Dynamic Password Protocol for User Authentication

Abstract

The Internet security is no more a choice, but a priority. Even with the availability of best security tools and protocols, it is inevitable to avoid unauthorized access and cyber threats. The existing user authentication which is based on username and password fails to work against Cyber-attacks because of its static nature. A novel approach for user authentication called “Dynamic Password Protocol” is proposed, where passwords used for authentication consist of two parts one is a static password which remains static and dynamic password which changes regularly based on the user-defined parameters. These parameters refer to distinct objects which are unique to every user and are accessible by users only at the time of login, parameters defined may be a clock-based mechanism or based on the geo-location of the machine from which the user is logging in. The parameters set by one user are unknown to the other users. Hence the proposed protocol strongly protects the Internet against replay attacks, phishing attacks and other cyber-related threats by means of generating dynamic passwords that are valid for a particular period of time.