Analysis of Two Token-Based Authentication Schemes for Mobile Banking

摘要: We analyze two token-based authentication schemes, designed for authenticating users in banking systems implemented over mobile networks. The first scheme is currently deployed India by a service provider named Eko with reach of 50,000 customers. second was proposed recently [SOUPS2010] (in joint effort Eko) to fix weaknesses the system, and being considered deployment. Both rely on PINs printed codebooks (which are unique per user) authentication. In this paper, we present detailed security analysis schemes. show that EKO’s current susceptible PIN recovery attacks class impersonation wherein attacker compromises users’ codebooks. new scheme, other hand, secure against both these attack possibilities. also schemes where not compromised. Variants improved proposed.