A Secure Pin Entry Mechanism for Online Banking by Defending Shoulder-Surfing Attacks
摘要
Unprecedented numbers and passwords serve as robust and widely used authentication mechanisms in various devices such as ATMs, smartphones, and electronic door locks. Unfortunately, the conventional authentication approach is significantly vulnerable to shoulder-surfing attacks. In contrast, the prevailing focus on supporting these proposed systems extends beyond quantitative evaluations to encompass the outcomes of assessments and tests conducted on the suggested frameworks. This paper introduces a novel, hypothesis-based approach for the quantitative security assessment of entry designs. It initially outlines the principles of this innovative methodology by exploring a new security concept referred to as mesh-based authentication structures and standard stretch schedules in the context of contemporary designs. Additionally, it highlights existing design rules and strives to articulate a fresh entry technique that effectively mitigates the risk of human shoulder-surfing attacks by intensifying the computational complexity required for an attacker to breach critical security domains, ensuring optimal service reliability.