Examination of personal authentication method achieving shoulder-surfing resistance by combining mouse operation and number matrix

Abstract

Currently, personal authentication is used in many areas, and typically involves password authentication with a keyboard, but authentication information is easily leaked by shoulder surfing. We previously proposed an authentication method using mouse operation, which can be used with shared PCs and in public places. However, its usability was low. Thus, here we propose an improved method that can be performed by operating a mouse to manipulate cells of a number matrix displayed on a screen. We implemented the proposed method and conducted experiments on its usability and shoulder-surfing resistance. Questionnaire results showed that the usability of the proposed method is improved, and no shoulder surfer could obtain complete authentication information.