Shoulder-Surfing Resistant Smartphone Authentication Scheme Using Virtual Joystick

Abstract:

User authentication techniques such as the setting of passwords are gradually gaining importance as a means of managing important information stored in smartphones. Existing text–based password authentication schemes have the advantages of being quick and easy to use. However, they are problematic in that passwords are easily exposed to shoulder-surfing attack. In addition, a graphical password authentication scheme has the limitation of being difficult to apply to mobile device environments, in which a lot of information must be remembered and small-sized screens are provided. Therefore, in this paper, we propose a new hybrid password authentication scheme using a pocket billiard and a virtual joystick, which is secure against shoulder-surfing, brute force attack, and smudge attack and has excellent usability.

• Periodical: Applied Mechanics and Materials (Volumes 284-287)
• Pages: 3497-3501
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.284-287.3497
• Online since: January 2013
• Authors: Si Wan Kim, Hyun Yi Yi, Gun Il Ma, Jeong Hyun Yi
• Keywords: Hybrid Password Authentication, Shoulder-Surfing Attack, Usable Security

References

[1] B. E. John and D. E. Kieras: The GOMS Family of User Interface Analysis Techniques: Comparison and Contrast, ACM Transactions on Computer-Human Interaction (1996).

DOI: 10.1145/235833.236054

[2] J. H. Yi, G. Ma, H. Yi, S. Kim, and H. Ji, Korea, Patent App. 10-2011-0119698. (2011).

[3] Passface, http: /www. realuser. com.

[4] S. Park, Korea, Patent App. 10-2004-0039209 (2004).

[5] V. Roth, K. Richter, and R. Freidinger: A PIN-Entry Method Resilient against Shoulder Surfing, ACM Conference on Computer and Communications Security (2004).

DOI: 10.1145/1030083.1030116

[6] SoftSecurity, http: /www. softsecurity. co. kr.

[7] MinInfo Co., http: /www. mininfo. co. kr.