Multi-factor Authentication for Internet Banking Login Process

摘要

Internet banking has shown that it is one of the most used services online. One important security mechanism that is used to protect Internet banking is authentication. It will be explained here that existing authentication mechanisms during the login stage still have problems. This paper designs a simple three-message protocol that we believe can improve the security of the login process. The proposed mechanism applies the idea of multi-factor authentication, which includes the use of password, salt value, iteration number and digital signature, rather than just using a password. A proof of correctness and security is provided to ensure that secure mutual authentication and transaction authentication achieved at the end of a protocol run.