Secure and Fast PIN-entry Method for 3D Display

摘要

The personal identification number (PIN) is one of the most well-known user authentication methods. However, there have been concerns about the security of the regular PIN pad against shoulder surfing attacks. Although there are many indirect input methods based on random challenges, most of them have usability issues because they require very long authentication time and their error rates are quite high. In this paper, we introduce our ongoing work to develop a solution to this problem using a 3D display. The proposed method transmits a random challenge to a user more effectively and securely by displaying a specific challenge object with different 3D depth from the other decoy objects. A prototype of the proposed method was implemented on a smartphone with a parallax barrier-based glasses-free 3D LCD, which guarantees the physical security because only a legitimate user who is located at the right position in front of the device can recognize the 3D effect correctly, while an attacker cannot. According to our pilot test, the average authentication time and the average error rate of the proposed method are as small as 8.4 seconds and 5.0%, respectively.