A Novel Shoulder-Surfing Resistant Graphical Authentication Scheme

2018 ◽  
Author(s):  
Misbah Urrahman Siddiqui ◽  
Mohd. Sarosh Umar ◽  
Miftah Siddiqui
Keyword(s):  
Authentication Scheme ◽  
Shoulder Surfing

scholarly journals A Pattern-Based Multi-Factor Authentication System

2019 ◽  
Vol 20 (1) ◽  
pp. 101-112 ◽  
Author(s):  
Pankhuri . ◽  
Akash Sinha ◽  
Gulshan Shrivastava ◽  
Prabhat Kumar
Keyword(s):  
Artificial Intelligence ◽  
User Authentication ◽  
Authentication Scheme ◽  
Brute Force ◽  
Security Attacks ◽  
Graphical Password ◽  
Efficient Strategy ◽  
Shoulder Surfing ◽  
Different Types ◽  
Authentication System

User authentication is an indispensable part of a secure system. The traditional authentication methods have been proved to be vulnerable to different types of security attacks. Artificial intelligence is being applied to crack textual passwords and even CAPTCHAs are being dismantled within few attempts. The use of graphical password as an alternate to the textual passwords for user authentication can be an efficient strategy. However, they have been proved to be susceptible to shoulder surfing like attacks. Advanced authentication systems such as biometrics are secure but require additional infrastructure for efficient implementation. This paper proposes a novel pattern-based multi-factor authentication scheme that uses a combination of text and images resulting for identifying the legitimate users. The proposed system has been mathematically analyzed and has been found to provide much larger password space as compared to simple text based passwords. This renders the proposed system secure against brute force and other dictionary based attacks. Moreover, the use of text along with the images also mitigates the risk of shoulder surfing.

scholarly journals An Efficient Login Authentication System against Multiple Attacks in Mobile Devices

Symmetry ◽  
2021 ◽  
Vol 13 (1) ◽  
pp. 125
Author(s):  
Yang Li ◽  
Xinyu Yun ◽  
Liming Fang ◽  
Chunpeng Ge
Keyword(s):  
Authentication Scheme ◽  
Fingerprint Recognition ◽  
Mobile Platforms ◽  
Private Data ◽  
Shoulder Surfing ◽  
New Type ◽  
Authentication Schemes ◽  
Symmetry Problem ◽  
Iot Devices ◽  
The Internet Of Things

Access management of IoT devices is extremely important, and a secure login authentication scheme can effectively protect users’ privacy. However, traditional authentication schemes are threatened by shoulder-surfing attacks, and biometric-based schemes, such as fingerprint recognition and face recognition, that are commonly used today can also be cracked. Researchers have proposed some schemes for current attacks, but they are limited by usability. For example, the login authentication process requires additional device support. This method solves the problem of attacks, but it is unusable, which limits its application. At present, most authentication schemes for the Internet of Things and mobile platforms either focus on security, thus ignoring availability, or have excellent convenience but insufficient security. This is a symmetry problem worth exploring. Therefore, users need a new type of login authentication scheme that can balance security and usability to protect users’ private data or maintain device security. In this paper, we propose a login authentication scheme named PinWheel, which combines a textual password, a graphical password, and biometrics to prevent both shoulder-surfing attacks and smudge attacks and solves the current schemes’ lack of usability. We implemented PinWheel and evaluated it from the perspective of security and usability. The experiments required 262 days, and 573 subjects participated in our investigation. The evaluation results show that PinWheel can at least effectively resist both mainstream attacks and is superior to most existing schemes in terms of usability.

scholarly journals Graphical password scheme to diminish shoulder surfing

2017 ◽  
Vol 7 (1.1) ◽  
pp. 234
Author(s):  
D. Sri Ram Varma ◽  
K. Meghana ◽  
V. Sai Deepak ◽  
R. Murugan
Keyword(s):  
Authentication Scheme ◽  
Biometric Authentication ◽  
Brute Force ◽  
Graphical Password ◽  
The People ◽  
Shoulder Surfing ◽  
Common Technique ◽  
Authentication Schemes ◽  
Dictionary Attacks

Many authentication schemes are known to us but none of them are completely secure. Textual password is the most common technique used by majority of the people in the industry. But Textual passwords are vulnerable to dictionary attacks, keyloggers, brute-force attacks, even guessing may work out sometimes. Alternative authentication schemes have been proposed to overcome this problem, some of them are Biometric authentication, retina based authentication, graphical password scheme ETC., Authentication Schemes such as biometric and retina scans are too costly, so they are not always preferred. Not every graphical authentication is secure and efficient. In this paper, an authentication scheme with a combination of text and colour is proposed. This allows the user to log-in to the framework a little more secure.

Sign in / Sign up

Export Citation Format

Share Document