{"id":"https://openalex.org/W3028590394","doi":"https://doi.org/10.1145/3419614.3423257","title":"SmartOTPs: An Air-Gapped 2-Factor Authentication for Smart-Contract Wallets","display_name":"SmartOTPs: An Air-Gapped 2-Factor Authentication for Smart-Contract Wallets","publication_year":2018,"publication_date":"2018-12-10","ids":{"openalex":"https://openalex.org/W3028590394","doi":"https://doi.org/10.1145/3419614.3423257","mag":"3028590394"},"language":"en","primary_location":{"id":"pmh:oai:ris.utwente.nl:openaire_cris_publications/6eb03cac-3fd2-4d72-a83d-6b9d0d432610","is_oa":true,"landing_page_url":"https://research.utwente.nl/en/publications/6eb03cac-3fd2-4d72-a83d-6b9d0d432610","pdf_url":"https://ris.utwente.nl/ws/files/265862868/3419614.3423257.pdf","source":{"id":"https://openalex.org/S4406922991","display_name":"University of Twente Research Information","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Homoliak, I, Breitenbacher, D, Hujnak, O, Hartel, P, Binder, A & Szalachowski, P 2020, SmartOTPs : An Air-Gapped 2-Factor Authentication for Smart-Contract Wallets. in AFT 2020 - Proceedings of the 2nd ACM Conference on Advances in Financial Technologies. AFT 2020 - Proceedings of the 2nd ACM Conference on Advances in Financial Technologies, Association for Computing Machinery, pp. 145-162, 2nd ACM Conference on Advances in Financial Technologies, AFT 2020, Virtual, Online, United States, 21/10/20. https://doi.org/10.1145/3419614.3423257","raw_type":"info:eu-repo/semantics/publishedVersion"},"type":"preprint","indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://ris.utwente.nl/ws/files/265862868/3419614.3423257.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037488079","display_name":"Ivan Homoliak","orcid":"https://orcid.org/0000-0002-0790-0875"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":true,"raw_author_name":"Ivan Homoliak","raw_affiliation_strings":["FIT, Brno University of Technology, Singapore University of Technology and Design"],"raw_orcid":"https://orcid.org/0000-0002-0790-0875","affiliations":[{"raw_affiliation_string":"FIT, Brno University of Technology, Singapore University of Technology and Design","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008583119","display_name":"Dominik Breitenbacher","orcid":null},"institutions":[{"id":"https://openalex.org/I60587646","display_name":"Brno University of Technology","ror":"https://ror.org/03613d656","country_code":"CZ","type":"education","lineage":["https://openalex.org/I60587646"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Dominik Breitenbacher","raw_affiliation_strings":["FIT, Brno University of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FIT, Brno University of Technology","institution_ids":["https://openalex.org/I60587646"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057332283","display_name":"Ond\u0159ej Huj\u0148\u00e1k","orcid":"https://orcid.org/0000-0002-6225-4474"},"institutions":[{"id":"https://openalex.org/I60587646","display_name":"Brno University of Technology","ror":"https://ror.org/03613d656","country_code":"CZ","type":"education","lineage":["https://openalex.org/I60587646"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Ond\u0159ej Huj\u0148\u00e1k","raw_affiliation_strings":["FIT, Brno University of Technology"],"raw_orcid":"https://orcid.org/0000-0002-6225-4474","affiliations":[{"raw_affiliation_string":"FIT, Brno University of Technology","institution_ids":["https://openalex.org/I60587646"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016345474","display_name":"Pieter Hartel","orcid":"https://orcid.org/0000-0002-0411-0421"},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Pieter Hartel","raw_affiliation_strings":["University of Twente ,"],"raw_orcid":"https://orcid.org/0000-0002-0411-0421","affiliations":[{"raw_affiliation_string":"University of Twente ,","institution_ids":["https://openalex.org/I94624287"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072460783","display_name":"Alexander Binder","orcid":"https://orcid.org/0000-0001-9605-6209"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Alexander Binder","raw_affiliation_strings":["Singapore University of Technology and Design"],"raw_orcid":"https://orcid.org/0000-0001-9605-6209","affiliations":[{"raw_affiliation_string":"Singapore University of Technology and Design","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054220744","display_name":"Pawe\u0142 Sza\u0142achowski","orcid":"https://orcid.org/0000-0003-0871-3729"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Pawe\u0142 Sza\u0142achowski","raw_affiliation_strings":["Singapore University of Technology and Design"],"raw_orcid":"https://orcid.org/0000-0003-0871-3729","affiliations":[{"raw_affiliation_string":"Singapore University of Technology and Design","institution_ids":["https://openalex.org/I152815399"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5037488079"],"corresponding_institution_ids":["https://openalex.org/I152815399"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7420343160629272},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6694619059562683},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.6296847462654114},{"id":"https://openalex.org/keywords/smart-contract","display_name":"Smart contract","score":0.586109459400177},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.54262375831604},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.5139405131340027},{"id":"https://openalex.org/keywords/cryptocurrency","display_name":"Cryptocurrency","score":0.5099185705184937},{"id":"https://openalex.org/keywords/merkle-tree","display_name":"Merkle tree","score":0.4680366814136505},{"id":"https://openalex.org/keywords/tamper-resistance","display_name":"Tamper resistance","score":0.45714595913887024},{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.4412483274936676},{"id":"https://openalex.org/keywords/usable","display_name":"USable","score":0.4391382038593292},{"id":"https://openalex.org/keywords/multi-factor-authentication","display_name":"Multi-factor authentication","score":0.4335879683494568},{"id":"https://openalex.org/keywords/blockchain","display_name":"Blockchain","score":0.3313553035259247},{"id":"https://openalex.org/keywords/cryptographic-hash-function","display_name":"Cryptographic hash function","score":0.2114867866039276},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.17231720685958862},{"id":"https://openalex.org/keywords/authentication-protocol","display_name":"Authentication protocol","score":0.13939782977104187},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.09995579719543457}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7420343160629272},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6694619059562683},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.6296847462654114},{"id":"https://openalex.org/C2779950589","wikidata":"https://www.wikidata.org/wiki/Q7544035","display_name":"Smart contract","level":3,"score":0.586109459400177},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.54262375831604},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.5139405131340027},{"id":"https://openalex.org/C180706569","wikidata":"https://www.wikidata.org/wiki/Q13479982","display_name":"Cryptocurrency","level":2,"score":0.5099185705184937},{"id":"https://openalex.org/C205383636","wikidata":"https://www.wikidata.org/wiki/Q14746","display_name":"Merkle tree","level":4,"score":0.4680366814136505},{"id":"https://openalex.org/C19163912","wikidata":"https://www.wikidata.org/wiki/Q7681779","display_name":"Tamper resistance","level":2,"score":0.45714595913887024},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.4412483274936676},{"id":"https://openalex.org/C2780615836","wikidata":"https://www.wikidata.org/wiki/Q2471869","display_name":"USable","level":2,"score":0.4391382038593292},{"id":"https://openalex.org/C194699767","wikidata":"https://www.wikidata.org/wiki/Q7878662","display_name":"Multi-factor authentication","level":4,"score":0.4335879683494568},{"id":"https://openalex.org/C2779687700","wikidata":"https://www.wikidata.org/wiki/Q20514253","display_name":"Blockchain","level":2,"score":0.3313553035259247},{"id":"https://openalex.org/C7608002","wikidata":"https://www.wikidata.org/wiki/Q477202","display_name":"Cryptographic hash function","level":3,"score":0.2114867866039276},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.17231720685958862},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.13939782977104187},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.09995579719543457}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:ris.utwente.nl:openaire_cris_publications/6eb03cac-3fd2-4d72-a83d-6b9d0d432610","is_oa":true,"landing_page_url":"https://research.utwente.nl/en/publications/6eb03cac-3fd2-4d72-a83d-6b9d0d432610","pdf_url":"https://ris.utwente.nl/ws/files/265862868/3419614.3423257.pdf","source":{"id":"https://openalex.org/S4406922991","display_name":"University of Twente Research Information","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Homoliak, I, Breitenbacher, D, Hujnak, O, Hartel, P, Binder, A & Szalachowski, P 2020, SmartOTPs : An Air-Gapped 2-Factor Authentication for Smart-Contract Wallets. in AFT 2020 - Proceedings of the 2nd ACM Conference on Advances in Financial Technologies. AFT 2020 - Proceedings of the 2nd ACM Conference on Advances in Financial Technologies, Association for Computing Machinery, pp. 145-162, 2nd ACM Conference on Advances in Financial Technologies, AFT 2020, Virtual, Online, United States, 21/10/20. https://doi.org/10.1145/3419614.3423257","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"mag:3028590394","is_oa":true,"landing_page_url":"http://export.arxiv.org/pdf/1812.03598","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null}],"best_oa_location":{"id":"pmh:oai:ris.utwente.nl:openaire_cris_publications/6eb03cac-3fd2-4d72-a83d-6b9d0d432610","is_oa":true,"landing_page_url":"https://research.utwente.nl/en/publications/6eb03cac-3fd2-4d72-a83d-6b9d0d432610","pdf_url":"https://ris.utwente.nl/ws/files/265862868/3419614.3423257.pdf","source":{"id":"https://openalex.org/S4406922991","display_name":"University of Twente Research Information","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Homoliak, I, Breitenbacher, D, Hujnak, O, Hartel, P, Binder, A & Szalachowski, P 2020, SmartOTPs : An Air-Gapped 2-Factor Authentication for Smart-Contract Wallets. in AFT 2020 - Proceedings of the 2nd ACM Conference on Advances in Financial Technologies. AFT 2020 - Proceedings of the 2nd ACM Conference on Advances in Financial Technologies, Association for Computing Machinery, pp. 145-162, 2nd ACM Conference on Advances in Financial Technologies, AFT 2020, Virtual, Online, United States, 21/10/20. https://doi.org/10.1145/3419614.3423257","raw_type":"info:eu-repo/semantics/publishedVersion"},"sustainable_development_goals":[{"score":0.4699999988079071,"display_name":"Partnerships for the goals","id":"https://metadata.un.org/sdg/17"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3028590394.pdf","grobid_xml":"https://content.openalex.org/works/W3028590394.grobid-xml"},"referenced_works_count":33,"referenced_works":["https://openalex.org/W103145994","https://openalex.org/W115629558","https://openalex.org/W1558426510","https://openalex.org/W1566345534","https://openalex.org/W1595522037","https://openalex.org/W1607519173","https://openalex.org/W1907293129","https://openalex.org/W1957130903","https://openalex.org/W2012646342","https://openalex.org/W2013613544","https://openalex.org/W2037107113","https://openalex.org/W2038019800","https://openalex.org/W2084652510","https://openalex.org/W2113446256","https://openalex.org/W2125093890","https://openalex.org/W2130459259","https://openalex.org/W2141420453","https://openalex.org/W2147483269","https://openalex.org/W2151295171","https://openalex.org/W2222557215","https://openalex.org/W2254700249","https://openalex.org/W2335111715","https://openalex.org/W2534313446","https://openalex.org/W2573410114","https://openalex.org/W2752178278","https://openalex.org/W2763398287","https://openalex.org/W2795386701","https://openalex.org/W2888822923","https://openalex.org/W2911825405","https://openalex.org/W2965147463","https://openalex.org/W2970097841","https://openalex.org/W2978111368","https://openalex.org/W3105099041"],"related_works":["https://openalex.org/W3097224604","https://openalex.org/W3096471656","https://openalex.org/W3082491423","https://openalex.org/W3081723964","https://openalex.org/W2293813575","https://openalex.org/W3009983089","https://openalex.org/W2953360856","https://openalex.org/W3170601495","https://openalex.org/W1896694190","https://openalex.org/W2886047833","https://openalex.org/W3123409250","https://openalex.org/W3161894933","https://openalex.org/W3155479913","https://openalex.org/W3026955849","https://openalex.org/W3211925494","https://openalex.org/W2901535823","https://openalex.org/W1549898742","https://openalex.org/W3003831591","https://openalex.org/W2917723740","https://openalex.org/W2069389314"],"abstract_inverted_index":{"With":[0],"the":[1,7,119,122,130,139,142,147,171,174,212,220],"recent":[2],"rise":[3],"of":[4,11,80,91,116,124,141,223],"cryptocurrencies'":[5],"popularity,":[6],"security":[8,49],"and":[9,23,77,102,106,155],"management":[10],"crypto-tokens":[12,82],"have":[13,17,26,39,206],"become":[14],"critical.":[15],"We":[16,205],"witnessed":[18],"many":[19],"attacks":[20],"on":[21,211],"users":[22,56],"providers,":[24],"which":[25],"resulted":[27],"in":[28,83,113,138],"significant":[29],"financial":[30],"losses.":[31],"To":[32,121],"remedy":[33],"these":[34,43],"issues,":[35],"several":[36],"wallet":[37,70],"solutions":[38,44,232],"been":[40],"proposed.":[41],"However,":[42],"often":[45],"lack":[46],"either":[47],"essential":[48],"features,":[50],"usability,":[51],"or":[52,193],"do":[53],"not":[54],"allow":[55],"to":[57,173,182,229],"customize":[58],"their":[59],"spending":[60],"rules.":[61],"In":[62,145],"this":[63],"paper,":[64],"we":[65],"propose":[66],"SmartOTPs,":[67,146],"a":[68,74,84,97,99,103,152,163,177,184,194,208,224],"smart-contract":[69],"framework":[71,89,128],"that":[72,133,219],"gives":[73],"flexible,":[75],"usable,":[76],"secure":[78],"way":[79],"managing":[81],"self-sovereign":[85],"fashion.":[86],"The":[87],"proposed":[88],"consists":[90],"four":[92],"components":[93],"(i.e.,":[94],"an":[95],"authenticator,":[96],"client,":[98],"hardware":[100],"wallet,":[101],"smart":[104,234],"contract),":[105],"it":[107],"provides":[108],"2-factor":[109],"authentication":[110,161],"(2FA)":[111],"performed":[112],"two":[114],"stages":[115],"interaction":[117],"with":[118,236],"blockchain.":[120,144],"best":[123],"our":[125,127],"knowledge,":[126],"is":[129,168,227],"first":[131],"one":[132],"utilizes":[134],"one-time":[135],"passwords":[136],"(OTPs)":[137],"setting":[140,179],"public":[143],"OTPs":[148],"are":[149],"aggregated":[150],"by":[151,188],"Merkle":[153],"tree":[154],"hash":[156],"chains":[157],"whereby":[158],"for":[159],"each":[160],"only":[162],"short":[164],"OTP":[165],"(e.g.,":[166],"16B-long)":[167],"transferred":[169],"from":[170],"authenticator":[172,187],"client.":[175],"Such":[176],"novel":[178],"enables":[180],"us":[181],"make":[183],"fully":[185],"air-gapped":[186],"utilizing":[189],"small":[190],"QR":[191],"codes":[192],"few":[195],"mnemonic":[196],"words,":[197],"while":[198],"additionally":[199],"offering":[200],"resilience":[201],"against":[202],"quantum":[203],"cryptanalysis.":[204],"made":[207],"proof-of-concept":[209],"based":[210],"Ethereum":[213],"platform.":[214],"Our":[215],"cost":[216,222],"analysis":[217],"shows":[218],"average":[221],"transfer":[225],"operation":[226],"comparable":[228],"existing":[230],"2FA":[231],"using":[233],"contracts":[235],"multi-signatures.":[237]},"counts_by_year":[{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":1}],"updated_date":"2026-04-28T14:05:53.105641","created_date":"2020-11-09T00:00:00"}