New system for more secure online banking

A new system that uses images and a one-time numerical code may provide a secure, inexpensive and easy to use alternative to current password systems used in online banking and other such services, a new study suggests.

Researchers at the Plymouth University in UK belive their new multi-level authentication system GOT pass could be effective  in protecting personal online information from hackers.

If could also be easier for users to remember, and be less expensive for providers to implement since it would not require the deployment costly hardware systems.

Researchers say the system would be applicable for online banking and other such services, where users with several accounts would struggle to carry multiple devices, to gain access.

They also publish the results of a series of security tests, demonstrating that out 690 hacking attempts-using a range o guesswork and more targeted methods-there were just  23 successful break-inc 

"Traditional passwords are undoubtedly very usable but regardless of how safe people might feel their information is , the passwords vulnerability is well known, said PhD student Hussain Alsaiari, who led the study.

"There are alternative systems out there, but they either very costly or have deployment constraints which mean they can be difficult to integrate with existing systems while maintaining user consensus.

"The GOTPass system is easy to use and implement , while at the same time offering users confidence that their information is being held securely. "said Alsaiari.

To set up the GOPass system, users would have to choose a unique username and draw any shape on 4*4 unlock pattern, similar to that already used on mobile devices.

They will then be assigned four random themes, being prompted to select one image from 30 in each.

When they subsequently log in to their account, the user would enter their username and draw the pattern lock, with the next screen containing a series of 16 images, among which are two of their selected images, sex associated distractors and eight random decoys.

Correctly identifying the two images would lead to the generated eight-digit random code located on the top left edges of the login panel which the user would then need to type in to gain access to their information 

Initial tests have shown the system to be easy to remember for users, while security analysis showed just eight of the 690 attempted hacking were genuinely seccessful, with further 15
achieved through coincidence.

"In order for online security to be strong it needs to be difficult to hack , and we have graphics and one-time password can achieve that, "said Dr Maria at Papadaki, Lecture in Network Security at Plymouth University and director of the PhD research study.

Comments