A secure OTP algorithm using a smartphone application

Hoyul Choi; Hyunsoo Kwon; Junbeom Hur

doi:10.1109/ICUFN.2015.7182589

A secure OTP algorithm using a smartphone application

Hoyul Choi, Hyunsoo Kwon, Junbeom Hur

Department of Computer Science and Engineering

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

10 Citations (Scopus)

Abstract

Recently, several authentication protocols are being used in mobile applications. OTP is one of the most powerful authentication methods among them. However, it has some security vulnerabilities, particularly to MITM(Man-in-the-Middle) attack and MITPC/Phone(Man-in-the-PC/Phone) attack. An adversary could know a valid OTP value and be authenticated with this secret information in the presence of those attacks. To solve these problems, we propose a novel OTP algorithm and compare it with existing algorithms. The proposed scheme is secure against MITM attack and MITPC/Phone attack by using a captcha image, IMSI number embedded in SIM card and limiting available time of an attack.

Original language	English
Title of host publication	ICUFN 2015 - 7th International Conference on Ubiquitous and Future Networks
Publisher	IEEE Computer Society
Pages	476-481
Number of pages	6
ISBN (Electronic)	9781479989935
DOIs	https://doi.org/10.1109/ICUFN.2015.7182589
Publication status	Published - 2015 Aug 7
Event	7th International Conference on Ubiquitous and Future Networks, ICUFN 2015 - Sapporo, Japan Duration: 2015 Jul 7 → 2015 Jul 10

Publication series

Name	International Conference on Ubiquitous and Future Networks, ICUFN
Volume	2015-August
ISSN (Print)	2165-8528
ISSN (Electronic)	2165-8536

Other

Other	7th International Conference on Ubiquitous and Future Networks, ICUFN 2015
Country/Territory	Japan
City	Sapporo
Period	15/7/7 → 15/7/10

Bibliographical note

Publisher Copyright:
© 2015 IEEE.

Keywords

MITM
MITPhone
OTP
application
smart phone

ASJC Scopus subject areas

Computer Networks and Communications
Computer Science Applications
Hardware and Architecture

Access to Document

10.1109/ICUFN.2015.7182589

Cite this

A secure OTP algorithm using a smartphone application. / Choi, Hoyul; Kwon, Hyunsoo; Hur, Junbeom.
ICUFN 2015 - 7th International Conference on Ubiquitous and Future Networks. IEEE Computer Society, 2015. p. 476-481 7182589 (International Conference on Ubiquitous and Future Networks, ICUFN; Vol. 2015-August).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Choi, H, Kwon, H & Hur, J 2015, A secure OTP algorithm using a smartphone application. in ICUFN 2015 - 7th International Conference on Ubiquitous and Future Networks., 7182589, International Conference on Ubiquitous and Future Networks, ICUFN, vol. 2015-August, IEEE Computer Society, pp. 476-481, 7th International Conference on Ubiquitous and Future Networks, ICUFN 2015, Sapporo, Japan, 15/7/7. https://doi.org/10.1109/ICUFN.2015.7182589

@inproceedings{a75434c30bb44974982b5a8812323cc5,

title = "A secure OTP algorithm using a smartphone application",

abstract = "Recently, several authentication protocols are being used in mobile applications. OTP is one of the most powerful authentication methods among them. However, it has some security vulnerabilities, particularly to MITM(Man-in-the-Middle) attack and MITPC/Phone(Man-in-the-PC/Phone) attack. An adversary could know a valid OTP value and be authenticated with this secret information in the presence of those attacks. To solve these problems, we propose a novel OTP algorithm and compare it with existing algorithms. The proposed scheme is secure against MITM attack and MITPC/Phone attack by using a captcha image, IMSI number embedded in SIM card and limiting available time of an attack.",

keywords = "MITM, MITPhone, OTP, application, smart phone",

author = "Hoyul Choi and Hyunsoo Kwon and Junbeom Hur",

note = "Publisher Copyright: {\textcopyright} 2015 IEEE.; 7th International Conference on Ubiquitous and Future Networks, ICUFN 2015 ; Conference date: 07-07-2015 Through 10-07-2015",

year = "2015",

month = aug,

day = "7",

doi = "10.1109/ICUFN.2015.7182589",

language = "English",

series = "International Conference on Ubiquitous and Future Networks, ICUFN",

publisher = "IEEE Computer Society",

pages = "476--481",

booktitle = "ICUFN 2015 - 7th International Conference on Ubiquitous and Future Networks",

}

TY - GEN

T1 - A secure OTP algorithm using a smartphone application

AU - Choi, Hoyul

AU - Kwon, Hyunsoo

AU - Hur, Junbeom

PY - 2015/8/7

Y1 - 2015/8/7

N2 - Recently, several authentication protocols are being used in mobile applications. OTP is one of the most powerful authentication methods among them. However, it has some security vulnerabilities, particularly to MITM(Man-in-the-Middle) attack and MITPC/Phone(Man-in-the-PC/Phone) attack. An adversary could know a valid OTP value and be authenticated with this secret information in the presence of those attacks. To solve these problems, we propose a novel OTP algorithm and compare it with existing algorithms. The proposed scheme is secure against MITM attack and MITPC/Phone attack by using a captcha image, IMSI number embedded in SIM card and limiting available time of an attack.

AB - Recently, several authentication protocols are being used in mobile applications. OTP is one of the most powerful authentication methods among them. However, it has some security vulnerabilities, particularly to MITM(Man-in-the-Middle) attack and MITPC/Phone(Man-in-the-PC/Phone) attack. An adversary could know a valid OTP value and be authenticated with this secret information in the presence of those attacks. To solve these problems, we propose a novel OTP algorithm and compare it with existing algorithms. The proposed scheme is secure against MITM attack and MITPC/Phone attack by using a captcha image, IMSI number embedded in SIM card and limiting available time of an attack.

KW - MITM

KW - MITPhone

KW - OTP

KW - application

KW - smart phone

UR - http://www.scopus.com/inward/record.url?scp=84944681555&partnerID=8YFLogxK

U2 - 10.1109/ICUFN.2015.7182589

DO - 10.1109/ICUFN.2015.7182589

M3 - Conference contribution

AN - SCOPUS:84944681555

T3 - International Conference on Ubiquitous and Future Networks, ICUFN

SP - 476

EP - 481

BT - ICUFN 2015 - 7th International Conference on Ubiquitous and Future Networks

PB - IEEE Computer Society

T2 - 7th International Conference on Ubiquitous and Future Networks, ICUFN 2015

Y2 - 7 July 2015 through 10 July 2015

ER -

A secure OTP algorithm using a smartphone application

Abstract

Publication series

Other

Bibliographical note

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this