DRAW-A-PIN: Authentication using finger-drawn PIN on touch devices

This paper presents Draw-A-PIN, a user authentication system on a device with a touch interface that supports the use of PINs. In the proposed system, the user is asked to draw her PIN on the touch screen instead of typing it on a keypad. Consequently, Draw-A-PIN could offer better security by utili...

Full description

Saved in:
Bibliographic Details
Published in:Computers & security 2017-05, Vol.66, p.115-128
Main Authors: Nguyen, Toan Van, Sae-Bae, Napa, Memon, Nasir
Format: Article
Language:English
Subjects:
Authentication protocols
Behavioral biometric
Field study
Finger-drawn PIN
Gesture authentication
Interactive computer systems
Shoulder surfing
Touch devices
Usability
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:This paper presents Draw-A-PIN, a user authentication system on a device with a touch interface that supports the use of PINs. In the proposed system, the user is asked to draw her PIN on the touch screen instead of typing it on a keypad. Consequently, Draw-A-PIN could offer better security by utilizing drawing traits or behavioral biometrics as an additional authentication factor beyond just the secrecy of the PIN. In addition, Draw-A-PIN inherently provides acceptability and usability by leveraging user familiarity with PINs. To evaluate the security and usability of the approach, Draw-A-PIN was implemented on Android phones and 3203 legitimate finger-drawn PINs and 4655 forgery samples were collected through an extensive and unsupervised field experiment over 10 consecutive days. Experimental results show that Draw-A-PIN achieves an equal error rate of 4.84% in a scenario where the attacker already knows the PIN by shoulder surfing. Finally, results from a user study based on the System Usability Scale questionnaire confirm that Draw-A-PIN is highly usable.
ISSN:0167-4048
1872-6208
DOI:10.1016/j.cose.2017.01.008