Independent One-Time Passwords.
Aviel D. Rubin · 1995
Existing one-time password (OTP) schemes su er several drawbacks. Token-based systems are expensive, while software-based schemes rely on one-time passwords that are dependent oneachother. There are disadvantages to authentication schemes that rely on dependent OTP's. It is di cult to replicate the authentication server without lowering security. Also, current authentication schemes based on dependent OTP's only authenticate the initial connection � the remainder of the session is assumed to be authenticated. Experience shows that connections can be hijacked. A new scheme for generating one-time passwords that are independent is presented. The independence property enables easy replication of the authentication server, and authentication that is persistent for the lifetime of a connection. This mechanism is also ideally suited for smart card applications. Our implementation and several applications are discussed. 1