Security and Efficiency Analysis of One Time Password Techniques
Ioannis Tzemos, Apostolos P. Fournaris, Nicolas Sklavos · 2016
As a result of the rapid growth of available services provided via Internet, as well as multiple accounts a person owns, reliable user authentication schemes are mandatory for security purposes. OTP systems have prevailed as the best viable solution for security over sensitive information and pose an interesting field for research. Although, OTP schemes enhance authentication's security through various algorithmic customizations and extensions, certain compromises should be made; especially since excessively tolerable to vulnerability systems tend to have high computational and storage needs. In order to minimize the risk of a non-authenticated user having access to sensitive data, depending on the use, OTP system's architecture differs; as its tolerance towards already known attack methods. In this paper, the most widely accepted and promising OTP schemes are described and evaluated in terms of resistance against security attacks and in terms of computational intensity (performance efficiency). The results showed that there is a correlation between the security level, the computational efficiency and the storage needs of an OTP system.