Secure Login Through Mobile Authentication

Logging in from an unreliable terminal on public networks using common approaches such as by way of keyboard, mouse or on-screen keyboard, is always a security issue as third party keylogger software and hardware devices are able to record key strokes and track mouse movements covertly. On the other hand, communication over a personal mobile device such as a cell phone, smartphone or table PC, is relatively safe for authentication. In this paper, we demonstrate the usage of QR (Quick Response) codes with encrypted access tokens for authenticating a user’s login on a mobile device, and then allowing him/her to access the web application on the terminal computer. Keywords—login authentication; QR code; keylogger; access token; mobile device;