mOTP - mobile OneTimePasswords

This application lets you generate One Time Passwords that are used for a more secure authentication (two-factor) - instead of having to enter a static password the iPhone plays the role as a "security token" that generates passwords that are valid only one time.

The authentication mechanism is based on two factors:

- the token device (i.e. mOTP-Application) and

- a PIN

Since the generated passwords are only valid for a very short time - it is of no use for a possible attacker.

Moreover the passwords can only be generated with a hold of the PIN as well as the token device.

Note:

- the server you want to log onto also needs to implement the OTP-algorithm, you need to configure your "shared secret/PIN" there

- the secret key is generated using random by shaking your iPhone :)

- the algorithm uses MD5-hashing

- compare this solution with "Mobile-OTP" Midlet solution on http://motp.sourceforge.net/- also free server components to be used e.g. as PAM can be found there.

- the clocks of your iPhone and your Server have to be in sync

- the algorithm can also be used for implementing a challenge-response authentication i.e. the PIN is not fixed but a random number is provided to you by the server at the login prompt.