BANK OF PASSWORDS: a secure Android password manager implemented based on specific requirements
Main Article Content
Abstract
Passwords serve as a vital means to safeguard our digital accounts. Many individuals resort to conventional methods like writing down passwords on paper or storing them on cloud services, often overlooking security risks, forgetting, and divulging is the most notable, which leads to loss of access to accounts, or potential breaches. In this paper, we propose the development of an Android application named "BANK OF PASSWORD" to address this issue. Our work focuses on creating a lightweight app equipped with essential functionalities desired by users, including password addition, updating, copying, searching, and deletion. To ensure the security of stored passwords, our approach incorporates various protective measures, such as access restriction through a login process and the utilization of SHA256 hashing and AES256 encryption for password encryption, where stored passwords are securely encrypted and stored as ciphertexts within an SQLite database. A fingerprint authentication was implemented as a second login method. Extensive testing of the application demonstrates the successful functioning of all proposed features and requirements on devices running API level 26 or above.
Downloads
Article Details
References
REFERENCES
Gaw S, Felten EW. Password Management Strategies for Online Accounts. Proceedings of the Second Symposium on Usable Privacy and Security. 2006;44–55. https://doi.org/10.1145/1143120.1143127.
Florêncio D, Herley C, van Oorschot PC. Password Portfolios and the Finite-Effort User: Sustainably Managing Large Numbers of Accounts. In: 23rd USENIX Security Symposium (USENIX Security 14). Aug. 2014;575–590. [Online]. Available: https://www.usenix.org/conference/usenixsecurity14/technical-sessions/presentation/florencio.
Mobile Operating System Market Share Worldwide. Statcounter GlobalStats, Sep. 03, 2023. Available: https://gs.statcounter.com/os-market-share/mobile/worldwide . [Accessed: Sep. 03, 2023].
Kujala S, Kauppinen M, Rekola S. Bridging the gap between user needs and user requirements. In: Advances in Human-Computer Interaction I (Proceedings of the Panhellenic Conference with International Participation in Human-Computer Interaction PC-HCI 2001). Typorama Publications, 2001;45–50.
Wihidayat ES. Pengembangan Aplikasi Android Menggunakan Integrated Development Environment (Ide) App Inventor-2. 2017.
New Android App Bundle and target API level requirements in 2021. Android Developers, Nov. 19, 2020. Available: https://android-developers.googleblog.com/2020/11/new-android-app-bundle-and-target-api.html . [Accessed: Sep. 04, 2023].
Putranto BP, Saptoto R, Jakaria OC, Andriyani W. A Comparative Study of Java and Kotlin for Android Mobile Application Development. 2020 3rd International Seminar on Research of Information Technology and Intelligent Systems (ISRITI). 2020;383–388.
Bose S, Mukherjee M, Kundu A, Banerjee M. A comparative study: java vs kotlin programming in Android application development. Int J Adv Res Comput Sci. 2018;9(3):41–45.
Gargenta M. Main building blocks. In: Learning Android. Sebastopol, California, O’Reilly Media, Inc., 2011;28–29.
Iamnitchi A, Ripeanu M, Santos-Neto E, Foster IT. The Small World of File Sharing. IEEE Transactions on Parallel and Distributed Systems. 2011;22:1120–1134.
Rachmawati D, Tarigan J, Ginting A. A comparative study of Message Digest 5 (MD5) and SHA256 algorithm. Journal of Physics: Conference Series. 2018;978:012116.
Ebanesar T, Suganthi G. Improving Login Process by Salted Hashing Password Using SHA-256 Algorithm in Web Applications. International Journal of Computer Sciences and Engineering. 2019.
Liu H, Yang L, Wu H. Design of Embedded Data Acquisition and Management System Based on SQLite Database. 2022 11th International Conference of Information and Communication Technology (ICTech). 2022;335–338.
Alslman YS, Ahmad A, AbuHour Y. Enhanced and authenticated cipher block chaining mode. Bulletin of Electrical Engineering and Informatics. 2023.
Wade S. Description of Image Encryption Using AES-256 bits. International Journal for Research in Applied Science and Engineering Technology. 2023.
Nugrahantoro A, Fadlil A, Riadi I. Optimasi Keamanan Informasi Menggunakan Algoritma Advanced Encryption Standard (AES) Mode Chiper Block Chaining (CBC). Jurnal Ilmiah FIFO. 2020.
ElMouatez B, Karbab M, Mourad D, Debbabi A, Abdelouahid Derhab D, Djedjiga Mouheb. Fingerprinting Android Malware Packages. 2021. doi: 10.1007/978-3-030-74664-3_3.