Numeric Passwords Research Articles

Peningkatan Pengetahuan Smart Home dan Penerapan keamanan Pintu Otomatis

The door is an important component of the dwelling. The need for security is an important thing in everyday life. Home security such as doors, cupboards, lockers and so on at this time still uses a manual system, namely by using conventional keys. Conventional door locks usually consist of a key housing and a saddle to open it. The demands that must be carried out by schools in implementing the learning process that utilize information and communication technology face various obstacles that are not simple. The importance of technology-based learning that can open students' horizons and hone students' soft skills. The implementation of the PKM Assisted School activities is carried out through three stages, namely the initial stage, the process stage, and the final stage. The implementation of training on making door locks begins with the provision of smart home and door lock materials to open up insights about automation technology. After participants gain an understanding of smart homes and door locks, participants will be shown the components and systems in making door locks. Furthermore, each participant will do practice to make an automatic door security system so that participants gain experience in making automatic lock systems. Furthermore, the participants are required to be able to run an automatic security system by designing a security lock using a numeric password until the system is successfully run. The increase in skills and knowledge related to door locks can be seen from the participation of each participant with the successful creation of a door lock system by each group. From the results of the questionnaires that have been filled out by students, 89% stated that they have gained new knowledge related to the manufacture of door lock systems.

Behavioral Acoustic Emanations: Attack and Verification of PIN Entry Using Keypress Sounds.

This paper explores the security vulnerability of Personal Identification Number (PIN) or numeric passwords. Entry Device (PEDs) that use small strings of data (PINs, keys or passwords) as means of verifying the legitimacy of a user. Today, PEDs are commonly used by personnel in different industrial and consumer electronic applications, such as entry at security checkpoints, ATMs and customer kiosks, etc. In this paper, we propose a side-channel attack on a 4–6 digit random PIN key, and a PIN key user verification method. The intervals between two keystrokes are extracted from the acoustic emanation and used as features to train machine-learning models. The attack model has a 60% chance to recover the PIN key. The verification model has an 88% accuracy on identifying the user. Our attack methods can perform key recovery by using the acoustic side-channel at low cost. As a countermeasure, our verification method can improve the security of PIN entry devices.

ALeak: Context-Free Side-Channel from Your Smart Watch Leaks Your Typing Privacy

We revisit a crucial privacy problem in this paper — can the sensitive information, like the numeric passwords and personal data, frequently typed by user on mobile devices be inferred through the motion sensors of wearable device on user's wrist, e.g., smart watch or wrist band? Existing works have achieved the initial success under certain context-aware conditions, such as 1) the horizontal keypad plane, 2) the known keyboard size, and/or 3) the last keystroke on a fixed “enter” button. Taking one step further, the key contribution of this paper is to fully demonstrate, more importantly alarm people, the further risks of typing privacy leakage in much more generalized context-free scenarios, which are related to most of us for the daily usage of mobile devices. We validate this feasibility by addressing a series of unsolved challenges and developing a prototype system aLeak . Extensive experiments show the efficacy of aLeak , which achieves promising successful rates in the attack from more than 500 rounds of different users’ typings on various mobile platforms without any context-related information.

Research on mobile commerce payment management based on the face biometric authentication

This paper mainly put forward the mode of identification and secure payment based on face recognition from a face bio-identification perspective. With the technology of face recognition, the general framework of mobile commerce and the management processes are designed and constructed in this paper. The proposed management solution of anonymous payment, based on face identity, is an important method for m-commerce privacy protection. Users only need a payment expression to replace traditional payment, random verification code input and other cumbersome process, which not only frees mobile users from remembering a lot of numeric passwords but also avoids potential hazards, such as password disclosure, forgotten, lost and illegal access. This paper presents an innovative digital solution to the secure payments in mobile commerce, which greatly enhances the safety and efficiency of mobile payment system and boosts the rapid and humanistic development of mobile commerce by technological means.

Privacy Enhancing Keyboard: Design, Implementation, and Usability Testing

To protect users from numerous password inference attacks, we invent a novel context aware privacy enhancing keyboard (PEK) for Android touch-based devices. Usually PEK would show a QWERTY keyboard when users input text like an email or a message. Nevertheless, whenever users enter a password in the input box on his or her touch-enabled device, a keyboard will be shown to them with the positions of the characters shuffled at random. PEK has been released on the Google Play since 2014. However, the number of installations has not lived up to our expectation. For the purpose of usable security and privacy, we designed a two-stage usability test and performed two rounds of iterative usability testing in 2016 and 2017 summer with continuous improvements of PEK. The observations from the usability testing are educational: (1) convenience plays a critical role when users select an input method; (2) people think those attacks that PEK prevents are remote from them.

Using cloud models of heartbeats as the entity identifier to secure mobile devices

Mobile devices are extensively used to store more private and often sensitive information. Therefore, it is important to protect them against unauthorised access. Authentication ensures that authorised users can use mobile devices. However, traditional authentication methods, such as numerical or graphic passwords, are vulnerable to passive attacks. For example, an adversary can steal the password by snooping from a shorter distance. To avoid these problems, this study presents a biometric approach that uses cloud models of heartbeats as the entity identifier to secure mobile devices. Here, it is identified that these concepts including cloud model or cloud have nothing to do with cloud computing. The cloud model appearing in the study is the cognitive model. In the proposed method, heartbeats are collected by two ECG electrodes that are connected to one mobile device. The backward normal cloud generator is used to generate ECG standard cloud models characterising the heartbeat template. When a user tries to have access to their mobile device, cloud models regenerated by fresh heartbeats will be compared with ECG standard cloud models to determine if the current user can use this mobile device. This authentication method was evaluated from three aspects including accuracy, authentication time and energy consumption. The proposed method gives 86.04% of true acceptance rate with 2.73% of false acceptance rate. One authentication can be done in 6s, and this processing consumes about 2000 mW of power.

이중 표시 방법을 이용한 패스워드 기반 사용자 인증 기법

In this paper, we propose a user friendly password input method for mobile devices which is secure against SSA. The proposed method is a numeric password input method such as a conventional PIN method. One of the buttons, numbers and colors, so as to display the two pieces of information to double. The user can select one of the colors or numbers within one button to type in the password. Because an attacker does not know whether the user has entered any color and number, the proposed technique is safe from the SSA. Also to be secure for smudge attacks and password guessing attacks through random changes in the number and color information. ▸

GESTURE BASED TOUCHPAD SECURITY SYSTEM WITH DESIGN OF TOUCH SCREEN CONTROLLER

The purpose of the project is to present a new approach on the design of security systems by using a touch sensitive device. Security is a permanent concern in a variety of environments ranging from physical access restriction in home and industrial settings to information security in digital systems. Numeric passwords, fingerprint recognition, and many other techniques have been extensively implemented in the past but they present certain drawbacks. The proposed technique makes use of a touch device to recognize symbols as passwords and takes time into account to add a new dimension and prevent password theft. We implemented a prototype that demonstrates the capabilities of the proposed security approach by showing one direct application in physical access restriction systems.

Biometrics and Biosecurity 2013

Biometrics and Biosecurity 2013

숫자기반의 패턴 형식 패스워드 사용자인증 기술

기존의 텍스트 기반 패스워드들은 추측, 사전 공격, 키로거, 사회공학, 훔쳐 보기, 스파이웨어 등의 공격에 취약하고, 이는 모바일 환경에서 더욱 심각한 문제이다. 훔쳐보기 공격은 패스워드에 대한 대표적인 공격방법 중 하나로, 공격자는 로그인 과정을 직접 관찰하거나 사용자의 인증 과정을 녹화하는 방식으로 패스워드에 대한 정보를 얻을 수 있다. 이러한 취약점을 보완하기 위한 연구를 진행하였다. 본 논문에서 제안하는 패턴 기반의 숫자 패스워드 인증 기술에서는 길이가 긴 패턴 시퀀스로 사용자 인증함으로써 기존 패스워드의 보안성을 강화시키려 하였으며, 높은 보안성을 제공하면서 사용자로 하여금 4개의 숫자만을 기억하도록 하여 사용의 편의성은 침해하지 않으려 하였다. 그 결과로, 사용하기 편리하고 훔쳐보기 공격과 전사적 대입 공격을 방지하기 위한 새로운 패스워드 시스템을 제안하고 이에 대한 보안성과 유용성을 검토하고자 한다. The traditional text-based password is vulnerable guessing, dictionary attacks, keyloggers, social engineering, stole view, etc. these vulnerability effect more serious problem in a mobile environment. In this study, By using the pattern number to enter the password of an existing four-digit numeric password, User easily use to new password system. The technology on pattern based numerical password authorization proposed in this paper would intensify the security of password which holds existing 10 numbers of cases by authorizing a user and would not invade convenience of use by providing high security and making users memorize only four numbers like old method. Making users not have inconvenience and raising complexity, it would have a strength to an shoulder surfing attack of an attacker. So I study password system that represents the shape-based of number. I propose the new password system to prevent peeking attacks and Brute-force attack, and this proposal is to review the security and usability.

The Coming PIN Code Epidemic: A First Study of Memory of Numeric Security Codes

Most people must remember various numeric passwords, security codes and PIN numbers for banking, credit cards, debit cards, online accounts, mobile phones, door locks, luggage locks, etc. One pilot study (N=13) developed a list of eleven strategies for remembering numeric codes, and another (N=15) optimized the research questionnaire which asked respondents about a) the number of security codes they had, b) the number of self-created codes, c) mnemonic strategies used, d) problems and effort remembering codes, and e) gender, age, and education. Respondents (N=388) had a median of 4 security codes and typically used 2 different memory strategies, the most common of which were based on repetition and on keypad pattern. Difficulties remembering codes were unrelated to gender or education but were positively correlated with age and with number of strategies used. Self-creation of codes slightly reduced difficulties remembering numeric codes.