Revolving Flywheel PIN Entry Method to Prevent Shoulder Surfing Attacks

Abstract

Nowadays smart phones are replacing computer, laptops and many other electronic gadgets. Smart phones are used for performing transaction, accessing private information like emails, contact details, personal data etc. For the security purpose PIN (Personal identification numbers) are used to lock the smart devices. Many graphical and textual authentication methods are proposed to prevent from shoulder surfing attacks, but the challenging problem is to provide security and usability with less time for authentication. This paper begins with study and analysis of Tictoc PIN entry method. We have proposed a new scheme named revolving flywheel PIN-Entry method to prevent from shoulder-surfing attack. The new scheme holds a revolving flywheel and downward color pad. User will register digits as PIN and for authentication, instead of digits, four color pad will be used to enter digits of PIN. Proposed method is easy to adapt and did not have any cognitive burden. We have implemented this method for mobile terminal and analyzed security, usability and authentication time by experimental survey. This method will be easy to follow by ATM machines or wherever PIN is used for authentication.