A Shoulder-Surfing Resistant Graphical Password Scheme
Jianwei Lai
Abstract
Traditional passwords are difficult to remember and vulnerable to shoulder-surfing attacks. A graphical password was proposed to address these two problems. Users first identify their password images when they set up their passwords. During the authentication procedure, their password images are present with other distracting images. Instead of clicking their password images, users log in with the random numbers associated with their password images. Shoulder-surfing attackers will not be able to observe which images are the password images because users do not directly interact with them. To further increase the resistance to shoulder-surfing attacks, instead of directly entering the numbers associated with password images, users need to do some simple calculations, for example, adding the first number to the second, the second to the third, and so on so forth. The proposed scheme will be evaluated in a usability study in terms of shoulder-surfing resistance, usability, and user perceptions.