Scalable Shoulder-Surfing Resistant Textual-Graphical Password Authentication Scheme (S3PAS). S3PAS seamlessly integrates both graphical and textual password schemes and provides nearly perfect resistant to shoulder-surfing, hidden-camera and spyware attacks.

1. Graphical Based Authentication using
S3PAS
Team Members:
Ketan Patil
Suyog Patil
Saurabh Sawant
Anmol Bhole
Department of Computer Engineering
Terna Engineering College
2015-16

2. Contents
 Aim and objective of project.
 Proposed system and it’s advantages.
 What is S3PAS
 System architecture
 Application

3. Abstract
• Users tend to pick short passwords or passwords that are easy to
remember.
• Graphical password schemes have been proposed as a possible
alternative to text-based scheme. However, they are mostly vulnerable
to shoulder surfing.
• Scalable Shoulder-Surfing Resistant Textual-Graphical Password
Authentication Scheme (S3PAS) seamlessly integrates both graphical
and textual password schemes and provides nearly perfect resistant to
shoulder-surfing.

4. Aim and Objective of the project
 Aim of the project
To increase security level in authentication of user, using
Textual Graphical password.
 Objectives
◦ Developing Central server
◦ Textual – Graphical authentication module.
◦ Database interface

5. Existing system Disadvantages.
•Shoulder surfing attacks.
•Hidden camera and spyware attacks.
•Brute-force attacks.
•Phishing attacks.

6. Proposed System
 S3PAS seamlessly integrates both graphical and textual
password schemes.
 we will describe a simple and efficient shoulder surfing resistant
graphical password scheme based on texts. The alphabet used in
the propose scheme contains 64 characters, including 26 upper
case letters, 26 lower case letters, 10 decimal digits, and symbols
“.” and “/”.

7. Proposed System Advantages
 Shoulder surfing resistance.
 Flexibility: It can be easily integrated with other
authentication systems.
 The system is easy to learn for users.
 Without using any physical keyboard or on-screen
keyboard user login into system.

8. WHAT IS A S3PAS?
 S3PAS is designed to be used in client/server environments as
most password authentication systems. Note that, the S3PAS
system generates the login image locally and transmits the
image specification (e.g., the coordinates of every character or
icon in the image) instead of the entire image pixel-by-pixel
from clients to servers, which greatly reduces communication
overheads and authentication time.
 Textual – Graphical Password.

9. Client–server model
 A distributed application that partitions tasks or workloads between
the providers of a resource or service, called servers, and service
requesters, called clients.
 A server machine is a host that is running one or more server
programs which share their resources with clients.
 A client does not share any of its resources, but requests a server's
content or service function.

10. System Architecture Diagram
2nd S3PAS authentication
Server
1st stage username &
password
User
Database
User Inputs
Data collection
Proceed to Site

11. Applications
 To secure sensitive data and records of a business organization.
 In military for providing security to the data.
 Online banking security.

12. Conclusion
 S3PAS demonstrates desirable features of a secure authentication
system being immune to shoulder-surfing, hidden-camera, and
spyware attacks.
 S3PAS is scalable in that it seamlessly matches the conventional
text-based passwords and can accommodate various lengths of
textual passwords.

13. Thank You