Securing PIN Entry through User’s Own Touchscreen Devices to Prevent Shoulder Surfing Attacks

Abstract

A chip is a small microchip embedded in your credit card. It is encrypted so transactions are more secure on the card. The Chip+PIN card is a superior level of security on your card, in line with best global practice of security of transactions. When you use a Chip+PIN credit card at a POS terminal, the POS machine will prompt you for your PIN to be entered, you are required to enter the Credit Card ATM PIN in the terminal and complete the transaction. To complete the transaction we need to provide 4 digit PIN number into that device. We suspect a security thread in this process. While providing PIN in front of friends, relative or unknown person, it is affected by “Shoulder attack”. Shoulder attacks is one of the latest weapons used by hackers or adversaries in an organization to hack an account or to authenticate in a secure zone. In a shoulder attack a person is watching the user while he is typing the password and reads his fingers that what he has typed or makes a video of him typing the password and so comes to know that what the password is. We wanted to address this problem. So to handle such type of attacks we wanted to developed such a technique which provides more security to a user in typing his password, in a public place, and in case that user is in critical position. As per our propose technique we wanted bank server should accept PIN from users mobile phone and not from merchants keypad.
Keywords: Shoulder Surfing; Authentication