An implementation of a multi-touch draw-a-secret password schema for windows-based computers
暂无分享,去创建一个
Draw A Secret password systems have recently come into vogue, primarily in the role of protecting a users cellular smart phone from external infiltration in lieu of a password. However, these password systems are only enabled for single touch operation; that is to say, a user may only draw one pattern, with only one finger. Brute forcing these passwords thereby becomes trivial in the context of password complexity. This thesis implements a Draw A Secret system utilizing consumer-grade video hardware to collate multiple patterns synchronously and then authenticate the user at a later point. Care has been given to properly encrypt the results to prevent a malicious third party from infiltrating the authentication stream from a file system perspective.
[1] Tal Garfinkel,et al. Reducing shoulder-surfing by using gaze-based password entry , 2007, SOUPS '07.
[2] Michael K. Reiter,et al. The Design and Analysis of Graphical Passwords , 1999, USENIX Security Symposium.