Design of Two-Way One-Time-Password Authentication Scheme Based on True Random Numbers

Authentication technology based on one-time-password (OTP) is being used in more important networks applications because of its higher security. But many current schemes based on OTP still use mathematic methods or from simple random origins to get passwords. These passwords often lack of good randomicity and are not able to ensure the security of the systems. In the paper, a new authentication scheme based on OTP is presented. The scheme generates random numbers quickly by physical methods and applies them in aspects of the whole authentication process. It can guarantee the dynamic and secure property of passwords. Therefore, it can defense many attacks of human sources and is fit for the use of fields which need high security guarantee like finance systems and stock exchange systems.