Two-step Authentication for Web Application using QR Code

Abstract

Web application login based on password is commonly to apply in information system. For various applications, a numerous password memorization is still a problem for users that have a chance to forget a password.  Moreover, a password lending is a cause of problems that stolen a password from a malicious person. It is a major cyber vulnerability that leads to a cyber attack. However, the developers apply a multi-factor authentication to increase a security for application login. This approach is still a limitation of cost and comfortable using. Therefore, this research aims to develop the two-step authentication for web application using QR code. The proposed method applies a stateless authentication based on JSON Web Token (JWT) technology. It divides to two steps consisting of 1) user authentication to obtain a user_token and 2) web login using QR code scanning. The experiment result to simulate a scenario for 30-240 user accounts login simultaneously found that the performance of a response time is an average at 3-7 second in case of 240 user accounts, which depends on a network traffic. The performance assessment found that obtains a score at 4.53 that means excellent level.