Personal CAPTCHA-based authentication protocol

Abstract

In recent years, the number of personal accounts assigned to a single user has considerably increased. According recent study, the average employee had above 190 individual login credentials. The most important problems users face with such a large number of passwords are the strength of passwords and the user's ability to remember them. Researchers have shown that, in general, users are aware of what a secure password should look like, but may forgot these security measures in favour of more convenient passwords, depending largely on the type of account (le Bras, 2015). Repeating the same password across multiple platforms or creating it using dictionary words has also proven to be a common practice among many people. In this article, a new password reminder scheme will be presented. The goal was for the user to create a CAPTCHA-like image with a hidden meaning that only the user would be able to reveal. The image must have some connection to the person's experience and memory or unique knowledge. With such an image, presented each time the user logs in, he is asked to associate a password consisting of two or more words and a number. If the image is appropriately selected and associated with a strong association with the person's visual memory, the chances of recalling the long password he created in this way should not be a problem.