期刊名称：International Journal of Advanced Computer Science and Applications(IJACSA)
印刷版ISSN：2158-107X
电子版ISSN：2156-5570
出版年度：2019
卷号：10
期号：9
页码：432-437
出版社：Science and Information Society (SAI)
摘要：In globalization of information, internet has played
a vital role by providing an easy and fast access of information
and systems to remote users. However, with ease for authentic
users, it has made information resources accessible to
unauthorized users too. To authorize legitimate user for the
access of information and systems, authentication mechanisms
are applied. Many users use their credentials or private
information at public places to access their accounts that are
protected by passwords. These passwords are usually text-based
passwords and their security and effectiveness can be
compromised. An attacker can steal text-based passwords using
different techniques like shoulder surfing and various key logger
software, that are freely available over internet. To improve the
security, numerous sophisticated and secure authentication
systems have been proposed that employ various biometric
authentication systems, token-based authentication system etc.
But these solutions providing such high-level security, require
special modification in the design and hence, imply additional
cost. Textual passwords that are easy to use but vulnerable to
attacks like shoulder surfing, various image based, and textual
graphical password schemes are proposed. However, none of the
existing textual graphical passwords are resistant to shoulder
surfing and more importantly to mobile key-logging. In this
paper, an improved and robust textual graphical password
scheme is proposed that uses sectors and colors and introducing
randomization as the primary function for the character display
and selection. This property makes the proposed scheme
resistant to shoulder surfing and more importantly to mobile
key-logging. It can be useful for authentication process of any
smart held device application.
关键词：Authentication; graphical password; shoulder
surfing; mobile key;logging; security
