THREE-FACTOR AUTHENTICATION USING SMART PHONE

Abstract

The current environment has most of the authentication type. Authenticate remote client is an important of all organizations and systems. Every organization need to protect their system users and customer sercuirty. Time to time hackers advance hacking types, at the same time security protocol also improved such as simple password, two-factor authentication and three-factor authentication. Now a day there is lot of research going on to find best authentication protocol. In common, there are three authentication factors something user knows; Simple password, Something user has; Smart phone, smart card or hardware token and Something user is; Biometric. Development of a protocol with the intention to solve these problems is proposed in this thesis. The objective of the project is to come up with a security protocol that protection with the security. The PKI asymmetric key encryption is used for secure communications along with hashing. For this, a proposed approach is available in the document under methodology and design. It describes the entire flow of the threefactor authentication protocol with the above concepts in track. The scope of this project is to implement this protocol only for point of authenticate remote user. This can be further extended for other scenarios (online user authentication) as well and that will be reserved as future work. This thesis covers design and implementation of a smart phone based three-factor authentication. Use PKI certificate and private key for secure end to end communication. Smart phone and web application directly connect with security engine, being regulatory compliant are some of the primary aims identified to be achieve Implementation of the proof-of-concept for the designed protocol and production implementation idea realize the primary objects.