Password Method Research Articles

Visual Lock - Enhancing Security with Visual Password

The prevailing method of user authentication commonly involves the submission of a text-based password along with a username. However, this approach has inherent drawbacks that have been widely acknowledged. A significant challenge is the difficulty users face in remembering passwords, leading to the adoption of short and simplistic ones, which in turn renders them susceptible to easy guessing or hacking. To address these concerns, this article introduces a novel financial graphical password authentication system. The operational details are elucidated through real-world examples, emphasizing key features of the system. In response to the limitations of conventional text-based password authentication, a groundbreaking financial graphical password method is proposed in this article. The prevailing issue of users resorting to short and easily guessable passwords due to memory constraints is addressed through this innovative approach. The article not only explains the functioning of the new system using real-world instances but also underscores its crucial features that enhance security in user authentication

Multimodal biometric authentication: A review

Critical applications ranging from sensitive military data to restricted area access demand selective user authentication. The prevalent methods of tokens, passwords, and other commonly used techniques proved deficient as they can be easily stolen, lost, or broken to gain illegitimate access, leading to data spillage. Since data safety against tricksters is a significant issue nowadays, biometrics is one of the unique human characteristic-based techniques that may give better solutions in this regard. The technique entails biometric authentication of users based on an individual’s inimitable physiological or behavioral characteristics to provide access to a specific application or data. This paper provides a detailed description of authentication and its approaches, focusing on biometric-based authentication methods, the primary challenges they encounter, and how they have been addressed. The tabular view shows the benefits and downsides of various multimodal biometric systems, and open research challenges. To put it another way, this article lays out a roadmap for the emergence of multimodal biometric-based authentication, covering both the challenges and the solutions that have been proposed. Further, the urge to develop various multi-trait-based methods for secure authentication and data privacy is focused. Lastly, some multimodal biometric systems comprising fingerprint and iris modalities have been compared based on False Accept Rate (FAR), False Reject Rate (FRR), and accuracy to find the best secure model with easy accessibility.

A STRONG AND PRACTICAL AUTHENTICATION MECHANISM USING PASSTEXT AND ONE MINUTE PASSCODE

In this modern world, hacking is growing faster, and there is no privacy for personal data. Therefore, we have decided to create passwords using new methods. This project demonstrates that there is no secret shared between the user and strangers; it presents a one minute challenge to unlock private data. Our project generates random codes minute by minute, and each password is only valid for just one minute, which is called OMP (One Minute Passcode). Therefore, the user doesn't know the correct password at all times. These passkeys are then sent to the user's mobile phone using the Twilio method, which is more secure and provided by Google to communicate through secret authentication methods and tokens. Thus, hacking becomes impossible with this level of complexity. In the future, if there's a possibility of hacking, we will update the cipher methods to unlock the data. Nowadays, the usage of PCs and mobile phones has increased rapidly. What if the passwords are not known by the user or strangers in this modern technology. Our project ensures privacy between users and hackers or strangers; secret passwords may sometimes be compromised, but random passwords will never be known to users or strangers. This idea is used here to maintain safety while unlocking our privacy or private sectors by creating random codes and sending them to the user's mobile IP value or number. We can easily unlock our device in a non-hackable form using brute force and Twilio, which are the main components of our data protection system. In the older authentication method, there were only 6-digit numbersto unlock data, which were available only for apps. Like an OTP, this method randomly generates a 6-digit code to unlock the private sector, which is available on the same phone or PC. This makes it easy for hackers to access details using your phone number or email. These passkeys are dynamic and not stable at all times, and theirsize istoo small. A relational database plays a major role here, we also use the emergency password method for user convenience. KEYWORDS: Security Authentication, Twilio, Database, Spyware attacks, Hacking, Password Authentication,Database.

Process of Fingerprint Authentication using Cancelable Biohashed Template

Template protection using cancelable biometrics prevents data loss and hacking stored templates, by providing considerable privacy and security. Hashing and salting techniques are used to build resilient systems. Salted password method is employed to protect passwords against different types of attacks namely brute-force attack, dictionary attack, rainbow table attacks. Salting claims that random data can be added to input of hash function to ensure unique output. Hashing salts are speed bumps in an attacker’s road to breach user’s data. Research proposes a contemporary two factor authenticator called Biohashing. Biohashing procedure is implemented by recapitulated inner product over a pseudo random number generator key, as well as fingerprint features that are a network of minutiae. Cancelable template authentication used in fingerprint-based sales counter accelerates payment process. Fingerhash is code produced after applying biohashing on fingerprint. Fingerhash is a binary string procured by choosing individual bit of sign depending on a preset threshold. Experiment is carried using benchmark FVC 2002 DB1 dataset. Authentication accuracy is found to be nearly 97\%. Results compared with state-of art approaches finds promising.

PASS POINT SELECTION OF AUTOMATIC GRAPHICAL PASSWORD AUTHENTICATION TECHNIQUE BASED ON HISTOGRAM METHOD

Graphical passwords, as opposed to textual passwords, require the user to pick pictures or draw symbols rather than input written letters. They are an option that may be explored in order to get over the issues that are caused by the system of passwords that are based on text. It has been hypothesized that graphical passwords are more difficult to crack using a brute force technique or to figure out through guessing. This paper proposes an authentication system based on a graphical password method. The proposed system computes the password points using histogram arithmetic and encrypts the chosen password points using SHA512. The envisioned system has been realized as an android application and evaluated with existing research considering multiple measurements such as required login time, password space, and entropy. The findings reveal that the new suggested system outperforms the reference work by more than 85% in terms of login latency and more than 72% in terms of entropy results.

Fingerprint Password Method Provides Improved Accuracy over Token-based Authentication for Efficient and Secure File Transfers

The goal of this study is to improve the accuracy of secure file transfer by proposing and evaluating a novel fingerprint password method in comparison to the existing token-based authentication method.In this study, a dataset of 20 samples was obtained from Kaggle, with 10 samples in each group (Group 1 and Group 2) to determine the accuracy of secure file transfer. The data was analyzed using G-power at 0.8, and with alpha and beta values set at 0.05 and 0.2, respectively. A 95% confidence interval was used. Both the novel Fingerprint password method and the Two factor authentication method were applied to the same number of data samples (N = 10) for secure file transaction, and it was found that the Fingerprint password method had a higher accuracy rate. The study found that the fingerprint password method had a higher accuracy rate than the token-based authentication method when securing file transactions. Specifically, the fingerprint password method had an accuracy rate of 95.66%, while the token-based method had an accuracy rate of 93.45%. Since, hence the p=0.001 (p<0.05), the study's results found that there is a statistically significant difference between two algorithms.: This study has shown that the fingerprint biometric password method is a viable and effective alternative to token-based authentication methods for secure file transactions. It provides a more secure and user-friendly solution, without the need for additional hardware.

Combination of Alphanumeric Password and Graphic Authentication for Cyber Security

The main objective of this research is to create a more secure and user-friendly password-generation method that is less vulnerable to attacks such as shoulder surfing. Similarly, while textual or alphanumeric passwords are not entirely secure, they also come with certain limitations, including issues related to memory. The novelty of this research is the development of a new algorithm (Secure Password Algorithm/SPA) for password generation that uses graphics to generate textual input from users based on user perceptions. This method is more resilient against attacks like shoulder surfing and offers a more secure and user-friendly way of creating passwords. This research uses a combination of literature review and SPA proposals to create passwords with graphical and encryption techniques. The literature review examines the weaknesses of existing graphical and text password methods. The proposed algorithm focuses on user perception and confidential data to create more secure and easy-to-use passwords. The research results show that this research can provide a new, more secure, and user-friendly method of generating passwords such as shoulder surfing. Research supports software implementation of these algorithms and psychometric, psychological, and psychiatric studies to improve user input and protect systems from malicious attacks. Graphical passwords provide better recall compared to textual passwords, and the proposed algorithm for password generation using graphical and encryption techniques provides a more secure and user-friendly method of password generation that is less vulnerable to attacks such as shoulder surfing. The proposed new encryption algorithm has succeeded in overcoming various potential weaknesses and attacks on previous encryption methods. The test results demonstrate the efficiency and near invulnerability of the SPA algorithm against brute force attacks on specific security parameters. Tested alongside AES, shows comparable security levels, particularly in resource-constrained environments. To address doubts, the paper establishes evaluation standards for computational complexity, resistance to known attacks, and adaptability to evolving threats. The algorithm has the potential to be a stronger and more secure solution for generating passwords to safeguard confidential user information.

Systemic Literature Review of Recognition-Based Authentication Method Resistivity to Shoulder-Surfing Attacks

The rapid advancement of information technology (IT) has given rise to a new era of efficient and fast communication and transactions. However, the increasing adoption of and reliance on IT has led to the exposure of personal and sensitive information online. Safeguarding this information against unauthorized access remains a persistent challenge, necessitating the implementation of improved computer security measures. The core objective of computer security is to ensure the confidentiality, availability, and integrity of data and services. Among the mechanisms developed to counter security threats, authentication stands out as a pivotal defense strategy. Graphical passwords have emerged as a popular authentication approach, yet they face vulnerability to shoulder-surfing attacks, wherein an attacker can clandestinely observe a victim’s actions. Shoulder-surfing attacks present a significant security challenge within the realm of graphical password authentication. These attacks occur when an unauthorized individual covertly observes the authentication process of a legitimate user by shoulder surfing the user or capturing the interaction through a video recording. In response to this challenge, various methods have been proposed to thwart shoulder-surfing attacks, each with distinct advantages and limitations. This study thus centers on reviewing the resilience of existing recognition-based graphical password techniques against shoulder-surfing attacks by conducting a comprehensive examination and evaluation of their benefits, strengths, and weaknesses. The evaluation process entailed accessing pertinent academic resources through renowned search engines, including Web of Science, Science Direct, IEEE Xplore, ProQuest, Scopus, Springer, Wiley Online Library, and EBSCO. The selection criteria were carefully designed to prioritize studies that focused on recognition-based graphical password methods. Through this rigorous approach, 28 studies were identified and subjected to a thorough review. The results show that fourteen of them adopted registered objects as pass-objects, bolstering security through object recognition. Additionally, two methods employed decoy objects as pass-objects, enhancing obfuscation. Notably, one technique harnessed both registered and decoy objects, amplifying the security paradigm. The results also showed that recognition-based graphical password techniques varied in their resistance to different types of shoulder-surfing attacks. Some methods were effective in preventing direct observation attacks, while others were vulnerable to video-recorded and multiple-observation attacks. This vulnerability emerged due to attackers potentially extracting key information by analyzing user interaction patterns in each challenge set. Notably, one method stood out as an exception, demonstrating resilience against all three types of shoulder-surfing attacks. In conclusion, this study contributes to a comprehensive understanding of the efficacy of recognition-based graphical password methods in countering shoulder-surfing attacks by analyzing the diverse strategies employed by these methods and revealing their strengths and weaknesses.

Deep learning based graphical password authentication approach against shoulder-surfing attacks

The password used to authenticate users is vulnerable to shoulder-surfing assaults, in which attackers directly observe users and steal their passwords without using any other technical upkeep. The graphical password system is regarded as a likely backup plan to the alphanumeric password system. Additionally, for system privacy and security, a number of programs make considerable use of the graphical password-based authentication method. The user chooses the image for the authentication procedure when using a graphical password. Furthermore, graphical password approaches are more secure than text-based password methods. In this paper, the effective graphical password authentication model, named as Deep Residual Network based Graphical Password is introduced. Generally, the graphical password authentication process includes three phases, namely registration, login, and authentication. The secret pass image selection and challenge set generation process is employed in the two-step registration process. The challenge set generation is mainly carried out based on the generation of decoy and pass images by performing an edge detection process. In addition, edge detection is performed using the Deep Residual Network classifier. The developed Deep Residual Network based Graphical Password algorithm outperformance than other existing graphical password authentication methods in terms of Information Retention Rate and Password Diversity Score of 0.1716 and 0.1643, respectively.

Graphical Password Authentication

A pattern password is an authentication system that works when a user selects images in a specific sequence displayed on a graphical user interface (GUI). For this reason, the graphical password method is called Graphical User Authentication (GUA). The most common way to authenticate a computer is by using an alphanumeric username and password. This method has been shown to have significant drawbacks. For example, users tend to choose passwords that are easy to guess. On the other hand, if a password is difficult to guess, it is often difficult to remember. To overcome these security issues, researchers have developed an authentication method that uses colours and images as passwords. In this research paper, we present a comprehensive overview of existing pattern password methods and introduce our own theory. Graphic cryptosystems have been proposed as a possible alternative to text-based schemes because people can remember colours and images better than text. Colours and Images are usually easier to remember or recognize than text. In this composition, this paper provides a comprehensive overview of existing graphical password ways. These ways fell into two orders: recognition-based and memory-based approaches. Thereafter the strengths and limitations of each approach and coming research directions in this field will be talked over in detail.

A Comparison of a Touch-Gesture- and a Keystroke-Based Password Method: Toward Shoulder-Surfing Resistant Mobile User Authentication

The pervasive use of mobile devices exposes users to an elevated risk of shoulder-surfing attacks. Despite the prior work on shoulder-surfing resistance of mobile user authentication methods, there is a lack of empirical studies on textual password authentication methods, particularly the hybrid passwords that integrate textual passwords with biometrics. To fill the literature gap, this research compares two hybrid password methods, touch-gesture- and keystroke-based passwords, with respect to their shoulder-surfing resistance performance. We select a touch-gesture-based password method that deploys multiple shoulder-surfing resistance strategies and a keystroke-based password method that leverages keystroke dynamics. To gain a holistic understanding of these password methods, we examine them under a variety of shoulder-surfing settings by varying interaction mode, observation angle, entry error, and observation effort. Going beyond effectiveness metrics, we also introduce efficiency metrics to assess shoulder-surfing resistance performance more comprehensively. We hypothesize and test the effects of shoulder-surfing settings by conducting both a longitudinal lab experiment and an online experiment with diversified participants. The results of both studies demonstrate the superior performance of the touch-gesture-based password method to the keystroke-based counterpart. The results also provide evidence for the effects of interaction mode, observation angle, and observation effort on shoulder-surfing resistance of hybrid passwords. Our findings offer suggestions for the design and strategies for strengthening the security of password authentication methods.

Modified Adhoc On-Demand Distance Vector for Trust Evaluation And Attack Detection

Recently, Wireless Sensor Network (WSN) becomes most potential technologies for providing improved services to several data gathering and tracking applications. Because of the wireless medium, multi-hop communication, absence of physical protectivity, and accumulated traffic, WSN is highly vulnerable to security concerns. Therefore, this study explores a specific type of DoS attack identified as a selective forwarding attack where the misbehaving node in the network drops packet on a selective basis. It is challenging to determine if packet loss is caused by a collision in the medium access path, poor channel quality, or a selective forwarding assault. Identifying misbehaving nodes at the earliest opportunity is an acceptable solution for performing secure routing in such networks. As a result, in this study effort, we present a unique Modified Ad Hoc On-Demand Distance Vector (AODV) Routing protocol depending upon the One time password (OTP) method that employs the RSA algorithm. Finally, a trust evaluation process determines which approach is the most optimal. According to the simulation findings of the suggested routing protocol and comparison with existing routing protocols provided in this article, the proposed work is both efficient and cost-effective.

Rancangan Aplikasi Autentikasi Surat Digital dengan Metode One Time Password SHA-512 Berbasis Android

Some administrative procedures in many institutes are still carried out conventionally, which is deemed less efficient and takes much time. On the other hand, communication with other parties requires a process of exchanging information, so a system is needed to confirm the validity of the information. Therefore, a digital letter system that can prove the validity of the information gained through the digital media right from the party concerned is developing. This can be overcome using the authentication method. Adding One Time Password (OTP) as an authentication method that employs one temporary password key can be the solution. This study uses the One Time Password (OTP) method as a validation system and the SHA-512 algorithm as an OTP code generator to generate random codes. This system leverages android technology on mobile to ease access to the correspondence administration system to make it easier to visit with features that prioritize information and access speed. This application is implemented at the State Polytechnic of Sriwijaya to improve the administrative process to run more effectively. The black box testing revealed that all available menus and features were appropriate, and the application already had a system that functions according to user needs. Moreover, in the One Time Password generation test with the SHA-512 algorithm, it was determined that the average response time for generating the OTP code was 4.4 seconds in 15 trials, which can be considered fairly accurate.

AN IMPLEMENTATION OF TWO-FACTOR AUTHENTICATION TECHNOLOGY USING TIME-BASED ONE TIME PASSWORD (TOTP) METHOD ON PRIVATE CLOUD STORAGE WEBSITE FOR GUIDANCE AND COUNSELING TEACHER

Guidance and counseling teacher, as an assistant profession, provides counseling services for all students. In providing counseling services, the first activity to be performed is the collection of students’ data. The data collected are confidential. Technological advances in private cloud storage media and two-factor authentication can help the guidance and counseling teacher in the fulfillment of students’ data storage and protection. Cloud storage is one of the solutions in dealing with data management so that it is centralized and facilitates access for system users. It is also balanced with the security technology on an application to guarantee the data security in the application. The security technology of two-factor authentication can be combined with a password and time-based one-time password. A time-based one-time password is often used on an application that uses two-factor authentication with the combination of a secret key and current timestamp. This study aims to create a private cloud storage website for guidance and counseling teacher with two-factor authentication using the time-based one-time password method. This website has been tested with black-box testing and user testing. From the results of the tests, a private cloud storage website with two-factor authentication using the time-based one-time password method was well accepted by the users because it helps the guidance and counseling teacher in sharing data safely, and the results of the average percentage in all questions were 85%.

THE SPEED OF ATHLETES’ RESPONSES TO DIFFERENT TRAINING METHODS

ABSTRACT Introduction: Taekwondo is a complex reactive sport that requires training in various tactics. Due to its significant impact and antagonism, athletes must master the tactics in the shortest time. Objective: To compare the impact of password and simulation training methods on athletes’ reaction times. Methods: Taekwondo athletes› reactions and striking abilities were studied. The difference between the two training methods on taekwondo athletes’ reaction and striking ability was analyzed by comparing the data before and after the athletes’ training. Results: The mean reaction times of down kick, sidekick, and cross kick after training in the password and simulated training groups were compared, with P values of P=0.020<0.05, P=0.046<0.05, and P=0.028<0.05, respectively, showing statistical difference. In regard to the mean strike time of down kick, sidekick, and cross kick, a comparison of the password training group and the simulated training group resulted in P=0.950>0.05, P=0.417>0.05, P=0.552>0.05, respectively, with no significant statistical difference. Conclusions: The password training method is significantly better than the simulation training method for improving the reaction time. The training methods have no significant effect on strike strength. Level of evidence II; Therapeutic studies - investigation of treatment results.

Review Paper Graphical Password Authentication Technique for Security

Abstract: In modern age user authentication is a mandatory attribute in the area of data security. The characteristics of finding an individual generally based on a user id and password which is commonly used methodology for identifying users in system. Text based password is a general authentication method used from early times. There are numerous authentication systems like biometric, textual, graphical, smart card etc. Graphical password is an alternative to alphanumeric password which is tough to remember and generally forget by users as times passes. But in graphical password there is less probability to disremember password because people generally remember images more effortlessly than text based password. There are also fewer probabilities for intruder to take the graphical based password because hackers will not be capable to access the images uploaded by the user as password. Some graphical password schemes have been intended so far as it grows password usability and security. In this paper, we manner a wide survey of the current graphical password methods. Keywords: Graphical password, Text based password, usability, security, Attacks, Authentication

Vibration-Based Pattern Password Approach for Visually Impaired People

The pattern password method is amongst the most attractive authentication methods and involves drawing a pattern; this is seen as easier than typing a password. However, since people with visual impairments have been increasing their usage of smart devices, this method is inaccessible for them as it requires them to select points on the touch screen. Therefore, this paper exploits the haptic technology by introducing a vibration-based pattern password approach in which the vibration feedback plays an important role. This approach allows visually impaired people to use a pattern password through two developed vibration feedback: pulses, which are counted by the user, and duration, which has to be estimated by the user. In order to make the proposed approach capable to prevent shoulder-surfing attacks, a camouflage pattern approach is applied. An experimental study is conducted to evaluate the proposed approach, the results of which show that the vibration pulses feedback is usable and resistant to shoulder-surfing attacks.

Pixel Value Graphical Password Scheme

Pixel value access control (PVAC) was introduced to deliver a secure and simple graphical password method where it requires users to load their image as their password. PVAC extracts the image to obtain a three-octet 8-bits Red-Green-Blue (RGB) value as its password to authenticate a user. The pixel value must be matched with the record stored in the database or otherwise, the user is failed to authenticate. However, users which prefer to store images on cloud storage would unintentionally alter and as well as the pixel value due to media compression and caused faulty pixels. Thus, the K-Means clustering algorithm is adapted to fix the issue where the faulty pixel value would be recognized as having the same pixel value cluster as the original. However, most of K-Means algorithm works were mainly developed for content-based image retrieval (CBIR) which having opposite characteristics from PVAC. Thus, this study was aimed to investigate the crucial criteria of PVAC and its compatibility with the K-Means algorithm for the problem. The theoretical analysis is used for this study where the suitable characteristics of K-Means are analyze based on PVAC requirements. The compliance analysis might become a referencing work for digital image clustering techniques adaptation on security system such as image filtering, image recognition, and object detection since most of image clustering works was focused on less sensitive image retrieval.

A Novel Session Password Security Technique using Textual Color and Images

Traditionally people will be using a weak password that has to be often changed can be influenced by a dictionary attack, shoulder surfing, and other methods of password cracking. After the past years, graphical passwords came into existence however; they are not as useful as the traditional password method, since they take more time to authenticate the passcode. As a result, this paper has taken a study of session password strategy in which the password is used only once for each session and, as that session ends, the password no longer provides access. The suggested session password scheme would us a “text” session password. Once upon a time, textual passwords were the most often used technique for authentication. Password are vulnerable to many scenarios, such as shoulder surfing, social engineering attacks, and lazy password selection. Graphical keys are introduced as a way to express very important passwords. Nearly all of the graphical schemes are vulnerable to shoulder pack design. To contend with the downside of being unable to remember passwords, pictures may be used to pair with session passwords for authentication. A session secret of a completely new password can only be used any time a new password is created. During this article, two approaches are expected to become a welcome cure for depression with an in-session approach that is unpredictable to shoulder ache and color. Strategies for Digital Assistants that is suitable for private uses. The proposed system measures the security and usability of the proposed system and displays the assistance of the proposed system to shoulder surfing assault.

Authentication System and Method for Improving Security Login without Typing Password

Authentication in the login process is an important thing that needs attention. The login process will involve a password that is owned by the user, while the password is private and confidential. If someone uses a weak password, the password is likely to be easily hacked. Authentication security needs to be improved, and hackers will get access to the login system with only a few attack techniques such as SQL Injection or sniffing techniques. Besides, the lack of awareness of users by creating weak passwords is easy to guess. Meanwhile, to create a strong password, consisting of upper- and lower-case letters, a combination of numbers and symbols, it is very difficult to remember. This is a very important problem in the login process. This study discusses the login authentication process that can perform login integration without typing a password, because passwords are generated repeatedly with the One Time Password (OTP) method, and use the Quick Response Code (QR) as its support. To disguise the data in the QR Code, which is applied by the Rivest-Shamir-Adleman (RSA) encryption algorithm, and will be tested on a web-based application. The login integration process, using the QR Code token application that runs on an android phone. Which functions as an OTP token generator, and a web-based application will read information from the QR Code token. The result is that with login authentication, this can increase the security and ease of the authentication process without typing a password.