arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 1305.7482cs.CR
收藏

在您的PDA上画一条线以进行身份验证

Draw a line on your PDA to authenticate

Xiyang Liu, Zhongjie Ren, Xiuling Chang, Haichang Gao, Uwe Aickelin

摘要:

高度移动的劳动力和无处不在的图形界面(如手写笔和触摸屏)的趋势使得个人数字助理(PDA)中出现了图形身份验证[1]。然而,大多数当前的图形密码方案都容易受到肩膀冲浪[2,3]的攻击,这是一种已知的风险,攻击者可以通过直接观察或记录身份验证会话来捕获密码。已经开发了几种方法来处理这个问题,但它们具有显著的可用性缺点,通常是登录的时间和精力,使它们不太适合身份验证[4,8]。例如,在Hong [5]提出的方案中,用户登录CHC [4]是耗时的,并且存在复杂的文本存储要求。关于Weinshall [6]提出的方案,不仅登录复杂,而且抵抗肩扛冲浪的主要主张也被证明是错误的[7]。在本文中,我们介绍了一个新的图形密码方案,它提供了一个很好的抵抗shouldersurfing和保存一个理想的可用性。

英文摘要:

The trend toward a highly mobile workforce and the ubiquity of graphical interfaces (such as the stylus and touch-screen) has enabled the emergence of graphical authentications in Personal Digital Assistants (PDAs) [1]. However, most of the current graphical password schemes are vulnerable to shoulder-surfing [2,3], a known risk where an attacker can capture a password by direct observation or by recording the authentication session. Several approaches have been developed to deal with this problem, but they have significant usability drawbacks, usually in the time and effort to log in, making them less suitable for authentication [4, 8]. For example, it is time-consuming for users to log in CHC [4] and there are complex text memory requirements in scheme proposed by Hong [5]. With respect to the scheme proposed by Weinshall [6], not only is it intricate to log in, but also the main claim of resisting shoulder-surfing is proven false [7]. In this paper, we introduce a new graphical password scheme which provides a good resistance to shouldersurfing and preserves a desirable usability.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑