期刊名称：International Journal of Computer Science Issues
印刷版ISSN：1694-0784
电子版ISSN：1694-0814
出版年度：2017
卷号：14
期号：6
出版社：IJCSI Press
摘要：Nowadays, most of the web-based applications requires typing textual password to confirm ones identity to remote service. However, applying textual password for authentication purpose has considerable security attacks such as password stealing attack and password reuse attack. Therefore, various approaches are proposed for securing user authentication to login to a website. In this paper, we improve a user authentication system named oPass which referred to online password. The identity of the user will be authenticated through cellular phone which is used to generate a one-time session password, then transmit the encrypted message through short message service. With the proposed technique, a deeper user authentication is performed without revealing password to the untrusted computers.
