A new mobile-based multi-factor authentication scheme using pre-shared number, GPS location and time stamp

摘要

Lots of web accounts are being hacked everyday even though the public web servers like Gmail, Yahoo and Hotmail deploy the best-known security mechanisms. However, attacks usually happen due to personal faults. It is too difficult to hack the Gmail or Yahoo servers, but usually attackers try to gain access to user's system itself to get some information about his password. In this paper a new mechanism of securing web accounts is proposed to overcome these personal faults. It enhances security by generating a secret hash code based on a pre-shared number and user's current GPS location.