Enhancing Smartphone Lock Security using Vibration Enabled Randomly Positioned Numbers

Kabir, M. Monjirul; Hasan, Nasimul; Tahmid, Khalid Hassan; Ovi, Tanjil Ahmed; Rozario, Victor Stany

doi:10.1145/3377049.3377099

Cited by 8 publications

(2 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The previous research has shown that direct input methods attempt to disguise the observer from obtaining the original PIN through visual distraction or gaze input approaches. Visual distraction methods endeavor to distract observers visually by using a cursor camouflage [9], [10], by presenting a random-digit keypad [11], [12], and by input distraction ways such as aligning PIN digits together [13] or tapping the appropriate number using a deep or shallow pressure [14]. Visual distraction methods can provide varied protection against shoulder-surfing attack; however, they are vulnerable to spyware or video-recording attacks or both as the attacker can recover the original PIN directly from the recording tool regardless of the visual distraction tactics.…”

Section: ) Direct Input Methodsmentioning

confidence: 99%

Secure PIN-Entry Method Using One-Time PIN (OTP)

et al. 2023

View full text Add to dashboard Cite

The regular PIN-entry method has been still the most common method of authentication for systems and networks. However, PINs are easy to be captured through various attacks, including shouldersurfing, video-recording, and spyware. This could be attributed to the involuntary nature of entering the original PIN during authentication. In this paper, we employ an indirect input method that utilizes the addition mod 10 and a mini-challenge keypad in order to produce a one-time PIN (OTP) that obscures the original PIN. The results of our user study manifest that the proposed PIN-entry method provides better security than the existing PIN-entry methods while maintaining an acceptable level of usability. Moreover, the user feedback fully support the use of the proposed PIN-entry method in critical-security situations.

show abstract

Section: ) Direct Input Methodsmentioning

confidence: 99%

Secure PIN-Entry Method Using One-Time PIN (OTP)

et al. 2023

View full text Add to dashboard Cite

show abstract

“…However, there are at least three security vulnerabilities in entering a pin code or pattern: Shoulder Surfing Attacks (SSA) and Smudge Attacks. As a result, some users are reluctant to use the security system and leave their devices without authentication [7].…”

Section: Introductionmentioning

confidence: 99%

Seamless Security on Mobile Devices Textual Password Quantification Model Based Usability Evaluation of Secure Rotary Entry Pad Authentication

Kabetta,

Setiawan,

Amelia

et al. 2023

matrik

View full text Add to dashboard Cite

Mobile devices are vulnerable to shoulder surfing and smudge attacks, which should occur when a user enters a PIN for authentication purposes. This attack can be avoided by implementing a rotary entry pad mechanism. Despite this, several studies have found that using a rotary entry pad reduces user usability. This study uses a Design Research Methodology approach. It will implement a rotary entry pad authentication in the Android operating system as an authentication method to protect the device against Shoulder Surfing Attacks and Smudge Attacks. Furthermore, it combined JSON Web Token (JWT) to secure the authentication process from the client to the server. At the end of implementation, it compared with other studies in terms of usability and evaluated it using the TQ-Model, which showed that the usability aspect has improved. Regarding security, we conducted a shoulder surfing attack simulation to assess the efficacy of guessing PINs. The results showed that only a limited number of attempts were successful, with two out of five samples failing to guess any numbers and only one sample successfully guessing six 10-digit PIN combinations out of 10 to the power of 10. The security test results show that shoulder surfing attacks are more difficult to perform after implementing the rotary entry pad. The evaluation showed that the JSpinpad performed better, with seven parameters showing improvement, one parameter showing a decline, and ten parameters remaining unchanged.

show abstract