Multi-level Scalable Textual-Graphical Password Authentication Scheme for Web based Applications

  • Umedha Behl Department of Information Technology, Fr. Conceicao Rodrigues College of Engineering, Bandra (W), Mumbai
  • Divya Bhat Department of Information Technology, Fr. Conceicao Rodrigues College of Engineering, Bandra (W), Mumbai
  • Neha Ubhaykar Department of Information Technology, Fr. Conceicao Rodrigues College of Engineering, Bandra (W), Mumbai
  • Vaibhav Godbole Department of Information Technology, Fr. Conceicao Rodrigues College of Engineering, Bandra (W), Mumbai
  • Saurabh Kulkarni Department of Information Technology, Fr. Conceicao Rodrigues College of Engineering, Bandra (W), Mumbai
DOI: https://doi.org/10.21553/rev-jec.64

Abstract

Nowadays, user authentication is one of the important topics in information security. Authentication is necessary in multi-user systems. User name and password are used to authenticate a user. Text-based strong password scheme can provide security to a certain degree. Users tend to pick short passwords or passwords that are easy to remember, which makes the passwords vulnerable for attackers to break. Furthermore, textual password is vulnerable to shoulder-surfing, hidden camera and spy-ware attacks. Graphical authentication has been proposed as a possible alternative solution to text-based authentication, motivated particularly by the fact that humans can remember images better than text. However, they are mostly vulnerable to shoulder surfing. In this paper, we propose a Multi-level Scalable Textual-Graphical Password Authentication Scheme for web based applications. This scheme integrates both graphical and textual password schemes, and provides multi-level authentication scheme as compared to previously proposed single level scheme. In this scheme multi-level authentication is obtained by making use of SMS service, hence provides more secure service. This scheme shows significant potential bridging the gap between conventional textual password and graphical password. Further enhancements of this scheme are proposed and briefly discussed.
Published
2014-07-01
Issue
Vol. 3, No. 3-4 (Jul-Dec, 2013)
Section
Regular articles
An author's submission implies that the manuscript has not been published previously, and is not currently submitted for publication elsewhere. Submission also implies that the Corresponding Author has consent of all authors (the Authors). Upon acceptance for publication transfer of copyright will be made to the Publisher of REV-JEC, who guarantees that full content of the published article is freely distributed on the Journal's website. The copyright transfer gives the Publisher of REV-JEC full authority to resolve any complaints of misuse or abuse (such as infringement or plagiarism) of the published article. The Authors have the freedom to redistribute and reuse the published article in any medium or format for any purpose, provided the original published article is properly cited. An article submission implies author agreement with this policy.