3 dimension password

8/13/2019 3 Dimension Password

1/20

3 D passwordPresented by:

Preetha M P

Roll No : 21S5 MCA

ETAKMCA022

For more secure authentication..


2/20

Password

PIN

Keys

Passport

Smart Card

Face

Fingerprint

Iris

Possession(something I have)

Biometrics

(something I am)

Knowledge(something I know)

Basic Identification Methods of password

Graphical

Password

Recognition

(something I recognise)


3/20

PASSWORD

Itis basically a encryption algorithm

Usually 8-15 characters or slightly more than that

Can be meaningful words from dictionary, pet names,name of friends etc

Easy to break and vulnerable to Brute force attack


4/20

PASSPHRASE

Enhanced version of password

Combination of words or simply a collection of passwords

in proper sequence

Length is about 3050 characters or more than that also

Creates ambiguity to remember if there is no proper

sequence


5/20

GRAPHICAL PASSWORDS

Based on the idea that users can recall and recognize

pictures better than words.

Require a long time to be performed

Have a password space that is less than or equal to the

textual password space

Vulnerable to shoulder surfing attacks


6/20

BIOMETRICS

Automate the identification or verification of an individualbased on human characteristics or body organs.

Physiological: Face, fingerprint, irisBehavioral: Hand-written signature, voice

Characteristics Templates

011001010010101

011010100100110

001100010010010...


7/20

3-D PASSWORD

Customizable and very interesting way of authentication

Multi factor authentication scheme.

Contains a 3-D virtual environment where the user navigates & interacts

with various objects.

Sequence of actions and interactions toward the objects constructs

users 3-D password.

Combination of textual passwords, graphical passwords & varioustypes of biometrics into a 3-D virtual environment.

Design of 3-D virtual environment and type of objects selected determine3-D password key space


8/20

3-D ENVIRONMENT VIRTUAL OBJECTS CAN BE AS FOLLOWS:

a computer with which the user can type;

a fingerprint reader that requires the users fingerprint;

a biometrical recognition device;

a paper or a white board that a user can write, sign, or draw on;

an automated teller machine (ATM) that requests a token;

a light that can be switched on/off; a television or radio where channels can be selected;

a staple that can be punched;

a car that can be driven;

a book that can be moved from one place to another;

any graphical password scheme; any real-life object;

any upcoming authentication scheme.


9/20

State diagram of a possible 3-D password application


10/20

Snapshot of a proof-of-concept virtual art gallery, which

contains 36 pictures and six computers


11/20

Snapshot of a proof-of-concept 3-D virtual environment, where the

user is typing a textual password on a virtual computer as a part of

the users 3-D password


12/20

(10, 24, 91) Action = Open the office door;

(10, 24, 91) Action = Close the office door;

(4, 34, 18) Action = Typing, F;

(4, 34, 18) Action = Typing, A;

(4, 34, 18) Action = Typing, L;

(4, 34, 18) Action = Typing, C;

(4, 34, 18) Action = Typing, O;

(4, 34, 18) Action = Typing, N;

(10, 24, 80) Action = Pick up the pen;

(1, 18, 80) Action = Drawing, point = (330, 130).

An example of user actions in the 3D virtual environment can

be recorded as follows:


13/20

3D VIRTUAL ENVIRONMENT DESIGN GUI LIN S

Real life similarity

Object uniqueness and distinction

Three Dimensional Virtual Environment Size

Number of objects and their types

System Importance


14/20

3-D PASSWORD APPLICATIONS

In Critical Systems:

Critical servers

Nuclear and military facilitiesAirplanes and jet fighters

In small virtual environments:

ATMPersonal Digital Assistance

Desktop Computers & laptop loginsWeb Authentication


15/20

ADVANTAGES OF 3-D PASSWORD

Several authentication schemesEasy to memorize

Designed according to protected system

Highly flexible

Extremely strongProvides secrets

3D environment can be changed

Password can change easily.

Difficult to crack

Freedom to selectDifficult to share

3D graphical password has no limit


16/20

DISADVANTAGES

Difficult for blind people to use this technology.

Requires sophisticated computer technology.

Expensive.

A lot of program coding is required.


17/20

ATTACKS AND COUNTER MEASURES

Brute Force Attack

a) Time required to login

b) Cost of attacks

Well Studied Attack

Shoulder Surfing Attack

Timing attack


18/20

CONCLUSION

3D password is a multi factor authentication scheme that combines the

various authentication schemes into a single 3D virtual environment.

Design of the 3D virtual environment is the selection of objects inside

the environment and the object's type reflect the resulted password

space

Password space is very large compared to any existing authentication

schemes

It is the task of the system administrator to design the environment and

to select the appropriate object that reflects the protected systemrequirements

Designing a simple and easy to use 3D virtual environment is a factor

that leads to a higher user acceptability of a 3D password system.


19/20

Questions??


20/20

Thank u

3 dimension password

Documents