Secured mutual authentication between two entities

Phishing is one of the most common attacks on the networks today and a primary enabler for fraud and identity theft, and the increasing sophistication of the phishers makes it very difficult for users to distinguish between genuine and fake. Thus, it is important to mutually authenticate each other. The mutual authentication between two entities is essential to establish a secure link over public/closed insecure networks. This paper gives an overview of proposed secure authentication system which includes the authentication server, one-time password generator, and database server. The system achieves mutual authentication by exchanging two one-time password (OTP) where OTP is a security mechanism, will be expired after single use/ some period of time and provides several advantages with respect to most of the available solutions at the state of the art. First, it enables transparent mutual authentication between two entities. Moreover, it guarantees authenticity of both entities within the same session. Finally, the proposed system ensures secure data transmission and protected access between two entities as well as to prevent from known attacks.