Screen oriented technique for reducing the incidence of shoulder surfing.

Abstract

We propose an intuitive graphical password entry scheme that significantly reduces the ability of an attacker to obtain passwords by observing authorized users’ authentication sessions. The scheme is resistant to dictionary attacks, and is likely to employ stronger and much more memorable passwords than conventional text or graphical schemes. We propose a procedure that makes the scheme resistant to guessing attacks, more resistant than other graphical schemes in the literature. Finally the scheme is designed to minimize the search time the authorized user needs to find the relevant information on a screen with multiple graphical objects. The scheme is currently being implemented and will be tested for usability.