Secure graphical password based on cued click points using fuzzy logic

Abstract

Nowadays authentication technology is the most important means to ensure security. Alphanumeric username and password procedure is the most common authentication method. Users typically choose memorable passwords that are easy for attackers to guess, and assigned passwords by the system are difficult for users to remember. We present a graphical password based on cued recall in which is secured from shoulder surfing attack. Also, we propose an image encryption technique using a 2D cat map and edge detection technique in which it uses fuzzy logic inference to detect the edge of images. Then the user password is encrypted before storing it in the database using this method. Experiments illustrate that the proposed method has good performance in usability and security.

Usability and Security of Knowledge-based Authentication Systems: A State-of-the-Art Review

“…Users are required in the login phase to select the same regions in a specific order, as shown in Fig. 3(a) [79]. The blonder method resists brute-force attacks because it contains millions of regions that can be selected as passwords [80].…”

“…This approach showed that 90% of the participants succeeded in the authentication by using this technique, while only 70% succeeded by using text-based passwords [90]. The main disadvantage of this technique is that it takes a long time to log in because storing a large number of pictures causes a delay in transferring over the network, thus delaying the authentication process [79]. The story mechanism is comparable to the Passfaces method; it presents images of places, people, or everyday objects, as shown in Fig.…”

Graphical-based password for user authentication in internet of things

“…Typically, password entropy does not measure the generated password security. But it's conceptually related to the difficulty of the password random guessing [16], [25]. And it's usually calculated as:…”

“…where N represents the number of the digits in the password, L represents the number of possible digits that can be used to create the password [16], [25].…”

“…Password space term refers to the available options in the scheme that allow the users' to choosing their own password. In general, there is no possibility to determine a one specific formula to obtain the password space, but there is an ability to calculate the password space for each scheme based on the generated algorithm [16], [25]. However, the IoT-GP password space discussed in Table 6.…”