Graphical passwords: Behind the attainment of goals

Abstract

Graphical authentication methods have emerged as an alternative to the conventional authentication methods over the past couple of decades. One of the most popular among types of graphical authentication methods is recognition-based authentication, where the user taps on pass images from one or more challenge sets of images in order to authenticate. The study of existing graphical authentication systems shows that several of them compromise their security while making the method simpler, which could lead to perpetration of numerous attacks like guessing, hidden camera, smudge, shoulder surfing, and many other. Furthermore, a few of them sacrifice performance while targeting security alone. Yet, this paper proposes a new method that resists the aforementioned attacks with good performance, while preserving the benefits of graphical passwords such as ease of use and increased memorability.

Choice-Based Graphical Password (CGP) Scheme for web applications

“…To date, the GP is not widely used in the real world; only the pass-face technique is used in many systems. so, research is still being done on it to make it reliable and give confidence to the user to select the GP [17].…”

“…The success rate of any GP system depends on its security, reliability, memorability, usability, speed, time, and password entropy [17,18]. The three main factors of GP are Security, usability or memorability, and time.…”

“…In authentication, the user entered the username and two selected images from 25 images. In the Vaddeti approach [17], in the registration stage, the user registered his/her profile then the system took the user ID and converted it into two images by using the visual cryptography concept: one image was sent to the user's e-mail, which was called user share, and the other was sent to the server, which was called server share. Then the user must select four images from a 5-by-5 grid.…”

“…The cued recall is less usable than recognitions, but it's more secure because of its strength and large password space [1,3,9,18,19,22]. So, we used a recall technique by S. Gokhalea [16] to prove our CGP security compared with the recall techniques and Vaddeti [17] as a recognition technique. We compare our scheme with these three approaches: Pass Face [15], S. Gokhalea [16], and Vaddeti [17], as shown in Table 2.…”

“…So, we used a recall technique by S. Gokhalea [16] to prove our CGP security compared with the recall techniques and Vaddeti [17] as a recognition technique. We compare our scheme with these three approaches: Pass Face [15], S. Gokhalea [16], and Vaddeti [17], as shown in Table 2.…”