To enhance both the efficiency and security of our authentication system, we adopt a multi-factor authentication approach that combines different types of authentication. Wraith, our authentication system, incorporates two key types of authentication to ensure a robust and reliable authentication process:
Type 1 - Something you know
Type 3 - Something you are
Multi-level data encryption
Using symmetric along with asymmetric cipher.
Utilizing core cryptographic methods including Base64, bcrypt, argon2, conversion and Xor operations
Dynamic hash generation for two identical password of different users
Session Management
Secure Password Storage: Ensuring proper hashing and salting for password protection.
Fingerprint Security: Safeguarding biometric data handling and privacy.
Session Management: Preventing session hijacking and ensuring timeouts.
Secure Communication: Ensuring encrypted communication between frontend and backend.
Data Validation: Validating and sanitizing user inputs to prevent attacks.
Brute Force Protection: Implementing measures to prevent brute force attacks.
Fingerprint Spoofing: Dealing with potential fingerprint spoofing attacks.
Technologies used
Discussion