Authentication System Using Text Passwords Along With Persuasive Cued Click Points

Abstract

This paper presents an implementation of a two level authentication using a combination of text passwords and persuasive cued click points on three or five images. The most common method for authentication is textual passwords. Though textual passwords are easy to remember, they are vulnerable to eavesdropping, dictionary attacks, social engineering and shoulder surfing. Graphical passwords have been introduced as an alternative to textual passwords. But same as textual passwords, shoulder surfing attacks make most of the graphical schemes vulnerable. To address this problem, textual passwords can be combined with graphical schemes in what gives a two level security without the use of additional hardware. This paper also presents an evaluation of the text based passwords and graphical password schemes which have been tested previously but failed, including usability and security evaluations.