Novel Shoulder-Surfing Resistant Haptic-based Graphical Password

Graphical password schemes are believed to be more secure and more resilient to dictionary attacks than textual passwords, but more vulnerable to shoulder surfing attacks. In this work, we design a new graphical password which is larger in the possible passwords’ space than in similar schemes and it is more resilient to shouldersurfing attacks. Personal entropies are integrated into the system in the user-aware behavior that reduces the False Acceptance and False Rejection Rates. The user-aware personal entropy we employ is the binary pressure when drawing a secret on the screen; unlike conventional authentication schemes that use personal entropies, the binary pressure in our scheme is varied arbitrarily by the users and is not intuitive. This method yields the authentication scheme that acquires all the advantages of graphical passwords and behavioral authentication schemes all together; our scheme is resilient to both dictionary attacks and shoulder surfing attacks. We also suggest the main criteria in which the graphical passwords should be evaluated, and we test our scheme within the given framework.