Preservation of information and computer security is broadly dependent on the secured authentication system which is underpinned by password. Text based password is a commonly used and available system for authentication. But it bears many limitations like shoulder surfing, dictionary attack, Phishing, guessing the password etc. In order to overwhelm these vulnerabilities of ancient textual password, many graphical or image based password authentication system has been introduced form last few years. But none of this graphical system is considered as enough adventurous to keep pace with these issues. Here we have proposed an image based password authentication system which is more methodical and can cope up with every vulnerability of recent password authentication system. To make our system hassle free and more reliable, we will only take username from an user for registration purpose as our system will generate a unique key number for that particular user and this key will be used as password for later login procedure. The user name and key both will be encrypted using a cryptography algorithm to prevent database hacking. There will be a randomized clickable image grid in our system. By clicking on this image grid, user will input the password key for login purpose. Here we have developed another method namely shoulder surfing resistant password. To prevent the attack of shoulder surfing, if any user wishes to change our system provided password key then he or she is allowed to do so by using this method. Besides this method allows user to change the password every single time of login. A user doesn't need to enter any textual password for authentication in our recent module and hence combination of all these features improve the security, usability and user friendliness of our system.
翻译:保存信息和计算机安全大体上取决于由密码支撑的安全认证系统。 基于文本的密码是一个常用和可用的认证系统。 但是, 它有许多限制, 如肩冲、 字典攻击、 phishing、 密码等 。 为了克服古老文本密码的这些弱点, 许多图形或图像的密码认证系统在过去几年中被引入了格式。 但是, 这个图形系统没有一个具有足够的冒险性, 能够跟上这些问题。 我们在这里建议了一个基于图像的密码认证系统, 该系统更加有条理, 能够应对最近的密码认证系统的每一个弱点。 要让我们的系统更加自由和可靠, 我们只需要从一个用户那里取用户名来登记, 因为我们的系统将为这个特定用户生成一个独特的关键数字, 而这个关键将用来作为日后登录程序的密码。 用户名和密钥都将使用加密算法进行加密, 防止数据库的黑客黑。 将有一个随机化的组合图像网络, 点击这个图像网络, 用户会输入密码键, 以便最近登录的特性特性更加安全可靠。 为了方便, 我们在这里开发另一个用户的密码密码, 将使用 的密码系统, 也允许使用 安全性系统来改进。