Noisy password scheme: A new one time password system

Alghathbar, Khaled; Mahmoud, Hanan

doi:10.1109/ccece.2009.5090247

Cited by 14 publications

(6 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Users simply sit in front of the system, perform a one-time calibration and then begin using the system. We compared the password entry speed and error rates of three approaches: a standard keyboard for entering a password (Keyboard) to provide a baseline, the noisy password technique [12] and PEN. At the end of the study we asked subjects to fill out a survey to collect data on the user's subjective opinion of the techniques.…”

Section: Discussionmentioning

confidence: 99%

See 1 more Smart Citation

Noisy password security technique

Alghathbar

Mahmoud

2009

2009 International Conference for Internet Technology and Secured Transactions, (ICITST)

View full text Add to dashboard Cite

One-time password makes it more difficult to gain unauthorized access to restricted resources. In our previous work we designed a one-time password scheme that implements our noisy password scheme. The previous work proved to be a secure password entry scheme, but was somehow difficult for users. In this paper, we propose a technique for improving the security of password-based applications by incorporating predefined keystroke patterns into the password. The proposed system attempts to alleviate the problem of shoulder surfing by inserting different noise patterns in the password making. The user is authenticated by totally different password every time. The noisy password constitute of several parts, the actual password and additional noisy parts. Different password parts will be entered using keystroke patterns not characters. The noisy parts are proven to be robust against any hacking attacks. Experimental results give good indication of the ease of utilization of the new system with low error rates.

show abstract

Section: Discussionmentioning

confidence: 99%

“…The users were shown the password immediately before they were asked to enter it. Each subject was first trained on the three methods: Keyboard, the noisy password technique [12] and PEN. Subjects were trained on using each of the techniques on a practice set of four passwords of variable length.…”

Section: Methodsmentioning

confidence: 99%

Noisy password security technique

Alghathbar

Mahmoud

2009

2009 International Conference for Internet Technology and Secured Transactions, (ICITST)

View full text Add to dashboard Cite

show abstract

“…Alghathbar and Mahmoud [8], has attempted to alleviate the problem of shoulder surfing or eves dropping by making the replay of a password useless by designing a noisy password scheme.…”

Section: Related Workmentioning

confidence: 99%

S-DILS: Framework for Secured Digital Interaction Learning System Using keccak

Pratiba¹,

Shobha²

2015

Software Engineering in Intelligent Systems

View full text Add to dashboard Cite

Abstract. Authentication plays a critical role in network security. After reviewing the prior studies, it is found that authentication system focusing on Learning Management System (LMS) based on cloud environment is very few. Majority of the prior security techniques applies conventional cryptographic hash function where enough robustness and resiliency towards various vulnerable attacks on cloud environment is substantially missing. Therefore, this paper presents a novel, simple, and yet cost effective authentication technique that uses the potential characteristics of recently launched keccak protocol by NIST for the first time in securing the accessibility of users in interactive digital library system. Hence, we coined a term S-DILS i.e. secured-Digital Interactive Learning System. The outcome of the system is compared with existing hash protocols to find that S-DILS excels far better in every respect of security.

show abstract

“…After receiving a correct OTP, the verifier is entitled to believe that the user has possession of the device capable of generating or receiving the OTP. While there can be many ways to generate OTPs [20,5], there are Informational and Internet Standard RFCs published detailing standard OTP algorithms [16,17]. Figure 1 gives a high-level overview of a generic Web 2FA authentication sequence.…”

Section: Authentication Modelsmentioning

confidence: 99%

Two Factor Authentication Made Easy

Chen

Goh

2015

Engineering the Web in the Big Data Era

View full text Add to dashboard Cite

Abstract. Authentication on the Web is a challenge that can have a negative effect on user experience if it becomes overly complicated and cumbersome. This experience is even more crucial for older and visually impaired users due to their functional abilities. Web applications typically authenticate users by requesting for information that only the user knows (e.g. password). To enhance security, two-factor authentication (2FA) are increasingly implemented, which require the user to manually transfer information between 2FA devices and the Web application. This process can impose usability barriers and stress on human's memory. This paper proposes a technique to mitigate such issues by using wearables as the 2FA device, and to allow authentication information to be transferred seamlessly and automatically from the device to the Web application. From our preliminary results, older users found our approach less stressful on the human's memory and easier to use.

show abstract

Noisy password scheme: A new one time password system

Cited by 14 publications

References 8 publications

Noisy password security technique

Noisy password security technique

S-DILS: Framework for Secured Digital Interaction Learning System Using keccak

Two Factor Authentication Made Easy

Contact Info

Product

Resources

About