A New Secure OpenID Authentication Mechanism Using One-Time Password (OTP)

Author

Huping Wang ; Chunxiao Fan ; Shuai Yang ; Junwei Zou ; Xiaoying Zhang

Author_Institution

Sch. of Electron. Eng., Beijing Univ. of Posts & Telecommun., Beijing, China

fYear

2011

Firstpage

1

Lastpage

4

Abstract

Nowadays, OpenID is a popular specification and provided by several large websites. It is decentralized, open standard to authenticate user´s identity. We don´t deny that OpenID has some disadvantages. In our proposal, we try to improve the performance of OpenID. The proposed OpenID authentication mechanism is embedded with One-time password (OTP) technology which solves the security problems of OpenID. We also illustrate the OpenID architecture with OTP and a typical authentication process between mobile terminal and OpenID provider. Finally, we analyses the system security and performance of OpenID. The results demonstrate the proposed authentication mechanism will be safer than the standard OpenID system.

Keywords

Internet; Web sites; message authentication; security of data; OTP technology; authenticate user´s identity; mobile terminal; one-time password; secure OpenID authentication mechanism; Authentication; Cellular phones; Mobile communication; Servers; Web services;

fLanguage

English

Publisher

ieee

Conference_Titel

Wireless Communications, Networking and Mobile Computing (WiCOM), 2011 7th International Conference on

Conference_Location

Wuhan

ISSN

2161-9646

Print_ISBN

978-1-4244-6250-6

Type

conf

DOI

10.1109/wicom.2011.6040525

Filename

6040525