Diagram of Proposed OTP Implementation.pdf

This image is a diagram detailing a proposed One-Time Passcode (OTP) implementation for secure network authentication across two separate networks. The diagram illustrates a multi-step authentication process involving an unclassified internet-connected Network A and a classified Network B with no internet access, separated by an air-gapped network with no direct connections between them.

The authentication workflow includes: 1) Authenticating the user with local domain authentication and generating a passcode on a local server with OTP software, 2) The user obtaining a 6-digit passcode, 3) Logging into an internal webpage using the 6-digit passcode, username, and password, and 4) The internal server checking the passcode based on time to authenticate and allow logon. A key security feature is the prohibition of mobile authenticators, and the diagram notes potential time synchronization challenges between the networks, with Network A having accurate internet time and Network B potentially having time skewed by seconds.