About one time passwords, a method of verification in modern days.

1. Presented by:
Saumya varshney

2. • What is password?
• What is secure password?
• One time password.
• How OTP’s are generated?
• Method to deliver OTP.
• Conclusion.

3. • A password is an unpacked sequence of
characters used to determine that a user
requesting access to a system is really that
particular user.
• A password is typically somewhere
between four and 16 characters,
depending on how the system is set up.

4. • A password that includes uppercase letters, lowercase
letters, and symbols or numbers, and is not a word found
in a dictionary. Also called a strong password.
• Characteristics of secure
password:
*use length to your advantage.
*don’t use dictionary words, and form a random
sequence of words or letters.
*add number and symbol.
*create complexity with upper and lowercase letters

5. • A one-time password (OTP) is a
password that is valid for only one login
session or transaction. OTPs avoid a
number of shortcomings that are
associated with traditional
(static) passwords. In contrast to
static passwords, they are not easy
to replay attacks. OTPs are difficult for
human beings to memorize. Therefore they
require additional technology to work.

6. •OTP generation algorithms typically make use
of pseudo randomness or randomness. This is
necessary because otherwise it would be easy to
predict future OTPs by observing previous ones.
Various approaches for the generation of OTPs
are:

7. • Time synchronization.
• Algorithm to generate new
password using previous one.
• Algorithm where new password is
based on challenge.

8. 1. Time synchronization:
A time-synchronized OTP is usually
related to a piece of hardware called
a security token i.e. each user is given
a personal token that generates a one-
time password. An example of time-
synchronized OTP standard is TOTP.

9. 2. Mathematical algorithm:
we use some mathematical equations
to generate random numbers used as OTP.
The methods of delivering the OTP which
are token-based may use either of these
types of algorithm instead of time-
synchronization.

10. 1. Text message:
Text messaging is a everywhere available
communication channel, being directly available in
nearly all mobile handsets . The user can receive
the OTP either as a text message or via an
automated call using text-to-speech conversion.
e.g.: Gmail account security key.

11. 2. Web based methods:
Each time the user logs into the website
they are presented with a randomly
generated grid of pic alphanumeric
character overlaid on it. The user looks for
the pictures that fit their pre-chosen
categories and enters the associated
alphanumeric characters to form a one-time
access code.

12. 3. Hard copy:
In some countries, in online banking,
the bank sends to the user a numbered
list of OTPs that are printed on paper.
Other thing is plastic cards with actual
OTPs obscured by a layer that the user
has to scratch off to reveal a numbered
OTP.

13. One time password is used in most
common thing that is used by
locality.
It has a number of advantages like
“creating any Gmail account”,
“recharging your phone”, ”anti-virus
packages” and many more.

14. •Thank
you