抗肩窥攻击的安全口令输入方法

陈舒荻; 朱友文

doi:10.11959/j.issn.2096-109x.2019010

您当前的位置：

首页 >

文章列表页 >

抗肩窥攻击的安全口令输入方法

学术论文 | 更新时间：2024-06-03

- 抗肩窥攻击的安全口令输入方法
- Shoulder-surfing resistant PIN-entry method
- 网络与信息安全学报 2019年5卷第1期页码：87-93
- 作者机构：
- 作者简介：
  
  [ "陈舒荻（1995- ），女，福建福州人，南京航空航天大学硕士生，主要研究方向为信息安全。" ]
  [ "朱友文（1986- ），男，安徽阜南人，博士，南京航空航天大学副教授，主要研究方向为信息安全。" ]
- 基金信息：
  
  国家重点研发计划基金资助项目;The National Key Research and Development Program(2017YFB0802300);国家自然科学基金资助项目;The National Natural Science Foundation of China(61602240)
- DOI：10.11959/j.issn.2096-109x.2019010
  中图分类号： TP301.6
- 网络首发：2019-02，
  
  纸质出版：2019-02-15
- 稿件说明：
移动端阅览
陈舒荻, 朱友文. 抗肩窥攻击的安全口令输入方法[J]. 网络与信息安全学报, 2019,5(1):87-93.

Shudi CHEN, Youwen ZHU. Shoulder-surfing resistant PIN-entry method[J]. Chinese Journal of Network and Information Security, 2019, 5(1): 87-93.
陈舒荻, 朱友文. 抗肩窥攻击的安全口令输入方法[J]. 网络与信息安全学报, 2019,5(1):87-93. DOI： 10.11959/j.issn.2096-109x.2019010.

Shudi CHEN, Youwen ZHU. Shoulder-surfing resistant PIN-entry method[J]. Chinese Journal of Network and Information Security, 2019, 5(1): 87-93. DOI： 10.11959/j.issn.2096-109x.2019010.

摘要

针对手机移动端设备输入口令容易遭受肩窥攻击的问题，提出一种抗肩窥攻击的移动端安全口令输入方法。该方法改变标准的口令输入界面，将设备的振动信道作为辅助信道向用户传递隐蔽信息，用户通过简单的选择输入口令。通过分析表明，该方法能有效抵御肩窥攻击。

Abstract

Aiming at the problem that the traditional PIN entry method is vulnerable to shoulder-surfing attack

a secure PIN entry method against shoulder-surfing attack was proposed.The method changes the traditional input interface on the mobile device and uses the vibration channel of the device as the auxiliary channel to transmit the hidden information to the user.The user simply selects items to input PIN.The analysis shows that the proposed method can effectively resist shoulder-surfing attack.

关键词

Keywords

references

KWON T , HONG J . Analysis and improvement of a PIN-entry method resilient to shoulder-surfing and recording attacks [J ] . IEEE Transactions on Information Forensics and Security , 2015 , 10 ( 2 ): 278 - 292 .

ROTH V , RICHTER K , FREIDINGER R . A PIN-entry method resilientagainst shoulder surfing [C ] // ACM Conf Comput Commun Secur (CCS) . 2004 : 236 - 245 .

BAI X , GU W , CHELLAPPAN S , et al . Pas:predicate based authentication services against powerful passive adversaries [C ] // Computer Security Applications Conference . 2008 : 433 - 442 .

ZHAO H , LI X . S3PAS:a scalable shoulder-surfing resistant textual-graphical password authentication scheme [C ] // International Conference on Advanced Information Networking ＆ Applications Workshops . 2007 : 467 - 472 .

WEINSHALL D , . Cognitive authentication schemes for unassisted humans,safe against spyware [C ] // IEEE Symposium on Security ＆Privacy . 2006 .

WIEDENBECK S , WATERS J , SOBRADO L , et al . Design and evaluation of a shoulder-surfing resistant graphical password scheme [C ] // The Working Conference on Advanced Visual Interfaces . 2006 : 177 - 184 .

SUN H , CHEN S , YEH J , et al . A shoulder surfing resistant graphical authentication system [J ] . IEEE Transactions on Dependable and Secure Computing , 2018 , 15 ( 2 ): 180 - 193 .

DE LUCA A , HERTZSCHUCH K , HUSMANN H . ColorPIN—securing PIN entry through indirect input [C ] // ACM CHI Conf Human Factors Comput.Syst . 2010 : 1103 - 1106 .

PERKOVIC T , CAGALJ M , RAKIC N . SSSL:Shoulder surfing safe login [C ] // Int Conf Softw Telecommun Comput Netw (SoftCOM) . 2009 : 270 - 275 .

LEE M K . Security notions and advanced method for human shoulder-surfing resistant PIN-entry [J ] . IEEE Transactions on Information Forensics ＆ Security , 2017 , 9 ( 4 ): 695 - 708 .

MATSUMOTO T , IMAI H . Human identification through insecure channel [C ] // International Conference on Theory ＆ Application of Cryptographic Techniques . 1991 .

DE LUCA A , VON ZEZSCHWITZ E , HUSMANN H . Vibrapass:secureauthentication based on shared lies [C ] // International Conference on Human Factors Incomputing Systems . 2009 : 913 - 916 .

BIANCHI A , OAKLEY I , KOSTAKOS V , et al . The phone lock:audioand haptic shoulder-surfing resistant pin entry methods formobile devices [C ] // International Conference on Tangible,Embedded,and Embodiedinteraction . 2011 : 197 - 200 .

BIANCHI A , OAKLEY I , KWON DS . Counting clicks and beeps:exploring numerosity based haptic and audio PIN entry [J ] . Interact Comput , 2012 , 24 ( 5 ): 409 - 422 .

MILLER G . The magical number seven,plus or minus two:some limits on our capacity for processing information [J ] . Psychological Review , 1956 , 63 ( 2 ): 81 - 97 .

浏览量

1240

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于国密的工控低算力设备身份认证与群组认证方案

基于区块链的跨数据中心匿名可监管身份认证方案

基于预测误差与位平面编码的密文域可逆信息隐藏算法

边缘计算环境下轻量级终端跨域认证协议

集群网络密钥管理方案研究综述