Efficient Implementation of oPass User Authentication Protocol

Nowadays, most of the web-based applications requires typing textual password to confirm one's identity to remote service. However, applying textual password for authentication purpose has considerable security attacks such as password stealing attack and password reuse attack. Therefore, various approaches are proposed for securing user authentication to login to a website. In this paper, we improve a user authentication system named oPass which referred to online password. The identity of the user will be authenticated through cellular phone which is used to generate a one-time session password, then transmit the encrypted message through short message service. With the proposed technique, a deeper user authentication is performed without revealing password to the untrusted computers.