1. A Seminar Presentation
on
3-D Secure Password
Jaiprakash
(113013000010)
Institute of Engineering and Technology
Bhagwant University
Ajmer
4/23/2015 13-D Secure Password
2. PRESENTATION OUTLINE
• Introduction
• Three Factors of Authentication
• Existing Authentication Techniques
• Drawbacks of Existing Authentication Schemes
• 3D Password Scheme
• 3D Password Selection
• Advantages of 3D Passwords
• Applications of 3D Passwords
• Attacks and Countermeasures
• Conclusion
4/23/2015 23-D Secure Password
3. INTRODUCTION
•Authentication is any protocol or process that permits
one entity to establish the identity of another entity.
•In other words, authentication is the process of
determining whether someone or something is, in fact,
who or what it is declared to be.
4/23/2015 33-D Secure Password
4. THREE FACTORS OF AUTHENTICATION
•Knowledge Based: Something you know like
PASSWORD, PIN
•Token Based: Something you possess like
•KEYS, PASSPORT, SMART CARD
•Biometrics: Something you are like
•FINGERPRINT, FACE, IRIS
4/23/2015 43-D Secure Password
6. DRAWBACKS OF EXISTING AUTHENTICATION
SCHEMES
Drawbacks of Textual Passwords
•Textual Passwords should be easy to remember, but at
the same time, difficult to guess.
•Full password space for 8 characters, consisting of both
numbers and characters, is 2*(10^14).
•A research showed that 25% of the passwords out of
15,000 users could be guessed correctly using brute
force dictionary.
Continue..4/23/2015 63-D Secure Password
7. DRAWBACKS OF GRAPHICAL
PASSWORDS
•Graphical Passwords can be easily recorded as these
schemes take a long time.
•The main drawback of using biometric is its
intrusiveness upon a user's personal characteristics
which are liable to change under certain situations.
For example, a bruised finger will lead to an
inconsistency in fingerprint pattern.
•They require special scanning device to authenticate the
user which is not acceptable for remote and internet
users.
4/23/2015 73-D Secure Password
8. 3D PASSWORD SCHEME
•The 3D password can combine the existing
authentication schemes such as textual passwords,
graphical passwords, and various types of biometrics into
a 3D virtual environment. The design of the 3D virtual
environment and the type of objects selected determine
the 3D password key space.
4/23/2015 83-D Secure Password
9. 3D PASSWORD SELECTION
•A fingerprint reader that requires the user’s fingerprint.
•A biometrical recognition device.
•A paper or white board that a user can write, sign, or
draw on.
•An automated teller machine (ATM) that requires a
token.
4/23/2015 93-D Secure Password
10. ADVANTAGES OF 3D PASSWORDS
• Flexibility: 3D Passwords allow Multifactor
Authentication.
• Strength: This scenario provides almost unlimited
possibilities of Passwords.
• Easy to memorize: Can be remembered in the form of
a short story.
• Respect of Privacy: Organizers can select
authentication schemes that respect the privacy of the
users.
4/23/2015 103-D Secure Password
11. APPLICATIONS OF 3D PASSWORDS
•Servers: Many large organizations have critical
servers that require very high security but are usually
protected by a textual password. A 3D password
authentication proposes a sound replacement for a
textual password. so, it can be used to protect the
entrance to such locations as well as protect the usage of
such servers.
•Nuclear and military facilities: Such facilities should
be protected by the most powerful authentication 3D
password systems.
•ATMs, Desktop and Laptop Logins, Web Authentication etc.
4/23/2015 113-D Secure Password
12. ATTACKS AND COUNTERMEASURES
•Brute Force Attack: This attack is very difficult because:
It is very time consuming. Attack is highly expensive
•Well Studied Attack: This attack is difficult because the
attacker has to perform customized attack for different
virtual environments.
•Shoulder Surfing Attack: This attack is comparatively
more successful because the attacker uses camera to
record the 3D Passwords of the users.
4/23/2015 123-D Secure Password
13. CONCLUSION
•3D Password improves authentication.
•It is difficult to crack as there are no fixed number of
steps or particular procedure.
•Added with biometrics and token verification, this
schema becomes almost unbreakable.
4/23/2015 133-D Secure Password
