3D PASSWORD FOR SECURE AUTHENTICATION Copyright© cs-tutorial.com

CONTENTS Introduction Authentication Schemes Functionalities Required 3D Password selection and Input Virtual Environment Design Guidelines Applications Security Analysis Attacks and Countermeasures Conclusion

INTRODUCTION Commonly used authentication schemes are textual passwords, graphical passwords and biometrics. 3D password is a multifactor authentication scheme. To be authenticated, werequirea3Dvirtualenvironment.

Combines recognition-,recall-,token-,and biometrics-based systems. Users choice to select the type of authentication technique.

AUTHENTICATION SCHEMES KNOWLEDGE BASED Recall based Recognition based TOKEN BASED eg : smart card

BIOMETRIC BASED GRAPHICAL PASSWORDS Fingerprint ,palm prints ,hand geometry ,face recognition Intrusiveness upon a user’s personal characteristics. GRAPHICAL PASSWORDS Recognition based Recall based

FUNCTIONALITIES REQUIRED New scheme should combine the existing authentication schemes Freedom to select the type of authentication technique. Should provide secrets that are easy to remember ,difficult toguess.

3D PASSWORD SELECTION AND INPUT 3D environment space represented by the co-ordinates User navigate into the 3D virtual environment using any input device. The sequence of actions and interactions forms the users3D password.

Representation of user actions in the 3D virtual environment (10,24,91) Action=Open the office door; (10,24,91) Action=Close the office door; (4,34,18) Action= Typing,“F”; (4,34,18) Action= Typing,”A”; (4,34,18) Action= Typing,”L”; (4,34,18) Action= Typing,”C”; (4,34,18) Action= Typing,”O”; (4,34,18) Action= Typing,”N”; (10,24,80) Action= Pick up the pen; (1,18,80) Action= Drawing, point=(330,130).

Virtual Computer where user typing a textual password as a part of user’s 3D Password

Snapshot of a proof-of-concept virtual art gallery

State diagram of a 3D Password application

3D VIRTUAL ENVIRONMENT DESIGN GUIDELINES Real-life similarity Object uniqueness and distinction Three-dimensional virtual environment System importance

APPLICATIONS Critical servers. Nuclear and military facilities. Airplanes and jetfighters. ATMs, PDA’s, desktop computers and laptops.

SECURITY ANALYSIS 3D Password Space Size. 3D Password Distribution Knowledge.

ATTACKS AND COUNTERMEASURES Brute Force Attack Well-Studied Attack Shoulder Surfing Attack Timing Attack

CONCLUSION Commonly used authentication schemes are vulnerable to attacks. 3D Password is a multifactor authentication scheme. Design of 3D virtual environment, selection of objects inside the environment, and the object type reflects the resulted password space. User’s choice and decision to construct the desired and preferred 3D password

Thank You!