Abstract

To provide more security to the cloud system, Live Object for a securing graphical password is a new graphical password scheme for public terminals that replaces the static digital images typically used in graphical password systems with personalized physical tokens, here in the form of digital pictures displayed on a physical user-owned device such as a mobile phone. Users represent these images to a system camera and then enter their password as a sequence of selections on live video of the token. Highly distinctive optical features are extracted from these selections and used as the password. We present three feasibility studies of Live Object for a securing graphical password examining its reliability, usability, and security against observation. The reliability study shows that image feature based passwords are viable and suggests appropriate system thresholds password items should contain a minimum of seven features, 40 percent of which must geometrically match originals stored on an authentication server in order to be judged equivalent. The usability study measures task completion times and error rates, revealing these to be 7.5 and 9 percent, broadly comparable with prior graphical password systems that use static digital images. The safety study highlights Live Object for a securing graphical password resistance to observation attack 3 attackers are unable to compromise a password using shoulder surfing, camera based observation, or malware. If everything will be fine then only the secure access to the cloud is granted.

Authors and Affiliations