一种新的识别型图形口令认证方案

A new authentication scheme using identified graphical password

身份认证是信息安全理论与技术的重要组成部分,图形口令在密钥空间、易记性、防肩窥性等方面均优于目前广泛使用的文本口令.在分析图形口令技术现状基础上,结合其验证过程,提出了一种新的识别型的图形口令方案,该方案要求用户在注册时从显示的图片中选择口令图片并记下若干图片的先后顺序,登录时只需要按顺序识别出部分口令图片即可.注册和登录时图片均随机显示.经实验,该方案具有较高的安全性和可用性,并能有效地防止肩窥攻击.

Identity authentication is an important part of information security theory and technology. Graphical password is superior to text password which is widely used in many aspects such as key space, memorability and ability of preventing shoulder surfing.Based on analyzing technique status of graphical password,this paper,combing verification process,puts forward a new authentication scheme using i_dentified graphical password.In this scheme,users are required to choose several pictures as passwords and memorize the sequence in registration,and when logging in,they only have to identify some of them in order.All the pictures are displayed randomly.Experimental results show that this scheme has fairly high security and usability,which can prevent shoulder surfing effectively.