An Innovative approach to Resist Shoulder Surfing Attack using Color Pass

Classical PIN entry mechanism is widely used for authenticating a user. It is used on different platforms. But, this scheme suffers to shoulder surfing attack if used in public systems. In this attack, an unauthorized user can fully or partially observe the login session. The steps of the login session can be recorded or saved which the attacker can use it later to get the original PIN. In this project, we propose an intelligent user interface, ‘Color Pass’ to resist the shoulder surfing attack so that any authorized user can enter the login session’s PIN without disclosing the original PIN. The purposed methodology is based on a partially observable attacker model. The analysis shows that the Color Pass interface is safe and easy to use even for users. This method is suitable for Personal Digital Assistants, Mobile phones, ATM pin entry mechanism, Laptops and Desktops.