OTP as a Service in the Cloud Allows for Authentication of Multiple Services

OTP Cloud Authentication Multiple Services Hardware Software Modern Security Measures

Authors

  • Shynu T Master of Engineering, Department of Biomedical Engineering, Agni College of Technology, Chennai, Tamil Nadu, India
  • S. Suman Rajest Professor, Bharath Institute of Higher Education and Research, Chennai, Tamil Nadu, India
  • R. Regin Assistant Professor, Department of Computer Science and Engineering, SRM Institute of Science and Technology, Ramapuram, India
  • Steffi. R Assistant Professor, Department of Electronics and Communication, Vins Christian College of Engineering, Tamil Nadu, India
April 30, 2023

Downloads

Users no longer trust traditional password-based authentication methods since so many online services now interact with one another. Credentials obtained online are often used to reclaim additional credentials, and sophisticated assaults often target the weakest of a large number of available credentials. One-time passwords and a two-factor authentication mechanism appear to be a natural improvement over traditional username/password schemes, thus researchers are looking into them. The OTP verifier is deployed to the cloud in this manuscript to facilitate its use by cloud service providers. OTP providers can outsource their OTP deployments to the cloud and cloud customers can activate their accounts on the OTP provider across many cloud services when the OTP verifier is hosted in the cloud as a service. This lets them take advantage of multiple cloud services without having to juggle multiple OTP accounts. Alternatively, OTP service provision prevents novice SMEs from overspending on OTP provisioning hardware, software, and staff. This paper presents the architecture necessary to create a trustworthy OTP provider in the cloud, one that respects users' right to privacy. The OTP provider registration, activation, and authentication processes for cloud users are examined. We define and evaluate the privacy and security implications of the suggested architecture. With these assumptions in place, attacks from unknown sources, user profiles with unlinkable features, inquisitive service providers, and OTP verifiers are all thwarted. The analysis ensures the reliability and validity of the proposed solution, which places the OTP supplier in the cloud.