Abstract:In today's world, technologies are developing at a rapid pace. It is very difficult to imagine a sphere of human life where digital data is not used, for example, banking operations, distance learning, utility payments, online messaging have become commonplace for us. However, on the other hand, the question arose of how to ensure the reliability and confidentiality of this data. One of the methods was authentication when entering the system, that is, entering a login and password to identify the user. To date, this method is not reliable and quite vulnerable, because most users have started using the same passwords for login, or simply ignore their reliability and use rather primitive ones. As a result of such actions, more and more confidential user data is at risk of being acquired by unauthorized criminals. The idea to develop a two-factor authentication system using a QR code arose as a result of the urgency of this problem and the imperfection of existing software products. The basis will be the generation of a unique code that will be available only for a short period of time, which will be enough for the user to enter the system. This technology will allow dynamically changing the set of numbers required for authentication. If an attacker takes possession of it, he will not be able to use it, because it will change in the system in a fairly quick period of time. The article discusses the implementation of the two-factor authentication algorithm using a QR code, which has a simple appearance, but can store a large amount of data. Also, regardless of how much information the QR code contains, the data is displayed immediately after reading it. This provides an increased level of protection when the user enters the system and prevents unauthorized access to confidential data by cybercriminals. An approach using TOTP (Time-based One-time password) is also proposed, which will generate a one-time code based on a secret key. The main feature is the use of time as one of the parameters to generate a dynamic 6-digit password required for logging into the system. Also, its generation will be carried out automatically every 30 seconds, thus creating conditions for making its theft and unauthorized use impossible.

A Two-Factor Authentication System with QR Codes for Web and Mobile Applications

E-Authentication System using QR Code and OTP

A Study of E-Authentication Systems Based on QR Codes Through Analysis

Toward a Secure QR Code System by Fingerprinting Screens.

System of twofactor authentication of the user of the corporate environment using a QR code

Online banking authentication system using mobile-OTP with QR-code

CamAuth: Securing Web Authentication with Camera

QRToken: Unifying Authentication Framework to Protect User Online Identity

2D-2FA: A New Dimension in Two-Factor Authentication

Utilizing Dynamic QR Codes to Enhance Secure Payment Transactions: An Approach to Secure Computer based Transactions

Product Authentication Using QR Codes: A Mobile Application to Combat Counterfeiting

Design and Analysis of a Secure Three Factor User Authentication Scheme Using Biometric and Smart Card

Secure digital wallet by using QR code: mapping of mobile payment in partially connected environment

A Secure Method for Signing in Using Quick Response Codes with Mobile Authentication

Laboratory Access Implementing QR Code Authentication Using OTP

OTP-Based Two-Factor Authentication Using Mobile Phones

A Mobile Payment Scheme Using Biometric Identification with Mutual Authentication

A Multi-Factor Security Protocol for Wireless Payment - Secure Web Authentication using Mobile Devices

Mobile Browser as a Second Factor for Web Authentication

QR code based two-factor authentication to verify paper-based documents

A Passwordless MFA Utlizing Biometrics, Proximity and Contactless Communication