Encrypted Honeyword Authentication Framework for Online Banking Security

Password authentication is the most widely used authentication technique, for it is available at a low cost and easy to deploy. Many users usually set their passwords using familiar vocabulary for its convenience to remember. Passwords may be leaked from weak systems. Vulnerabilities are constantly being discovered, and not all systems could be timely patched to resist attacks, which give adversaries an opportunity to illegally access weak systems. To overcome the vulnerabilities of password attacks, here propose a password authentication framework that is designed for secure password storage and could be easily integrated into existing authentication systems. In proposed framework, introduces a comprehensive security framework integrating innovative techniques to enhance password protection and user authentication. The approach involves the incorporation of honey words and the implementation of the AES (Advanced Encryption Standard) algorithm for secure password storage. The password storage mechanism employs honey words as decoy passwords, creating a deceptive layer for potential attackers. Additionally, the honey passwords are encrypted using AES, heightening the overall security posture. During the login process, users are authenticated through a combination of factors, encompassing traditional password authentication method using username and password. A critical component of the proposed system is the server-based generation and transmission of decryption keys during login. This key allows the client to decrypt the stored password securely. The inclusion of honey words further fortifies the verification process, as any attempt to access these decoy passwords triggers an alert. Upon successful verification, users gain access to the banking application, where they can engage in secure online transactions