A study of password authentication method against observing attacks

Abstract

The user authentication is widely used in the ATM (Automatic Teller Machine) or many Internet services. Recently, the crime to steal the ATM password using a small CCD camera has increased. Also, in the mobile environment, there is a high risk of the observing attacks which is the way to steal a password, because many people have a camera-equipped mobile phone and a miniature camera. This paper proposes the authentication method which is secure against the Brute-force attack and the video recording attack. In the article, the video recording attacks are considered that attackers analyze videos to obtain other person’s password, where user’s password entry operations are recorded once or twice. The security strength of the proposed method is evaluated.