journal article·2023-08-27Open access

A Novel Two-Factor Authentication Scheme for Increased Security in Accessing the Moodle E-Learning Platform

Vasile Baneş, Cristian Ravariu, Bhargav Appasani, Avireni Srinivasulu

Applied Sciences· Volume 13· Issue 17

Abstract

Moodle is a platform designed for universal learning to support pedagogical interactions and educational activities. The information technology (IT) administrator uses standard authentication methods for students logging into the Moodle platform. The need for two-factor authentication has grown as institutions, governments, and individuals realize that passwords are not secure enough to protect user accounts in their current technical format. The classic connection methods have vulnerabilities, and account passwords are easy to crack. Analyzing these aspects, the goal is to create a new safe and reliable alternative to the traditional authentication methods in e-learning platforms. The proposed solution introduces a new authentication factor using digital certificates stored on physical devices or the cloud to address the evolving authentication and security challenges effectively. The absence of this authentication within the Moodle ecosystem has imparted a sense of urgency for its implementation. With the innovative authentication scheme, the users have gained confidence, are satisfied with the new solution, and have not reported security breaches. The result is increased security, data protection, and better account management.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: User Authentication and Security Systems · Big Data and Digital Economy · Advanced Malware Detection Techniques

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Faculty of Electronics, Telecommunications and Information Technology, National Polytechnic University of Science and Technology Bucharest, 060042 Bucharest, Romania

Kalinga Institute of Industrial Technology, Bhubaneswar 751024, Odisha, India

Department of Electronics and Communication Engineering, Mohan Babu University, Tirupathi 517102, Andhra Pradesh, India

Funding

The National Polytechnic University of Science and Technology Bucharest

References (35)

Show source-provided references
1. Identity Management Security Authentication Based on Blockchain Technologies
2. A software architecture perspective about Moodle flexibility for supporting empirical research of teaching theories10.1007/s10639-020-10291-4 ↗
3. Creating individual learning paths in the Moodle plugin for undergraduate students to study English grammar10.1007/s10639-020-10278-1 ↗
4. Massive LMS log data analysis for the early prediction of course-agnostic student performance10.1016/j.compedu.2020.104108 ↗
5. Nash, S.S., and Rice, W. (2017). Moodle 3 E-Learning Course Development, Packt Publishing Ltd.
6. Intercell Interference Coordination for UAV enabled URLLC with perfect/imperfect CSI using cognitive radio10.1109/OJCOMS.2022.3232888 ↗
7. Asim, J., Khan, A.S., Saqib, R.M., Abdullah, J., Ahmad, Z., Honey, S., Afzal, S., Alqahtani, M.S., and Abbas, M. (2022). Blockchain-based Multifactor Authentication for Future 6G Cellular Networks: A Systematic Review. Appl. Sci., 12.10.3390/app12073551 ↗
8. An Anonymous Pre-Authentication and Post-Authentication Scheme Assisted by Cloud for Medical IoT Environments10.1109/TNSE.2022.3176407 ↗
9. Sharma, P., Agarwal, K., and Chaudhary, P.J.I.J. (2021). E-learning platform security issues and their prevention techniques: A review. Int. J.
10. Nassani, A.A., Grigorescu, A., Yousaf, Z., Trandafir, R.A., Javed, A., and Haffar, M. (2023). Leading Role of E-Learning and Blockchain towards Privacy and Security Management: A Study of Electronics Manufacturing Firms. Electronics, 12.10.3390/electronics12071579 ↗
11. Shahzad, K., Aseeri, A.O., and Shah, M.A. (2022). A Blockchain-Based Authentication Solution for 6G Communication Security in Tactile Networks. Electronics, 11.10.3390/electronics11091374 ↗
12. Rafat, K., Laila, S.R., Ashiqul, I.A., Akter, K.T., Tabassum, M., and Sagar, H. (2020). Evolutionary Computing and Mobile Sustainable Networks, Springer.
13. A study on integrity and authentication using rsa and sha-3 algorithms for secured data communication
14. Mihailescu, M.I., Nita, S.L., and Corneliu, P.V. (2020, January 23–24). Applied Cryptography In Designing E-Learning Platforms. Proceedings of the International Scientific Conference eLearning and Software for Education, Bucharest, Romania.10.12753/2066-026X-20-108 ↗
15. Improving student engagement during in-person classes by using functionalities of a digital learning environment10.1016/j.compedu.2022.104496 ↗
16. Blockchain-enabled digital rights management for multimedia resources of online education10.1007/s11042-019-08059-1 ↗
17. Fayziyeva, D.S., Yuldasheva, N.S., and Islomov, S.Z. (2019, January 4–6). Security issues in E-Learning system. Proceedings of the International Conference on Information Science and Communications Technologies (ICISCT), Tashkent, Uzbekistan.
18. Jagadamba, G., Sheeba, R., Brinda, K.N., Rohini, K.C., and Pratik, S.K. (2020, January 5–7). Adaptive E-Learning Authentication and Monitoring. Proceedings of the 2nd International Conference on Innovative Mechanisms for Industry Applications (ICIMIA), Bangalore, India.10.1109/ICIMIA48430.2020.9074955 ↗
19. A model of digital identity for better information security in e-learning systems10.1007/s11227-021-03981-4 ↗
20. Digital signature & encryption implementation for increasing authentication, integrity, security and data non-repudiation
21. Wang, L., and Song, T. (2016, January 18–20). An Improved Digital Signature Algorithm and Authentication Protocols in Cloud Platform. Proceedings of the IEEE International Conference on Smart Cloud (SmartCloud), New York, NY, USA.10.1109/SmartCloud.2016.46 ↗
22. AlQahtani, A.A.S., El-Awadi, Z., and Min, M. (2021, January 27–30). A Survey on User Authentication Factors. Proceedings of the 2021 IEEE 12th Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON), Vancouver, BC, Canada.10.1109/IEMCON53756.2021.9623159 ↗
23. Gordin, I., Graur, A., and Potorac, A. (2019, January 9–11). Two-factor authentication framework for private cloud. Proceedings of the 2019 23rd International Conference on System Theory, Control and Computing (ICSTCC), Sinaia, Romania.10.1109/ICSTCC.2019.8885460 ↗
24. Ozkan, C., and Bicakci, K. (2020, January 3–4). Security Analysis of Mobile Authenticator Applications. Proceedings of the 2020 International Conference on Information Security and Cryptology (ISCTURKEY), Ankara, Turkey.10.1109/ISCTURKEY51113.2020.9308020 ↗
25. Hassan, M.M., Nipa, S.S., Akter, M., Haque, R., Deepa, F.N., Rahman, M., Siddiqui, M.S., and Sharif, M.H. (2018). Broken Authentication and Session Management Vulnerability: A Case Study of Web Application. Int. J. Simul. Syst. Sci. Technol., 1.10.5013/IJSSST.a.19.02.06 ↗
26. Certic, S. (2018). Two-Factor Authentication Vulnerabilities. SSRN Electron. J.10.2139/ssrn.3158601 ↗
27. Grassi, P., Garcia, M.E., and Fenton, J.L. (2017). Digital Identity Guidelines.10.6028/NIST.SP.800-63-3 ↗
28. Sarma, H.K.D., Balas, V.E., Bhuyan, B., and Dutta, N. (2022). Contemporary Issues in Communication, Cloud and Big Data Analytics, Springer. Lecture Notes in Networks and Systems.10.1007/978-981-16-4244-9 ↗
29. Reese, K., Smith, T., Dutson, J., Armknecht, J., Cameron, J., and Seamons, K. (2019, January 12–13). A Usability Study of Five Two-Factor Authentication Methods. Proceedings of the Fifteenth Symposium on Usable Privacy and Security, Santa Clara, CA, USA.
30. Das, S., Dingman, A., and Camp, L.J. (March, January 26). Why Johnny Doesn’t Use Two Factor: A Two-Phase Usability Study of the FIDO U2F Security Key. Proceedings of the 2018 International Conference on Financial Cryptography and Data Security (FC), Nieuwpoort, Curaçao.10.1007/978-3-662-58387-6_9 ↗
31. Acemyan, C., Kortum, P., Xiong, J., and Wallach, D. (2018). Proceedings of the Human Factors and Ergonomics Society Annual Meeting, Sage.
32. Lang, J., Czeskis, A., Balfanz, D., Schilder, M., and Srinivas, S. (2016, January 22–26). Security Keys: Practical Cryptographic Second Factors for the Modern Web. Proceedings of the International Conference on Financial Cryptography and Data Security (FC), Christ Church, Barbados.10.1007/978-3-662-54970-4_25 ↗
33. Reynolds, J., Smith, T., Reese, K., Dickinson, L., Ruoti, S., and Seamons, K. (2018, January 20–24). A Tale of Two Studies: The Best and Worst of YubiKey Usability. Proceedings of the 2018 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA.10.1109/SP.2018.00067 ↗
34. A portable hardware security module and cryptographic key generator
35. Widup, S., Pinto, A., Hylender, D., Bassett, G., and Langlois, P. (2022, March 09). 2021 Verizon Data Breach Investigations Report. Available online: https://www.researchgate.net/publication/351637233_2021.