New Anti-phishing Method with Two Types of Passwords in OpenID System

With the rapid development of IT, the demand for online services is growing. In order to obtain network services, each person must register a lot of accounts and passwords on the site. To meet the need that user effectively manage more and more accounts and passwords, OpenID was born. OpenID is a convenient, simple, user-centric ID management system. OpenID provides single sign-on (SSO) service, that is, we login only once and can enjoy the service of multiple sites. But OpenID is vulnerable to phishing attacks. To avoid phishing attacks, many methods have been proposed, but there is no satisfactory method. In this paper, we propose a model of two types of passwords for anti-phishing. Through analysis, this method can effectively avoid phishing.