UCL Discovery
UCL home » Library Services » Electronic resources » UCL Discovery

Make mine a quadruple: Strengthening the security of graphical one-time PIN authentication

Jhawar, R; Inglesant, P; Courtois, N; Sasse, MA; (2011) Make mine a quadruple: Strengthening the security of graphical one-time PIN authentication. In: (pp. pp. 81-88). Green open access

[img]
Preview
PDF
GrIDsureNSSCameraReady.pdf
Available under License : See the attached licence file.

Download (1MB)

Abstract

Secure and reliable authentication is an essential prerequisite for many online systems, yet achieving this in a way which is acceptable to customers remains a challenge. GrIDsure, a one-time PIN scheme using random grids and personal patterns, has been proposed as a way to overcome some of these challenges. We present an analytical study which demonstrates that GrIDsure in its current form is vulnerable to interception. To strengthen the scheme, we propose a way to fortify GrIDsure against Man-in-the-Middle attacks through (i) an additional secret transmitted out-of-band and (ii) multiple patterns. Since the need to recall multiple patterns increases user workload, we evaluated user performance with multiple captures with 26 participants making 15 authentication attempts each over a 3-week period. In contrast with other research into the use of multiple graphical passwords, we find no significant difference in the usability of GrIDsure with single and with multiple patterns. © 2011 IEEE.

Type: Proceedings paper
Title: Make mine a quadruple: Strengthening the security of graphical one-time PIN authentication
ISBN-13: 9781457704598
Open access status: An open access version is available from UCL Discovery
DOI: 10.1109/ICNSS.2011.6059963
UCL classification: UCL
UCL > Provost and Vice Provost Offices
UCL > Provost and Vice Provost Offices > UCL BEAMS
UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science
UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science
URI: https://discovery.ucl.ac.uk/id/eprint/1427635
Downloads since deposit
290Downloads
Download activity - last month
Download activity - last 12 months
Downloads by country - last 12 months

Archive Staff Only

View Item View Item