Reducing Shoulder-Surfing by Using Gaze-based Password Entry
Author(s): Manu Kumar, Tal Garfinkel, Dan Boneh, Terry Winograd

Date: July 2007
Publication: Proceedings of the Symposium On Usable Privacy and Security (SOUPS) 2007
Publisher: Carnegie Mellon
Source 1: http://cups.cs.cmu.edu/soups/2007/proceedings/p13_kumar.pdf
Source 2: https://hci.stanford.edu/research/GUIDe/publications/SOUPS%202007%20-%20Reducing%20Shoulder-surfing%20by%20Using%20Gaze-based%20Password%20Entry.pdf
Source 3: http://dx.doi.org/10.1145/1280680.1280683 - Subscription or payment required

Abstract or Summary:
Shoulder-surfing – using direct observation techniques, such as looking over someone's shoulder, to get passwords, PINs and other sensitive personal information – is a problem that has been difficult to overcome. When a user enters information using a keyboard, mouse, touch screen or any traditional input device, a malicious observer may be able to acquire the user’s password credentials. We present EyePassword, a system that mitigates the issues of shoulder surfing via a novel approach to user input.

With EyePassword, a user enters sensitive input (password, PIN, etc.) by selecting from an on-screen keyboard using only the orientation of their pupils (i.e. the position of their gaze on screen), making eavesdropping by a malicious observer largely impractical. We present a number of design choices and discuss their effect on usability and security. We conducted user studies to evaluate the speed, accuracy and user acceptance of our approach. Our results demonstrate that gaze-based password entry requires marginal additional time over using a keyboard, error rates are similar to those of using a keyboard and subjects preferred the gaze-based password entry approach over traditional methods.




Do you have additional information to contribute regarding this research paper? If so, please email siteupdates@passwordresearch.com with the details.

<-- Back to Authentication Research Paper Index





[Home] [About Us] [News] [Research]

Copyright © 2016 PasswordResearch.com