Authentication based on position and random variable through one time password produced in mobile phone

In this paper, a new authentication scheme that will provide high reliability for authentication process when accessing the online accounts that require to be made authentication are proposed and an implementation was carried out successfully. The scheme includes location and random variables based One Time Passwords (OTP). Two separate software modules have been developed. One of those runs over the user?s mobile device that has Global Positioning System (GPS) technology and other one runs over the authentication server. This new authentication scheme can work without need for any link between client and server software modules, and with its any installation and usage costs. Also, it would not require any synchronized-work, encryption and additional software or hardware related to use of certification. At the same time, it provides a high-level security. The proposed scheme provides a solution to the problems of the available user authentication mechanisms such as the security of password transmission, synchronization between client and server, server verification by user and high cost. With this proposed scheme, location information has been used as a parameter in the process of user authentication. In addition, the proposed authentication mechanism allows a mutual authentication between the client side and the authentication server side. Thanks to software modules that can be installed easily on both sides, security vulnerabilities that are caused by permanent passwords have been fixed. User location information that is included as a parameter in the production of OTP has increased security level of proposed authentication system. This proposed authentication system has been tested in the simulation environment and successful results have been achieved.