SPOSS: Secure Pin-Based-Authentication Obviating Shoulder Surfing

摘要: Classical PIN based authentication schemes are susceptible to shoulder surfing attacks and hence attacker may obtain secret credentials of legitimate user very easily. Some the existing that provide resistance against either require multiple rounds for entering single digit or some have dependency on external hardware complex computation be done mentally in order enter PIN. Another possible security threat could stealing if password file is compromised. In this paper, we propose a new entry mechanism known as SPOSS which provides resilience not only human-based but also recording attack (for one session) impose device like camera record whole login session future reference. compromise attack. Additionally, can ensured by round without doing any hardware. Experimental analysis shows proposed scheme achieves good balance between usability parameters.