Grid-Search Password-Keeping (PK)

💂‍♂️ Problem Statement

Current password authentication scheme is prone to shoulder surfing. GridSearchPK is a method through which the user can can create and authentic real-time passwords using a randomly generated grid.

To demonstarte we make an android application having the following functionality -

Android application

• Database - Firebase , Sensitive information (encrypted)
• Register
  1. User Name, Email ID, Password , R string
  2. Directions - Horizontal ,Vertical
  3. Number of Steps - Min = 1, Max = 5
• Login
  1. Username, Password
  2. Grid - Random, GridSize = 5x5, 6x6, 7x7
  3. Forget password, Forget R-String -> Email - OTP -> Reset

Algorithm

• Random Grid Generation - Uppercase Letters + Symbols
• Verification - Along with duplicates

Novel changes made in framework

1. Two-Step Authentication - More secure
2. Duplicates in random grid - Increases usability, More secure
3. Symbols + Letters - More secure
4. More steps - More secure
5. Variation in grid size - More secure