SpinPad: A Secured PIN Number Based User authentication Scheme

摘要

Securing the smart phones against user authentication attacks has been a major concern for the banks that offer mobile banking services. While the users enter their PIN numbers to get them authenticated by the banks, the entered values may be stolen by the attackers through shoulder surfing, keylogging or smudge attacks. In this paper, a new PIN entry scheme is proposed for smart phones. It allows users to enter their PIN numbers without pressing any keys on the keyboard. The PIN entry is done through an indirect entry process that resists any of these attacks. The scheme was implemented as a mobile app in Android and was thoroughly tested for its security and user friendliness.