Android-based token authentication for securing the online transaction system

摘要

The online transaction has some security issues. Some attacks such as spoofing, phishing, and key-logger may threat the security of online transaction. The use of a token is one of solutions to increase its security. This paper presented the design and implementation of an android-based authentication system using One-time pad (OTP) algorithm. The use of a mobile phone gives advantage in avoiding a requirement of a specific token machine. The experiments show that the system can generate a unique token's key for each user in a specified period. The system also successfully pass through some attacks testing.