Creación de un prototipo de sistema de one-time password (otp) para un sistema de autenticación de dos factores : Implementación de un prototipo de sistema generador de OTP basado en TRNG y su envío a través de Telegram

Abstract

Currently, user authentication using traditional passwords may be inadequate due to vulnerabilities and various types of attacks. A two-factor authentication (2FA) solution is presented that focuses on the generation, transmission, and verification of One-Time Passwords (OTPs). The True Random Number Generator (TRNG) algorithm is used to generate random numbers in different programming languages deployed in randomly selected Docker containers to increase randomness. The OTP value is sent to the user through the Telegram messaging application and sent to the validation service to verify if it matches the previously generated OTP value. A technique of combining two randomly generated three-digit numbers is employed to reduce the risk of guessing attacks and protect the integrity of the generated OTP values. The OTP value repetition rate is measured using the chi-squared test to determine the randomness of the numbers. This test concludes that C++ is the container that generates the highest randomness. The implementation of this solution provides a secure and reliable way to obtain six-digit OTP values, which is essential in systems that require a high level of security and data protection.