One Time Password (OTP) is free from brute force, replay, and shoulder attacks. The codes may originate from different entropy attributes and schemes, such as true random and digital random number generators. The aim of the study is to develop an Computerized Two Factor Authentication Login System Using One Time Password (OTP) with SMS. In achieving this aim, the following specific objectives were laid out to develop anti-form grabbing technique to encode the user inputs as they are being entered, Implement a Two Factor Authentication mechanism using One Time Password (OTP) with SMS, develop a medium that make use of Email from the server for identity Verification, and develop the OTP algorithm to authenticate the end user. The motivation that led to the implementation of the proposed system is as a result of the challenges of poor security and vulnerability of users, resulting to applications being hacked by unauthorized people, the researcher delved into developing a more secured login application that sends a secret pass-code to the registered phone number of a user for identification purpose. The methodology adopted in this study is the structured system analysis and design methodology (SSADM) which is a technical approach for analyzing and designing an application or system by applying object throughout the software development process. The programming language used is HTML, CSS, JAVASCRIPT, PHP, SQL and JQUERY. The reason why web programming languages was used is because, it is platform independent and it is a web based application. The study will be of great importance to researcher who intends to carry out study in similar topic as the study will serve as a reference point. Finally, the study will be of significance to academia, students, lecturers and the general public as the findings will also contribute to the pool of knowledge. The expected result is a Two Factor Authentication Login System Using One Time Password (OTP) with SMS that will authenticate system users, using QR Code and OTP with SMS. Also, the system will be able to detect valid and invalid OTP code inputted in the application software.
1.1 Introduction
One Time Password (OTP) is free from brute force, replay, and shoulder attacks. The codes may originate from different entropy attributes and schemes, such as true random and digital random number generators. Businesses, organizations, and academic institutions have adopted OTP methods for credit card transaction confirmation, recalling forgotten passwords, and validating web portal accounts. An OTP is a created secret word which just substantial once. It is an automatically produced numeric or alphanumeric string of characters that validates the client for a single transaction or login session. OTP security tokens are microprocessor based smart cards or pocket-size key fobs that produce a numeric or alphanumeric code to confirm access to the framework or string. This secret code changes each 30 or 60 seconds, contingent upon how the token is designed (Cognex, 2021).
As a prelude to other parts of this study, this chapter will discuss the background upon which this study was initiated, the statement of problems that led to this study, the Aim and Objectives of the study. Others are Significance of the study, Scope of work, Limitations of the Study and Definition of technical terms.
…