The use of chaotic pseudo random number and elliptic curve cryptosystem in an efficient OTP-based authentication scheme for online learning system

The rapid advancement of Internet technology has led to an extensive increase in the popularity of online learning, also known as online learning. Despite the numerous advantages of online learning, some instructors and students still encounter significant limitations and challenges. One of the biggest threats to an e-learning system is resource security problems. Nowadays, Elliptic Curve Cryptography (ECC) is a promising encoding and decoding technique to achieve authenticity and integrity of the data in the online learning system. In this context, an efficient One-time Password (OTP) based authentication technique using a pseudo-chaotic random number and an elliptic curve is proposed in this study. The current Unix timestamp is hashed using the Hash-based Message Authentication Code Secure Hash Algorithm-256 (HMAC-SHA-256) technique to produce a 256-bit result. In order to generate a 256-bit pseudo-random number, Baker’s chaotic map is used. A random number is created by combining these two elements, the hashed data and the pseudo-random number. A dynamic offset truncation algorithm has been used to extract plain 4-byte OTP from the generated random number for real-time applications. From the 4-byte OTP, six digits are extracted using modulo \(10^6\) ${10}^6$ . Finally, the SECP256r1 elliptic curve is applied to the encode the six digit OTP for its secure transfer over the public medium to the intended receiver. All the required keys of elliptic curve have generated using Baker’s chaotic function. Different experimental analyses, such as the entropy test, the avalanche effect test, the key-space analysis, and the histogram analysis have been made for the proposed model and achieved satisfactory result.