Time Password Research Articles

Secure and Privacy-Preserving Human Interaction Recognition of Pervasive Healthcare Monitoring

A cloud-based Artificial Intelligence (AI) service has recently empowered the Internet of Medical Things (IoMT) in many applications on the remote Human Interaction Recognition of Pervasive Healthcare Monitoring (HIR-PHM). In this work, a framework of the skeleton-based HIR-PHM under secure Edge-Fog-Cloud computing (EFCC) was proposed to manage the computation and storage resources, latency, cyber-attack, and privacy-preserving simultaneously. At the Edge, IoMT with a camera, record the human interaction as videos and sends them to the Fog, which installed a human pose estimation model, PoseNet, to convert the videos into human skeleton data. At the Cloud, a skeleton-based Spatial-Temporal Graph Convolution Network with Pairwise Adjacency Matrix (STGCN-PAM) was employed to recognize the human interaction. A Hybrid of One Time Password (OTP), Hashed Messages Authentication Code (HMAC), and symmetric cipher were employed to secure the skeleton data. The UT-Interaction dataset was used to evaluate the proposed framework. Besides, the computation performance and latency under EFCC were compared with Edge-Fog and Edge-Cloud deployments. Experimental results confirmed two major contributions: 1) the proposed framework has promising performance compared with other methods on the dataset. 2) The skeleton-based HIR-PHM with secure EFCC shows the advantages of better computation performance in terms of frame per second.

Alternative Method for OTP based Authentication in Areas with Weak Mobile Signal

Abstract: The rapid development of Internet-based applications and services has made websites a crucial part of our lives. More and more users are using online office services instead of desktop office software, online social services to engage in social activities, online information boards to post their business products, and online shopping to do their purchasing. To make all these online activities more secure One Time Password (OTP) are used. Due to weak mobile signal receiving this OTP becomes difficult.

ARJUNA: An accessible pin entry model in smartphones for persons with low vision

AbstractUser authentication is the cornerstone of providing secure access to the services in the digital ecosystem. Critical applications such as Banking use Personal Identification Number (PIN)‐based passwords and One Time Passwords (OTP), for transactions to strengthen security. However, persons with visual impairments have often been a soft target for cyber attacks as it is comparatively simpler to make them victims of various attacks. This paper proposes a model titled Accessible Robust Just‐in‐time Numerical Authentication (ARJUNA) to assist PIN entry in smartphones for people with visual impairments. This study has explored several cyber‐attacks on visually impaired users and proposed the ARJUNA model that provides a robust braille‐inspired PIN input for people with visual impairments. The proposed model is implemented as an Android application that users can easily access. Several experiments are conducted with visually impaired users to study the model's performance. The proposed ARJUNA model has shown supportive results in the user study. The robustness of ARJUNA against various attacks is also explored in this article.

Two Step Authentication System based on OTP & Gesture Recognition Based on Accelerometer

Abstract: The paper discusses the use of two step authentication system in- stead of traditional single step such as biometric, password etc. The paper discusses the disadvantages of using existing single layer security in everyday security needs. Further the paper proposes the idea how a Two-step authentication system based on pattern recognition and OTP (One Time Password) would create a more robust and secure authentication system while being cost effective and re- quiring less electronic components. The first layer of security is achieved by pattern recognition by pattern recognition we mean a user draws a pattern in air and using Arduino & ADXL35 (3-axis accelerometer) module we can deduce the pattern .The accelerometer is used to track the X,Y values obtained from the module and using these values we ascertain whether the pattern created by the user is accurate. As for the second layer we use Arduino as a random number generator & SIM7100A (4G SIM module) serves the purposes to send data to the user via SMS.

App-based detection of vulnerable implementations of OTP SMS APIs in the banking sector

Two Factor Authentication (2FA) using One Time Password (OTP) codes via SMS messages is widely used. In order to improve user experience, Google has proposed APIs that allow the automatic verification of the SMS messages without the intervention of the users themselves. They reduce the risks of user error, but they also have vulnerabilities. One of these APIs is the SMS Retriever API for Android devices. This article presents a method to study the vulnerabilities of these OTP exchange APIs in a given sector. The most popular API in the sector is selected, and different scenarios of interaction between mobile apps and SMS OTP servers are posed to determine which implementations are vulnerable. The proposed methodology, applied here to the banking sector, is nevertheless simple enough to be applied to any other sector, or to other SMS OTP APIs. One of its advantages is that it proposes a method for detecting bad implementations on the server side, based on analyses of the apps, which boosts reusability and replicability, while offering a guide to developers to prevent errors that cause vulnerabilities. Our study focuses on Spain’s banking sector, in which the SMS Retriever API is the most popular. The results suggest that there are vulnerable implementations which would allow cybercriminals to steal the users SMS OTP codes. This suggests that a revision of the equilibrium between ease of use and security would apply in order to maintain the high level of security which has traditionally characterized this sector.

Sharing Secret Colour Images with Embedded Visual Cryptography Using the Stamping Algorithm and OTP Procedure

Finding a way to ensure the safety of media is becoming increasingly common in the modern world as digital media usage increases. Visual cryptography (VC) offers an efficient method for sending images securely. Images that have been protected using visual encryption can be decoded using features of human vision. Emails are not a highly safe method of exchanging private data because someone else can quickly weaken the content. In the visual cryptography technique, we presented for colour pictures, the divided shares are enclosed in additional pictures using stamping. Using a random number generator, the shares are created. Visual cryptography schemes (VCS) are a method of encoding pictures that conceals the secret information which is present in images. A secret image is encrypted using a straightforward visual cryptography technique by splitting it into n shares, and the stamping operation is carried out by overlapping k shares. It can be beneficial for hiding a secret image. There is a chance that employing cryptography for information exchange could cause security problems because the process of decryption of simple visual cryptographic algorithms can be completed by the human eye. To address this issue, we are using the OTP procedure. In the past, static ID and passwords were employed, making them susceptible to replay and eavesdropping attacks. One Time Password technology, which generates a unique password each time, is utilized to solve this issue. The suggested approach strengthens the security of the created transparencies by applying an envelope to each share and employing a stamping technique to address security vulnerabilities that the previous methods had, such as pixel expansion and noise.

Radio Frequency Identification Based Ration Distribution System

Ration card plays a vital role for the household details such as to get gas connection, family member details, it acts as address proof etc. In this paper, we have proposed a smart ration card system using Radio Frequency Identification (RFID) Technique and IoT to prevent the malpractices and corruption in the current ration distribution system. In this system conventional ration card will be replaced by a unique RFID tag. This RFID tag will be verified at the fair price shop for the authentication of the user. The user’s identity will be verified by microcontroller which is connected to an Amazon Web Services (AWS) database. For added security One Time Password (OTP) is also sent to user’s registered mobile number which needs to be entered in the system. If user is found to be authentic then monthly quota of the ration available for the user is displayed. After successful transaction the database will be updated stating the ration content delivered to the user. This system will require very less human efforts for operation and is also very secure. By implementing this system government can keep track of all the delivered ration content very easily. Keywords- RFID; IoT, Microcontroller, AWS, OTP

One Time Password based Mutual Text Authentication

Many applications in the internet using Password for identify users. So, this password must be strong and safe to avoid unauthorized users. The critical issue in many applications such as web-sites and data base systems is password authentication code (PAC). In this paper, PAC between two parties to confirm password authentication between them based mutual text authentication has presented. Two factors is the best solution in this field. But to be more secure and to be more efficient a legitimate user needs to make sure about his partner to ensure their communications should use another method without need more costs and avoid plurality of algorithms. So, this solution uses mutual text authentication as new solution which the text is predetermined by users. This method is considered new in this field, as this method tries to make the password highly secure in front of unauthorized users and to make the process of accessing information specific only to the actual authorized users. When analysing this method, we find that it has many characteristics such as the confidentiality of the session key and privacy, in addition to the exchange of authentication between the two parties to ensure that others do not interfere.

Bank Locker Authentication System using Facial Recognition

Security and Authentication of individuals is necessary for our daily lives especially in Bank lockers. A smart digital door lock system for bank automation is equipment that uses digital information such as a user’s data and face recognition as the method for authentication in the system. In this system the bank will collect the face imprints of each person for accessing the lockers. Only authenticated people can recover the money, documents from the lockers as faces are stored for the individual identity of a person. For facial recognition, this project uses the CNN algorithm. In this project, only authenticated user can access the lockers as faces are stored for the individual identity of a person. Facial recognition alone cannot determine whether the person is real or not. Therefore, liveness detection is implemented. In liveness detection, the system detects if it interacts with a real person or a spoof artefact used by other person such as a face photo. To detect whether the person is live or not the project uses eye blink detection. In this system the owner of a particular locker needs to authenticate his/her identity by verifying their face following with an One Time Password authentication feature. Here the person will receive an OTP received on their registered mobile number, proceeding with it; the valid one will allow the owner to access the particular locker whilst incorrect will not.

USER AUTHENTICATION USING EYE-BLINK PASSWORD

Personal identification numbers (PINS) are used to authenticate a user for security purpose. In order to authenticate himself the user should physically input the PIN, which might be susceptible to password cracking via shoulder surfing or thermal tracking. Authenticating a PIN with hands-off eye blinks PIN entry techniques, on the opposite hand, offers a safer password entry option by not leaving any physical footprints behind. User authentication using eye-blink password refers to finding the attention blinks in sequential image frames, and generation of PIN. This paper presents an application with three layer authentication system that are face detection, PIN entry by eye blink and OTP (One Time Password) to avoid thermal tracking attacks and shoulder surfing.

Multi-layer Anti-Theft System with an Intruder System

Abstract: People are more concerned about the safety of their valuables like jewelry, money, important documents, etc. which is why safe deposit boxes are the safest place to keep them. The advent of rapidly growing technologies enables users to operate high security systems with electronic identification options. In this work, a design of a multilayer security system is proposed. The safety concern parameters like user password, RF identification, and fingerprint recognition, use of one time password and a motion detection and alert system are in place. An email notification of the motion detection image near the safe may also be received by a user. Our system may be considered as a useful multi layered security anti-theft product.

Fuzzy Authentication System for Online Transaction Fraud Detection Using Geo Location

In the current days, there is an extensive use of online transaction of information from one place to another place and daily, it is incrementing as an exponential growth. Simultaneously, online activities are also performed by the hackers and thus incrementing the online fraud. Therefore, the present research work is an attempt to minimize online fraudulent activities especially for the financial sectors by implementing the different authentication and authorization schemes at the different levels. In the present work authentication scheme has been proposed by implementing the secure One Time Password (OTP) transmission and Personal Identification Number (PIN) which are based on Global Positioning System (GPS) where transaction is performed then GPS has collected the location details from where the transaction has performed and the location of phone in which OTP is received. The concept of distance has calculated with the both GPS locations and used as a authentication factor. Client Financial Control Application (CFCA) is also responsible for authentication for the online transaction which ables to allow or deny transaction based on account status and fuzzy rule based expert system is used to authenticate the distance, transaction time and other parameters while transaction is performed. The main objective of this paper is to provide security for online transactions and to keep track for online fraudulent transaction.

Digital Innovation and Transformation

Digitalization is the process for change in business strategies to provide and to fulfill better outcomes with the help of advanced digital technologies. Digital transformation is to create a new or improve the existing business to meet the goal of customers. This digital innovation has affected each area of business for example from healthcare or stock marketing. Due to easy accessibility and 24 X 7 availability, it is more accepted and popular among all sectors. Classical example for digital innovation in healthcare sector is wearable healthcare devices. Patients are more aware of their own readings and want it to record it for their own safety. Earlier the patient is used to visit at clinic and get it checked once a year or whenever something went wrong. But because of the easy technology access, it’s easy to get information on online. And because of this patient becoming more aware and health cautious too. Latest example is pandemic covid19. Before this device pulse oximeter was not known in publicly, but now every home has one pulse oximeter. Other fields are banks, stock marketing, industries. Banks are now adopted systems such as OTP (One Time Password), blockchain, UPI (Unified Payment Interface), because of which all transactions are easy, hassle free, and more quick, transparent as compared to traditional methods of visiting banks and doing all paperwork. So, this is digital innovation, and this is transforming the world towards new era. Artificial Intelligence is also now a days helping many sectors like health care systems. Like wise artificial intelligence early diagnosis is possible and bad prognosis is prevented. Now this artificial intelligence is also one of the examples of digital innovation and transformation of world towards the betterment. Revolutionary changes are happening due to innovations of various technologies. All these technologies are helping to improve business or industry or organization in every aspect.

Online Voting System with Face Recognition and One Time Password

Online Voting System with Face Recognition and One Time Password

Modified Adhoc On-Demand Distance Vector for Trust Evaluation And Attack Detection

Recently, Wireless Sensor Network (WSN) becomes most potential technologies for providing improved services to several data gathering and tracking applications. Because of the wireless medium, multi-hop communication, absence of physical protectivity, and accumulated traffic, WSN is highly vulnerable to security concerns. Therefore, this study explores a specific type of DoS attack identified as a selective forwarding attack where the misbehaving node in the network drops packet on a selective basis. It is challenging to determine if packet loss is caused by a collision in the medium access path, poor channel quality, or a selective forwarding assault. Identifying misbehaving nodes at the earliest opportunity is an acceptable solution for performing secure routing in such networks. As a result, in this study effort, we present a unique Modified Ad Hoc On-Demand Distance Vector (AODV) Routing protocol depending upon the One time password (OTP) method that employs the RSA algorithm. Finally, a trust evaluation process determines which approach is the most optimal. According to the simulation findings of the suggested routing protocol and comparison with existing routing protocols provided in this article, the proposed work is both efficient and cost-effective.

A review of short message service protocol

There are many ways to send and receive an electronic message, but SMS is more popular and nowadays used for one time password (OTP) as a part of authentication in many web applications, internet of things (IoT) access, password reset, mobile banking (M-banking), etc. Therefore, we must know how the protocol works and about its security. This protocol is designed to manage federatively (i.e., the mobile network is managing partially by many independent operators and it doesn’t need to have a central operator for the whole network. Also, many independent centrally managed networks can connect together to make a bigger network). We reviewed SMS protocol and its network structure, message structure, network entities, entities’ connection, and some security-related issues. Finally, this protocol is evaluated if it can provide Identification, Authentication, Integrity, Nonrepudiation, Confidentiality, and Availability.

Prototype of Cluster Housing Portal Security System Using Fingerprint and One Time Password Based on Internet of Things

Cluster housing is chosen by many people because of the security system is uses one gate system. However, the housing portal system that is often encountered still uses human labor and guest data recording is also still done manually. It often happens that the housing portal is always open, so that residents and non-residents can enter and exit the housing freely. Based on the existing problems, this research proposes an innovation, namely "Prototype of Cluster Housing Portal Security System Using Fingerprint and One Time Password Based on Internet of Things". Fingerprint is used for portal access by residents, while One Time Password (OTP) is used by guests to access the portal. The OTP is made through the citizen's website. The OTP will later be sent by residents to guests, so they can access the portal without having to have a security guard. All portal access data and guest data can be monitored through the security officer's website. The test parameters in this study are the accuracy of the fingerprint sensor, the suitability of the OTP code, the accuracy of the proximity sensor E18-D80NK, Quality of services (QoS), and the overall system test.

Implementation Cryptography and Access Control on IoT-Based Warehouse Inventory Management System

Warehousing is a product storage management activity to ensure product availability, so inventory management is needed to oversee the movement of logistics and equipment. Some things need to be considered in the storage process, such as the suitability of the storage location, safe from theft, and safe from physical disturbances. Vulnerabilities can occur when unauthorized users find out information from the database regarding stored goods, so a security mechanism for the warehouse database is needed. In addition, proper identification needs to be made of someone trying to access the database. In this research, a Warehouse Inventory Management System (WIMS) was created by implementing the AES-128 cryptographic algorithm, which was built using ESP32 and Raspberry Pi 3 devices. Time Password (T-OTP). The results show that the built system can overcome inventory problems in conventional warehousing management systems and implement data security using the AES-128 algorithm. The application of two-factor authentication in the form of smartcards and T-OTP shows very good results in testing its accuracy to overcome the vulnerability of unauthorized access to the system database

Rancangan Aplikasi Autentikasi Surat Digital dengan Metode One Time Password SHA-512 Berbasis Android

Some administrative procedures in many institutes are still carried out conventionally, which is deemed less efficient and takes much time. On the other hand, communication with other parties requires a process of exchanging information, so a system is needed to confirm the validity of the information. Therefore, a digital letter system that can prove the validity of the information gained through the digital media right from the party concerned is developing. This can be overcome using the authentication method. Adding One Time Password (OTP) as an authentication method that employs one temporary password key can be the solution. This study uses the One Time Password (OTP) method as a validation system and the SHA-512 algorithm as an OTP code generator to generate random codes. This system leverages android technology on mobile to ease access to the correspondence administration system to make it easier to visit with features that prioritize information and access speed. This application is implemented at the State Polytechnic of Sriwijaya to improve the administrative process to run more effectively. The black box testing revealed that all available menus and features were appropriate, and the application already had a system that functions according to user needs. Moreover, in the One Time Password generation test with the SHA-512 algorithm, it was determined that the average response time for generating the OTP code was 4.4 seconds in 15 trials, which can be considered fairly accurate.

A novel approach for user authentication using keystroke dynamics

One Time Password (OTP) and Text Password are becoming less important in the current age of cybercrime because of the rapid development of new security systems. A user authentication system that is easy, robust, scalable, and cost-effective is a must. For both security and surveillance purposes, keystroke biometrics is a viable option. Behavior biometrics, of which keystroke biometrics is a subset, is used to identify individuals based on the way they type. Typing habits are not set in stone and are subject to change depending on the scenario, the device being used, and the user’s emotional state. As a result, the performance of a keystroke biometrics-based user authentication system is influenced by how well the retrieved information from typing and classification algorithms is processed. Using a keyboard with an array of pressure sensors, this research presents a unique way to keystroke dynamics-based authentication. The goal of this study is to develop user profiles that are unique and different in order to improve the suggested system’s efficiency. A real-world dataset is used to test the suggested method. The outcome is achieved with a 97% success rate in experiments.