transaction amount, a universal unique identifier (UUID), and a transaction identifier (ID);
• generate a Hash value;
• generate a dynamic secure QR code by combining the Hash value, the transaction ID and the merchant ID;
• and
• transmit the dynamic secure QR code data to the merchant device to conduct a purchase transaction.

A method for processing a purchase transaction using a secure QR code comprising:

• receiving, by an issuer financial institution (FI) computer from a mobile device of a consumer, secure QR code data;
• transmitting, by the issuer FI computer, an issuer FI certificate to a directory service computer;
• establishing, by the issuer FI computer and the directory service computer, a trusted and Pinned SSL tunnel connection;
• transmitting, by the issuer FI computer to the directory service computer via the trusted and Pinned SSL tunnel connection, a purchase transaction message;
• receiving, by the issuer FI computer via the trusted and Pinned SSL tunnel from the directory service computer, merchant payment credentials;
• determining, by the issuer FI computer, that a transaction amount is missing;
• transmitting, by the issuer FI computer to the consumer's mobile device, a transaction amount request;
• receiving, by the issuer FI computer from the consumer's mobile device, a transaction amount;
• transmitting, by the issuer FI computer to the consumer's mobile device, a confirmation message;
• and
• conducting, by the issuer FI computer, purchase transaction processing.

An issuer financial institution (FI) computer comprising:

• an issuer FI processor;
• a communications device operably connected to the issuer FI processor;
• at least one input device operably connected to the issuer FI processor;
• at least one output device operably connected to the issuer FI processor;
• and
• a storage device operably connected to the issuer FI processor, wherein the storage device comprises instructions configured to cause the issuer FI processor to:
• receiving secure QR code data from a mobile device of a consumer;
• transmit an issuer FI certificate to a directory service computer;
• establish a trusted and Pinned SSL tunnel connection with the directory service computer;
• transmit, via the trusted and Pinned SSL tunnel connection, a purchase transaction message to the directory service computer;
• receive merchant payment credentials via the trusted and Pinned SSL tunnel from the directory service computer;
• determine that a transaction amount is missing;
• transmit a transaction amount request to the consumer's mobile device;
• receive a transaction amount from the consumer's mobile device;
• transmit a confirmation message to the consumer's mobile device;
• and
• conduct purchase transaction processing.