Secure examination paper distribution system with role-based access control and multi-factor authentication

Abstract:

Examination papers are very important for academic institutions, and their integrity and confidentiality are major concerns. The traditional methods of distributing papers, such as physical transportation and manual handling, are highly prone to leakages, theft, and unauthorized access. As security breaches related to examinations continue to increase, there is a growing need for a secure and dependable digital solution. This paper presents a web-based Secure Examination Paper Distribution System, which incorporates role-based access control and multi-factor authentication to ensure end-to-end security in the examination paper lifecycle. The proposed system allows university administrators to upload encrypted examination papers and assign them to specific centres. A time-based unlocking mechanism is used to control access to these papers so that they cannot be downloaded before a defined time window prior to the examination. The system includes multiple layers of security such as password-based PDF encryption, email-based one-time password (OTP) verification for both administrators and college users, and audit logging to monitor user activities. These features help in preventing unauthorized access and maintaining accountability. The system is built using the Flask microframework with SQLite as the backend database, providing a lightweight and easy-to-deploy solution suitable for institutions of different sizes. The architecture also considers secure file storage, centre-based access filtering, and automated email notifications. The results show that the system is effective in controlling access and reducing the risk of paper leakage while maintaining usability for authorized users. Overall, the proposed system provides a practical and efficient solution for modernizing examination paper distribution.