2FMA-NetBank: A proposed two factor and mutual authentication scheme for efficient and secure internet banking

Pratama, Andreyanto; Prima, Edit

doi:10.1109/iciteed.2016.7863247

Cited by 8 publications

(2 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…A significant weakness in this method involves the possibility of spoofing an IMEI at either the hardware, the OS, or even the application level. Moreover, there is also the problem of interception, as the QR code will be displayed on the user's screen during the entire authentication process, which can be copied from a distance [12]. Possibly, a user might be subjected to an impersonation attack where an attacker steals the QR code from the screen [13].…”

Section: B Quick Response Codes (Qr)mentioning

confidence: 99%

0EISUA: Zero Effort Indoor Secure User Authentication

2020

View full text Add to dashboard Cite

Two-factor authentication (2FA) systems implement by verifying at least two factors. A factor can be one or more of something a user knows (password, or phrase), something a user possesses (smart card, or smartphone), something a user is (fingerprint, or iris), something a user does (keystroke), or somewhere a user is (location). In a conventional 2FA system, a user is required to interacts (e.g., typing a passcode) in order to implement the second layer of authentication, which is not very user-friendly. Nowadays, smart devices (phones, laptops, tablets, etc.) can receive signals from different radio frequency technologies within range. As these devices move among networks (Wi-Fi access points, cell phone towers, etc.), they receive broadcast messages, some of which can be used to collect information. This information can be utilized in a variety of ways, such as establishing a connection, sharing information, locating devices, and, most appropriately, identifying users in range. The principal benefit of broadcast messages is that the devices can read and process the embedded information without being connected to the broadcaster. Moreover, the broadcast messages can be received only within a range of the wireless access point sending the broadcast, thus inherently limiting access to those devices in close physical proximity and facilitating many applications dependent on that proximity. In this paper, 0EISUA is proposed, a zero-effort two-factor authentication scheme based on something that is in the user's environment (ambient access points). In our research, data from the broadcast messages are utilized to implement the second authentication factor by determining whether two devices are proximate or not to ensure that they belong to the same user, in a way that requires zero interaction from the user. The new proposed system introduced in this paper is experimentally tested.

show abstract

Section: B Quick Response Codes (Qr)mentioning

confidence: 99%

0EISUA: Zero Effort Indoor Secure User Authentication

2020

View full text Add to dashboard Cite

show abstract

“…Soluções de autenticação mais recentes, voltadas para aplicativos de dispositivos móveis, como a 2FMA-NetBank [Pratama and Prima 2016], também dependem de uma PKI e, além disso, adicionam múltiplos fatores de autenticação priorizando aspectos de segurança em detrimento de aspectos de usabilidade. Recentemente, propomos a Auth4App [Kreutz et al 2020], que consiste em um conjunto de protocolos projetados para a autenticação de duas entidades quaisquer (e.g., duas pessoas) utilizando um aplicativo para dispositivos móveis.…”

Section: Introductionunclassified

Sistema para Autenticação entre Clientes, Técnicos e ISPs

Quincozes¹,

Temp²,

Quincozes³

et al. 2020

Anais Da XVIII Escola Regional De Redes De Computadores (ERRC 2020)

View full text Add to dashboard Cite

O processo de suporte dos Internet Service Providers (ISPs) regionais ainda costuma utilizar protocolos frágeis de autenticação, como as carteirinhas físicas (ou virtuais) baseadas em dados estáticos não autenticáveis. Essas carteirinhas podem ser facilmente roubadas, clonadas, ou reproduzidas, comprometendo o processo de autenticação entre as entidades envolvidas com suporte técnico, presencial e remoto, do ISP (clientes, técnicos, e gestores). Neste trabalho, propomos um sistema composto por mecanismos e protocolos para autenticar e identificar de forma segura as referidas entidades. A ferramenta Scyther foi utilizada para realizar uma verificação automática do protocolo proposto.

show abstract

A Survey on Trends of Two-Factor Authentication

Tirfe

Anand

2021

Lecture Notes in Networks and Systems

View full text Add to dashboard Cite

2FMA-NetBank: A proposed two factor and mutual authentication scheme for efficient and secure internet banking

Cited by 8 publications

References 3 publications

0EISUA: Zero Effort Indoor Secure User Authentication

0EISUA: Zero Effort Indoor Secure User Authentication

Sistema para Autenticação entre Clientes, Técnicos e ISPs

A Survey on Trends of Two-Factor Authentication

Contact Info

Product

Resources

About