Mobil Kullanıcılar için Konum Tabanlı Rastlantısal Tek Kullanımlık Şifreler
Muhammed Özsoy, Mustafa Burunkaya · DergiPark (Istanbul University) · 2013
– Recently, user authentication has emerged as one of the most important security issues as a result of the enormous growth of the electronic accounts.A lot of work has been made on the subject, and most of that work has preferred authentication scheme using mobile devices for their own solutions. No doubt, mobile devices have become an indispensable part of our daily lives. Their capabilities are increasing every day. As of now, most of mobile devices on the market is equipped with the Global Positioning System (GPS). The real-time location data of a mobile device can be obtained thanks to this technology. In this paper, a location-based random one time passwords scheme are proposed and an implementation was carried out successfully. When accessing the online accounts that require to be made authentication, proposed scheme will provide high reliability for authentication process. Two separate software modules have been developed. One of those runs over the user's mobile device that has GPS technology and other one runs over the authentication server.With this proposed scheme, location information has been used as a parameter in the process of user authentication.Thanks to software modules that can be installed easily on both sides, security vulnerabilities that are caused by permanent passwords have been fixed.User location information that is included as a factor in the production of OTP has taken part in the proposed scheme for authentication system as a safer and more convenient feature.