Development of a prototype for multi-factor authentication

In the course of the research work, several security procedures and Python packages that implement them are evaluated. In addition to hashed and time-based one-time passwords, approaches for password-free login were also considered, such as device-based security procedures in which each account is linked to a physical hardware key. Ultimately, the creation of time-based one-time passwords using the Python package PyOPT proved to be the most suitable. This approach is implemented in a prototype that generates such a one-time password in addition to the usual login using a password and user name. The user can scan this using a QR code with their smartphone and evaluate it using an authenticator app.