Implementation and user testing of personal authentication having shoulder surfing resistance with mouse operations

Abstract

Typically, typing character strings on a keyboard is used for personal authentication for PC login and unlocking. Although some graphical and biometric-based methods have been developed, most of them have weak authentication strength, weak shoulder surfing resistance, or other drawbacks. In this paper, we propose a personal authentication method that employs mouse operations in which the mouse itself does not need to be moved. Thus, the user can hide the mouse during authentication, so the method has shoulder surfing resistance and can be used in public places. We performed user testing to validate the proposed method.