Shoulder-surfing resistant PIN-entry method

Shudi CHEN; Youwen ZHU

doi:10.11959/j.issn.2096-109x.2019010

您当前的位置：

首页 >

文章列表页 >

Shoulder-surfing resistant PIN-entry method

Papers | 更新时间：2024-06-03

- Shoulder-surfing resistant PIN-entry method
- Chinese Journal of Network and Information Security Vol. 5, Issue 1, Pages: 87-93(2019)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2019010
  CLC： TP301.6
- Online First：2019-02，
  
  Published：15 February 2019
- 稿件说明：
移动端阅览
Shudi CHEN, Youwen ZHU. Shoulder-surfing resistant PIN-entry method[J]. Chinese Journal of Network and Information Security, 2019, 5(1): 87-93.
DOI：

Shudi CHEN, Youwen ZHU. Shoulder-surfing resistant PIN-entry method[J]. Chinese Journal of Network and Information Security, 2019, 5(1): 87-93. DOI： 10.11959/j.issn.2096-109x.2019010.

摘要

针对手机移动端设备输入口令容易遭受肩窥攻击的问题，提出一种抗肩窥攻击的移动端安全口令输入方法。该方法改变标准的口令输入界面，将设备的振动信道作为辅助信道向用户传递隐蔽信息，用户通过简单的选择输入口令。通过分析表明，该方法能有效抵御肩窥攻击。

Abstract

Aiming at the problem that the traditional PIN entry method is vulnerable to shoulder-surfing attack

a secure PIN entry method against shoulder-surfing attack was proposed.The method changes the traditional input interface on the mobile device and uses the vibration channel of the device as the auxiliary channel to transmit the hidden information to the user.The user simply selects items to input PIN.The analysis shows that the proposed method can effectively resist shoulder-surfing attack.

关键词

Keywords

references

KWON T , HONG J . Analysis and improvement of a PIN-entry method resilient to shoulder-surfing and recording attacks [J ] . IEEE Transactions on Information Forensics and Security , 2015 , 10 ( 2 ): 278 - 292 .

ROTH V , RICHTER K , FREIDINGER R . A PIN-entry method resilientagainst shoulder surfing [C ] // ACM Conf Comput Commun Secur (CCS) . 2004 : 236 - 245 .

BAI X , GU W , CHELLAPPAN S , et al . Pas:predicate based authentication services against powerful passive adversaries [C ] // Computer Security Applications Conference . 2008 : 433 - 442 .

ZHAO H , LI X . S3PAS:a scalable shoulder-surfing resistant textual-graphical password authentication scheme [C ] // International Conference on Advanced Information Networking ＆ Applications Workshops . 2007 : 467 - 472 .

WEINSHALL D , . Cognitive authentication schemes for unassisted humans,safe against spyware [C ] // IEEE Symposium on Security ＆Privacy . 2006 .

WIEDENBECK S , WATERS J , SOBRADO L , et al . Design and evaluation of a shoulder-surfing resistant graphical password scheme [C ] // The Working Conference on Advanced Visual Interfaces . 2006 : 177 - 184 .

SUN H , CHEN S , YEH J , et al . A shoulder surfing resistant graphical authentication system [J ] . IEEE Transactions on Dependable and Secure Computing , 2018 , 15 ( 2 ): 180 - 193 .

DE LUCA A , HERTZSCHUCH K , HUSMANN H . ColorPIN—securing PIN entry through indirect input [C ] // ACM CHI Conf Human Factors Comput.Syst . 2010 : 1103 - 1106 .

PERKOVIC T , CAGALJ M , RAKIC N . SSSL:Shoulder surfing safe login [C ] // Int Conf Softw Telecommun Comput Netw (SoftCOM) . 2009 : 270 - 275 .

LEE M K . Security notions and advanced method for human shoulder-surfing resistant PIN-entry [J ] . IEEE Transactions on Information Forensics ＆ Security , 2017 , 9 ( 4 ): 695 - 708 .

MATSUMOTO T , IMAI H . Human identification through insecure channel [C ] // International Conference on Theory ＆ Application of Cryptographic Techniques . 1991 .

DE LUCA A , VON ZEZSCHWITZ E , HUSMANN H . Vibrapass:secureauthentication based on shared lies [C ] // International Conference on Human Factors Incomputing Systems . 2009 : 913 - 916 .

BIANCHI A , OAKLEY I , KOSTAKOS V , et al . The phone lock:audioand haptic shoulder-surfing resistant pin entry methods formobile devices [C ] // International Conference on Tangible,Embedded,and Embodiedinteraction . 2011 : 197 - 200 .

BIANCHI A , OAKLEY I , KWON DS . Counting clicks and beeps:exploring numerosity based haptic and audio PIN entry [J ] . Interact Comput , 2012 , 24 ( 5 ): 409 - 422 .

MILLER G . The magical number seven,plus or minus two:some limits on our capacity for processing information [J ] . Psychological Review , 1956 , 63 ( 2 ): 81 - 97 .

Views

1240

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

An identity and group authentication scheme for resource-constrained industrial control devices based on Chinese commericial cryptography

Blockchain-based cross-data center anonymous and verifiable identity authentication scheme

Reversible data hiding algorithm in encrypted images based on prediction error and bitplane coding

Lightweight terminal cross-domain authentication protocol in edge computing environment

Survey of key management schemes for cluster networks

Related Author

Cao Jin

Yang Lan

Li Huan

Li Wei

Li Xinze

Sun Junjun

SHAO Wei

ZHANG Shuhui

Related Institution

Xidian University

Xinjiang Oilfield Company Digital Intelligence Technology Company

Shandong Provincial Key Laboratory of Computer Networks, Shandong Fundamental Research Center for Computer Science

Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan), Qilu University of Technology (Shandong Academy of Sciences)

College of Computer Science and Technology, Chongqing University of Posts and Telecommunications

⁰