Directional Based Graphical Authentication Method with Shoulder Surfing Resistant

Abstract

Authentication has been advanced by implying advancement in security such as cryptography to protect password against data leaking and sniffing; captcha to prevent robot system; Secure Sockets Layer designed to protect users against phishing website and many other solution invented for different types of vulnerabilities. Although there are other methods suggested for preventing shoulder surfing (i.e. exposure of password to nearby observing-person), the techniques still have some drawback. Some of the proposed techniques also required high computational process with high range of possible answer. This paper proposed a shoulder-surfing-proof graphical based authentication with direction scheme that combines technique adapted from Passfaces scheme and a selection of direction. User is required to choose four faces and one direction to serve as the secret authentication. Besides shoulder surfing, the proposed method also caters security in data transmission storage as hashing is applied along the communication. This technique has been proven to demonstrate the robustness, security strength and the functionality advantages of the system. The result from the security testing shows that image based passwords is more secure because the possibility of the image to be guessed is very low.