Polynomial-Based Google Map Graphical Password System against Shoulder-Surfing Attacks in Cloud Environment

Text password systems are commonly used for identity authentication to access different kinds of data resources or services in cloud environment. However, in the text password systems, the main issue is that it is very hard for users to remember long random alphanumeric strings due to the long-term...

Full description

Saved in:
Bibliographic Details
Main Authors: Zhili Zhou, Ching-Nung Yang, Yimin Yang, Xingming Sun
Format: Article
Language:English
Published: Wiley 2019-01-01
Series:Complexity
Online Access:http://dx.doi.org/10.1155/2019/2875676
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1850161108802863104
author Zhili Zhou
Ching-Nung Yang
Yimin Yang
Xingming Sun
author_facet Zhili Zhou
Ching-Nung Yang
Yimin Yang
Xingming Sun
author_sort Zhili Zhou
collection DOAJ
description Text password systems are commonly used for identity authentication to access different kinds of data resources or services in cloud environment. However, in the text password systems, the main issue is that it is very hard for users to remember long random alphanumeric strings due to the long-term memory limitation of the human brain. To address this issue, graphical passwords are accordingly proposed based on the fact that humans have better memory for images than alphanumeric strings. Recently, a Google map graphical password (GMGP) system is proposed, in which a specific location of Google Map is preset as a password for authentication. Unfortunately, the use of graphical passwords increases the risk of exposing passwords under shoulder-surfing attacks. A snooper can easily look over someone’s shoulder to get the information of a location on map than a text password from a distance, and thus the shoulder-surfing attacks are more serious for graphical passwords than for text passwords. To overcome this issue, we design a polynomial-based Google map graphical password (P-GMGP) system. The proposed P-GMGP system can not only resist the shoulder-surfing attacks effectively, but also need much fewer challenge-response rounds than the GMGP system for authentication. Moreover, the P-GMGP system is extended to allow a user to be authenticated in cloud environment effectively and efficiently.
format Article
id doaj-art-fb3ada8a52954ef196d45c930ddb4e7f
institution OA Journals
issn 1076-2787
1099-0526
language English
publishDate 2019-01-01
publisher Wiley
record_format Article
series Complexity
spelling doaj-art-fb3ada8a52954ef196d45c930ddb4e7f2025-08-20T02:22:56ZengWileyComplexity1076-27871099-05262019-01-01201910.1155/2019/28756762875676Polynomial-Based Google Map Graphical Password System against Shoulder-Surfing Attacks in Cloud EnvironmentZhili Zhou0Ching-Nung Yang1Yimin Yang2Xingming Sun3Jiangsu Engineering Center of Network Monitoring, School of Computer and Software, Nanjing University of Information Science & Technology, Nanjing, ChinaDepartment of Computer Science and Information Engineering, National Dong Hwa University, Hualien, TaiwanDepartment of Computer Science, Lakehead University, Thunder Bay, CanadaJiangsu Engineering Center of Network Monitoring, School of Computer and Software, Nanjing University of Information Science & Technology, Nanjing, ChinaText password systems are commonly used for identity authentication to access different kinds of data resources or services in cloud environment. However, in the text password systems, the main issue is that it is very hard for users to remember long random alphanumeric strings due to the long-term memory limitation of the human brain. To address this issue, graphical passwords are accordingly proposed based on the fact that humans have better memory for images than alphanumeric strings. Recently, a Google map graphical password (GMGP) system is proposed, in which a specific location of Google Map is preset as a password for authentication. Unfortunately, the use of graphical passwords increases the risk of exposing passwords under shoulder-surfing attacks. A snooper can easily look over someone’s shoulder to get the information of a location on map than a text password from a distance, and thus the shoulder-surfing attacks are more serious for graphical passwords than for text passwords. To overcome this issue, we design a polynomial-based Google map graphical password (P-GMGP) system. The proposed P-GMGP system can not only resist the shoulder-surfing attacks effectively, but also need much fewer challenge-response rounds than the GMGP system for authentication. Moreover, the P-GMGP system is extended to allow a user to be authenticated in cloud environment effectively and efficiently.http://dx.doi.org/10.1155/2019/2875676
spellingShingle Zhili Zhou
Ching-Nung Yang
Yimin Yang
Xingming Sun
Polynomial-Based Google Map Graphical Password System against Shoulder-Surfing Attacks in Cloud Environment
Complexity
title Polynomial-Based Google Map Graphical Password System against Shoulder-Surfing Attacks in Cloud Environment
title_full Polynomial-Based Google Map Graphical Password System against Shoulder-Surfing Attacks in Cloud Environment
title_fullStr Polynomial-Based Google Map Graphical Password System against Shoulder-Surfing Attacks in Cloud Environment
title_full_unstemmed Polynomial-Based Google Map Graphical Password System against Shoulder-Surfing Attacks in Cloud Environment
title_short Polynomial-Based Google Map Graphical Password System against Shoulder-Surfing Attacks in Cloud Environment
title_sort polynomial based google map graphical password system against shoulder surfing attacks in cloud environment
url http://dx.doi.org/10.1155/2019/2875676
work_keys_str_mv AT zhilizhou polynomialbasedgooglemapgraphicalpasswordsystemagainstshouldersurfingattacksincloudenvironment
AT chingnungyang polynomialbasedgooglemapgraphicalpasswordsystemagainstshouldersurfingattacksincloudenvironment
AT yiminyang polynomialbasedgooglemapgraphicalpasswordsystemagainstshouldersurfingattacksincloudenvironment
AT xingmingsun polynomialbasedgooglemapgraphicalpasswordsystemagainstshouldersurfingattacksincloudenvironment