Graphical Authentication System

Abstract

Image Authentication or captcha based on passwords is used largely in applications for computer and mobile security and privacy. People logs into web services and applications in public to access their personal and confidential accounts with their laptops, smartphones, tablets or public devices, like bank ATM. All these things bring great convenience but at the same time increase the risk of exposing passwords to unknowns by shoulder surfing attacks. A shoulder surfing is a kind of attack where attackers can observe directly or indirectly with the use of external recording devices to collect user’s credentials. To overcome this problem of shoulder surfing attacks, we propose an image-based authentication system along with encryption. With one-time valid login indicator / token, horizontal and vertical bars covering the entire scope of an image, proposed system offers no hint for attackers to figure out or narrow down password even when they conduct multiple camera based attention. In addition to this, the login indicator is completely random and valid only for short period of time. In addition to this to protect the mobile application from theft, only one email id is allowed per application and an easy-to-remember randomly generated password required for logging into the application is also sent to the user. This password is completely encrypted and valid only for single login.