Creación de un prototipo de Sistema de One-Time Password para un Sistema de autenticación de dos factores: implementación de un prototipo de sistema generador de OTP basado en TOTP y su envío mediante un aplicativo web.

Abstract

Authentication represents an important security process in controlling access to a network or system. When this process is based on something one knows, it is referred to as authentication through a username and password. Traditional or static passwords cannot be solely relied upon as they are vulnerable to various types of cyber-attacks. A common solution to this problem is the implementation of authentication through One-Time Password (OTP). In this project, the creation of an OTP prototype for implementing two-factor authentication is proposed. First, a review of the different types of OTPs based on generation algorithms, delivery methods, and their level of security is performed. Then, following a working methodology, the component development is carried out to result in the OTP generation prototype. Finally, the results obtained regarding the generation of OTP and the operation of the prototype are detailed, as well as the conclusions and recommendations of the project.