Enhanced E-Commerce Application Security Using Three-Factor Authentication

E-commerce in today's world is playing an inevitable role. As much as technology makes things easier for us, it makes ourselves open to online attacks. Say for a banking transaction, all we have to do is login to our account and do the transaction. Currently, financial sites use static passwords, which are easier for customers to use. These can also potentially put the user's account into risk. Given enough time and number of attempts, an attacker can easily access login. Static passwords can be vulnerable to attacks such as shoulder-surfing, dictionary attacks and so on. By constantly altering the password, as is done with a one-time password, this risk can be greatly reduced. We propose a system with a different perspective of password security targeting online financial websites. E-commerce applications use OTP to provide security by changing the password every time, so OTP is preferred. For personal recognition biometric technique such as fingerprint or palm-vein scan, etc., can be used. Unlike other biometrics, fingerprint is unique. Noisy password is a strong alternative for static password. Hence, we are trying to incorporate a combination of all the three to provide a secure method to perform E-transaction in E-commerce applications.