Article ID: 2017XBL0170
Typically, typing character strings on a keyboard is used for personal authentication for PC login and unlocking. Although some graphical and biometric-based methods have been developed, most of them have weak authentication strength, weak shoulder surfing resistance, or other drawbacks. In this paper, we propose a personal authentication method that employs mouse operations, although the mouse itself does not need to be moved. Thus, the user can hide the mouse during authentication, so the method has shoulder surfing resistance and can be used in public places. We performed user testing to validate the proposed method.