This standard system of ensuring security is flawed

Everywhere one looks at IT, the winds of change are blowing, but one thing has endured for almost half a century the password. In fact, it was in 1961 that MIT's CTSS (Compatible Time-Sharing System) introduced a username and password, perhaps the first system to do so.



While the password system is ubiquitous, it is flawed and an extremely clunky way of securing anything for the following reasons:

>>Length: A password should be longer than 10 characters to be really secure, and many users don't usually choose such long passwords.

>> Strength: To make a password tough, the algorithm that generates it should ensure that it is computationally intensive to break the password. Since computers are getting powerful every day, staying ahead of the race is difficult. Also, users use stuff like their own name, which makes the password weak.

>> Have a peek: Even if you choose a long password and even if the algorithm used to secure the system is armour-plated, all it takes is somebody peeking over your shoulder and seeing what password you are typing to create damage.

Alternatives
Some alternatives include usage of fingerprint and iris scanners, but it is not possible for us to use these things everywhere. Can we equip every computer with an iris scanner or a fingerprint reader? Doubtful.

But, thanks to the proliferation of the mobile phone, we could use the SMS system to authenticate users. This is not foolproof nothing ever is but this adds a layer of security. Think of it as similar to using an ATM machine you need both the ATM card and the pass code.

How it works
The mobile combined with the PC can make the concept of a one-time-password a reality. This is how it could work: