Seems like the store could use your public key to encrypt the data it uploads to your bank, they get the full data, you decrypt it. It's then just using the current channels.
But, I imagine it's easier to have the store make a temporary xml/json file on their servers, give you the QR code to access it, then you can control the data flow from then.
https://news.ycombinator.com/item?id=19903991
> I can't get my head around the fact that you are actually suggesting this. Do you want your bank to know that you buy 30-40 bottles of beer each week? Do you want them to know that you buy medicine for a terminal disease during your visit to discuss a family home loan?