Enhancing Security and Privacy using Multi Factor Authenticated Key Exchange Protocol

The password verification of E-Banking is the convenient of multi factors. Thus, the multi factors are “dynamic ID-based� or “anonymous�. The multi factor anonymous scheme to prevent the user privacy, a common feature of these schemes is that their security is based on the tamper-resistance assumption about E-Bankings. The E-Banking may contain some public and sensitive security parameters. The secret information stored in the E-Bankings memory could be revealed by power analysis, reverse engineering techniques. The E-Banking verification is securely implemented on this method. This technique has been widely deployed for various kinds of daily applications, such as e-banking, e-government and e-health etc. The current feature of no password-related table is considered as more secure than the previous method of storing user credentials (user id and password) in database tables on banks’ servers. However, this method also easily hacked or overlooked by the hackers in capturing credentials in ATMs. So, this method also seems to be challenge when considering the unending catastrophic leakages of millions of user accounts in prominent service providers, and the prevalence of zero-day attacks. To overcome this problem, proposed a novel authentication system PassMatrix, based on graphical passwords to resist shoulder surfing attacks. With a one-time valid login indicator and circulative horizontal and vertical bars covering the entire scope of pass-images, PassMatrix offers no hint for attackers to figure out or narrow down the password even they conduct multiple camera-based attacks. A few anonymous schemes based on non-tamper-resistance assumption about the E-Bankings are put forward, and each is claimed to meet a self-imposed list of ambitious design goals. a truly image-factor scheme can ensure is that, only the user who possesses both a valid E-Banking and the corresponding image identification can be successfully verified by the server.