DESIGN AND IMPLEMENTATION OF A SECURE BANK LOGIN SYSTEM USING A MULTI-FACTOR AUTHENTICATION
| Format: Ms Word | 1-5 Chapters | Table of Content|
INSTANT PROJECT MATERIAL DOWNLOAD
Study Level: BTech, BSc, BEng, BA, HND, ND or NCE
Amount: ₦5,000.00
CHAPTER ONE
INTRODUCTION
Background to the Study
Electronic authentication is the process of establishing trust in the identification of a person who sends data to an information system. When discussing authentication techniques that validate a person’s identity, the terms “digital authentication” and “e-authentication” are interchangeable. When used in conjunction with an electronic signature, it can provide proof that the received data was interrupted after being signed by the original sender. Electronic authentication can help to lessen the risk of identity fraud and theft by validating a person’s identity when they claim to be operating online. There are numerous electronic authentication methods available to authenticate users, ranging from passwords to multi-factor authentication (MFA). Depending on the amount of security utilized, users may be required to authenticate their identity using a security token, a competitive question, or a third-party CA-verified certificate. The National Institute of Standards and Technology (NIST) in the United States has created a simple electronic representation model that provides a foundation for authentication processing regardless of country, region, or jurisdiction. According to this paradigm, the registration procedure begins with a Credential Service Provider (CSP) request. Applicants must be identified before the CSP can use the Cole Candidate ID to confirm P. They recognize “client” status by giving identification cards, such as identification and certification, which apply to pronoun form. There have been prior authentication solutions and they are:
- Password-based authentication: password authentication offers an easy way of authenticating users. In password authentication, the user must supply a password for each server, and the administrator must keep track of the name and password for each user, typically on separate servers.
- Multi-factor authentication(mfa): multi-factor authentication (mfa) is an authentication method that requires the user to provide two or more verification factors to gain access to a resource such as an application, online account, or a vpn.
iii. Biometric authentication: this involves the use of unique biological characteristics of an individual to verify that he / she is who they are.
- Token-based authentication: this is a protocol which allows users to verify their identity, and in return receive a unique access token
- Puzzle-solving authentication: this authentication involves using a puzzle or picture base for the user to solve in other to gain access.
- Public and private key-pairs: in the case of public and private keys pair is when the user has two or more separate keys one can be since of viewed by more than just the user or owner the is referred to as the public key but the private key should only be viewed or known by the user and the user only a perfect example for the the authentication pattern is bitcoin wallets.
vii. Two-factor authentication (2fa): also known as two-step verification or dualfactor authentication, is a security procedure in which users submit two independent authentication factors to validate their identity. This procedure is carried out to improve the security of both the user’s credentials and the resources to which the user has access.
viii. Single sign-on (sso): is an authentication mechanism that allows a user to log in to any of numerous linked, yet separate, software systems using a single ID and password. ix. Challenge handshake authentication protocol (chap): is a method for Point-toPoint Protocol (PPP) servers to confirm the identification of distant clients. CHAP uses a three-way handshake to verify the client’s identity on a regular basis.
- STATEMENT OF THE PROBLEM
The necessity for verification has evolved throughout time; hundreds of years ago, individuals knew one other based on sight and appearance. Over time, the most popular method of providing confirmation was a signed signature. To overcome the authentication challenge for electronic information, we can create trust in user identification electronically between people or between people and computers. The requirement for a more secure system in a financial sector exists so that an attacker cannot steal a customer’s identity.
1.2 BACKGROUND OF THE PROBLEM
According to the Open online Application Security Project (OWASP), the second greatest risk to online security is the loss of credibility and session management. This risk offers numerous security issues that arise during the creation and maintenance processes. This danger offers numerous security issues associated with the development and maintenance of user identities. Cyber risks to financial institutions increased dramatically in 2010, notably in the European commercial and consumer banking markets in the United States (RSA, 2011). Hackers detect important information like account numbers and passwords and make it available to them. It is critical for a person to rely on what is sent to the bank’s servers and deal with cybersecurity concerns, as the bank has built an online security program. Competing payments are typically processed via chip cards. The widespread use of cell phones and smartphones has increased their reliability and responsiveness. To confirm, the goods may be easily paired with the Freepost number. Credit cards rely on technological gadgets to transmit fresh data swiftly and efficiently. An attacker can obtain user information or even unlawful access to a system using the following methods, which can be avoided by having or building better authentication systems:
- Maintain user credibility without hacking or coding.
- Session ID’s.
- Browser caching is possible
- Password recovery or reset function.
- AIM AND OBJECTIVES
The study focuses on the design and implementation of an e-authentication system employing a QR code and opt. Authentication is an activity that grants access to a person whose credentials allow them to do a specified activity. If the credentials match, the process is complete, and the user is granted the necessary permissions to access the information. In general, the user must submit their password before using a system service. The primary goal is to implement a secure login authentication system that makes advantage of twofactor authentication. The security of the login system could be improved by using two-factor authentication. In order to log in, the attacker must first pass the next tier of defense. This system will aid in the improvement of the login authentication process.
USE THIS MATERIALS AS A GUIDE FOR YOUR PERSONAL RESEARCH WORK (IF PROPERLY CITED)