3dpassword11.pptx.......................

Ppt

1. 3-D PASSWORD SECURE AUTHENTICATION USING PRESENTED BY : ABHISHEK B LMC21CS005 GUIDED BY : Ms. ASHA AS Assistant Professor Dept of Computer Science And Engineering 1

2. Password Authentication Drawbacks of Existing Authentication Techniques Proposed System 3D password Virtual Environment Virtual Objects System Implementation Example State Diagram Programming languages Types of Attacks Advantages Disadvantages Applications References CONTENTS 2

3. A password is a string of characters used for authentication. Password is basically an encryption algorithms. It is 8-15 character or slightly more than that. PASSWORD 3

4. Authentication is a process of validating who are you claiming to be. Human authentication techniques are : Knowledge based (What you know) Token based (What you have) Biometrics (What you are) AUTHENTICATION 4

5. 1. KNOWLEDGE BASED ( Pin,Password,Pattern ) Easy to remember -> Easy to break Hard to guess -> Hard to remember (b) Vulnerable to attacks like brute force attacks etc. 2. TOKEN BASED( Keys,Smartcard ) (a) Duplicate keys, smart cards, ID proofs are easily available. 3. BIOMETRICS( Face,Iris,DNA ) exposure of retinas to IR rays. Hackers implement exact copy of your biometrics . DRAWBACKS OF existing AUTHENTICATION TECHNIQUES 5

6. The proposed system is a multi factor authentication scheme that combines the benefits of various authentication schemes. Users have the freedom to select whether the 3D password will be solely recall, biometrics, recognition, or token based, or a combination of two schemes or more. Therefore, to ensure high user acceptability, the user’s freedom of selection is important. Proposed system 6

7. 3-D PASSWORD The 3D password is a multifactor authentication scheme that combine KNOWLEDGE BASED + TOKEN BASED + BIOMETRICS in one authentication system. It presents a virtual or real environment containing various objects. The user walks through the environment and interacts with the objects. More customizable and very interesting way of authentication. 7

8. A virtual environment is a computer-based simulated environment. The 3D virtual environment consists of many items and objects. Each item has different responses to action. The user actions, interactions and inputs towards the objects or toward the 3D virtual environment creates the user’s 3D password. Communication between users can range from text, graphical icons, visual gesture, sound, voice command. VIRTUAL ENVIRONMENT 8

9. IMAGES OF ENVIRONMENT 9

10. VIRTUAL OBJECTS Virtual objects can be any objects we encounter in real life such as: A computer on which user can type. An ATM machine that requires a token (ATM card). A fingerprint reader that requires user fingerprints. A paper or white board on which user can write. A light that can be switched on/off. A television. A radio. A car that can be driven. A graphical password scheme. 10

11. SYSTEM IMPLEMENTATION Hardware Requirements: 1. 3D scanning technology (e.g., depth sensors, structured light scanners) 2. High-performance computing hardware 3. Advanced graphics processing units (GPUs) 4. Secure storage devices Software Requirements: 1. 3D modeling and rendering software 2. Biometric authentication software 3. Gesture recognition software 4. Machine learning algorithms 5. Secure authentication protocols 11

12. SYSTEM IMPLEMENTATION Implementation Steps: 1. User Enrollment: - Capture 3D scan of user's face, hand, or body. - Record gesture patterns. - Store 3D model and gesture data securely. 2. 3D Password Creation: - Use 3D modeling software to create a 3D password model. - Define gesture-based interactions. 3. Authentication Protocol: - Implement secure authentication protocols (e.g., SSL/TLS). - Integrate biometric authentication software. 12

13. SYSTEM IMPLEMENTATION 4. Gesture Recognition: - Develop gesture recognition algorithms. - Integrate with 3D password model. 5. 3D Password Verification: - Compare input gesture with stored 3D password model. - Verify the data. 13

14. EXAMPLE Let us consider a 3D virtual environment space of size G x G x G. The 3D environment space is represented by the coordinates (x,y,z) ϵ [1,…,G] x [1,…,G] x [1,…,G]. The objects are distributed in the 3D virtual environment with unique (x,y,z) coordinates. We assume that the user can navigate into the 3D virtual environment and interact with the objects using any input device such as a mouse, keyboard, fingerprint scanner, iris scanner, card readers, microphones, stylus, etc. 14

15. Let us consider a user who navigates through the 3D virtual environment that consists of an office and a meeting room. Let us assume that the user is in the virtual office and the user turns around the door located in (1,2,3) and opens it. Then, the user closes the door. The user then finds a computer to the left, which exists in the position (4,5,6), and the user types “ABC”. The initial representation of user actions in the 3D virtual environment can be recorded as follows: (1,2,3) action = open the office door (1,2,3) action = close the office door (4,5,6) action = typing “A” (4,5,6) action = typing “B” (4,5,6) action = typing “C” 15

16. STATE DIAGRAM Typical Textual Password Enter User Name Performing Graphical Password Moving Inside Virtual 3D Environment Performing Biometrics Changing Item Status Verifying Typing a letter or a number Clicks Access not granted Login password Access granted Specific key password Click on a graphical password item Specific key pressed Biometric item is checked Move object, Turn ON/OFF 16

17. C++ Java and Java3D .NET languages such as C# or Visual Basics Parrot virtual machine OpenGL library : (i) uses both graphics and CAD programs. (ii) supported on Windows, UNIX workstations, PCs, X-Box, Linux, etc. GLUT : OpenGL Utility Toolkit (i) library for using C++ and OpenGL Direct 3D : (i) supported only on Microsoft windows platforms and X-box. PROGRAMMING LANGUAGES 17

18. TYPES OF ATTACKS Brute Force Attack : A brute force attack is a trial-and-error method used to obtain information such as a user password or personal identification number (PIN).  The attack is difficult because: (i) Required time to login: Time required to login may vary from 20 seconds to 2 minutes. So, is time consuming. (ii) Cost of attack: Cost of creating 3D virtual environment is very high. 2 . Shoulder Suffering Attack: ( i ) An attacker uses a camera to record the password. (ii) 3D password contains biometric identifications, so are difficult to break. 18

19. 3. Timing Attack: (i) The attacker observes how long it takes a legitimate user to perform a correct sign-in using 3D password. (ii) Helps in determining length of password. (iii) Effective if the 3D virtual environment is designed correctly. 19

20. Provides high security. Flexible, as it provides multifactor authentication ,i.e., token based, knowledge based, biometrics. Provides infinite number of password possibilities. Can be memorized in form of short stories. Ease to change password anytime. Helps to keep lot of personal details. Due to the use of multiple schemes in one scheme password space is increased to great extent. ADVANTAGES OF 3d PASSWORD 20

21. Difficult for blind people to use this technology. A lot of program coding is required. Very expensive. Time and memory requirement is large. DISADVANTAGES OF 3d PASSWORD 21

22. Critical servers. Nuclear reactors and military facilities. Airplanes, jet fighters and missile guiding. A small virtual environment can be used in following areas: (i) ATM. (ii) Desktop computers and laptop logins. (iii) Web authentication. APPLICATIONS OF 3d PASSWORD 22

23. The authentication can be improved with 3D password, because the unauthorized person may not interact with same object at a particular location as the legitimate user. It is difficult to crack because it has no fixed number of steps and a particular procedure. Added with biometrics and token verification this scheme becomes almost unbreakable. CONCLUSION 23

24. REFERENCES [1].Sangeetha, & Ijmtst , Editor. (2022). Secure Authentication Using 3D Password. International Journal for Modern Trends in Science and Technology. 8. 176-179. 10.46501/IJMTST0802029. [2]. Fawaz Alsulaiman and Abdulmotaleb El Saddik “Three Dimensional Password for more Secure Authentication” , IEEETransactions on Instrumentations and Measurement. [3]. Tejal Kognule and Yugandhara Thumbre and Snehal Kognule,“3D password”, International Journal of Computer Applications(IJCA),2012. 24

25. THANK YOU 25