A CASCADE MULTI-STAGE ONE-TIME PASSWORD, TEXTUAL AND RECALL-BASED GRAPHICAL PASSWORD FOR ONLINE AUTHENTICATION

Abstract

The most widely used method of computer authentication is text passwords. This method has been discovered to have several drawbacks. Passwords that are easy to guess, for example, are frequently chosen by users. On the other hand, a difficult-to-guess password is also difficult-to-remember. Brute-force and keylogger attacks are also possible with textual passwords. Based on the notion that people recall visuals better than text, graphical passwords have been advocated in the literature as a potential replacement to alphanumerical passwords. However, existing graphical passwords are vulnerable to a shoulder surfing attack. This thesis presents an authentication system for online applications based on a combination of one-time passwords, textual, and graphical passwords to address these security weaknesses. Usability testing and security analysis procedures were used to confirm the suggested system's efficiency. Thirty people participated in the system evaluation. Twenty-seven out of the thirty gave the solution, scored 80% in terms of efficiency, security, reliability and seamless ability, while three out of the thirty have concern about network unavailability for one time password dropping. The findings of the security study revealed that the proposed system met its primary security requirements. The usability test revealed that the suggested system is simple to operate, friendly, and secure. This study demonstrated superior usability and security when compared to conventional authentication technologies