UK scientists demo graphic passwords

By Candace Lombardi, CNET News.com
Wednesday, July 02, 2008 10:22 AM

Think it's tough coming up with memorable yet secure letter/number combo passwords? Wait until you have to think of something to draw.

A system devised by computer scientists at Newcastle University in the United Kingdom uses human-scribbled doodles in lieu of traditional passwords.

Don't worry. One need not be the next Picasso for the graphic passcode system to work.

The Background Draw-a-Secret (BDAS) system, developed by Jeff Yan, a computer science lecturer at the School of Computing Science at Newcastle University, and graduate student Paul Dunphy, lets people choose from a selection of base images.

The image is then visually overlaid with a grid and people "trace" the image on a touch screen to the best of their ability. Their unique drawing skill for that image, or lack thereof, becomes the passcode.

Each time after that, the chosen image appears as the passcode prompt. If the person's doodle over it matches up with the original one they made, they're in. To make it user-friendly, the doodle does not have to match up exactly to the original sketch.

"Studies have shown that people find it easier to remember images than words or numbers and our system has proven over 1,000 times more secure than people's normal passwords," Yan said in a statement.

The system is secure enough to be used at cash machines, as well as for computers and mobile devices. The BDAS's subjectivity by nature makes it more secure against hackers than a system derived from a fixed set of options like numbers and letters. For example, password images that are not symmetrical and have many strokes or longer continuous strokes are more difficult for automated hacker programs to crack, according to Yan.

People would probably also be less likely to keep a cheat sheet, as is often the case with complicated passwords.

Yan is showing off the Background Draw-a-Secret software on iPhones, laptops and PDAs this week in London at the Royal Society Summer Science Exhibition, the United Kingdom's leading science and technology fair that's open to the public through Thursday. The fair, which showcases the latest science and engineering projects from the country's leading researchers, is hosted by the Royal Society, the United Kingdom's national academy of science.

Perhaps not surprisingly, Yan's exhibit at the fair is being co-sponsored by Microsoft Research, Cambridge (U.K.). Microsoft announced in May that it will include a multitouch interface with Windows 7 that could be available in 2009 and will work with existing touch screens.

This article was first published as a blog on CNET News.com.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Common ways IT wastes money on development

Web Development

Examples include using developers as support staff and failing to calculate a project's ROI before giving it the go-ahead.


Read more »



  • Enterprise 2.0

    Vince Casarez, vice president of product management at Oracle, explains how Web 2.0 technologies, such as tags, wikis, and mash-ups, can be applied within an organization.
    Play video


  • Nehalem Architecture

    What makes next-generation Intel® Microarchitecture (Nehalem) such a superior successor?
    Play video

 
On demand CRM goes strategic
CRM technology has come of age, and is now able to align with your customer strategy and grow in step with your business.

» Learn more about Oracle’s CRM Solutions



Free the untapped potential of your IT infrastructure
Reduce bottlenecks to drive the efficiency and productivity of Business IT.
» Ultimate virtualization blade
» Scalable SAN solution
» Accelerate service delivery

Could this be the most critical budget for India?

Blog thumbnail

For business journalists in India, budget time is excitement time. It's like sports journos covering the Olympics. As a newspaper correspondent, I too had my fill of budget-time excitement. But..... by Swati Prasad

Read more »

Tags

  1. attack
  2. bank
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. u.s.
  19. viruses and worms
  20. web