Modified Mobile Transaction Authentication Number System for 2-layer security

Abstract

Mobile phones are commonly used by web servers to validate user's identification and authentication. It enhances user's trust in online transactions and empowers him to use his mobile phone network as an additional layer of security. This mechanism is known as Mobile Transaction Authentication Number System (mTAN) which is used by e-banks and social media sites. This system has some weakness and users are still vulnerable to serious security risks. Unauthorized individuals can find their ways to get unauthorized access in traditional mTAN system. In this paper, security risks associated with current mTAN system are discussed and some modifications in existing system are proposed for using mTAN in a more secure way.