UK scientists demo graphic passwords

By Candace Lombardi, CNET News.com
Wednesday, July 02, 2008 10:22 AM

Think it's tough coming up with memorable yet secure letter/number combo passwords? Wait until you have to think of something to draw.

A system devised by computer scientists at Newcastle University in the United Kingdom uses human-scribbled doodles in lieu of traditional passwords.

Don't worry. One need not be the next Picasso for the graphic passcode system to work.

The Background Draw-a-Secret (BDAS) system, developed by Jeff Yan, a computer science lecturer at the School of Computing Science at Newcastle University, and graduate student Paul Dunphy, lets people choose from a selection of base images.

The image is then visually overlaid with a grid and people "trace" the image on a touch screen to the best of their ability. Their unique drawing skill for that image, or lack thereof, becomes the passcode.

Each time after that, the chosen image appears as the passcode prompt. If the person's doodle over it matches up with the original one they made, they're in. To make it user-friendly, the doodle does not have to match up exactly to the original sketch.

"Studies have shown that people find it easier to remember images than words or numbers and our system has proven over 1,000 times more secure than people's normal passwords," Yan said in a statement.

The system is secure enough to be used at cash machines, as well as for computers and mobile devices. The BDAS's subjectivity by nature makes it more secure against hackers than a system derived from a fixed set of options like numbers and letters. For example, password images that are not symmetrical and have many strokes or longer continuous strokes are more difficult for automated hacker programs to crack, according to Yan.

People would probably also be less likely to keep a cheat sheet, as is often the case with complicated passwords.

Yan is showing off the Background Draw-a-Secret software on iPhones, laptops and PDAs this week in London at the Royal Society Summer Science Exhibition, the United Kingdom's leading science and technology fair that's open to the public through Thursday. The fair, which showcases the latest science and engineering projects from the country's leading researchers, is hosted by the Royal Society, the United Kingdom's national academy of science.

Perhaps not surprisingly, Yan's exhibit at the fair is being co-sponsored by Microsoft Research, Cambridge (U.K.). Microsoft announced in May that it will include a multitouch interface with Windows 7 that could be available in 2009 and will work with existing touch screens.

This article was first published as a blog on CNET News.com.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Code concepts: Visual Studio's T4 templates

Web Development

The T4 templating system is used to programmatically generate artifacts. Here's an overview about why the templates are useful and how to work with them.


Read more »


 
Virtualize your way to cost savings
Build an infrastructure that is flexible, scalable, and economical, as you strive to become a truly agile business.

Red Hat Outlines Its Virtualization Strategy and Roadmap for 2009
» Watch the video




Where have all the bosses gone?

Blog thumbnail

I've had dreams of opening my own cafe or bistro...cum music store...cum music school. But, I soon gave up that dream when I realized it would require significant investment and..... by Eileen Yu

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web