Modeling Effective Information Security in Mobile Banking System

Abstract

The objective of the study is to develop mobile based application multifactor authentication (MFA) model for effective information security in the mobile banking system that utilizes three (3) tiers of security authentications options; the use of (PIN); (PIN & Finger Print) and (PIN, Finger Print & OTP) for strong authentication that will be difficulty for unauthorized access or cyber criminals to penetrate. This study also applied RSA and AES crytographic algorithm. The motivation of this study is as a result of prevalent and incessant fraud associated with the current single factor (SF) or two factor (2FA) authentication mechanisms in the existing mobile banking system, which is as a result of high demand of mobile devices for mobile banking transactions. The methodologies that were adopted are Object-Oriented Analysis and Design (OOAD) and Agile. Top-down bottom approach in software development was adopted. Software tools include Java, Flutter SDK, Dart programming and Firebase- MySQL. The results of implementation and testing were secured mobile based application MFA model for affective information security in the mobile banking system that utilized three (3) tiers of security authentications; the use of (PIN), (PIN & finger print) and (PIN, finger Print & OTP) for access controls depending on the amount to be transacted, secured device-IMEI of every registered user, redirection of unauthorized access to the honeypot and provision of detailed transaction history of customers. These multi-factor authentications will be difficult for authorized user or any criminal attack such as phishing, impersonation, surfing attacks and man in the middle attack to penetrate the transaction system in mobile banking system.