Preventing shoulder surfing attack using touch screen based PIN authentication method in invisible form

摘要

The most advantageous way of authentication applicable everywhere is PIN authentication which is simple, effective, understandable and usable, but it is prone or to an attack known as shoulder surfing. Shoulder surfing refers to a direct observation, such as looking over a person's shoulder, to obtain information. In case of PIN authentication, the invalid user will be observing the credentials by looking over the shoulder. The previous work was done with the visibility of the PIN, but here we propose an innovative way to authenticate user by providing PIN to the system which won't be visible to an attacker but will be known to the actual user who is drawing it on a touch screen device. This will help in reducing the effect of the shoulder surfing attack. Another important thing which we want to try out is whether the error rate can be lowered down or not. The current implementation will be working in two distinguishable modes i.e. Learning Mode and Recognition Mode. In learning mode, user will be able to make the system to learn the templates of any character or number by writing on a touch screen. In recognition mode, the system will automatically identify the character or number drawn on the touch screen and will display the result whether inputted character or number is matched or not [1].