Token-based graphical password authentication

Abstract

Given that phishing is an ever-increasing problem, a better authentication system is required. We propose a system that uses a graphical password deployed from a Trojan and virus-resistant embedded device. The graphical password utilizes a personal image to construct an image hash, which is provided as input into a cryptosystem that returns a password. The graphical password requires the user to select a small number of points on the image. The embedded device will then stretch these points into a long alphanumeric password. With one graphical password, the user can generate many passwords from their unique embedded device. The image hash algorithm employed by the device is demonstrated to produce random and unique 256-bit message digests and was found to be responsive to subtle changes in the underlying image. Furthermore, the device was found to generate passwords with entropy significantly larger than that of users passwords currently employed today.

Cross-cultural effects on graphical password memorability and design

“…Limitations of human memory present a challenge regarding the trade-off between usability and security (Forget et al , 2008; Vu et al , 2007). User memory limitations related to alphanumeric passwords lead users to select weak passwords that provide minimal protection to their data and systems (Barate and Shinde, 2014; Gyorffy et al , 2011; Kayem, 2016). Moreover, alphanumeric passwords have inherent vulnerabilities arising from the lack of entropy, also known as the lack of unpredictability (Boothroyd and Chiasson, 2013; Joshi and Tidake, 2014).…”