SuperSec Protocol

The most popular form of user authentication is the text password, which is the most convenient and the simplest. Users mostly choose weak passwords and reuse the same password across different websites and thus, a domino effect. ie., when an adversary compromises one password, she exploits, gaining access to more websites. Also typing passwords into public computers (kiosks) suffers password thief threat, thereby the adversary can launch several password stealing attacks, such as phishing, keyloggers and malware. Therefore user's passwords tend to be stolen and compromised under different threats and vulnerabilities. A user authentication protocol named SuperSec, which benefits a user's cellphone and short message service to prevent password stealing and password reuse attacks. SuperSec adopts the one-time password strategy, which free users from having to remember or type any passwords into conventional public computers for authentication.