LAPPS: Location Aware Password Protection System

TL;DR

LAPPS enhances password security by integrating location, time, and user-specific factors, generating dynamic, single-use passwords tied to specific locations and devices, thereby reducing fraud and unauthorized access.

Contribution

The paper introduces LAPPS, a novel location-aware password system that adds multiple security layers, including geographical, temporal, and user-specific constraints, to traditional password protection methods.

Findings

Passwords are valid only in specific locations and time frames.

System successfully generates one-time, location-bound passwords.

Enhanced security reduces unauthorized access risks.

Abstract

Location Aware Password Protection System (LAPPS) is designed to strengthen the security of traditional password protection systems. This is achieved by adding several layers of protection to the passwords that most traditional password protection systems generate. The current implementation looks at the Password/Pin numbers of Credit/Debit cards that are used on Automated Teller Machine (ATM),though the underlying design of the system can be used in many other scenarios. A password that is generated will be allocated to a particular user and to the ATM that is nearest to the user. LAPPS ensures the following qualities of the passwords that it generates. Location Awareness: The passwords are generated according to the users' geographical area, that they request their passwords from. So a password will only be active in just one location. Time Awareness: A password will only be valid for five minutes. The unused passwords will be discarded. Dynamic: The user has to have a new password each time he/she logs in. A password is generated to be used only once. User Oriented/Specific: The received password can only be used by the requester, and can only be used on its allocated ATM. Two Factor Authenticity: The confidential information will be secured using two-factor authentication. For extra security, a Pin generating device has been introduced. This will produce an eight digit number that the user has to supply to the mobile application, before requesting for a password. The user can obtain a pin number by inserting his/her Debit/Credit card and the fixed password that has been allocated when the user registers with the system.