Research And Implementation Of Graphical Password Authentication System For Smart Device

With the rapid development of computer network, information security is increasingly becoming the focus of everyone’s attention. People pay more attention to user privacy and personal information security. Authentication technology is an effective means of protecting the security of personal information, and password authentication is a commonly used authentication method.Text password is a widely used password authentication technology, but it is defective in memorability and security. Thus, graphical password schemes have been proposed as an alternative to text password. Compared with text passwords, graphical password has advantages in memorability, usability, interactivity and security.Based on the studies of several typical graphical password authentication technology, we summarize the advantages and disadvantages of graphical passwords, analyze the security of graphical passwords, and propose a new graphical password authentication technology for smart device. Based on logical reasoning, the new technology combines image recognition with frame recall. During the authentication process, the user need to use the reasoning algorithms set in advance, related predefined data as well as random code, which is randomly generated when user login the system, to calculated the specific input rules for user’s predefined password sequence. After that, the user should input password sequence according to the rules.The scheme has the characteristics of one-time password, and it can effectively resist spyware and shoulder surfing attack. Meanwhile, the scheme allows the user customize the authentication factors, including password framework, password set, authentication level, reasoning algorithm and associated predefined data, as well as predefined password sequence. It will increase the difference of authentication factors between different users. In addition, the scheme applies logical reasoning to calculating input rules of password sequence. It also presents a new graphical password input rules, which is ordered as a whole and partially disorder. These features make the input rules have dynamic characteristics and uncertainty, and improve the security of the system to some extent at the same time.