3CAuth - A Novel Multi-Factor Authentication Scheme Using QR-Code

A multi factor authentication scheme called ’3C-Auth’ is proposed in this paper. The scheme carries out a comprehensive authentication process using the smart card, secret-pin, registered finger print, and registered mobile number of the user. The user’s password is neither transmitted in plaintext form nor revealed to the authentication server. The scheme is shone to be proof against phishing, password guessing, replay, or stolen-verifier attacks. Resistance to parallel session and denial of service attacks and the use of QR-Code in preference to SMS for OTP transfer together, make the scheme attractive for operation under peak loads. Integration of the “3C-Auth” into Multi-Layered Filtering (MLF) scheme leads to secure handling of peak loads on the server ensuring concurrency and availability as well. This clearly enhances the QoS in terms of making right admittance to right resources.