Abstract:In today's world, technologies are developing at a rapid pace. It is very difficult to imagine a sphere of human life where digital data is not used, for example, banking operations, distance learning, utility payments, online messaging have become commonplace for us. However, on the other hand, the question arose of how to ensure the reliability and confidentiality of this data. One of the methods was authentication when entering the system, that is, entering a login and password to identify the user. To date, this method is not reliable and quite vulnerable, because most users have started using the same passwords for login, or simply ignore their reliability and use rather primitive ones. As a result of such actions, more and more confidential user data is at risk of being acquired by unauthorized criminals. The idea to develop a two-factor authentication system using a QR code arose as a result of the urgency of this problem and the imperfection of existing software products. The basis will be the generation of a unique code that will be available only for a short period of time, which will be enough for the user to enter the system. This technology will allow dynamically changing the set of numbers required for authentication. If an attacker takes possession of it, he will not be able to use it, because it will change in the system in a fairly quick period of time. The article discusses the implementation of the two-factor authentication algorithm using a QR code, which has a simple appearance, but can store a large amount of data. Also, regardless of how much information the QR code contains, the data is displayed immediately after reading it. This provides an increased level of protection when the user enters the system and prevents unauthorized access to confidential data by cybercriminals. An approach using TOTP (Time-based One-time password) is also proposed, which will generate a one-time code based on a secret key. The main feature is the use of time as one of the parameters to generate a dynamic 6-digit password required for logging into the system. Also, its generation will be carried out automatically every 30 seconds, thus creating conditions for making its theft and unauthorized use impossible.

A Study of E-Authentication Systems Based on QR Codes Through Analysis

E-Authentication System using QR Code and OTP

Toward a Secure QR Code System by Fingerprinting Screens.

A Two-Factor Authentication System with QR Codes for Web and Mobile Applications

Online banking authentication system using mobile-OTP with QR-code

System of twofactor authentication of the user of the corporate environment using a QR code

A Secure Method for Signing in Using Quick Response Codes with Mobile Authentication

Product Authentication Using QR Codes: A Mobile Application to Combat Counterfeiting

Utilizing Dynamic QR Codes to Enhance Secure Payment Transactions: An Approach to Secure Computer based Transactions

QR Code and Biometric Based Authentication System for Trains

Laboratory Access Implementing QR Code Authentication Using OTP

SD-EQR: A New Technique To Use QR CodesTM in Cryptography

A novel OTP based tripartite authentication scheme

CamAuth: Securing Web Authentication with Camera

QR- based Advance Attendance System Using 2-Step Authentication

QRToken: Unifying Authentication Framework to Protect User Online Identity

Authentication of Printed Document Using Quick Response (QR) Code

QR code based two-factor authentication to verify paper-based documents

Design and Implementation of a Secure QR Payment Based on Visual Cryptography

Review ―The Digital Revolution for the Security of Hiding Information inside the Quick Response Code‖

Multiple Schemes for Mobile Payment Authentication Using QR Code and Visual Cryptography