A New Secure OpenID Authentication Mechanism Using One-Time Password (OTP)

Nowadays, OpenID is a popular specification and provided by several large websites. It is decentralized, open standard to authenticate user's identity. We don't deny that OpenID has some disadvantages. In our proposal, we try to improve the performance of OpenID. The proposed OpenID authentication mechanism is embedded with One-time password (OTP) technology which solves the security problems of OpenID. We also illustrate the OpenID architecture with OTP and a typical authentication process between mobile terminal and OpenID provider. Finally, we analyses the system security and performance of OpenID. The results demonstrate the proposed authentication mechanism will be safer than the standard OpenID system.