An RTOS based implementation of SteganoPIN for safe PIN entry

Abstract

Users often use the same PIN (personal identification number) number for multiple systems and in multiple sessions. Direct entries are highly vulnerable to shoulder surfing attacks as attackers effectively monitor with hidden cameras. To ensure security and ease of use, a convenient indirect PIN code entry method called SteganoPIN is used. The man-machine interface of SteganoPIN consists of two numeric keypads, one is standard keypad and the other is a random keypad. The random keypad permutes ten numeric keys due to ultrasonic sensor. The permutation occurs to physically block shoulder attacks along with concealed camera attacks. The user enters the original PIN on standard keypad referring to the random keypad. i.e. for every transaction, permutation of ten numeric keys occurs in the random keypad. The user has to map the positions of the PIN entry on the standard keypad referring to the random keypad. This indirect PIN entry system is significantly different from that of standard PIN entry system. SteganoPIN is flexible for camera-based surfing attacks on several authentication sessions.