Skip to main content

One Time Password (OTP) Life Cycle and Challenges: Case Study

  • Conference paper
  • First Online:
ICCCE 2020

Part of the book series: Lecture Notes in Electrical Engineering ((LNEE,volume 698))

Abstract

In today’s world of the internet, we give priority to secure many of our accounts over this. It could be our social media profile, our cloud storage account, or anything; everything can be accessed only via a login interface. Traditional login systems follow a simple procedure of asking for username and password to authenticate the user. But due to the exponential development in the field of technology, this login interface is vulnerable to many attacks and thus compromising the user’s privacy and data. One more level has been added to the login interface known as OTP or One Time Password. The concept of OTP is that a randomly generated fixed digit code is sent to the user’s physical device if the entered password is correct. This way, we can be surer that only the appropriate user is accessing the system. This whole system combined known as 2-Factor authentication system. OTP is sent directly to the user’s accessible physical device only. It has many other applications like bank transactions, deletion of a social media account or cloud account, and many others. It’s because of the dynamic nature of OTP. This paper discusses the lifecycle of the OTP and its issues and challenges in the current world.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 129.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 169.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD 219.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Wang D, Wang P (2015) Offline dictionary attack on password authentication schemes using smart cards. In: Desmedt Y (ed) Information security, Springer International Publishing, Cham, pp 221–237

    Google Scholar 

  2. Tzemos I, Fournaris AP, Sklavos N (2016) Security and efficiency analysis of one time password techniques. In: Proceedings of the 20th pan-hellenic conference on informatics, PCI 2016. ACM, New York, pp 67:1–67:5

    Google Scholar 

  3. Zahid H, Khan U (2010) Comparative study of authentication techniques

    Google Scholar 

  4. Hsieh W, Leu J (2011) Design of a time and location based one-time password authentication scheme. In: 2011 7th international wireless communications and mobile computing conference, pp 201–206

    Google Scholar 

  5. Jiang X, Ling J (2013) Simple and effective one-time password authentication scheme. In: 2013 2nd international symposium on instrumentation and measurement, sensor network and automation (IMSNA), pp 529–531, December 2013

    Google Scholar 

  6. Erdem E, Sandıkkaya MT (2019) Otpaas—one time password as a service. IEEE Trans Inf Forensics Secur 14(3):743–756

    Article  Google Scholar 

  7. M’Raihi MPD, Machani S, Rydell J (2011) TOTP: time-based one-time password algorithm. RFC 6238, RFC Editor, May 2011

    Google Scholar 

  8. Avantika Bhatia. One time password (OTP) algorithm in cryptography. https://www.geeksforgeeks.org/one-time-password-otp-algorithm-in-cryptography/

  9. Khan AA (2013) Preventing phishing attacks using one time password and user machine identification. CoRR, abs/1305.2704

    Google Scholar 

  10. Lee YS, Lim H, Lee H (2010) A study on efficient OTP generation using stream cipher with random digit. In: 2010 the 12th international conference on advanced communication technology (ICACT), vol 2, pp 1670–1675, February 2010

    Google Scholar 

  11. Zendrato N, Zarlis M, Efendi S, Barus ES, Sulindawaty, Fahmi H (2019) Increase security of IoT devices using multiple one time password. J Phys Conf Ser 1255:012030

    Google Scholar 

  12. Eldefrawy MH, Alghathbar K, Khan MK (2011) OTP-based two-factor authentication using mobile phones. In: 2011 eighth international conference on information technology: new generations, pp 327–331, April 2011

    Google Scholar 

  13. Hsieh W-B, Leu J-S (2013) A time and location information assisted OTP scheme. Wireless Pers Commun 72(1):509–519

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Deepak Kumar .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2021 The Editor(s) (if applicable) and The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd.

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Kumar, D., Gautam, U.K., Chandavarkar, B.R. (2021). One Time Password (OTP) Life Cycle and Challenges: Case Study. In: Kumar, A., Mozar, S. (eds) ICCCE 2020. Lecture Notes in Electrical Engineering, vol 698. Springer, Singapore. https://doi.org/10.1007/978-981-15-7961-5_13

Download citation

  • DOI: https://doi.org/10.1007/978-981-15-7961-5_13

  • Published:

  • Publisher Name: Springer, Singapore

  • Print ISBN: 978-981-15-7960-8

  • Online ISBN: 978-981-15-7961-5

  • eBook Packages: EngineeringEngineering (R0)

Publish with us

Policies and ethics