1.1 Background of the Study

Digital documents such as certificates, transcripts, licenses, identity cards, and official records are widely used in educational institutions, government agencies, and business organizations. The adoption of digital technologies has transformed the way information is created, stored, managed, and shared. Compared to traditional paper-based documents, digital documents offer advantages such as easier storage, faster transmission, reduced physical storage requirements, and improved accessibility. As organizations increasingly rely on electronic records for daily operations, the need to ensure the security and authenticity of these documents has become more important. 

Despite the benefits associated with digital documents, verifying their authenticity remains a significant challenge. Many organizations continue to depend on manual verification methods, which often involve direct communication with the issuing institution through phone calls, emails, or physical visits. These procedures can be time-consuming, costly, and inefficient, particularly when verification is required urgently. In addition, the widespread availability of document editing software has made it easier for individuals to alter, duplicate, or forge digital documents, thereby increasing the risk of fraud and misrepresentation. 

Traditional document verification methods are often unable to provide immediate confirmation of a document's authenticity. Employers, institutions, and other stakeholders may experience delays while waiting for responses from issuing organizations. In some cases, verification requests may be ignored or take several days to process. Such delays can affect recruitment decisions, admission processes, business transactions, and other activities that depend on the validation of official documents. These challenges highlight the limitations of existing verification approaches and the need for more efficient alternatives. 

One technology that has been widely adopted for securing digital information is the digital signature. Digital signatures are based on cryptographic principles and are used to verify the authenticity and integrity of electronic documents. Through the use of public-key cryptography, a document can be digitally signed by an authorized issuer and later verified by any party possessing the corresponding public key. Digital signatures provide important security services, including authentication, integrity, and non-repudiation, making them suitable for document verification systems. 

Another technology that can support efficient document verification is the Quick Response (QR) code. QR codes are two-dimensional barcodes capable of storing information such as document identifiers, verification links, or other relevant data. They can be scanned using smartphones and other digital devices, providing users with quick access to online verification services. By linking a document to a secure verification platform, QR codes enable real-time validation and reduce the dependence on manual verification procedures. 

To address the challenges associated with document forgery and inefficient verification processes, this project proposes the design and implementation of a secure document verification system using QR codes and digital signatures. The proposed system will be developed as a web-based application using the PERN stack, consisting of PostgreSQL, Express.js, React.js, and Node.js. The system will employ SHA-256 hashing and RSA digital signature algorithms to ensure document integrity and authenticity, while QR codes will provide a convenient mechanism for accessing verification services. 

The proposed system is expected to provide a secure, reliable, and efficient method of verifying digital documents. By combining cryptographic techniques with QR-code-based verification, the system will help reduce document fraud, support real-time authentication, and improve confidence in the validity of digital documents. Consequently, the study contributes to ongoing efforts aimed at improving document security and verification processes in modern organizations. 

1.2 Statement of the Problem

The increasing adoption of digital documents has improved the efficiency of information storage, sharing, and management across educational institutions, government agencies, and business organizations. However, the widespread use of digital documents has also created opportunities for document forgery, unauthorized modification, and misrepresentation. Advances in document editing software have made it possible for individuals to alter certificates, transcripts, licenses, and other official records without leaving obvious signs of tampering. 

Many organizations still rely on manual document verification procedures to determine the authenticity of submitted documents. These procedures often involve contacting the issuing institution through emails, telephone calls, or physical visits. Such methods are frequently slow, time-consuming, and inefficient, especially when a large number of verification requests must be processed. The delays associated with manual verification can negatively affect admission processes, employment decisions, business transactions, and other activities that depend on the validation of official documents. 

Furthermore, existing document verification solutions are often developed for specific organizations and may not be easily adopted by other institutions. As a result, many organizations lack access to affordable and flexible systems that can provide secure and real-time verification of digital documents. In addition, the absence of effective mechanisms for detecting document tampering increases the risk of accepting forged or altered documents as genuine. 

Therefore, there is a need for a secure and efficient document verification system that can ensure document authenticity, detect unauthorized modifications, and support real-time verification. This study seeks to address these challenges through the design and implementation of a secure document verification system using QR codes and digital signatures. 

1.3 Aim and Objectives

I suggest reducing your objectives from seven to four or five because supervisors often prefer concise objectives.

Aim

The aim of this project is to design and implement a secure document verification system using QR codes and digital signatures.

Objectives

1. To design and develop a secure web-based platform for document signing and verification.

2. To implement QR code generation, SHA-256 hashing, and RSA digital signatures for document authentication and integrity verification.

3. To evaluate the effectiveness, security, and reliability of the proposed document verification system.

1.4 Research Questions

The following research questions will guide this study:

1. How can a web-based platform be designed to provide secure document signing and verification?

2. How can QR codes, SHA-256 hashing, and RSA digital signatures be implemented to ensure document authenticity and integrity?

3. How effective, secure, and reliable is the proposed document verification system in detecting document tampering and supporting real-time verification?

1.5 Significance of the Study

The significance of this study lies in its contribution to improving the security, authenticity, and reliability of digital document verification processes. By integrating QR codes and digital signatures into a web-based verification platform, the proposed system provides a secure and efficient method for validating documents while reducing the risk of forgery and unauthorized modification. 

Educational institutions will benefit from the system by having a more reliable method of issuing and verifying academic documents such as certificates, transcripts, and statements of results. The system can help reduce the circulation of forged academic credentials and simplify the verification process for students, employers, and other institutions seeking to confirm the authenticity of academic records. 

Government agencies can utilize the proposed system to improve the verification of official documents and records. The use of digital signatures and QR codes can enhance trust in electronically issued documents while reducing administrative burdens associated with manual verification procedures. This can contribute to improved efficiency and transparency in public service delivery. 

Private organizations and businesses will benefit from a secure platform for verifying documents submitted by employees, clients, suppliers, and other stakeholders. The system can assist organizations in detecting forged documents, reducing fraud-related risks, and improving confidence in business transactions that depend on document authenticity. 

Employers will benefit from faster and more reliable verification of certificates, licenses, and professional credentials presented by job applicants. Real-time verification capabilities can support more informed recruitment decisions and reduce the likelihood of employing individuals who present fraudulent documents. 

Researchers and students in the field of Computer Science and Information Security may find this study useful as a reference for future research on document authentication, digital signatures, cryptographic systems, and secure web applications. The study also demonstrates the practical application of cryptographic techniques in solving real-world security challenges. 

The general public will benefit from increased confidence in the authenticity of digital documents. Individuals and organizations will be able to verify documents quickly and conveniently through QR-code-based verification without relying solely on manual confirmation from issuing institutions. This can save time, reduce costs, and improve trust in digital document exchange. 

Overall, the study contributes to the advancement of secure digital document management by providing a practical solution for combating document forgery, supporting real-time verification, and promoting trust in electronic records and communications. 

1.6 Scope of the Study

This study focuses on the design and implementation of a secure web-based document verification system using QR codes and digital signatures. The system is intended to provide a reliable mechanism for verifying the authenticity and integrity of digital documents issued by organizations. 

The proposed system will allow authorized organizations to upload PDF documents to the platform and generate digital signatures using the RSA cryptographic algorithm. SHA-256 hashing will be used to create unique hash values for documents, enabling the detection of unauthorized modifications. A QR code containing a verification link or document identifier will be generated for each document to support quick and convenient verification. 

The system will be developed using the PERN stack, which consists of PostgreSQL, Express.js, React.js, and Node.js. User authentication and authorization will be implemented using better-auth to ensure secure access to system resources. The platform will provide functionality for document upload, digital signature generation, QR code generation, document verification, and verification record management. 

The verification process will allow users to confirm the authenticity of a document by scanning the associated QR code or accessing the verification portal. The system will compare the document's current hash value with the original signed hash value to determine whether the document has been altered. 

This study is limited to the verification of PDF documents within the proposed web-based environment. The project focuses on the implementation of RSA digital signatures, SHA-256 hashing, and QR-code-based verification as the primary security mechanisms for document authentication and integrity validation. 

1.7 Limitations of the Study

Despite the expected benefits of the proposed system, certain limitations exist within the scope of this study.

The system is limited to PDF documents and does not support other document formats such as Microsoft Word documents, spreadsheets, images, or multimedia files. Users wishing to verify documents must therefore use documents in the supported format. 

The proposed system requires internet connectivity for document verification because verification requests are processed through a web-based platform. Consequently, users may be unable to verify documents when internet access is unavailable. 

The study employs the RSA cryptographic algorithm for digital signature generation and verification. Although RSA is widely accepted and secure when properly implemented, the project does not evaluate or compare alternative digital signature algorithms such as ECDSA or EdDSA.

The system is designed as a standalone verification platform and does not integrate directly with external databases or third-party verification services operated by government agencies, educational institutions, or private organizations. Verification is therefore limited to documents managed within the proposed system. 

Furthermore, the effectiveness of the system depends on the secure management of cryptographic keys by participating organizations. Unauthorized disclosure or compromise of private keys may affect the security and trustworthiness of issued digital signatures. 

These limitations do not reduce the usefulness of the proposed system but define the boundaries within which the study is conducted. 

1.8 Definition of Terms

Digital Signature:

A cryptographic technique used to verify the authenticity and integrity of a digital document by allowing a sender to sign a document using a private key and enabling others to verify it using a corresponding public key.

QR Code (Quick Response Code):

A two-dimensional barcode used to store information such as document identifiers or verification links that can be scanned using a smartphone or other digital device.

Verification:

The process of confirming that a document is authentic, valid, and has not been altered from its original form.

Cryptography:

The science of securing information through mathematical techniques that protect data from unauthorized access, modification, or disclosure.

Public Key:

A cryptographic key that is openly shared and used to verify digital signatures or encrypt data in an asymmetric cryptographic system.

Private Key:

A confidential cryptographic key used to generate digital signatures or decrypt information. It must be kept secret by its owner.

SHA-256:

A cryptographic hash function that generates a fixed-length hash value used to verify the integrity of data and detect unauthorized modifications.

Authentication:

The process of confirming the identity of a user, system, or entity before access to resources is granted.

Authorization:

The process of determining the actions or resources that an authenticated user is permitted to access within a system.

Document Integrity:

The assurance that a document has not been altered, modified, or tampered with since its original creation or issuance.

RSA Algorithm:

A public-key cryptographic algorithm used for secure data transmission and digital signature generation and verification.

Document Verification System:

A software system designed to validate the authenticity and integrity of documents through automated verification mechanisms.

Hash Value:

A fixed-length output generated by a hash function that serves as a unique representation of data and is used to detect changes in a document.