Input precision for gaze-based graphical passwords

Click-based graphical passwords have been proposed as alternatives to text-based passwords, despite being potentially vulnerable to shoulder-surfing, where an attacker can learn passwords by watching or recording users as they log in. Cued Gaze-Points (CGP) is a graphical password system which defends against such attacks by using eye-gaze password input, instead of mouse-clicks. A first user study revealed that CGP’s unique use of eye tracking required special techniques to improve gaze precision. In this paper, we present two enhancements that we developed and tested: a nearest-neighbour gaze-point aggregation algorithm and a 1-point calibration before each password entry. We found that these enhancements made a substantial improvement to users’ gaze accuracy and system usability. Keywords Eye tracking, graphical passwords, usable security ACM Classification Keywords H.5.2 Information Interfaces and Presentation: User Interfaces – Input devices and strategies K.6.5 Computing M...

• Type: Conference
• Year: 2010
• Where: CHI
• Authors: Alain Forget, Sonia Chiasson, Robert Biddle
• Keywords: CHI 2010, Click-based Graphical Passwords, Eye-gaze Password Input, Graphical Passwords, Human Computer Interaction