A Shoulder-Surfing-Resistant Image-Based Authentication System with Temporal Indirect Image Selection.

Abstract

Although image-based user authentication systems have gotten a lot of attention recently to reduce the burden of memorizing passwords, they can be vulnerable to shouldersurfing attacks. To overcome this problem, shoulder-surfingresistant image-based authentications with indirect image selection (indirect image-based authentication, or I-IBA) have been proposed. However, because they spatially arrange image-sets over a wide space, two problems with these schemes are that they require a large screen and that it is difficult for authorized users to find and select their passimages in the wide area. Therefore, by temporally arranging the image-sets, we implemented another indirect image-based authentication scheme (temporal I-IBA, or TI-IBA) that is not constrained by the screen size and makes it easy for authorized users to recognize their pass-images. We conducted fundamental experiments to study the feasibility of TI-IBA.