Professional Documents
Culture Documents
How To Secure Web Authentication
How To Secure Web Authentication
Cell Phones
Presented By:
Arpit Garg
MBA IB(IT)
A1802007095 (E11)
Batch: 2007-2009
As computing becomes persistent, people increasingly rely their business over the
Internet by using e-commerce. Now, the Internet is a preferred source to avail online
e-services such as e-commerce, e-voting, e-banking, e-governance, etc.
Features of TICs:
1. TICS are issued by bank authorities or financial institutions to the
user and not by the web server.
2. TIC is similar to OTP (One time password) and one code is used only
on one occasion.
3. It eliminates the risk of attack against traditional passwords.
7. Payment Ack.
5. Request for
payment
2. Merchant’s
approval
Payment Info.
Customer’s
Bank
Login Authentication Login Successful
Selection of Balance Enquiry option Balance Enquiry
Selection of Credit Card Transfer Selection of Bank Name and Branch
Code
Selection of Credit Card Type Fill up Requisite Details
Selection of Electronic Transfer Selection of Bank Name and Branch
Code
Fill Up Requisite Information TIC Password to Open TICs list
Entering Password for TICs Selection of encrypted TIC
Selected TIC is attached with the Acknowledgment from the Web
Credit Card Transfer Form Server Showing Successful
Authentication
SMS Received from Bank SMS showing details of Submitted
Authentication Server Transaction
Reply SMS with “YES” Response from the Server if user say
“YES”
Reply SMS with “No” Response from the Server if user say
“No”
1. GSM calls even more secure - A5/3 Algorithm” ETSI, 2002,
http://www.gsmworld.com/news/press_2002/press_15.shtml
2. http://www.cellular.co.za
3. Website on bouncy castle package:
http://www.bouncycastle.org
4. Article on internet attacks: www.educause.edu/ir/library/pdf/CSD4433.pdf
5. Article on attacks on mobile phones:
http://searchsecurity.techtarget.com/qna/0,289202,sid14_gci1232051,00.html
6. Article on security threats of mobile phones:
http://news.zdnet.com/2100-1009_22-5602919.html
7. Website on Wireless development tool kit 2.3:
http://java.sun.com/products/sjwtoolkit
8. Website on Web Server:
http://tomcat.apache.org/