Time Password Research Articles

Security System Using Fingerprint Scanning

The Aim and moto of this project is that it is used to Access Internet Banking for Cash Related Tasks with more security and reliability. we use biometric system for highly secure transaction with hassle free processes. We use fingerprint Scanner and One Time Password (OTP) is send to the user registration mobile number. After that, user will be able to complete the transaction. This paper consists of conceptualized framework of design, specifications and model of the system.

Counterfeited Product Identification in a Supply Chain using Blockchain Technology

Since the invention of the Blockchain technology in 2008, it has been used in many domains to ensurehigh security and reliability of data, like from the use of Bitcoin to BaaS (Blockchain as a Service)which is a new blockchain trend and is a sort of cloud-based network for the organizations in thebusiness of building blockchain-based applications. This paper implements the combined approachof the decentralized Blockchain technology and the Supply Chain to establish that the end-users ina supply chain do not completely rely on the trader to establish that the product is counterfeited ornot and this can be done by authenticating the product at every stage in the Supply Chain by usingOne Time Passwords on the receiver’s mobile phone along with a deployed personnel who willbe responsible for assuring the quality of products. Furthermore, using this combined technical approachcan considerably lower down the cost of product quality assurance and this proposed systemwill track the authenticity of the product from its origin from the manufacturer to the end-user as well.

Communal Fraud Detection Algorithm for Establishing Identity Thefts in Online Shopping

In recent times, e-commerce sector is gaining popularity and expressing progressive growth. Due to increasing the demand of automation process and the reach of internet towards the end-users have poised this trust. In spite of the technology advancements, the privacy and security of e-commerce merchant as well as consumer data are constantly under threat. Identity theft, which is considered as more important security problems for end-users, is addressed by one time password generated instantly. This paper focuses on communal fraud detection algorithm for protecting identity theft in online shopping by creating a white list. Experimental results have proved white lists outperform one-time passwords in identity theft in a more effective manner.

VLSI Architecture for Designing a True Random Number Generator with Modified Parallel Run Length Encoding

The secured communication is a means to provide privacy and security for the data being transmitted. The cryptographic system has thus become a vital and inevitable platform for achieving data security in our day to day life ranging from the generation of one time passwords, session keys, signature parameters, ephemeral keys. The encryption level is entirely dependent on the unpredictability of the digital bit streams. The paper focuses on generating true random number sequences using hardware, so as to safeguard the encryption keys patterns for digital communications. These sequences are generated using purely digital components supported by an efficient VLSI architecture. The implementation of the proposed model is done using Mojo-V3, supported by Xilinx ISE software platform. The generated random sequences will further undergo some post processing operations, viz; Von-Neumann correction (VNC) and Parallel Run Length Encoding (PRLE), to eliminate the bias in bit stream and also to compensate the high power dissipation respectively.

Android Mobile Based Voting System through Facial Recognition

Due to the increase in population, identification of fake voting is getting more complicated. The only proof of identification is just a voter id. Due to this there has been difficulty in identifying fake voters. To overcome this ssue, an approach based on facial recognition system using android mobile is proposed. This system consists of three phases. In first phase the details of voter like name, adhaar number and email id will be verified. In the second phase, user login through android phone where mobile application captures the voter’s face and will be sent to the server where the facial recognition takes place, if the match is found then the OTP (One Time Password) will be sent to the users email address. In the third phase, the user has to enter the OTP and if the OTP is correct, voter will be allowed to vote. This proposed system will be secure and eliminate any fake voters. Voters can also avoid standing in the queue in order to vote. Lot of benefits can be achieved by using this proposed system.

Android Mobile Based Voting System through Facial Recognition

Due to the increase in population, identification of fake voting is getting more complicated. The only proof of identification is just a voter id. Due to this there has been difficulty in identifying fake voters. To overcome this ssue, an approach based on facial recognition system using android mobile is proposed. This system consists of three phases. In first phase the details of voter like name, adhaar number and email id will be verified. In the second phase, user login through android phone where mobile application captures the voter’s face and will be sent to the server where the facial recognition takes place, if the match is found then the OTP (One Time Password) will be sent to the users email address. In the third phase, the user has to enter the OTP and if the OTP is correct, voter will be allowed to vote. This proposed system will be secure and eliminate any fake voters. Voters can also avoid standing in the queue in order to vote. Lot of benefits can be achieved by using this proposed system.

Performance Analysis of Transport Time and Legal Stability through Smart OTP Access System for SMEs in Connected Industrial Parks

According to data from the National Police Agency, 75.5 percent of dead traffic accidents in Korea are truck accidents. About 1,000 people die in cargo truck accidents in Korea every year, and two to three people die in cargo truck accidents every day. In the survey, Korean cargo workers answer poor working conditions as an important cause of constant truck accidents. COVID 19 is increasing demand for non-face-to-face logistics. The inefficiency of the Korean transportation system is leading to excessive work burden for small logistics The inefficiency of the Korean transportation system is causing excessive work burden for small individual carriers. The inefficiency of the Korean transportation system is also evidenced by the number of deaths from logistics industry disasters that have risen sharply since 2020. Small and medium-sized Korean Enterprises located in CIPs (Connected Industrial Parks) often do not have smart access certification systems. And as a result, a lot of transportation time is wasted at the final destination stage. In the logistics industry, time is the cost and time is the revenue. The logistics industry is the representative industry in which time becomes money. The smart access authentication system architecture proposed in this paper allows small logistics private carriers to improve legal stability, and SMEs (Small and Medium-sized Enterprises) in CIPs to reduce logistics transit time. The CIPs smart access system proposed in this paper utilizes the currently active Mobile OTP (One Time Password), which can significantly reduce system design costs, significantly reduce the data capacity burden on individual cell phone terminals, and improve the response speed of individual cell phone terminals. It is also compatible with the OTP system, which was previously used in various ways, and the system reliability through the long period of use of the OTP system is also high. User customers can understand OTP access systems more easily than other smart access systems.

Authentication Key-Exchange Using SMS for Web-Based Platforms

One of the advantages of One Time Password (OTP) is that it’s free from brute force, replay, and shoulder attacks. The codes may originate from different entropy attributes and schemes, such as true random and digital random number generators. Businesses, organizations, and academic institutions have adopted OTP methods for credit card transaction confirmation, recalling forgotten passwords, and validating web portal accounts. This paper proposed a new method in authenticating login credentials using a 3 × 3 matrix and random system key as Two-Factor Authentication (2FA) with an SMS-enabled feature. We used the 6-codes pseudorandom method and a 4-codes validation to allow mobile flexibility and ensure that the user has the required access. The page link and evaluation form are sent to students, IT professionals, and researchers. The results showed respondents are satisfied in terms of functionality, usability, efficiency, and reliability. The developed system could safeguard information, disallow unauthorized access, and impose acceptable data protection measures and minimal system requirements to use the system.

AOMDV-OAM: A Security Routing Protocol Using OAM on Mobile Ad Hoc Network

On-demand routing protocol is designed to work efficiently on mobile ad hoc networks (MANET). They operate with the belief that all nodes in the network are friendly, thus hackers exploiting security vulnerabilities to carry out some form of cyber attacks, especially Flooding attacks. This form of attack is easily accomplished by overflowing route request packets into the network. Once the attack frequency is large enough, it shall interfere with the route discovery of other network nodes, damaging network performance. In this article, we will analyze and evaluate the impact of flood attacks on the performance of two routing protocols AOMDV. Thereby, we describe a security solutions using the One Time Password (OTP) authentication mechanism (OAM) and implementing AOMDV-OAM security protocol, which is improved from the AOMDV protocol by using OAM to reduce the harmful effects of flood attacks. Using NS2, we assess the security effectiveness of the AOMDV-OAM protocol in random waypoint network topologies where has flooding attacks. Simulation results show that AOMDV-OAM protocol is very effective in minimizing the harmful effects of flood attacks, the rate of successful packet delivery reached over 99% when the one malicious node attacked with a frequency of 20pkt/s and 50pkt/s for Grid network topology.

Pembangunan Aplikasi Transaksi Menu Di Kedai XYZ Kopi Menggunakan QR-Code Dan One Time Password Berbasis E-Wallet

The payment process using electronic money is a non-cash payment method based on E-Wallet aimed at facilitating users in transact. The transaction process at the coffee shop XYZ is still done conventionally and takes a long time, causing long queues. The research carried out aims to speed up the transaction process at XYZ coffee shops. The method used in this research is prototype. An alternative solution to the transaction process is to utilize the E-Wallet and QR-Code through the customer's smartphone. This study utilizes Go-Pay E-Wallet access as a means of payment through the Midtrans Payment Gateway and uses the One Time Password code as a login method on the system. Qr-code scanning to place orders can be done quickly which is around 3,551 milliseconds. Quessioner results distributed to 20 customers showed the following data, around 90% agreed on the use of e-wallet as an alternative payment, around 87% agreed on the statement of the use of e-wallet was able to reduce the slow transaction process, about 79% agreed to the statement that this system facilitates the transaction process, as well as 79% level of approval of the use of an authentication code through a mobile number that makes it easy to enter the application. The results showed that the system built can speed up the transaction process.

Group-based Password Characteristics Analysis

In this article, we analyze password characteristics from the perspective of user groups in different countries and web-based services. We collect a dataset from the Chinese railway website www.12306.cn. which contains data from four provinces, Hubei, Zhejiang, Inner Mongolia and Xinjiang. Additionally, we select datasets from two English based Internet applications, Faithwrit-er and Facebook. We analyze these six datasets based on several common indicators, including popular passwords, password structure and letter distribution. The analysis results show that there are remarkable differences in different user groups. The experiments show that geographical factors (embodied in the native language) and types of website services play a significant role in password creation. We further evaluate the security of these passwords by employing two state-of-the-art password cracking techniques. The attack results show that datasets of different provinces and different types of website services have different password strength. To the best of our knowledge, this is the first time passwords are analyzed based on different user groups.

Revamp Aplikasi Teman Bumil Lebih Interaktif Dengan Pendekatan Agile

Teman Bumil (Friends of Millennial Mother) is application is an application developed to help pregnant women which contains some information from running a pregnancy program to monitoring the growth and development of pregnant women. This application was first released in 2017 with the number of active users currently having a stickiness rate of ± 13% per month which in this case is proven by the interview method conducted by researchers. However, this number is still considered unstable because it is only around 13%, where the target of stickiness rate is ± 15% for the month. Several improvements have been made by adding health charts, online classes, new media features, and registration using a new method, namely OTP (One Time Password). the results of this change have not been as expected. Therefore, in this study, we propose Revamp or an update using the Flutter framework which produces an application that can be used by both the iOS and Android platforms or also called a hybrid so that it is more interactive and according to user needs. In addition, this study also uses the Agile development method with the Scrumban model, which is a combination of Scrum and Kanban. The results of this research are in the form of a Teman Bumil application that has been revamped and has also been tested for the application developed and has received a good response from users based on randomly distributed questionnaires. 

Dual factor third‐party biometric‐based authentication scheme using quantum one time passwords†

AbstractOne Time Passwords (OTP) are being widely used for authentication of user to access a number of services offered online. The security vulnerabilities in classical execution of OTP schemes are addressed using Quantum OTP (QOTP) scheme with user biometrics. This scheme requires sharing of user biometric data with every service provider. The chances of leakage of user biometrics increase with increase in number of entities holding the data. Further, loss of data by any entity compromises user identity for all other services. The work carried out in this article addresses the above‐mentioned challenges by incorporating a trusted third party which holds user biometric data and carries out authentication on its behalf. The proposed model continues leveraging upon inherent security benefits provided by Quantum Entanglement and Quantum Communication and utilizing user biometrics as authentication data. It modifies the QOTP scheme by carrying out mutual authentication for user and server against a particular transaction. The proposed model brings in the advantages of Single Sign On facility in terms of hardware to reduce infrastructure cost and No Secret Sharing of user biometric data with the servers to protect against rogue servers. The security analysis demonstrates the merit of the inherent procedures of the proposed work which leverage on the no‐cloning and quantum cryptography principles.

Securing the Website Login System with the SHA256 Generating Method and Time-based One-time Password (TOTP)

Security to enter a system has a very important role because as the main entrance to access data sources. But often lack the attention of the owners and managers of information systems. To reduce these weaknesses, one method that is widely used today is to use One-Time password, which is where the password we have becomes dynamic, meaning that at a certain time the password is always changing, the positive side is that it makes it difficult for others to steal our passwords because besides representative passwords that are difficult to understand and passwords are always changing. This study discusses One-Time Password installed on a mobile device where the password is randomized using a combination of two algorithms, namely SHA256 and Time-based One Time Password. The development of this login method can reduce the level of theft of passwords owned by users who are entitled to access information sources.

Pengamanan M-Commerce Menggunakan One Time Password Metode Pseudo Random Number Generator (PRNG)

Mobile commerce atau m-commerce merupakan sistem perdagangan elektronik (e-commerce) yang menggunakan peralatan bergerak seperti telepon genggam, telepon pintar, PDA, dan notebook. Dengan pertumbuhan pengguna telepon pintar (smartphone) di seluruh dunia, banyak pemilik bisnis perdagangan elektronik yang juga menyediakan aplikasi m-commerce untuk mempermudah para pelanggannya dalam bertransaksi. Selain memberikan kenyamanan bagi pengguna, penyedia aplikasi m-commerce harus dapat memastikan bahwa pelanggan dapat bertransaksi dengan aman. Resiko keamanan merupakan salah satu kendala besar dalam perkembangan sistem perdagangan elektronik. Oleh karena itu, pada penelitian ini diterapkan metode pengamanan aplikasi m-commerce menggunakan one time password (OTP) yang dibangkitkan dengan metode Pseudo Random Number Generator (PRNG). Penelitian ini juga melakukan modifikasi terhadap algoritme PRNG dengan melakukan tiga kali proses bit shifting dan menambahkan algoritme enkripsi. Hasil pengujian menunjukkan bahwa sistem dapat membangkitkan OTP yang selalu unik untuk setiap transaksi. Hasil penelitian ini bermanfaat bagi pengembang aplikasi m-commerce untuk mengamankan aplikasinya.

Secured Authentication With One Time Password on the Cloud

There are different types of conventional authentication types that include challenge/response mechanisms, passwords or even physical smart cards, the most popular of which are passwords. Most people use the same passwords with different accounts, which can also recover other passwords if compromised. Several recent studies have also proposed authentication based on a one-time password. That attempted to solve the shortcomings of all previous methods but also bring new limitations. The OTPs are sent to the user's telephone or email address, but when the contact is intercepted, the OTP is vulnerable to theft. After referring to a lot of research work in this field, we are trying to solve the above-mentioned problem by implementing another layer of security that contains a user-specialized information factor along with the given OTP. This system consists of four protection levels — traditional, secure, responsive and highly sensitive security deployed on the cloud. These four security levels are designed for different cases of use. In most situations, this method overcomes the problem of OTP theft, as the knowledge factor other than the OTP is limited to the user. In this method, we propose a security layer(s) that can be combined with the existing authentication or can even act as an authentication framework on its own.

A Conceptual Framework for the Integrated, Smart and Secure Remote Public Voting System (SSRPVS)

Elections are the backbone of democracy. It is through elections that individuals assert their voice, their perspectives, and choose a person whose philosophies most complement them. Elections allow citizens to choose their representatives. They are also important for the people to express their resentment at the ruling government. When there is high voter participation, the election process is considered successful. Unfortunately, developing countries such as India are facing a decline in the turnout. People in rural areas move to metropolitan cities or other countries, in most developing countries to make their livelihood or schooling. During elections, visiting their hometown and casting their votes becomes burdensome for them because of their commitment to their workplace. Challenges in moving to poll places and sometimes adverse weather conditions, cause people to miss the chance to choose the candidate of their choice. People with disabilities and senior citizens also refuse to go to the polling station due to travel-related difficulty. Therefore, many elections record only 50-70 percent electoral turnout, sometimes, even less than 50%. Only when all eligible voters are granted fair opportunities to exercise their franchise then only such a democratic system is considered fool proof. The need for the hour is such a fool proof framework that enables all eligible voters to cast their vote by visiting Polling Station or doing so remotely. This paper proposes a conceptual framework for the Integrated, Smart, and Secure Remote Public Voting System (SSRPVS) that allows voters from any part of India to exercise their franchise without moving place to place and wasting time and money. To develop the Framework, emerging technologies such as IoT, Cloud Computing, Edge Computing, Blockchain, and Data Analytics are included. The system will guarantee security through four different levels, Smart Voting Card based on RFID, One Time Password, Thumb Recognition, and Retina Recognition. The only theoretical model of the system that is open for further analysis and development is provided here.

Smart Secured Wireless ATM using Finger Print Recognition

Automated Teller Machines (ATMs) have become an essential part of the individual’s daily routine as it is utilized to change one’s existing ATM Personal Identification Number (PIN), check one’s amount balance and its most important function is to extract one’s money. Nowadays, the culprits have the latest technologies at their disposal, which aids them, to easily hack into the secured systems of the banks and collect the confidential information of the clients such as their ATM PINs, Card Details, etc., To counter that, fingerprint sensing incorporated with One Time Passwords (OTPs) has been suggested, as it is globally accepted that the fingerprints of every person are unique and different, while OTPs don’t hold its value like ATM PINs. This research is based on using Python Graphical User Interface (GUI) as the ATM screen. The innovation in this study exists in two ways. The first one is that OTPs will be sent via Python Graphical User Interface (GUI), on the client’s registered email address also (along with the client’s recorded phone number), so that OTPs can still be accessed in case of Subscriber Identity Modules (SIMs) lost. The second one is that including a Uniform Resource Allocator (URL: www.msbank.co.in) for online enrollments of the clients and producing Application Program Interfaces (APIs). The main idea is to first check the client’s fingerprints and then to verify the OTPs from our Admin-Password Protected Mongo Database. The involved algorithm also maintains a check that the same email address cannot be utilized again for registration.

Offline Transaction System using TOTP

This paper proposes a new system which can be used to make short distance transactions Offline. The method discussed in this paper provides an in depth explanation of the project and how TOTP (Time-Based One Time Password) is used to carry out authentication which is completely offline. This idea is implemented since there is no current system which facilitates offline payments to occur. The project uses various functions such as Hashing (using SHA-1) and Audio QR to ensure security while it works offline. The project employs a QR code which encodes the user’s ID, TOTP token and the amount to be transferred to the receiver. The receiver then scans the QR code and decodes the contents, authenticates the user, checks the balance, if it is sufficient then the transaction occurs successfully. This system can be used in different scenarios such as shopping, travelling, restaurants etc.

Security Enhancement for Building Access, Using One Time Password (OTP) Technology

Ubiquitous as mobile technologies are, and the various advancements the technologies have experienced, makes the field pertinent for integration into security systems of buildings. As a security enhancement technique for building access, this project was proposed as a way of paving a way for integration of one time password (OTP) technology using microcontroller to security systems. In addition, the proposed project will be a supplement to the challenges of other security authentication methods centered on Bluetooth, radio frequency identification (RFID), biometrics and voice recognition techniques. In other to reduce complexity in design, a microcontroller was introduced to hub the coordination of the system. The two way verification system which can be coupled with aforementioned security systems, boast of its ability to store numeric identity of each authorized user to a building in the electrical erasable programmable read only memory (EEPROM) of the microcontroller. The system prompt a user wanting to gain access to the building through the door to input designated numeric identity (password) stored in data base. Once the inputted designated numeric identity entered matches an identity in the data base, then for the second verification process, a randomly generated OTP which has a programmed validity of three minutes is sent to the user phone via a GSM (global system for mobile communication) module. If either the password or OTP entered doesn’t match, then access is denied and the user will only be relegated to two limited successful chances with time duration as programmed for retrial before the system reset for the next user. Once there is failure at any stage of verification outside prescribed attempted limit, an alarm is sounded with implication that a burglar is attempting entry. Electric power to the project was driven from an ac mains which was then rectified to power all the dc dependent components used. The low construction cost, user friendliness, flexibility, insured security when compared to other security systems, makes the inovation unique.