Kaavya, Kamalini, Hemalatha and Dr.Sandra Johnson
Users mostly reuse their same personalized identification number (PIN) for multiple systems and in numerous sessions. Direct PIN entries are highly susceptible to shoulder-surfing attacks where the attackers can easily observe PIN entry with concealed cameras. Whereas, Indirect PIN entry methods acts as a countermeasures which are rarely deployed because they demand a complex intellectual activity workload for users. To achieve security and usability, practical indirect PIN entry method are used and they are called SteganoPIN. The human–machine interface of SteganoPIN consists of two numeric keypads which as a covered one and the other is the open one, these are designed physically to block shoulder surfing attacks. The two keypads: static and challenged (or) shuffled key pads; the challenged keypad can be seen only if the proximity sensor senses the user’s cup-shaped hand gesture. After locating the PIN in the keypad layout, through the covered keypad, a user generates a one-time PIN that can safely be entered in plain view of attackers. This enables the user to establish a secure transaction by means of a mobile application to the server by implementing the SteganoPIN method using invisible keypad and colorpin concepts that are based on independent PIN entry system (Standard PIN, SteganoPIN).
Steganograhy; shoulder-surfing attack; security; ATM;