A Shoulder Surfing Resistant Graphical Authentication System

Abstract

People enjoy the convenience of on-line services, but online environments may bring many risks. We propose a virtual password and QR code concept involving a small amount of human computing to secure users’ passwords in on-line environments. We adopted user-determined randomized linear generation functions to secure users’ passwords based on the fact that a server has more information than any adversary does. We propose differentiated QR code mechanisms in which a user has the freedom to choose a virtual password scheme ranging from weak security to strong security, where a virtual password requires a small amount of human computing to secure users’ passwords. A functionis used to implement the virtual password concept with security for complexity requiring a small amount of human computing. For user-specified functions, we adopt secretlittle functions in which security is enhanced by to generate QR CODE.