Article Per Year (5 Year)
p-Index From 2021 - 2026
0.23
P-Index
This Author published in this journals
All Journal Saber: Jurnal Teknik Informatika, Sains dan Ilmu Komunikasi
Heny Setyawati
Universitas Nahdlatul Ulama Lampung
Computer Science & IT

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

 1 
Perancangan Sistem Informasi Keamanan Layanan Elektronik dengan Integrasi Multi-Factor Authentication pada Diskominfo Kabupaten Lampung Timur Heny Setyawati; Nuari Anisa Sivi; Rudi Hartono
SABER : Jurnal Teknik Informatika, Sains dan Ilmu Komunikasi Vol. 4 No. 4 (2026): Oktober: Jurnal Teknik Informatika, Sains dan Ilmu Komunikasi
Publisher : STIKes Ibnu Sina Ajibarang

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59841/saber.v4i4.4285

Abstract

Local government electronic services commonly rely on username and password authentication, which is vulnerable to credential theft, guessing, and reuse. This study aims to design a security information system that integrates Multi-Factor Authentication (MFA) based on Time-Based One-Time Password (TOTP) at the Communication and Informatics Office of East Lampung Regency. A descriptive qualitative approach was combined with Rapid Application Development (RAD) and Unified Modeling Language (UML) modelling. Initial requirements were derived from literature and security standards, while observation, interviews, and validation are planned but not yet carried out. The article reports the requirement planning and user design stages together with verification of the core TOTP module. The design yielded eleven functional and six non-functional requirements, a two-stage authentication flow with temporary lockout, recovery codes, an administrator-assisted MFA reset procedure, UML diagrams, a seven-table database, a role-based access matrix, and a traceability matrix. A reference TOTP implementation reproduced all six RFC 6238 test vectors and behaved as specified in nine verification scenarios. These results verify the core algorithm only, and functional testing of the whole system has not been performed. The design is a basis for implementation and testing; penetration testing and resistance to real-time phishing relay are not covered.
Co-Authors Nuari Anisa Sivi Rudi Hartono