Graphical User Authentication Research Articles

A secured image based three factor user authentication system

Graphical User Authentication (GUA) is an image-based password system that leverages the human tendency to remember visuals more effectively. This methodology enables users to effortlessly generate and recall passwords. The three important parameters for any graphical based password system are Usability, Randomness and Security. Usability deals with the system adaptability, memorability, flexibility, User satisfaction etc. On the other side randomness is about Hotspot Coverage, Click Point Clustering, Spatial Patterns, J-statistics etc. This paper is an attempt to initially develop an image-based authentication system that is usable, venerable in terms of randomness. In addition, it is necessary to build a strong security authentication process where the attackers are unable to access the system. The past research study claims the diversity between the usability and security aspect. The focus of this research study is to analyze the impact of various security attacks on the proposed system and the possible solution to avoid them.

A Comparison Between Position-Based and Image-Based Multi-Layer Graphical user Authentication System

System security is very important, especially in the age that we live in. One of the ways to secure data is by creating a password that makes it difficult for unauthorized user to gain access to the system. However, what makes it difficult for the system to be attacked is directly dependent on approach used to create it, and how secured it is. Text based approach is the oldest authentication approach. It requires that the user supplies textual password in order to gain access to the system. However, this approach has shown a significant drawback and several vulnerabilities, one of which is the difficulty in recalling or remembering textual passwords. Several other attacks that textual passwords are vulnerable to include brute force attacks, shoulder spying, dictionary attacks etc. The introduction of graphical schemes made things a lot better. Graphical passwords make use of images. However, most graphical schemes are vulnerable to shoulder surfing attacks. In this research work, we developed two systems; A position-based multi-layer graphical user authentication system and an Image-based multi-layer graphical user authentication system. The reason behind this research work is to compare the two systems, and evaluate them based on three major performance metrics: (1) Security, (2) Reliability (3) Individual preference.

Graphical Password Authentication

A pattern password is an authentication system that works when a user selects images in a specific sequence displayed on a graphical user interface (GUI). For this reason, the graphical password method is called Graphical User Authentication (GUA). The most common way to authenticate a computer is by using an alphanumeric username and password. This method has been shown to have significant drawbacks. For example, users tend to choose passwords that are easy to guess. On the other hand, if a password is difficult to guess, it is often difficult to remember. To overcome these security issues, researchers have developed an authentication method that uses colours and images as passwords. In this research paper, we present a comprehensive overview of existing pattern password methods and introduce our own theory. Graphic cryptosystems have been proposed as a possible alternative to text-based schemes because people can remember colours and images better than text. Colours and Images are usually easier to remember or recognize than text. In this composition, this paper provides a comprehensive overview of existing graphical password ways. These ways fell into two orders: recognition-based and memory-based approaches. Thereafter the strengths and limitations of each approach and coming research directions in this field will be talked over in detail.

An Enhanced Graphical Authentication Scheme Using Multiple-Image Steganography

Most remote systems require user authentication to access resources. Text-based passwords are still widely used as a standard method of user authentication. Although conventional text-based passwords are rather hard to remember, users often write their passwords down in order to compromise security. One of the most complex challenges users may face is posting sensitive data on external data centers that are accessible to others and do not be controlled directly by users. Graphical user authentication methods have recently been proposed to verify the user identity. However, the fundamental limitation of a graphical password is that it must have a colorful and rich image to provide an adequate password space to maintain security, and when the user clicks and inputs a password between two possible grids, the fault tolerance is adjusted to avoid this situation. This paper proposes an enhanced graphical authentication scheme, which comprises benefits over both recognition and recall-based graphical techniques besides image steganography. The combination of graphical authentication and steganography technologies reduces the amount of sensitive data shared between users and service providers and improves the security of user accounts. To evaluate the effectiveness of the proposed scheme, peak signal-to-noise ratio and mean squared error parameters have been used.

A Hybrid Graphical User Authentication Scheme in Mobile Cloud Computing Environments

User authentication is a critical security requirement for accessing resources in cloud computing systems. A text-based password is a standard user authentication way and it is still extensively used so far. However, textual passwords are difficult to remember, which forces users to write it down and compromise security. In recent years, graphical user authentication methods have been proposed as an alternative way used to verify the identity of users. The most critical challenges cloud-computing users face is to post their sensitive data on external servers that are not directly under their control and that can be used or managed by other people. This paper proposes a question-based hybrid graphical user authentication scheme for portable cloud-computing environments. The proposed scheme comprises advantages over both recognition- and recall-based techniques without storing any sensitive information on cloud servers. The experimental study and survey have been conducted to investigate the user satisfaction about the performance and usability aspects of the proposed scheme. The study results show that the proposed scheme is secure, easy to use, and immune to potential password attacks such as brute force password guessing attacks and shoulder surfing attacks

A Taxonomy of Multimedia-based Graphical User Authentication for Green Internet of Things

Authentication receives enormous consideration from the research community and is proven to be an interesting field in today’s era. User authentication is the major concern because people have their private data on devices. To strengthen user authentication, passwords have been introduced. In the past, the text-based password was the traditional way of authentication, but this method has particular shortcomings. The graphical password has been introduced as an alternative, which uses a picture or a set of pictures to generate a password. In the future, it is a requirement of such approaches to maintain robustness and consume fewer energy resources to become suitable for the Green Internet of Things (IoT). Similarly, diverse graphical password authentication mechanisms have been used to provide users with better security and usability. In this article, we conduct an extensive survey on the existing approaches of graphical password authentication to highlight the challenges required to be addressed for Green IoT. In comparison to other existing surveys, the objective is to consolidate the graphical password technique and to identify the problem associated with it. Besides, this survey will also identify the vulnerabilities of the graphical password against several potential attacks. We have also examined the strengths and weaknesses of each technique along with the future research directions. This study also evaluates the usability of each approach by considering learnability, memorability, and so forth and also presents a comparative analysis with security.

Graphical User Authentication Using Hybrid Visual Cryptographic Technique

User authentication is the important aspect while offering common and utility services. Most of the web services are authenticates the exact user by using the traditional login model but it has security risks. Graphical user authentication is the replacement to solve the issues in traditional model. This paper proposes a new graphical based user authentication model (VerCube) using a hybrid approach. This model implements the cryptographic technique and visual cryptographic representations.

Password Authentication System using Coordinates & Location

Password authentication system is a very important factor for every system which needs to be secure. Every password is easy to crack and people are looking for a strong password to their systems. Here we use a password authentication system that is designed for high security and could be easily put into old system. In our frame work we are using cryptographic representation for converting location point into coordinates. Our primary aim is to prevent hacking through all kinds of brute force algorithms. It is concerned with including client’s geographical location as an important authentication factor to enhance security. Techniques to integrate location as an authentication factor as well as techniques to generate location based cryptographic keys are reviewed and discussed .Most importantly our system combine graphical user authentication and location coordinates .Existing system was vulnerable to dictionary attack algorithm and salt data algorithm ,so efforts are been taken to generate non repeatable graphical user interface system using coordinates .

A Human-Cognitive Perspective of Users’ Password Choices in Recognition-Based Graphical Authentication

ABSTRACTGraphical password composition is an important part of graphical user authentication which affects the strength of the chosen password. Considering that graphical authentication is associated with visual search, perception, and information retrieval, in this paper we report on an eye-tracking study (N = 109) that aimed to investigate the effects of users’ cognitive styles toward the strength of the created passwords and shed light into whether and how the visual strategy of the users during graphical password composition is associated with the passwords’ strength. For doing so, we adopted Witkin’s Field Dependence-Independence theory, which underpins individual differences in visual information and cognitive processing, as graphical password composition tasks are associated with visual search. The analysis revealed that users with different cognitive processing characteristics followed different patterns of visual behavior during password composition which affected the strength of the created passwords. The findings underpin the need of considering human-cognitive characteristics as a design factor in graphical password schemes. The paper concludes by discussing implications for improving recognition-based graphical passwords through adaptation and personalization techniques based on individual cognitive characteristics.

Graphical User Authentication Algorithm for Mobile Banking User

Graphical User Authentication Algorithm for Mobile Banking User

A Review on the Graphical User Authentication Algorithm: Recognition-based and Recall-based

User authentication has become an important consideration in information security as traditional password-based schemes are constantly subjected to attacks. Graphical images have now taken center stage as they are easier to remember and offer other security features. In this paper, we explore two categories of the Graphical User Authentication Algorithm: Recognition-based and Recall-based. Examples from both categories are presented to compare the types of attacks encountered, usability and security.

A Study of Various Graphical Passwords Authentication Schemes Using Ai Hans Peter Wickelgren Approach

Using AI Hans peter Wickelgren applying the usage of text-based passwords is common authentication system in any Application. This conventional authentication scheme faces some kind of limitations and drawbacks with usability and crypto-graphical security issues that bring troubles to users. For example, user tends to pick passwords that can be easily guessed. On the contrary, if a password is hard to guess, then it is often hard to remember. An alternative system is required to overcome these problems. To deal with these drawbacks, authentication scheme that use photo ,image, or set of pattern as password is proposed using knowledge Recall-Based System(KRBS).Graphical passwords consist of clicking or dragging activities on the pictures rather than typing textual characters, might be the option to overcome the problems that arise from the text-based passwords authentication system. In this paper, a comprehensive Artificial Intelligence(AI) study of the existing graphical password schemes is performed. The graphical password authentication systems are categorized into two AI approach types: An approach on recognition-based System (RBS) and second approach on Recall-based system (RCBS). We discuss adequately the strengths and limitations of each method in terms of usability and security aspects . Keywords- Graphical Passwords using Hans peter Wickelgren, Recognition-Based Graphical User Authentication, Recall-Based Graphical User Authentication, Pure Recall-Based Authentication, Knowledge Recall-Based Authentication System, Usability, Security , Artificial Intelligence(AI) ,Knowledge-Based Development Systems(KBDS).

A new algorithm on Graphical User Authentication(GUA)based on multi-line grids

Today user authentication stands out as one of the most essential areas in information security which has several ways of being implemented. From time in memorial authentication schemes that apply strong text-based passwords have been typically expected to offer some assurance of security. But committing to memory such strong passwords can prove to be quite a daunting task thus forcing users to resort to writing them down on pieces of papers or even storing them onto a computer file. As a means of thwarting such habits, graphical authentication has been proposed as a replacement for text-based authentication. This has been spurred by the fact the humans have a natural inclination to remember images more easily than text. Most Information Communication and Telecommunication (ICT) environments in the last 20 years have tried to implement graphical user authentication schemes. The effectiveness of a graphical password is measured by its level of usability and security. Despite there being many existing algorithms most have failed to achieve both aspects simultaneously. To start with this paper reviews the pure and cued recall-based algorithms graphical password authentication schemes together with their shortcomings and probable attacks. Thereafter a comparative analysis of all Recall-Based algorithms based on attack patterns of graphical user authentication is tabulated. This is then followed by a discussion on the newly proposed algorithm that is based on a multi size grid and its evaluation by an attacker team. Finally, a comparison of the newly proposed algorithm and previous algorithms will be evaluated in a table.   Key words: Recall-based GUA, pure recall-based algorithm, cued recall-based algorithm, graphical password, usability, security, attack patterns.

Graphical User Authentication: A Comparative Evaluation of Composite Scene Authentication vs. Three Competing Graphical Passcode Systems

Previous studies (Johnson & Werner, 2006; 2007) have shown that Composite Scene Authentication (CSA) passcodes are more memorable than alphanumeric passwords over extended retention intervals. This study evaluated the memorability of six types of graphical passcodes of varying complexity (including three variants of CSA passcodes) over thirty-minute and one-week retention intervals. The graphical passcodes were compared to one another, as well as to an alphanumeric password of equivalent bit length. A strong overall advantage in information retained was found for graphical passcodes (M = 92.83%) compared to alphanumeric passwords (M = 75.47%). In addition, CSA passcodes were remembered better (M = 97.1 %) than other graphical passcodes (M = 88.56%). An even larger difference was observed for percent successful logins for CSA passcodes (M = 84.23%) compared to other graphical passcodes (M= 56.39%) after the one-week retention interval. The variable bit lengths of the passcodes did not affect percent information retained.

Memorability of Alphanumeric and Composite Scene Authentication (CSA) Passcodes Over Extended Retention Intervals

Current authentication strategies seek to increase security by requiring users to create more secure alphanumeric passwords. Unfortunately, the inverse relationship between alphanumeric password security and memorability prevents users from being able to create a password that is both secure and memorable. Graphical user authentication mechanisms have been explored as a means to maintain security while enhancing memorability of passcodes. Current approaches often use unrelated picture sets from which participants have to remember a subset, with mixed results. The study outlined in this paper seeks to further validate the Composite Scene Authentication (CSA) graphical passcode mechanism (Johnson & Werner, 2006). Extending retention intervals and increasing the variability of stimuli clearly demonstrated the superiority of CSA over alphanumerical passwords. In addition, we manipulated the mode of presentation (serial vs. composite) to assess the memorability of stimuli presented in different temporal formats. In the current study CSA passcodes consisting of nine categorical dimensions were compared to nine character alphanumeric passwords. Participants showed a strong advantage in passcode retention of graphical passcodes for both modes of presentation. This effect grew larger with increasing retention intervals. At the longest retention interval (6 weeks), only 10 (12%) participants were able to produce their alphanumerical password vs. 50 (60%) participants who were still able to produce the correct graphical passcode.

Using Composite Scene Authentication (Csa) as a Graphical Alternative to Alphanumeric Password Systems

Current authentication strategies seek to increase security by requiring users to create more secure alphanumeric passwords, but the inverse relationship between alphanumeric password security and memorability prevents users from being able to create a password that is both secure and memorable. Graphical user authentication mechanisms have been explored as a means to maintain security while enhancing memorability of passcodes. Current approaches often use unrelated picture sets from which participants have to remember a subset, with mixed results. Proposed in this paper is an alternative approach of using a Composite Scene Authentication (CSA) mechanism to maximize memorability of graphical passcodes. In the current study, a composite image consisting of nine elements was compared to a nine character hexadecimal password. Participants were able to correctly recognize the CSA mechanism 80% of the time, but only able to recall the hexadecimal password 20% of the time.