Abstract

The aim of the project is to design a user authentication protocol named Opass which leverages a user cell phone and short message service to password stealing and password reuse attacks. Opass only requires a unique phone number, and involves a telecommunication service provider in registration and recovery phase. This protocol is generated a new password when a user enter the webpage anytime. The generate password is transfer to particular mobile. This Opass system used HMAC (Hash Message Authentication Code) algorithm. The password the user can use the webpage successfully. Through Opass, users only need to remember a long-term password for login on all websites

Authors and Affiliations