One-time Password Authentication Research Articles

Vulnerabilities in One Time Passwords and Protection Method Using Secret Key and Biometric Hash Code

In the present era, conducting financial transactions online is both simple and widely embraced for its convenience. However, engaging in internet-based financial transactions exposes individuals to potential threats like password attacks, malware, phishing, and other illicit activities. Recognizing these risks, many banks have enhanced security measures by incorporating One-Time Password (OTP) authentication alongside traditional login credentials. Despite these improvements, security issues persist in online transactions. To mitigate such concerns, OTPs can be delivered via SMS to the account owner's mobile number. Even with heightened security, internet banking remains susceptible to various attacks, including online phishing, Man-in-the-Middle attacks, SQL injection, and brute force attacks. To address these challenges, this proposed model introduces a Biometric mobile OTP-based transaction authentication method.

SECURE ELECTRONIC FUND TRANSFER OVER INTERNET USING DES ALGORITHM

The undertaking denoted as Secure Electronic Fund Transfer over Internet Using DES Algorithm epitomizes the fundamental concept of effectuating a secure transference of financial resources between accounts or across international borders. Traditionally, individuals engaging in fund transfers are compelled to either visit a physical banking institution or seek out a computer with internet connectivity to avail themselves of the services proffered by online banking, ensuring a dependable monetary exchange. This system stands as a paragon of efficacy, offering a fortified layer of security to safeguard these financial transactions. The web portal, accessible to a broad spectrum of end users, allows registration by furnishing requisite contact particulars and account information. The preservation of such information is executed meticulously, with the entirety of data subjected to encryption through the application of the DES Algorithm, thus fortifying the impregnability of the stored details. In contrast to numerous insecure websites, where susceptibility to data breaches looms large, this platform assuages such concerns by encrypting all pertinent information prior to its storage in the database, employing a clandestine key and cryptographic algorithm. Facilitating a payment entails a visit to the Electronic Fund Transfer (EFT) center, utilizing a singular portable card. Subsequent to the cards scanning, the user is furnished with an OTP (One Time Password), a crucial requisite for advancing through subsequent stages. The introduction of this OTP, culled from a singular usage, serves as a pivotal augmentation of security, validating the users authorization. Post successful OTP verification, the user is mandated to input account particulars and execute the fund transfer, thereby fortifying the entire process and culminating in a secure electronic fund transfer predicated on the DES Algorithm. In contemporary times, individuals find themselves frequently necessitating the transfer of financial resources between accounts. In such instances, they are compelled to either traverse to a banking institution or seek out a computing apparatus tethered to the internet to avail themselves of the services proffered by online banking, thereby ensuring a reliable conduit for fund transfers. The efficacy of this system is manifestly advantageous, streamlining the user experience to the mere input of account details. The confluence of security measures, including the application of the AES algorithm, immediate verification protocols, and consistency checks, coalesce to fortify the framework of secure electronic fund transfers. To effectuate a secure transaction, an individual need only visit an Electronic Fund Transfer (EFT) center, employing a singular portable card to facilitate an instantaneous transfer. The utilization of the DES algorithm in this mechanism assures the user of a secure transaction, swiftly executed. Following the scanning of the users card, a Short Message Service (SMS) is expeditiously dispatched, encapsulating a unique One Time Password (OTP). The user, in a testament to heightened security, is mandated to input this OTP, thereby fortifying the transaction. Subsequent to the OTP authentication, the user proceeds to input encrypted account details, safeguarded by the AES algorithm before traversing the network. This comprehensive system thereby guarantees the security of electronic fund transfers through the utilization of AES.Contemporary financial institutions, cognizant of the burgeoning opportunities within the electronic domain, have adeptly capitalized on the potentialities of the internet by developing robust payment systems tailored to diverse payment service requisites KEYWORDS: AES, DES, OTP, Encryption, EFT, ATM

Online Voting System Using Aes Algorithm with OTP Validation

This project introduces the integrity of the electoral process and faces increasing challenges, primarily due to limited means of voter identification, which often rely solely on physical voter identification cards. As a result, vulnerability to fraudulent election practices has increased. To address these concerns, our project introduces an innovative solution that uses both Android and web applications to securely store and verify voter identities. The system incorporates a robust One-Time Password (OTP) authentication mechanism that uses the voter's unique ID for login and cross-checks with a centralized database. Admin-generated OTPs provide an additional layer of verification, thereby improving system security. This streamlined process not only speeds up voter verification but also reduces voting queue time, promising a more efficient and secure voting experience

Advanced interdisciplinary techniques for revolutionized government ration dispensing system using IoT

The Indian Government is providing grains to those in need at affordable prices through a process known as the Public Distribution System. However, the current distribution methods employed in the public distribution system rely on manual processes, which may lead to errors, be time-consuming, and foster corruption. To address these issues, the proposed work employs Advanced Interdisciplinary Techniques such as RFID cards and readers to authenticate ration cardholders and ensure precise ration dispensing, significantly reducing inaccuracies and fraudulent activities. Furthermore, it incorporates a GSM-based mechanism with OTP authentication, adding an extra layer of security and efficiency. The GSM module sends a one-time password (OTP) to the user’s registered mobile number before dispensing rations, ensuring that only authorized individuals receive their entitled goods. Customers can select the goods they need from the allocation provided by the Government, and the amount will be automatically deducted from their RFID card based on the goods selected. A microcontroller manages the motor and relay to dispense items, while an alarm system alerts in cases of incorrect OTP entries, effectively deterring unauthorized access to rations. This system promises to make the ration distribution process more efficient, transparent, and accountable. Incorporating Advanced Interdisciplinary Techniques for Revolutionized Government Ration Dispensing System Using IoT.

AODVMO: A Security Routing Protocol using One-Time Password Authentication Mechanism based on Mobile Agent

Ad hoc On-demand Distance Vector (AODV) routing protocols is one of the most popular reactive protocol used for Mobile Ad hoc Network and is a target of many Denial-of-Service attack types. In this article, we propose a solution for Initialization and Providing the OTP based on Mobile Agent (IPOM). We also propose a Security Routing Protocol using One-Time Password Authentication Mechanism based on Mobile Agent (AODVMO) by extending the original AODV protocol and integrating IPOM solution. Analysis results confirm that AODVMO can prevent almost current routing protocol attack types, such as Blackhole / Sinkhole, Grayhole, Whirlwind, and Wormhole types. Using NS2, we evaluate the packet overhead for providing OTP, the security performance on random waypoint network topology under Blackhole attacks and the effect of security mechanism to the original protocol. Simulation results show that the proposed solution works well, the performance of AODVMO is good under Blackhole attacks, and slightly reduced when integrating the security mechanism in scenarios without attacks.

An efficient two-factor authentication scheme based on negative databases: Experiments and extensions

With the rapid development of network communication technology, identity authentication based on smart cards is one of the most common two-factor authentication schemes. In some real-world applications, timeliness is another challenge besides security and privacy because of the frequent logon and logoff or data updating. Presently, two-factor authentication schemes based on elliptic curve cryptography (ECC) are efficient. They are based on asymmetric encryption algorithms. But the time efficiency can be improved by hash-based methods, such as Negative databases (NDB) inspired by the artificial immune system. A one-time password authentication scheme based on NDBs is efficient, but it does not achieve the functions of mutual authentication and password changing, nor resists stolen-verifier attacks.In this paper, we propose an efficient two-factor authentication scheme based on NDBs. With this scheme, the password changing function is achieved, and the properties of uncertain form of negative databases can reduce the frequency of data updating. As the proposed scheme is a hash function based one, it has fewer calculation steps and higher time efficiency, compared with the authentication schemes based on asymmetric encryption algorithms such as ECC. This scheme also resists the majority of attacking behaviours, such as password-guessing attacks and man-in-the-middle attacks. Experimental results verify the time efficiency of this proposed scheme, and its security is analysed as well.

Применение метода идеальной точки для поиска наилучшего способа аутентификации в корпоративных информационных системах

Nowadays, various information systems, including enterprise ones, are becoming increasingly popular. Many of these systems store sensitive data of their users. Basically, this data is protected only by a login and a password, which today can no longer provide a high level of security and guarantee the safety of the data. Along with the development of information systems, methods and tools that attackers can use to get hold of confidential information are also evolving. It is not uncommon to hear news that some of the large companies have leaked its users' personal data. So, in order to minimize the risk of compromising user data, it is worth taking a more careful approach to selecting a method of authenticating users in the system. Aim. To determine the most appropriate method of authentication in enterprise information systems with the help of a mathematical approach and taking into account certain criteria. Materials and methods. The following types of authentication were considered: reusable password authentication, TOTP (Time-based one-time password authentication), SMS-based authentication, biometric authentication, OpenID, SAML (Security Assertion Markup Language). The Pareto set method and the ideal point method were used to determine the most preferable authentication method to implement. Results. In the article, the authors describe the authentication methods considered, the algorithm of their work, and diagrams of their interaction. Using the ideal point method, SAML was determined to be the most appropriate authentication method.

A novel OTP based tripartite authentication scheme

PurposeBecause of the continued use of mobile, cloud and the internet of things, the possibility of data breaches is on the increase. A secure authentication and authorization strategy is a must for many of today’s applications. Authentication schemes based on knowledge and tokens, although widely used, lead to most security breaches. While providing various advantages, biometrics are also subject to security threats. Using multiple factors together for authentication provides more certainty about a user’s identity; thus, leading to a more reliable, effective and more difficult for an adversary to intrude. This study aims to propose a novel, secure and highly stable multi-factor one-time password (OTP) authentication solution for mobile environments, which uses all three authentication factors for user authentication.Design/methodology/approachThe proposed authentication scheme is implemented as a challenge-response authentication where three factors (username, device number and fingerprint) are used as a secret key between the client and the server. The current scheme adopts application-based authentication and guarantees data confidentiality and improved security because of the integration of biometrics with other factors and each time new challenge value by the server to client for OTP generation.FindingsThe proposed authentication scheme is implemented on real android-based mobile devices, tested on real users; experimental results show that the proposed authentication scheme attains improved performance. Furthermore, usability evaluation proves that proposed authentication is effective, efficient and convenient for users in mobile environments.Originality/valueThe proposed authentication scheme can be adapted as an effective authentication scheme to accessing critical information using android smartphones.

A Transparent Immutable and More Secured Voting System Using Blockchain

Blockchain is a cryptocurrency system with a transaction record of several computers in a peer-to-peer network. Blockchain In this paper, we propose a transparent, immutable, and more secured voting system using blockchain that collectively approaches security and cost issues. In Ballot voting, there is no security, immutability between the voter and the system. The proposed system uses blockchain technology to increase the efficiency of the voting system. Here the algorithm used is blockchain which includes a private key and public key encryption, SHA-256, Merkle hashing tree, and for security, one-time password (OTP) authentication can be done. It permits the voter to vote from any place, which increases the overall attendance percentage. The proposed system gives improved security and manages several data in the blockchain. In this system, we proposed security voting by using blockchain technology. In the existing system easy to vote for the ones who have not voted? I, vote fraudulent is happening on every century, some securities have been implemented but in parallel fraudulent is also increasing.

TOTP Moving Target Defense for sensitive network services

Edge computing is crucial for many of the new 5G business vertical use-cases, such as Industry 4.0 robots, safety-critical communications, and highly-efficient smart grids. However, the tighter integration of such impactful businesses into previously core network operations raises significant security, trustworthiness, and reliability issues. A business vertical must not compromise the Edge platform to other business verticals. Likewise, the vertical Network Services (NSs) entrusted to the Edge should not be compromisable by adversary action. Inspired by the existing Internet Services Two-Factor Authentication (2FA) systems, we propose a Moving Target Defense (MTD) mechanism that protects sensitive NSs using a port mutation akin to a seamless Time-based One-Time Password (TOTP) authentication. Our architecture leverages Software-Defined Networking (SDN) to perform the mutations, having the option of working exclusively as a Virtual Network Function (VNF) that can be instantiated on-demand, or in conjunction with OpenFlow hardware-accelerated switches for smarter resource usage. The straightforward Proof-of-Concept implementation showed the approach was viable, with good forwarding plane performance (exceeding the current Network Interface Controllers capabilities), and effective at stopping the unauthorized interactions with the NS being protected. Because the TOTP approach depends on time and there is commonly occurring jitter (e.g., network), the Threat Detection must make a trade-off between minimizing false-positives (too many alarms) and having false-negatives (attempts that go unreported). We have struck a balance that reduces the probability of a rogue probe reaching the NS to nearly 0.0045%, while the probability of stopping an attack but not generating the alarm is approximately 2%. Future work, such as adaptive delay compensation or the use of AI/ML, may further improve the effectiveness of the solution.

Quantum challenge-response identification using single qubit unitary operators

In challenge-response authentication, the claimants are required to prove that they are legitimate users while minimizing the exposure of their confidential information. We propose a quantum challenge-response identification protocol using single qubit unitary operators that utilizes the mechanism of challenge-response, unlike most existing protocols that use (one-time) password authentication. We utilized the commutation relations of single qubit unitary operators to design this protocol that ensures the security of confidential information during identification in a quantum computing environment. For security analysis, we estimated the average fidelity of two quantum states after performing operations with the unitary operators based on the random numbers generated by two users. Subsequently, we evaluated the amount of information acquired by an eavesdropper to show that the proposed protocol is robust against impersonation and intercept-measurement attacks. Finally, we described the advantages of the protocol by comparing it with the existing quantum identification protocols.

The identity authentication of Wi-Fi system based on network security

With the wide distribution of hot spots, in order to facilitate users to access the network at anytime and anywhere, the current network technology has developed a convenient and fast hot spot sharing system and has been popularized in daily life. However, the convenience of the information society also hides network security dangers. The purpose of this paper is to study and analyze the security problems existing in current Wi-Fi sharing applications by designing two different network authentication programs. In this paper, ieeee802.1x protocol is used for wireless access, eap-tls and RADIUS bidirectional authentication mechanism to achieve the authentication of access users, and one-time password authentication technology is used in Fat AP networking mode. Aiming at the defects of S/KEY protocol, such as server impersonation and system crash, an authentication scheme combining DES and RSA algorithm is proposed and implemented. The authentication scheme in network mode retains the advantage of simple operation of static cryptography system. By adding uncertainties, the security of the authentication system can be improved. The encrypted information is used to encrypt the transmitted information to ensure the confidentiality of the information during transmission. After successful authentication, session key negotiation is completed to ensure the security of subsequent communication. This scheme has a success rate of more than 95% after the experiment, is simple in design, high in security, low in cost, and does not need the participation of the third party, which is very suitable for solving the problems of user authentication and communication confidentiality in the shared system.

Performance of Orthogonal Frequency Division Multiplexing Based Advanced Encryption Standard

Currently, there are a lot of secure communication schemes have been proposed to hide secret contents. In this work, one of the methods deploying encryption to cipher data is represented. The primary object of this project is applying Advanced Encryption Standard (AES) in communications based Orthogonal Frequency Division Multiplexing (OFDM). This article discusses the security of the method encrypting directly QAM symbols instead of input bit-stream. This leads to improving the security of transmitting data by utilization of authentication key between the mobile and base station. The archived results demonstrate that the performance of the AES-OFDM system is completely acceptable to compare with the criteria for 4G.
 Keywords:
 Orthogonal Frequency Division Multiplexing (OFDM), Advanced Encryption Standard (AES), Quadrature Amplitude Modulation (QAM), Authentication Key, Cellular Network, Encryption, Physical Layer, 4G, LTE.
 References
 [1] M.A. Jessen, “Wireless communication security: Physical-Layer techniques exploiting radio and propagation characteristics”, Wireless Information Technology and Systems (ICWITS), IEEE International Conference, 2012.[2] M. Kim, M. Lee, S. Kim, D. Won, “Weakness and Improvements of a One-time Password Authentication Scheme”, International Journal of Future Generation Communication and Networking, 2009.
 [3] Alabaichi, Ashwaq, Salih, Adnan, “Enhance security of advance encryption standard algorithm based on key-dependent S-box”, 2015, pp. 44-53.
 [4] S. Xiao, W. Gong, D. Towsley, “Secure Wireless Communication with Dynamic secrets”, IEEE INFOCOM, 2010.[5] N.U. Rehman, L. Zhang, M.Z. Hammad, “ICI cancellation in OFDM system by frequency offset reduction”, Journal of Information Engineering and Applications, 2014.
 [6] Nikita Agrawal, Neelesh Gupta, “Security of OFDM through Steganography”, International Journal of Computer Applications 121(20) (2015) 41-43.
 [7] A. Al-Dweik, M. Mirahmadi, A. Sharmi, Z. Ding, R. Hamila, “Joint Secured and Robust technique for OFDM systems”, Western University, Canada, IEEE ICC 2013.
 [8] G.R. Tsouri, D. Wulich, “Securing OFDM over Wireless Time-varying channel using subcarrier overloading with Joint signal constellations”, Hindawi Publishing Corporation, EURASIP Journal on Wireless Communication and Networking, 2009.
 [9] D. Rajaveerappa, A. Almarimi, A., “RSA/Shift secured IFFT/FFT based OFDM wireless system,” Fifth International Conference on Information Assurance and Security, 2009.
 [10] M. Hilmey, S. Elhalafwy, M. Zein Eldin, “Efficient transmission of chaotic and AES encrypted images with OFDM over an AWGN channel”, 2009 International Conference on Computer Engineering & Systems, Cairo, 2009, pp. 353-358.
 [11] B.V. Naik, N.L.K. Sai, C.M. Kumar, “Efficient transmission of encrypted images with OFDM system”, 2017 IEEE International Conference on Power, Control, Signals and Instrumentation Engineering (ICPCSI), Chennai, 2017, pp. 2383-2388.
 [12] S.M.S. Eldin, “Optimized OFDM Transmission of Encrypted Image Over Fading Channel”, An International Journal on Sensing and Imaging 15(1) (2014), pp. 1-14.
 [13] C. Akbar, H. Mahmood, Q. Minhas, I. Mustafa, “Secure AES OFDM with channel reciprocity exploitation through relative calibration”, 2016 International Conference on Open Source Systems & Technologies (ICOSST), Lahore, 2016, pp. 54-61.
 [14] Y. Liang, J. Ren, T. Li, “Secure OFDM System Design and Capacity Analysis Under Disguised Jamming”, in IEEE Transactions on Information Forensics and Security 15 (2020) 738-752.
 [15] Westlund, B. Harold, “NIST reports measurable success of Advanced Encryption Standard”,Journal of Research of the National Institute of Standards and Technology, 2002.
 [16] B. Schneier, J. Kelsey, D. Whiting, D. Wagner, C. Hall, N. Ferguson, Performance Comparison of the AES Submissions, Proceedings of the Second AES Candidate Conference, 1999.
 [17] S. He, A. Tang, H. Zhang, “A high-performance Implementation of OFDM-MIMO base-band in wireless video system”, Information Technology Journal 13 (2014), pp. 1678-1685.

Securing MQTT by Blockchain-Based OTP Authentication.

The Internet of Things is constantly capturing interest from modern applications, changing our everyday life and empowering industrial applications. Interaction and the collaboration among smart devices offer new challenges to security since they conflict with economic and energy consumption requirement constraints. On the other hand, the lack of security measures could negatively impact the concrete adoption of this paradigm. This paper focuses on the Message Queuing Telemetry Transport (MQTT) protocol, widely adopted in the Internet of Things. This protocol does not implement natively secure authentication mechanisms, which are demanded to developers. Hence, this paper proposes a novel OTP (one-time password)-authentication schema for MQTT, which uses the Ethereum blockchain to implement a second-factor out-of-band channel. The proposal enables the authentication of both local and remote devices preserving user privacy and guaranteeing trust and accountability via Ethereum smart contracts.

Multi-Factor Authentication for e-Government Services using a Smartphone Application and Biometric Identity Verification

The growing usage of smartphones and tablets has a significant impact on e-government services, according to Cisco and accounted for 59 percent of total IP traffic during 2018. In the provision of e-government services, usernames and passwords are still the most common authentication scheme. A password, however, is a weak authentication scheme, as it can easily be hacked over an insecure network connection. Therefore, a robust security solution for data in transit is becoming increasingly necessary. This paper proposes an authentication scheme that integrates multi-factor authentication procedures, a One-Time Password (OTP) and biometric authentication ("facial recognition" or "fingerprint") for the unified authentication of users before allowing them to access e-government services via a self-enrollment process.

Lightweight one‐time password authentication scheme based on radio‐frequency fingerprinting

The energy-constrained devices such as the mobile terminals and nodes of the Internet of Things make lightweight security schemes an urgent need. The traditional identity authentication techniques can provide protection for the user's privacy and information to a certain extent, but they suffer from heavy cost. Non-cryptographic authentication mechanisms based on the physical layer characteristics are new techniques, which have a higher security level. The recognition technique of radio transmitter based on radio-frequency fingerprint ( RFF ) is one of the non-cryptographic authentication techniques. The authors propose a lightweight one-time password (OTP) authentication scheme based on RFF (RFF-OTP), which is a novel cross-layer secure authentication scheme and can provide mutual authentication between the mobile terminal and server, by combining RFF recognition algorithm with a hash encryption algorithm. By theoretical analysis and Syverson and van Oorschot logic verification, they prove that the RFF-OTP scheme is simple, efficient, flexible and independent of trusted-party while it also can resist the cloning attack and satisfy the anonymity compared with the OTP authentication scheme. Besides, it only requires the password to log into the system in the authors' scheme in comparison to the OTP scheme that needs both ID and password for the same purpose.

A Secure and Efficient One-time Password Authentication Scheme for WSN

An algorithm that a user has authenticated over remote devices should be designed to consider the limitations of computation and lower power in a wireless sensor net- works. Lamport first proposed a one-time password authentication scheme which the password was different in each transaction. In this paper, according to the Lam- port's concept we propose an efficient and secure one- time password authentication scheme for wireless sensor networks.

Proposal for Optical One-time Password Authentication Using Digital Holography

A new optical one-time password (OTP) authentication method using digital holography is proposed, which enhances security strength in the authentication system. A challenge-response optical OTP algorithm based on two-factor authentication is presented using two-step phase-shifting digital holography, and two-way authentication is also performed using challenge-response handshake in both directions. Identification (ID), password (PW), and OTP are encrypted with a shared key by applying phase-shifting digital holography, and these encrypted pieces of information are verified by each party by means of the shared key. The encrypted digital holograms are obtained by Fourier-transform holography and are recorded on a CCD with 256 quantized gray-level intensities. Because the intensity pattern of such an encrypted digital hologram is distributed randomly, it guards against a replay attack and results in higher security level. The proposed method has advantages, in that it does not require a time-synchronized OTP, and can be applied to various authentication applications. Computer experiments show that the proposed method is feasible for high-security OTP authentication.

One-time password authentication scheme based on the negative database

In this paper, a novel one-time password authentication scheme based on the negative database (NDB) is proposed. The authentication data, which involve a user password and random number, are converted to an NDB before they are transmitted to the network. Recovering the original database (DB) from an NDB is an NP-hard problem. Even if the data transmitted in the network have been intercepted by an attacker, the attacker cannot recover the password due to the hardness of reversing the NDB. The proposed scheme is the first one-time password authentication scheme based on the NDB. Following the method used in this paper, the NDB can be added to other authentication schemes as an extra layer to further improve security. The proposed scheme can be adopted into other applications such as business management, network-based consumer electronics, and intelligent household systems.

One-time password authentication system with small burden for users

<b>One-time password authentication system with small burden for users</b>