Two Factor Authentication Framework Using OTP-SMS Based on Blockchain

Abstract

The authentication process is the main step which should be used to confirm that the user is the legitimate one and give the access only for him. Recently, Two Factor Authentication (2FA) schemes have been used by most of the applications to add an extra layer of security on the login process and solve the vulnerabilities of using only one factor for authentication. OTP-SMS is one of the most common methods which has been used in 2FA. However, attackers found a way to attack this method and gain an access to the user's account without their permission. In this paper, we proposed a new 2FA framework for OTP-SMS method to prevent different attacks, mainly Man In The Middle (MITM) attack and third party attack. The proposed framework is based on the use of Blockchain technology, which add more security and better environment for authentication process. The proposed framework uses an encrypted OTP, which generated by smart contract and uses also its hash value to send it to the application/website to complete the authentication process. We introduced a comparison between our proposed framework and other two frameworks which uses Blockchain to secure OTP-SMS. Our framework found to be secure against MITM and third party attacks and the computation time and complexity are less than other frameworks.

Usability Testing of Memorable Word in Security Enhancing in e-Government and e-Financial Systems

“…MFA requires users to provide two or more pieces of evidence to prove their identity. This could include a combination of something the user knows (such as a password), something the user has (such as a physical token or smartphone), and something the user is (such as a biometric scan) [13]. 2FA is one of the most common authentication methods.…”

Securing Digital Identity in the Zero Trust Architecture: A Blockchain Approach to Privacy-Focused Multi-Factor Authentication

“…However, the multiple blockchain transactions executed during the OTP process affect OTP generation in performance tests. In [28], the authors address the vulnerabilities of the widely used OTP-SMS method in 2FA, especially its susceptibility to MITM and third-party attacks. By leveraging blockchain technology and smart contracts, the proposed framework encrypts the OTP, enhancing the security and efficiency of the authentication process.…”

A novel Two-Factor HoneyToken Authentication Mechanism

“…They proposed a blockchain-based OTP (One-Time Password) protocol. This work builds upon other recent solutions [1,3], where the blockchain is utilized to verify the user and generate the OTP. The proposed protocol proves to be user-friendly and decouples the direct interaction of each user with the blockchain.…”

“…Figure 1: B2FHA system sequence diagram(1) The user sends a register request to the application. (2) The application creates 𝑁 OTPs, and the user specifies which honeytoken will be the valid one.…”