Graphical Password Research Articles

EvoPass: Evolvable graphical password against shoulder-surfing attacks

The passwords for authenticating users are susceptible to shoulder-surfing attacks in which attackers learn users' passwords through direct observations without any technical support. A straightforward solution to defend against such attacks is to change passwords periodically or even constantly, making the previously observed passwords useless. However, this may lead to a situation in which users run out of strong passwords they can remember, or they are forced to choose passwords that are weak, correlated, or difficult to memorize. To achieve both security and usability in user authentication, we propose EvoPass, the first evolvable graphical password authentication system. EvoPass transforms a set of user-selected pass images to pass sketches as user credentials. Users are required to identify their pass sketches from a set of challenge images for user authentication. Particularly, EvoPass improves password strength gradually over time through continually degrading pass sketches without annoying users to reselect pass images. The evolving feature makes it difficult for observational adversaries to identify the pass sketches, even though part of pass sketches may have been exposed to adversaries previously. We introduce two metrics, Information Retention Rate (IRR) and Password Diversity Score (PDS) to guide the process of generating pass sketches and a set of challenge images. Our experimental analysis reveals that applying reasonable IRR and PDS in EvoPass can remarkably improve the resistance to shoulder-surfing attacks without negatively affecting user experience. We also implement a prototype of EvoPass on Android platform with reasonable IRR and PDS applied. Our experimental results on the prototype further demonstrate that EvoPass could work efficiently and achieve a desired usability.

An Efficient Graphical Authentication System

Password authentication is majorly used in applications for computer security and privacy. However, human actions such as selecting bad passwords and inputting passwords in an insecure way are considered as” the weakest link” in the authentication process. Rather than arbitrary alphanumeric string, users generally use weak password, more often based on their personal information. With new technologies coming up and mobile apps piling up, users can use the application anytime and anywhere with various devices. Although the evolution is convenient but it also increases the probability of exposing passwords to shoulder surfing attacks. Attackers can observe directly or use external recording devices to collect users’ credentials. To overcome this problem, a novel authentication system Pass Matrix, based on graphical passwords is proposed to resist shoulder surfing attacks. With a one-time code and horizontal and vertical bars covering the entire scope of pass-images, Pass Matrix will offer no hint to attackers to figure out or narrow down the password even they conduct multiple camera-based attacks. We will implement a Pass Matrix prototype and from the experimental result, the proposed system will achieve better resistance to shoulder surfing attacks while maintaining usability.

BlindLogin: A Graphical Authentication System with Support for Blind and Visually Impaired users on Smartphones

Most graphical password systems on smart phones do not consider the needs of blind and visually impaired users. The main objective of this paper is to propose a new graphical authentication system which combines the usability of the graphical password with the security of the textual password and allows all types of users, including the blind and visually impaired users to use the same authentication system on a smartphone without any extra costs for special hardware. 84.6% of those surveyed would recommend BlindLogin to their friends. 46.2% of the respondents also found the BlindLogin password to be easier to remember than the regular textual password. BlindLogin is a viable alternative as a universal graphical password authentication system.

Authentication using Graphical Password with Association of Sound Signature

Authentication using Graphical Password with Association of Sound Signature

A Survey Paper on Authentication for Shoulder Surfing Resistance for Graphical Password using Cued Click Point (CCP)

A Survey Paper on Authentication for Shoulder Surfing Resistance for Graphical Password using Cued Click Point (CCP)

USER AUTHENTICATION THROUGH CUED CLICK POINTS BASED GRAPHICAL PASSWORD

User authentication is a fundamental component in most computer security context. In recent years, computer and network security has been formulated as a technical problem. A key area in security research is authentication which is the determination of whether a user should be allowed access to a given system or resource. In this respect, Authentication is a process by which a system verifies the identity of a user. Authentication may also be generalized by saying that “to authenticate” means “to authorize”. Users tend to pick passwords that can be easily guessed, on the other hand, if a password is hard to guess, then it is often hard to remember. To address this problem some researchers have developed authentication methods that use pictures as passwords, known as graphical passwords.Graphical passwords are a proposed alternative to text passwords that have been shown to have good usability and security properties that use images for login, and leverage the picture superiority effect for good usability and memorability. Categories of graphical passwords have been distinguished on the basis of different kinds of memory retrieval (recall, cued-recall, and recognition). Though there are several kinds of graphical password, But We have choose to implement the cued click based due to efficient and more secured, Cued click points is a click-based graphical password scheme, Users click on one point per image for a sequence of images. The next image is based on the previous clickpoint. Performance was very good in terms of speed, accuracy, and number of errors. Graphical passwords may offer better security than text-based passwords because many people, in an attempt to memorize text-based passwords, use plain words rather than the recommended jumble of characters.

SECURE GRAPHICAL PASSWORD SCHEME

In the world of computer applications authentication is the main process of granting access for an individual to get control over the services provided by different service providers. It is the process of identification of particular individual, unique username and password are used. Username and text-based password are the most commonly used technique in authentication, use of this technique is very popular in web applications. Lots of work has been done in the field of authentication. Conventional technique includes the text-based password, which is the combination of alphanumeric letters. On the other side of the authentication Graphical Password techniques are popular among handheld devices, the main motivation behind developing such kind of authentication technique is to provide strong but easy to remember password. Graphical authentication schemes are in use from decades, they have some limitations in early days, but comparatively the schemes which are in use today are secure and trust worthy. In this paper a technique for graphical authentication has been proposed based on the previous work, which can be implemented on the web application. The proposed authentication scheme is made secure using the homomorphic encryption technique to avoid the security issue in database.

Captcha as Graphical Password for E-Commerce

Captcha as Graphical Password for E-Commerce

ChoCD: Usable and Secure Graphical Password Authentication Scheme

Since designing effective graphical password authentication schemes is of vital important, this paper attempts to address the need by providing a new way for designing and developing hybrid graphical scheme named ChoCD. ChoCD combines the method of Click-based”, “Choice-based”, and “Draw-based”. By combining these, it is anticipated that it will offer better usability and security. An evaluation towards ChoCD was conducted to measure its viability and practicality as the alternative user authentication. From these conduct of evaluations, it was found that ChoCD is easy to use and provides more security than other existing schemes and thus potentially be used for user authentication.

Graphical Password as an OTP

Graphical Password as an OTP

Exploring Topsnut-Graphical Passwords by Twin Odd-elegant Trees

Graphical passwords are facing a good opportunity as 2-dimension codes are accepted by many people, since it has been applied in mobile devices, electronic equipments with touch screen, and so on. QR codes can be considered as a type of graphical passwords. Topsnut-graphical password differs from the existing graphical passwords, and has been investigated and developed. In this article, a new type of Topsnut-graphical passwords has been designed by technique of graph theory, called twin odd-elegant labelling. We make the twin odd-elegant graphs for one-key vs two or more locks (conversely, one-lock vs two or more keys). These Topsnut-GPWs show perfect matching characteristics of locks (TOE-lock-models) and keys (TOE-key-models). We show examples for testing our methods which can be easily transformed into effective algorithms.

New Algebraic Groups Produced By Graphical Passwords Based On Colorings And Labellings

Safety of plain text passwords has been questioned in current researching information passwords. Graphical passwords are another way for alternative text-based passwords and to improve the user account security. As we are constructing Topsnut-graphical passwords that can be traced to an idea of “Graph structure plus the number theory” proposed first by Hongyu Wang with her colleagues, we find that some of Topsnut-graphical passwords can be composed of algebraic groups under the principle of Abelian additive finite group. We apply the odd-elegant labelling of graph theory to produce Topsnut-graphical passwords, and verify our Topsnut-graphical passwords can form algebraic groups, called labelling graphical groups . Our results can provide those users who have business in two or more banks, and our methods are easily transformed into algorithms with polynomial times.

Strongly (k, d)-Graphical Labellings For Designing Graphical Passwords In Communication

The safety of the traditional text passwords is questioned by many users in the present information research. Graphical passwords become new research object of many researchers, who hope they can replace the existing text passwords and improve user account security. We are studying Topsnut-graphical passwords, which can be traced back to an idea of “topological structure plus number theory” proposed first by Hongyu Wang with her colleagues, and we found the equivalence between with Topsnut-graphics passwords of the trees having perfect matching. Through designing new parametric graphical labellings, we hope to enrich the variety of Topsnut-graphical passwords, and study the relationship between new parametric graphic labellings and existing labellings on trees having perfect matching. In addition, we also found, by two kinds of special operations, trees having perfect matching can be converted into paths perfect matching, and the nature of the original passwords remains unchanged. Our results can be provided to two or more banking users, and our method can easily be converted into polynomial time algorithms.

Graph Theory Towards Module-K Odd-Elegant Labelling Of Graphical Passwords

Graph labellings have been applied in many areas of science and engineering, such as in the development of redundant arrays of independent disks which incorporate redundancy utilizing erasure codes, algorithms, design of highly accurate optical gauging systems for use on automatic drilling machines, design of angular synchronization codes, design of optimal component layouts for certain circuit-board geometries, and determining configurations of simple resistor networks which can be used to supply any of a specified set of resistance values. Based on the idea of of “topological structure plus number theory” and magic type of various labellings for solving network transfer delay by using other type of graphical passwords. We define a new graph labelling, called Module-K odd-elegant labelling , and find some network models that admit our new labelling, and furthermore our methods can be transformed into effective algorithms.

A Text based Authentication Scheme for Improving Security of Textual Passwords

User authentication through textual passwords is very common in computer systems due to its ease of use. However textual passwords are vulnerable to different kinds of security attacks, such as spyware and dictionary attacks. In order to overcome the deficiencies of textual password scheme, many graphical password schemes have been proposed. The proposed schemes could not fully replace textual passwords, due to usability and security issues. In this paper a text based user authentication scheme is proposed which improves the security of textual password scheme by modifying the password input method and adding a password transformation layer. In the proposed scheme alphanumeric password characters are represented by random decimal numbers which resist online security attacks such as shoulder surfing and key logger attacks. In the registration process password string is converted into a completely new string of symbols or characters before encryption. This strategy improves password security against offline attacks such as brute-force and dictionary attacks. In the proposed scheme passwords consist of alphanumeric characters therefore users are not required to remember any new kind of passwords such as used in graphical authentication. Hence password memorability burden has been minimized. However mean authentication time of the proposed scheme is higher than the textual password scheme due to the security measures taken for the online attacks.

Security and Verification of Server Data Using Frequent Itemset Mining in Ecommerce

Frequent itemsets refer to a set of data values (e.g., product items) whose number of co-occurrences exceeds a given threshold. The challenge is that the design of proofs and verification objects has to be customized for different data mining algorithms. Intended method will implement a basic idea of completeness verification and authentication approach in which the client will uses a set of frequent item sets as the evidence, and checks whether the server has missed any frequent item set as evidence in its returned result. It will help client detect untrusted server and system will become much more efficiency by reducing time. In authentication process CaRP is both a captcha and a graphical password scheme. CaRP addresses a number of security problems altogether, such as online guessing attacks, relay attacks, and, if combined with dual-view technologies, shoulder-surfing attacks.

Advanced CAPTCHA as a graphical password for better & secure authentication

Advanced CAPTCHA as a graphical password for better & secure authentication

Authentication Scheme for Session Passwords Using Color and Image

Abstract Graphical passwords are believed to be more secure than traditional textual passwords, but the authentications are usually complex and boring for users. Furthermore, most of the existing graphical password schemes are vulnerable to spyware and shoulder surfing. A novel graphical password scheme ColorLogin is proposed in this paper. ColorLogin is implemented in an interesting game way to weaken the boring feelings of the authentication. ColorLogin uses background color, a method not previously considered, to decrease login time greatly. Multiple colors are used to confuse the peepers, while not burdening the legitimate users. Meanwhile, the scheme is resistant to shoulder surfing and intersection attack to a certain extent. Experiments illustrate the effectiveness of ColorLogin.

New Graphic Password Scheme Containing Questions-Background-Pattern and Implementation

Security of authentication is needed to be provided superlatively to secure users’ personal and exchange information since online information exchange systems have been developed according to internet speed. Therefore, the aim of this paper is to develop existing graphical password scheme based on one's memory, create and implement a new graphical password scheme that composed of three layer verification. We programmed our scheme in order to prove its superiority comparing with existing schemes. While we conducted survey on user by accessing participant to our system lied in participants’ local network and we analyzed in accordance with the average length of their created password and statistical significant of entropy bit. From the survey results of total participants, we find that our scheme has statistical significant, furthermore it was proved that it can secure from a variety of attacks due to its high entropy.

Graphical Password for Desktop

Graphical Password for Desktop