An Improved Time-Based One Time Password Authentication Framework for Electronic Payments

Abstract

One-time Password is important in present day scenario in the purposes of improving the security of electronic payments. Security sensitive environment or perhaps organization avoid the resources from unauthorized access by allowing different access control mechanism as user authentication. There are several safety issues in one Password based authentication. However, studies show that OTP sent over SMS are causing different causes and issues, which lead to precious time, delay in transaction. User authentication can be raised with more levels within the procedure of multi-factor authentication scheme. Time-based One-time Password and biometrics are one of the widely accepted mechanisms that incorporate multi-factor authentication. In this paper, we approach the Time-based OTP authentication algorithm with biometric fingerprints to secure an electronic payment. This algorithm uses a secret key exchanged between the client and the server and uses a certain password through the algorithm. The shuffle of the TOTP approach better wear by screening the key as being a QR code, as revealed in the majority movable applications are able to read. It offers confidentiality at the application level within the system to protect user credential within equal entities (the user and the server) for preventing brute force and dictionary attacks. Thus, the proposed system design is possible for users because of the lack of the concern of holding its own hardware token or additional charges from the short message service. Our suggested approach has been found to improve safety performance substantially compared to existing methods with regard to authentication and authorization. This research hopes to boost research effort on further advancement of cryptosystems surrounding multi-factor authentication.

A Systematic Review on Multi-Factor Authentication Framework

“…3) Cryptography authentication: Cryptography or encryption authentication is believed to provide confidentiality and integrity to the system security [44]. Generally, cryptography uses an asymmetric cryptosystem to exchange the secret key and then employ faster secret key algorithms to ensure confidentiality of the data stream.…”

Randomized QR-code scanning for a low-cost secured attendance system

“…The server will generate QR-code containing a five digits randomized numbers as shown in Figure 2. This randomized number is acting as one time password (OTP) which appears to be a robust and secure solution in many sensitive data transactions such as electronic payments [22], online transactions [23], secured data accessing systems [24], and corporate information systems [25]. Each digit is filled with a random number from zero to nine.…”

Device Identity-Based User Authentication on Electronic Payment System for Secure E-Wallet Apps

“…A majority of the user authentication and even bank access controls for internet banking systems are based on KBA due to its features and familiarity to the provider and user [6]. However, the KBA is prone to different kinds of attacks such as brute-force attacks [16][17][18], rainbow table attacks [19,20], dictionary attacks [21][22][23], social engineering [10,[24][25][26], phishing [27,28], framework for man-in-the-middle attacks (MITMF) [29,30], password-based attacks [16,31], session hijacking [32], and malware [28,33,34].…”