A complete "Mobile" strong authentication system (Mobile Two-factor authentication “MT-FA”) for generating One Time Password “OTP” (One Time Password) on mobile phones.

« mobilkee » is our patented solution, highly secured, easy to use and requiring no specific hardware device, accessible to everyone.

Problem

A growing number of services are accessible via a computer and internet (banking, online shopping, taxes, utilities, etc..). These services often require to know (and verify) the identity of the user to ensure the required level of confidentiality. Meanwhile, even access to a LAN or remote (working in "remote") requires authentication of this type.

The password, most often linked to an identifier (login), the system is still the most commonly used to identify a user in both cases.

This "simple" authentication quickly showed its limitations. Its main weakness lies in the ease with which it can be found:

• password copied on a paper beside the computer
  
  
• trivial password chosen by the user
  
  
• always the same password for all selected services
  
• …
  
  

Different techniques are widely used to retrieve those two pieces of information:

• "phishing" E-mails contain false links that direct users to fake websites that collect sensitive information (bank accounts nr ...).
  
• The "sniffer" impactor, Trojan horses, "keylogger", spywares implanted in the victim's computer without his knowledge, collect and transmit the same confidential information to fraudsters.
  
  
  

What brings One Time Password

The process is to generate a password whose validity is limited in time (usually about one minute).

The generation of password uses authentication factors, which are independent means of establishing identity and grant access privileges. They play a key role in helping to determine who is who is claimed to be. Authentication methods can use up to three factors:

1. Something that we know : confidential information, eg. : A PIN, a password …
   
   
2. Something we have : a hardware device, eg. : A card reader, keys, cell phone…
   
   
3. Something that we are : a biometric feature, eg. : Fingerprint, iris…

Adding authentication factors in an IT security system, helps to limit vulnerability to attacks of identity and therefore fraudulent access to networks and data. Well designed methods and the implementation of multifactorial authentication systems, provide better prevention against the violation of data with minimal impact on IT infrastructure.

The "traditional" access network systems as the password and login, are no longer a reliable and efficient method for authenticating users.

The OTP, unlike systems login and passwords, is a means of strong authentication.

A strong authentication solution greatly improves security and reduces significantly the costs associated with the theft of passwords by requiring at least two of the three factors mentioned above for authenticating users.