Secure graphical password system for high traffic public areas

ABSTRACT

Graphical passwords are expected to be easier to recall, less likely to be written down and have the potential to provide a richer symbol space than text based passwords. For example, a user might authenticate by clicking a series of points on an image, selecting a series of tiles, or by drawing a series of lines on the screen [Davis et al. 2004]. An example of the tiled approach is the Real User Corporation's PassFaces™ system [Real User, 2005] illustrated in Figure 1. For both text and graphical password entry systems the user needs to carefully enter the password in case a malicious user is observing the session via "shoulder surfing." Although some authors assume that graphical passwords will be entered on a small screen with a reduced observation angle [Jansen 2004], and thus dismiss the likelihood of shoulder surfing, this assumption is not always true.

REFERENCES

• 1: Davis, D., Monrose, F. and Reiter, M. 2004. On User Choice in Graphical Password Schemes. In Proc. 13th USENIX Security Symposium, San Diego, CA, USA.
• 2: Jansen, W. 2004. Authenticating Mobile Device Users through Image Selection. In The Internet Society: Advances in Learning, Commerce and Security, K. Morgan & M. J. Spector (Editors), v30, p 10.
• 3: Real User, 2005. Retrieved 12/21/05 from www.realuser.com.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

Additional Classification:
  I. Computing Methodologies
  I.4 IMAGE PROCESSING AND COMPUTER VISION
      I.4.7 Feature Measurement
      I.4.9 Applications
  I.5 PATTERN RECOGNITION
      I.5.2 Design Methodology

General Terms:
Algorithms, Design, Measurement, Security