An Enhanced SMS-based OTP Scheme

摘要

Authenticate our identity by sending a One Time Password (OTP) through Short Message Service (SMS) is widely used in nowadays. But SMS-based OTP faces with some problems make it not secure. This paper presents a way by using encryption to enhance the security of SMS-based OTP. We introduced a parameter to make sure the request for SMS-based OTP is sponsored by the real user and then the OTP is send from the server to the user by encryption. It can prevent man in the middle (MITM), eavesdropping, replay attack and forgery attack.