PROJECT TITLE :

A Secure and Practical Authentication Scheme Using Personal Devices - 2017

ABSTRACT:

Authentication plays a critical role in securing any on-line banking system, and several banks and varied services have long relied on username/password combos to verify users. Memorizing usernames and passwords for a heap of accounts becomes a cumbersome and inefficient task. Furthermore, legacy authentication methods have failed over and over, and they're not immune against a wide variety of attacks that may be launched against users, networks, or authentication servers. Over the years, information breach reports emphasize that attackers have created various high-tech techniques to steal users' credentials, which will cause a serious threat. In this paper, we tend to propose an efficient and sensible user authentication scheme using personal devices that utilize different cryptographic primitives, like encryption, digital signature, and hashing. The technique edges from the widespread usage of ubiquitous computing and varied intelligent moveable and wearable devices that can enable users to execute a secure authentication protocol. Our proposed theme will not require an authentication server to maintain static username and password tables for identifying and verifying the legitimacy of the login users. It not solely is secure against password-related attacks, however conjointly will resist replay attacks, shoulder-surfing attacks, phishing attacks, and data breach incidents.