Authenticating Legal Possession of a Smartphone Using the Execution Result of Its Unique Code Function 


Vol. 45,  No. 6, pp. 1004-1015, Jun.  2020
10.7840/kics.2020.45.6.1004


PDF
  Abstract

SMS-based authentication and improved methods for supplementary authentication or resetting forgotten passwords enable user impersonation by the attacker if the contents of the authentication server are leaked to the attacker, even if there is no user error in security. Hence an authentication method is required to ensure security not only for information leakage through a user"s smartphone or communication process but also for attacks on the server itself. We propose a scheme strongly demonstrates that a user possesses a smartphone legally using the execution result of a unique code function in the phone. The scheme enables much more secure authentication replacing the existing SMS-based authentication by using a smartphone. It assumes a separate server that verifies the results of code execution to provide strong security by separating the information and roles between servers so that any server‘s information alone is not sufficient for authenticating users. Users can enjoy the improved security provided by the proposed scheme compared to the SMS authentication code through familiar processes such as installing the application in the mobile environment, running, and entering personal information.

  Statistics
Cumulative Counts from November, 2022
Multiple requests among the same browser session are counted as one view. If you mouse over a chart, the values of data points will be shown.


  Cite this article

[IEEE Style]

J. Park, "Authenticating Legal Possession of a Smartphone Using the Execution Result of Its Unique Code Function," The Journal of Korean Institute of Communications and Information Sciences, vol. 45, no. 6, pp. 1004-1015, 2020. DOI: 10.7840/kics.2020.45.6.1004.

[ACM Style]

Jun-Cheol Park. 2020. Authenticating Legal Possession of a Smartphone Using the Execution Result of Its Unique Code Function. The Journal of Korean Institute of Communications and Information Sciences, 45, 6, (2020), 1004-1015. DOI: 10.7840/kics.2020.45.6.1004.

[KICS Style]

Jun-Cheol Park, "Authenticating Legal Possession of a Smartphone Using the Execution Result of Its Unique Code Function," The Journal of Korean Institute of Communications and Information Sciences, vol. 45, no. 6, pp. 1004-1015, 6. 2020. (https://doi.org/10.7840/kics.2020.45.6.1004)