<![CDATA[Local government electronic services commonly rely on username and password authentication, which is vulnerable to credential theft, guessing, and reuse. This study aims to design a security information system that integrates Multi-Factor Authentication (MFA) based on Time-Based One-Time Password (TOTP) at the Communication and Informatics Office of East Lampung Regency. A descriptive qualitative approach was combined with Rapid Application Development (RAD) and Unified Modeling Language (UML) modelling. Initial requirements were derived from literature and security standards, while observation, interviews, and validation are planned but not yet carried out. The article reports the requirement planning and user design stages together with verification of the core TOTP module. The design yielded eleven functional and six non-functional requirements, a two-stage authentication flow with temporary lockout, recovery codes, an administrator-assisted MFA reset procedure, UML diagrams, a seven-table database, a role-based access matrix, and a traceability matrix. A reference TOTP implementation reproduced all six RFC 6238 test vectors and behaved as specified in nine verification scenarios. These results verify the core algorithm only, and functional testing of the whole system has not been performed. The design is a basis for implementation and testing; penetration testing and resistance to real-time phishing relay are not covered.]]>
Copyrights © 2026
