Implementation of comprehensive information security model by using JWT & CryptoJS
Yash Balkhande, Gayatri Bhamburkar, Shreyash Waghmare, Vedant Nehare, Vijay B. Gadicha · Research Square · 2024
Abstract Information security refers to the processes and tools specifically designed and deployed to protect sensitive business information from modification, disruption, destruction, and inspection furthermore. An enhanced model of information security can be made by combining various technologies such as JWT (pronoun JSON Web Token) for authentication and authorization, CryptoJS for encrypting, decrypting, and hashing of useful information, and NodeMailer for OTP transmission. Presenting a three-tiered security model to strengthen user authentication, initiated by the conventional username and password combination, establishing a foundational barrier in the first tier. Subsequently, the second tier uses Google CAPTCHA, enhancing security by mitigating automated threats. In the final tier, a one-time password (OTP) is dispatched to the user's registered mobile number or email, adding an extra layer of authentication. This structured methodology reflects our commitment to refining security protocols and preserving sensitive user information within a measured and comprehensive framework. To increase the security we will be using CryptoJS to encrypt and decrypt the message, and we will store our data in encrypted form at the database.