Disadvantages And Disadvantages Of Existing System In The Internet

People now a days rely heavily on the Internet since conventional activities or collaborations can be achieved with network services (e.g., web service). Widely deployed web services facilitate and enrich several applications, e.g., online banking, e-commerce, social networks, and cloud computing. But user authentication is only handled by text passwords for most websites. Following are the disadvantages of Existing System:

1. First, users create their passwords by themselves. For easy memorization, users tend to choose relatively weak passwords for all websites . This behavior causes a risk of a domino effect due to password reuse To steal sensitive information on websites for a specific victim (user), an adversary can extract her password

The goal of S-Pass is to prevent users from typing their memorized passwords into kiosks. By adopting one-time passwords, password information is no longer important. A one-time password is expired when the user completes the current session. Different from using

Internet channels, S-Pass leverages SMS and user’s cell-phones to avoid password stealing attacks. Fig. S-Password protocol Architecture

Above Figure describes the architecture (and environment) of the S-Pass system. To perform secure login on an un trusted computer (kiosk), S-Pass consists of a trusted cell phone, a browser on the kiosk, and a web server that users wish to access. To accomplish secure logins to the web server, the user operates his cell phone and the un trusted computer directly. The communication is possible through the SMS channel. The web browser interacts with the web server via the Internet. In our protocol design, it requires the cell phone interact directly with the kiosk. The basic way is to select available interfaces on the cell phone, SMS.

Following are the advantages of S-Pass

The mobile program sends IDu and IDs to the telecommunication service provider (TSP). This is done through a 3G connection which makes a request of registration. Once the TSP received the IDu and the IDs, it can trace the user’s phone number Tu based on SIM card used by user. After that TSP is used to distribute a shared key Ksd which plays the role of third-party between the user and the server. To encrypt the registration SMS with AES-CBC, the shared key is used. To protect the communication, the TSP and the server S will establish an SSL tunnel. Then the TSP forwards IDu, Ksd, Tu , and to the assigned server S. Server will generate the corresponding information for this account a response, including server’s identity IDs , a random seed ø, and server’s phone number Ts . The TSP then forwards IDs , ø ,Ts , and a shared key Ksd to the user’s cell phone. After reception of the response is finished, the user continues to setup a long-term password Pu with his cell phone. The cell phone computes a secret credential C by the following operation: C= H(Pu ǁ IDs ǁ ø ).

Fig. Registration Phase

LOGIN PHASE:

The login begins when the user u sends a request to the server S through an un