Abstract-This paper describes a method of implementing two factor authentication using mobile phones. The proposed method guarantees that authenticating to services, such as online banking or ATM machines, is done in a very secure manner. The proposed system involves using a mobile phone as a software token for One Time Password generation. The generated One Time Password is valid for only a short userdefined period of time and is generated by factors that are unique to both, the user and the mobile device itself. Additionally, an SMS-based mechanism is implemented as both a backup mechanism for retrieving the password and as a possible mean of synchronization. The proposed method has been implemented and tested. Initial results show the success of the proposed method.
Aloul and Zahidi discuss the use of one time passwords generated on a mobile phone for use with ATMs REF .
Two factor authentication using mobile phones
2009 IEEE/ACS International Conference on Computer Systems and Applications
2009 IEEE/ACS International Conference on Computer Systems and Applications
Computer Science