Razvoj sigurnosne aplikacije za dvofaktorsku autentifikaciju

master's thesis

• Title (english): Development of a security application for two-factor authentication
• Author: Lucija Mičić
• Mentor: Dario Bojanjac (mentor)
• Committee member: Dario Bojanjac (predsjednik povjerenstva)
• Committee member: Sonja Grgić (član povjerenstva)
• Committee member: Jelena Božek (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2024-09-13, Croatia

Abstract

Cilj ovog rada bio je proučiti sustave za dvofaktorsku autentikaciju i implementirati sustav koji ju korisnicima omogućuje. Na početku rada definiraju se i uspoređuju autentikacija i autorizacija. Nakon toga definiraju se i njihovi protokoli odnosno okviri, OpenID Connect i OAuth 2.0.
Također detaljno se objašnjava postavljanje i konfiguracija Microsoft-ovih alata, a zatim i implementacija cijelog sustava koji se sastoji od četiri aplikacije: servera za autentikaciju korisničkim vjerodajnicama, aplikacije za generiranje i validaciju vremenski ograničenih jednokratnih lozinki, aplikacije za upravljanje računima i jednokratnim lozinkama i mobilna aplikacija za testiranje.

Abstract (english)

The purpose of this thesis is to explore and create a user-controlled version of two-factor authentication systems. Initially, we establish a clear understanding of the concepts of authentication and authorization, followed by a comprehensive analysis of the OpenID Connect and OAuth 2.0 protocols and frameworks. Additionally, we provide step-by-step instructions on how to set up and configure Microsoft tools, as well as the implementation process for the entire system. The system itself comprises four distinct applications: an authentication server that utilizes user credentials, an application responsible for generating and verifying time-based one-time passwords, an account and one-time password management application, and a mobile test application.

• Keywords: autentikacija; autorizacija; dvofaktorska autentikacija; Microsoft alati; OpenID Connect; OAuth 2.0
• Keywords (english): authentication; authorization; two-factor authentication; Microsoft tools; OpenID Connect; OAuth 2.0
• Language: croatian
• URN:NBN: urn:nbn:hr:168:123125
• Study programme: Title: Computing; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2024-10-12 21:34:11