A new graphical password scheme resistant to shoulder-surfing

Haichang, Gao and Zhongjie, Ren and Xiuling, Chang and Xiyang, Liu and Aickelin, Uwe (2010) A new graphical password scheme resistant to shoulder-surfing. International Conference on CyberWorlds, 2010 . (In Press)

[img] PDF - Requires a PDF viewer such as GSview, Xpdf or Adobe Acrobat Reader
Download (391kB)

Abstract

Shoulder-surfing is a known risk where an attacker can capture a password by direct observation or by recording

the authentication session. Due to the visual interface, this problem has become exacerbated in graphical passwords.

There have been some graphical schemes resistant or immune

to shoulder-surfing, but they have significant usability

drawbacks, usually in the time and effort to log in. In this

paper, we propose and evaluate a new shoulder-surfing

resistant scheme which has a desirable usability for PDAs. Our inspiration comes from the drawing input method in DAS and the association mnemonics in Story for sequence retrieval. The new scheme requires users to draw a curve across their password images orderly rather than click directly on them.

The drawing input trick along with the complementary

measures, such as erasing the drawing trace, displaying

degraded images, and starting and ending with randomly

designated images provide a good resistance to shoulder-surfing.

A preliminary user study showed that users were able to enter their passwords accurately and to remember them over time.

Item Type: Article
Additional Information: Paper presented at the 2010 International Conference on CyberWorlds, 20-22 October 2010, Singapore.
Schools/Departments: University of Nottingham UK Campus > Faculty of Science > School of Computer Science
Depositing User: Aickelin, Professor Uwe
Date Deposited: 14 Oct 2010 12:05
Last Modified: 14 Oct 2010 12:05
URI: http://eprints.nottingham.ac.uk/id/eprint/1341

Actions (Archive Staff Only)

Edit View Edit View