Question

Why should a time-based authentication system invalidate the current password on a successful authentication?

Answer 1

Time based authentication system is a system that generates some value for a time slice and that after expires as time slice expires. So when the time slice expires the password will not work.

We can explain this with the help of TTOP  -

It combines secret key with a current time stamp with the help of cryptography hash function to generate the one time password. Time stamps generally increase in 30 seconds intervals , so password generate closs together in time from the same the secret key will be equal.

So user input his/her detail and click button for authentication then website and server generate a OTP for the user. The server also runs TOTP to verify the entered password .For verifying procces the user system clock and server synchronized. A secret key is use for the server and the user for authentication proccess. When this value match with in time then there will be authentication successfully.

But in case of the value entered by user is correct and time slice expired, there will be unsuccessful authentication .

I hope that this will fulfill your requirements..

If you have any query ,kindly ask in comments

Thanking you.