A Logging-in Scheme in Virtual Keyboard Protection from Shoulder Surfing and Screenshot Capturing

摘要

Passwords are widely used as authentication in a variety of applications in the light of cost, immediacy and convenience, even though numerous securer alternative authenticators come out. Through restricting the form of how they stored on local host, how they transmitted over network, and the number or the frequency of password guesses, the risks while using passwords can be mitigated. However, most existing measures are still vulnerable to physical security issues, such as shoulder surfing and keyloggers. This paper proposes a new protection scheme from deterring the threats to achieve the security in efficiency.