S3TFPAS: Scalable shoulder surfing resistant textual-formula base password authentication system

Abstract

The most common computer authentication method is to use alpha numeric user name and password. This method has been shown to have significant drawbacks. User tends to pick short password that can be easily guessed. On the other hand, if password is hard to guess, then it is often hard to remember. The vulnerabilities of textual password are well known. Users tend to pick short password or password that is easy to remember which makes password vulnerable for attackers to break. In this paper, we propose a scalable shoulder surfing resistant textual-formula base password authentication system (S3TFPAS). S3TFPAS seamlessly integrates the textual password and formula to create the strong random password. We argue that S3TFPAS will allow more secure and complex authentication with a lower cognitive load. It will provide a strong resistant against shoulder surfing, brute force attack, hidden cam and dictionary attack through dynamic password.