Multi-Approached Graphics Based Authentication

Abstract

Shoulder-surfing is a known risk where an attacker can capture a password by direct observation or by
recording the authentication session. When users input their passwords in a public place, they may be at risk of attackers
Stealing their password. An attacker can capture a password by direct observation or by recording the individual’s
Authentication session. There have been some graphical schemes resistant to shoulder-surfing, but they have significant
usability drawbacks, usually in the time and effort to log in. In this paper, we propose a password scheme. This is
obtained by adding a little Graphic Layer to the Traditional Text based Password Scheme. In This Layer We Randomly
Generate Patterns of icons which are easy for a user who owns the password to recognize and difficult for a shoulder
surfing attacker to find out. Pass Matrix Algorithm is used for Pattern Generation. It is defined as challenge-response
identification. Hence, a password in our scheme is time-variant. User who knows the password is able to meet the
challenge and to respond correctly. As a consequence, our graphical password scheme is shoulder-surfing resistant. An
attacker still cannot tell what the password is, even if he/she has involved in user login process.