Password-less two-factor authentication using scannable barcodes on a mobile device

<p>Currently, passwords are the default method used to authenticate users. As hardware continues to advance in speed, breaking these passwords becomes easier. The traditional solution to this problem is ever increasing password complexity and two-factor authentication. However, users become strained under overly complex login systems and often circumvent them. Two-factor authentication also adds to this complexity and many forms of two-factor authentication are inherently insecure. In answer to these problems, this project proposes a password-less multi-factor authentication system, which leverages the tried-and-proven existing technologies, asymmetric cryptography, digital signatures, and biometric authentication. Simulated user testing shows promising results, suggesting that registration can be completed in just over thirty seconds, and authentication in just over two seconds. An analysis of this project’s possible attack vectors, preventative steps taken, and their solutions in potential future research are also discussed.</p>

Name thesis:degree_name

Master of Science (MS) in Computer Science

Level thesis:degree_level

Thesis

Discipline thesis:degree_discipline

Computer Science and Electrical Engineering

Year

2021

Author dc:creator

• Callant II, Grant M

• Information Security

Statement dc:rights

• Access is available to all users

Repository record dc:identifier

https://dc.ewu.edu/theses/668

OAI identifier oai:identifier

oai:dc.ewu.edu:theses-1671