Modeling and analysis of two-factor authentication protocol for USB digital evidence acquisition devices

This paper proposes two-factor authentication protocol for adding security layer to USB digital evidence acquisition devices, and preventing illegal usage of data stored in that devices from unauthorized users. By using one time password generated from unique parameters of individual user, the proposed protocol can be used to protect forensic acquisition software and sensitive information stored in storage devices from any unauthorized users. In the protocol design and experiment, we use a formal method tool to model and verify for ensuring the correctness of workflow as well as a security of the protocol. The result from simulation and state space analysis show that the proposed protocol is able to strengthen up the security of USB storage devices and satisfies basic security properties.