TrusPass: DYNAMIC PASSWORD GENERATION FOR USER AUTHENTICATION USING GRAPHICAL KEYWORD

User authentication is the gateway for entry into any system. Attacks on user authentication can cause irreperable loss for the individuals and organizations. Password based authentication is the primary method of user authentication. But they are vulnerable to many attacks. Imposing strong password policies to choose complex passwords causes difficulty in remembering them. People have the habit of using the same password across multiple accounts. This leads to cascading password attacks. Attacks on passwords commence from the moment they are being entered on the keyboard. In this paper, we have proposed a graphical keyboard based dynamic password generation scheme that facilitates inconspicuous entry of passwords. Users need to use a token for entering their passwords on the proposed keyboard. By aligning the token with the characters on the keyboard, they can unobstrusively enter their passwords. User’s password gets transformed into a high entropy dynamic password with the help of an algorithm. For the same password, different dynamic passwords are geberated each time. The scheme improves password strength without burdening users to remember complex passwords. The proposed scheme averts many attacks on passwords. The usability of the scheme is ascertained through a user study