Cursor Masquerade: Masking of authentic cursor using random numeric keypad and spurious cursors

摘要

Shoulder surfing refers to the act of obtaining personal or private information through direct observation. When the victim is oblivious, a malicious observer may acquire the user's password credentials. Observation of the cursor movements on screen is one of the simplest ways for the lurkers to perceive the password. In this paper, we propose the concept of using random keypad generation and spurious cursors to mask the onscreen password entry. The proposed method provides resistance against video recording without demanding the user to memorize additional information, thus making it difficult for a shoulder surfer to identify the soft keys that are being used by the user to enter the password.