Charpattern: Rethinking android lock pattern to adapt to remote authentication

Kemal Bicakci; Tashtanbek Satiev

doi:10.1007/978-3-319-24192-0_5

Charpattern: Rethinking android lock pattern to adapt to remote authentication

Kemal Bicakci, Tashtanbek Satiev^*

^*Corresponding author for this work

TOBB University of Economics and Technology

Research output: Contribution to journal › Conference article › peer-review

Abstract

Android Lock Pattern is popular as a screen lock method on mobile devices but it cannot be used directly over the Internet for user authentication. In our work, we carefully adapt Android Lock Pattern to satisfy the requirements of remote authentication and introduce a new pattern based method called char Pattern. Our new method allows dual-mode of input (typing a password and drawing a pattern) hence accommodate users who login alternately with a physical keyboard and a touchscreen device. It uses persuasive technology to create strong passwords which withstand attacks involving up to 10⁶ guesses; an amount many experts believe sufficient against online attacks. We conduct a hybrid lab and web study to evaluate the usability of the new method and observe that logins with char Pattern are significantly faster than the ones with text passwords on mobile devices.

Original language	English
Article number	A5
Pages (from-to)	74-86
Number of pages	13
Journal	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	9393 LNCS
DOIs	https://doi.org/10.1007/978-3-319-24192-0_5
Publication status	Published - 2015
Externally published	Yes
Event	International Conference on Passwords, PASSWORDS 2014 - Trondheim, Norway Duration: 8 Dec 2014 → 10 Dec 2014

Bibliographical note

Publisher Copyright:
© Springer International Publishing Switzerland 2015.

Access to Document

10.1007/978-3-319-24192-0_5

Cite this

@article{2b480462127c4e7b92e5115cd7eb3852,

title = "Charpattern: Rethinking android lock pattern to adapt to remote authentication",

abstract = "Android Lock Pattern is popular as a screen lock method on mobile devices but it cannot be used directly over the Internet for user authentication. In our work, we carefully adapt Android Lock Pattern to satisfy the requirements of remote authentication and introduce a new pattern based method called char Pattern. Our new method allows dual-mode of input (typing a password and drawing a pattern) hence accommodate users who login alternately with a physical keyboard and a touchscreen device. It uses persuasive technology to create strong passwords which withstand attacks involving up to 106 guesses; an amount many experts believe sufficient against online attacks. We conduct a hybrid lab and web study to evaluate the usability of the new method and observe that logins with char Pattern are significantly faster than the ones with text passwords on mobile devices.",

author = "Kemal Bicakci and Tashtanbek Satiev",

note = "Publisher Copyright: {\textcopyright} Springer International Publishing Switzerland 2015.; International Conference on Passwords, PASSWORDS 2014 ; Conference date: 08-12-2014 Through 10-12-2014",

year = "2015",

doi = "10.1007/978-3-319-24192-0_5",

language = "English",

volume = "9393 LNCS",

pages = "74--86",

journal = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

issn = "0302-9743",

publisher = "Springer Verlag",

}

Charpattern: Rethinking android lock pattern to adapt to remote authentication. / Bicakci, Kemal; Satiev, Tashtanbek.
In: Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), Vol. 9393 LNCS, A5, 2015, p. 74-86.

Research output: Contribution to journal › Conference article › peer-review

TY - JOUR

T1 - Charpattern

T2 - International Conference on Passwords, PASSWORDS 2014

AU - Bicakci, Kemal

AU - Satiev, Tashtanbek

N1 - Publisher Copyright: © Springer International Publishing Switzerland 2015.

PY - 2015

Y1 - 2015

N2 - Android Lock Pattern is popular as a screen lock method on mobile devices but it cannot be used directly over the Internet for user authentication. In our work, we carefully adapt Android Lock Pattern to satisfy the requirements of remote authentication and introduce a new pattern based method called char Pattern. Our new method allows dual-mode of input (typing a password and drawing a pattern) hence accommodate users who login alternately with a physical keyboard and a touchscreen device. It uses persuasive technology to create strong passwords which withstand attacks involving up to 106 guesses; an amount many experts believe sufficient against online attacks. We conduct a hybrid lab and web study to evaluate the usability of the new method and observe that logins with char Pattern are significantly faster than the ones with text passwords on mobile devices.

AB - Android Lock Pattern is popular as a screen lock method on mobile devices but it cannot be used directly over the Internet for user authentication. In our work, we carefully adapt Android Lock Pattern to satisfy the requirements of remote authentication and introduce a new pattern based method called char Pattern. Our new method allows dual-mode of input (typing a password and drawing a pattern) hence accommodate users who login alternately with a physical keyboard and a touchscreen device. It uses persuasive technology to create strong passwords which withstand attacks involving up to 106 guesses; an amount many experts believe sufficient against online attacks. We conduct a hybrid lab and web study to evaluate the usability of the new method and observe that logins with char Pattern are significantly faster than the ones with text passwords on mobile devices.

UR - http://www.scopus.com/inward/record.url?scp=84983744663&partnerID=8YFLogxK

U2 - 10.1007/978-3-319-24192-0_5

DO - 10.1007/978-3-319-24192-0_5

M3 - Conference article

AN - SCOPUS:84983744663

SN - 0302-9743

VL - 9393 LNCS

SP - 74

EP - 86

JO - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

JF - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

M1 - A5

Y2 - 8 December 2014 through 10 December 2014

ER -

Charpattern: Rethinking android lock pattern to adapt to remote authentication

Abstract

Bibliographical note

Access to Document

Other files and links

Fingerprint

Cite this