Study on a Safe and Efficient mOTP (mobile-OTP) Authentication Mechanism for the Mobile Environment

Abstract

WiBro (Wireless Broadband Internet), representative service that offer mobility, provides its service through authentication between the UICC (Universal IC Card) of the mobile terminal and the AAA (Authentication, Authorization, and Account) authentication server. However, it raises the problem that the privacy of the mobile terminal and the user can be violated, because the UICC's identification information is exposed as a plain text when the UICC sends an, initial request to the AAA authentication server. This paper proposes an authentication mechanism based on the OTP (One-Time Password), which is currently attracting attention as a strong means of authentication, in order to resolve these problems. The existing method of OTP creation raises the problem of time and counter asynchronization as the time and counter are used as the input values. On this contrary, this paper alleviates the problem of asynchronization using an automatically generated counter. In addition, the privacy of the mobile terminal and the user can be protected because mobility is assured using mOTP (mobile-OTP) based on the ubiquitous environment.