I-SLASS: an improved login approach over SLASS. (1st January 2014)

• Record Type: Journal Article
• Authors: Chakraborty, Nilesh; Mondal, Samrat
• Is Part Of: International journal on trust management in computing and communications. Volume 2:Number 4(2014)
• Page Start: 309
• Page End: 329
• Publication Date: 2014-01-01
• Subjects: password-based authentication -- shoulder surfing attack -- partially observable scheme; Data protection -- Periodicals; Database management -- Periodicals; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.8
• DOI: 10.1504/IJTMCC.2014.067375
• Languages: English
• ISSNs: 2048-8378

Abstract

In a password-based authentication scheme, shoulder surfing attack is a common problem. To overcome this, challenge response scheme is a possible solution. However, to address this security aspect the authentication schemes should not compromise too much with the usability aspect. Thus, the main challenge in such schemes is to provide a balance between security and usability aspect. In this paper, some partially observable shoulder surfing resilient schemes such as SSSL, SLASS are analysed and their limitations have been overcome in the proposed I-SLASS scheme which is built on top of SLASS concept. Two variants of I-SLASS schemes are developed. I-SLASS-CPASS is used to address character-based password and I-SLASS-DPASS uses the digit-based PIN. Experimental analysis shows that both the variants are more secure and more flexible compared to their respective counterpart, i.e., SLASS and SSSL.