Web Authentication methods

• So-Fictitious

  28 Jan 09, 09:04

  Hi all,

   

  I need help in ASP.NET coding for web authentication methods and demostrate one vulnerabilities and countermeasure for the following:

   

  • One-time password

   

  A simple program that implement an authentication method with one counter measures will do. I need it for a demo.

   

  I need to make use of 2 computers, one for server the other for client.

   

  ANYBODY KNOWS? Pls help!

   

  You may also email me at : [email protected]

   

• mjallday

  28 Jan 09, 09:48

  I'm not sure i understand.

  If you are looking for help coding a authentication method then you can use the built in Forms authentication in ASP.NET. To find a sample just google "ASP.NET Forms Authentication".

  I'm not sure what you mean by demonstrate vulnerabilities and countermeasure of a one-time password. Explain more and I'll try to help.

• So-Fictitious

  28 Jan 09, 22:03

  Thanks for the reply mjallday!

  I need to know how i could go about implementing a forms authentication or a Visual Basic program that make use of one-time password

  Also, i need to make use of 2 computers. one for client, the other, server..

• mjallday

  29 Jan 09, 08:53

  http://msdn.microsoft.com/en-us/library/xdt4thhy.aspx

  That shows you step-by-step how to implement forms authentication.

  Still not sure about the one-time password. You can have a one-time password which means you generate it once and it's only valid for a small period of time. E.g. it expires after 30 seconds. This is similar to the dongle from your bank which gives you a semi-random number. You could generate this from a seed value as shown in this example

  http://msdn.microsoft.com/en-us/magazine/cc507635.aspx

  However the process is quite complex. None-the-less that is a step by step guide.

  Double check that you're not being asked to implement one-way encryption for the password which is much more common compared to one-time passwords.