Work

RoundImage: Toward Secure Graphical Password Authentication via Rounded Image Selection in IoT

Year: 2025

Type: article

Abstract: User authentication is a basic security mechanism under Internet-of-Things (IoT) environments, which means to verify whether the logging user is legitimate or not. Due to known limitations of existing password-based authentication, graphical password is one promising solution to enhance the current user authentication process in IoT. However, it is an open question how to design a usable and robust graphical password scheme. In this work, we introduce RoundImage, a graphical password scheme that requires users to select images in rounds (e.g., three rounds) for authentication. It can resist against some typical threats, such as shoulder-surfing attacks and provide fault tolerance. In the evaluation, we set up an IoT scenario and test its performance with 100 participants. The results demonstrate the usability and potential of our scheme in a practical IoT environment.

Source: IEEE Internet of Things Journal

DOI: 10.1109/jiot.2025.3547816

Authors: Xinyuan Qin, Wenjuan Li, Philip Rosenberg

Institutions: Hong Kong Polytechnic University, Education University of Hong Kong, Aalborg University

Language: English

Topic: User Authentication and Security Systems

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: hybrid

Estimated APC paid: $2,645

OpenAlex ID: W4408145152

FWCI: 5.444

Cites: 41

Cited by: 5

Related to: 10