Multi-Color Technique and Session Key Method to Prevent Shoulder Surfing Attacks in Secure Transactions

To improve security of the various devices, the graphical password is memorable authentication method for authorization. But when a Personal Identification Number (PIN) entered as a numeric password in mobile or stationary systems, the Shoulder Surfing Attack (SSA) becomes great concern. To prevent SSA and to establish a secure transaction, The Multi color Technique and The Session key mechanism is proposed. In Multi color method, every numeric key is visually split into two halves and each half filled with two distinct colors simultaneously; So there exist four color groups on the numeric keypad and two colors for every numeric key. Session key mechanism constructed based on the basic layout of vertical array of digits from 0 to 9 with another array of ten familiar Symbols. This method make harder for a criminal to obtain PINs even if the iteration are fully observes the entire input of a PIN entry procedure. For Secure transaction, A One Way Hash is generated to Validated PIN and is sent to Server in public channel so that an active attacker cannot extract the PIN by monitoring the channel. Once Server Authenticated the PIN, Quick Response for the Mobile App will be redirect the user to the Services.