A novel Two-Factor HoneyToken Authentication Mechanism
- 1 July 2021
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- p. 1-7
Abstract
The majority of systems rely on user authentication on passwords, but passwords have so many weaknesses and widespread use that easily raise significant security concerns, regardless of their encrypted form. Users hold the same password for different accounts, administrators never check password files for flaws that might lead to a successful cracking, and the lack of a tight security policy regarding regular password replacement are a few problems that need to be addressed. The proposed research work aims at enhancing this security mechanism, prevent penetrations, password theft, and attempted break-ins towards securing computing systems. The selected solution approach is two-folded; it implements a two-factor authentication scheme to prevent unauthorized access, accompanied by Honeyword principles to detect corrupted or stolen tokens. Both can be integrated into any platform or web application with the use of QR codes and a mobile phone.Keywords
All Related Versions
This publication has 9 references indexed in Scilit:
- Two-Factor Authentication Scheme for Mobile Money: A Review of Threat Models and CountermeasuresFuture Internet, 2020
- Authentication schemes for smart mobile devices: threat models, countermeasures, and open research issuesTelecommunication Systems, 2019
- Evaluating information security core human error causes (IS-CHEC) technique in public sector and comparison with the private sectorInternational Journal of Medical Informatics, 2019
- Advanced formal authentication protocol using smart cards for network applicantsComputers and Electrical Engineering, 2018
- Authentication Protocols for Internet of Things: A Comprehensive SurveySecurity and Communication Networks, 2017
- Two Birds with One Stone: Two-Factor Authentication with Security Beyond Conventional BoundIEEE Transactions on Dependable and Secure Computing, 2016
- On the (In)Security of Mobile Two-Factor Authentication2014
- An Efficient Generic Framework for Three-Factor Authentication With Provably Secure InstantiationIEEE Transactions on Information Forensics and Security, 2014
- Two factor authentication using mobile phones2009