Abstract:Knowledge-based authentication techniques remain one of the proven ways of maintaining confidentiality, ensuring integrity, and guaranteeing the availability of an information system. They employ what a user knows (Passwords or PINs) to authorize or grant access to an information system. While passwords employ a fixed combination of characters, Personal Identification Numbers (PINs) are majorly numbers. Existing implementations of these authentication techniques involve the repetitive use of static passwords and PINs at every login instance. These have been exposed to various attacks, such as keyloggers, shoulder surfing, brute force, and dictionary attacks. To overcome these attacks, this study presents an authentication technique where users' PINs are incremented during successive login attempts. Users are expected to choose a preferred incremental factor, which can be any number they can remember, that will be added to the default 6-digit PIN to produce a dynamic PIN that can be used in subsequent login sessions. Furthermore, an additional layer of security that involves the use of a dynamic 4 by 4 graphical grid was integrated into the proposed incremented PIN technique. At every login session, users are presented with a set of 16 possible PINs to choose from. The security analysis of the proposed authentication technique revealed that the proposed technique could resist existing password attacks, thereby enhancing security. A performance testing and usability analysis was also carried out among 1145 individuals who interacted with the web application that uses the incremental authentication technique. The questionnaire items were structured based on the constructs of the Unified Theory of Acceptance and Use of Technology (UTAUT) Model. Statistical analysis of the responses received showed an appreciable level of acceptance in terms of performance expectancy, effort expectancy, social influence, and facilitating conditions. The positive user acceptance results provide reassurance about the practicality and effectiveness of the proposed technique. It is believed that the proposed incremental graphical grid authentication technique will further enhance the security of our growing mobile and web applications.

Click and Session based Captcha as Graphical Password Authentication Process using AI Technology

Against Spyware Using CAPTCHA in Graphical Password Scheme

A Novel Multifactor Authentication System Ensuring Usability and Security

Web Authentication Biometric 3D Animated CAPTCHA System Using Artificial Intelligence and Machine Learning Approach

KinWrite: Handwriting-Based Authentication Using Kinect.

A Study of CAPTCHAs for Securing Web Services

CAPTCHA Types and Breaking Techniques: Design Issues, Challenges, and Future Research Directions

A Dynamic and Incremental Graphical Grid Authentication Technique for Mobile and Web Applications

A Shoulder Surfing Resistant Graphical Authentication System

Efficient and Secure Flash-based Gaming CAPTCH

A Probabilistic Approach for Authenticating Text or Graphical Passwords Using Back Propagation

Applying Visual Cryptography to Enhance Text Captchas

Bypassing Captcha By Machine A Proof For Passing The Turing Test

PassPage - Graphical Password Authentication Scheme Based on Web Browsing Records.

Dazed & Confused: A Large-Scale Real-World User Study of reCAPTCHAv2

Password based authentication for web based graphics computing services retrieval in cloud

The weak password problem: chaos, criticality, and encrypted p-CAPTCHAs

An Interactive and Secure User Authentication Scheme for Mobile Devices.

Vulnerability analysis of captcha using Deep learning

Passmap: A Map Based Graphical-Password Authentication System

A New Graphical Password Scheme Resistant to Shoulder-Surfing