Abstract:Purpose Because of the continued use of mobile, cloud and the internet of things, the possibility of data breaches is on the increase. A secure authentication and authorization strategy is a must for many of today’s applications. Authentication schemes based on knowledge and tokens, although widely used, lead to most security breaches. While providing various advantages, biometrics are also subject to security threats. Using multiple factors together for authentication provides more certainty about a user’s identity; thus, leading to a more reliable, effective and more difficult for an adversary to intrude. This study aims to propose a novel, secure and highly stable multi-factor one-time password (OTP) authentication solution for mobile environments, which uses all three authentication factors for user authentication. Design/methodology/approach The proposed authentication scheme is implemented as a challenge-response authentication where three factors (username, device number and fingerprint) are used as a secret key between the client and the server. The current scheme adopts application-based authentication and guarantees data confidentiality and improved security because of the integration of biometrics with other factors and each time new challenge value by the server to client for OTP generation. Findings The proposed authentication scheme is implemented on real android-based mobile devices, tested on real users; experimental results show that the proposed authentication scheme attains improved performance. Furthermore, usability evaluation proves that proposed authentication is effective, efficient and convenient for users in mobile environments. Originality/value The proposed authentication scheme can be adapted as an effective authentication scheme to accessing critical information using android smartphones.

Digital Certificate Deployment System Based on One-time-pass

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Inter-domain authentication scheme for Pervasive Computing Environments

Distributed Certification Application Via a Trusted Dealer

Secure Information Exchange Model Between PDM Systems

Research on Short Message-based Digital Certificate Status Broadcasting System

Distributed One Time Password Infrastructure for Linux Environments

An Enhanced Online Certificate Status Protocol for Public Key Infrastructure with Smart Grid and Energy Storage System

Research and Implementation of One-Time Password Authentication in Computer Networks

Digital Certificate Based Identity Authentication in Remote Login Linux System

Time-based OTP authentication via secure tunnel (TOAST): A mobile TOTP scheme using TLS seed exchange and encrypted offline keystore

Study on the Model and Algorithm of Internet Trusted Identity Authentication System.

PROTECT: Efficient Password-Based Threshold Single-Sign-On Authentication for Mobile Users against Perpetual Leakage

Authentication System and Application Based on Dynamic-password SIM

E-Authentication System using QR Code and OTP

One-Time Certificates for Reliable and Secure Document Signing

Security Authentication for Substation Communication Message and Its Real-time Simulation

Hierarchical-CPK-Based Trusted Computing Cryptography Scheme.

A novel OTP based tripartite authentication scheme

An efficient dynamic ID based remote user authentication scheme using self-certified public keys for multi-server environment

Design of Proxy-based Public Key Cryptographic Application System