International Journal on Recent and Innovation Trends in Computing and Communication

Volume: 3 Issue: 7

ISSN: 2321-8169
4617 - 4620

_______________________________________________________________________________________________

A Novel method for user authentication by CaRP And Login History

Reshma J Chavan

Prof. M. D. Ingle.

ME Computer Student
Department of Computer Engineering
JSCOE PUNE
Pune, India
chavan2reshma@gmail.com

Assistant Professor
Department of Computer Engineering
JSCOE PUNE
Pune, India
ingale.madhav@gmail.com

Abstract:- Cyber security is the main challenge nowadays. Many authentication techniques are available for these, for unwanted access for more
secure data is prohibited. Graphical and text password are used for user authentication process. Sometimes text passwords are not secured and
graphical password are more secure but vulnerable to shoulders surfing attack. The click event on various points for user friend-lines and
protection from various security attacks. In system, login history image file combined CaRP for user authentication to enhancing the more
security level primitives .The image file contain details of login and logout for date, time all related information. The file is encrypted by DES
algorithm and send that file on mail. It is higher security primitives for the user. online guessing attack, relay attacks and if combined with dual
technology for shoulder surfing attack are new concepts are available.
Keywords:- Captcha, brute force attack, Authentication, Graphical Password, images, security, dictionary attack..Login History

__________________________________________________*****_________________________________________________
I. INTRODUCTION
To overcome drawbacks such as security and usability
in text password new graphical password [2] scheme is
implemented. A tentative of graphical password schemes have
been nominated, to improved password memorability, for
aceesabilty against gusseting a password improved strength of
password. Graphical password work like knowledge based
password for user.
In text passwords involve alphanumeric [10], special
keyboard characters. The main concept for graphical
passwords is to grasps human memory for visual information
and use some secrete for making images or sketches For
example user can recognize the people which the user can
know from thousands of faces. This fact was implemented for
an authentication system of user. A large number of graphical
password schemes have proposed. They can be divided into
three grouped to for the function.
The main principle that recalling graphical password is
easy than artificial words. Visual objects used as passwords.
User click on sequence of points on image to create a
password. image is enlarge and complex to better resolution
The paper covers the authentication system for use using
graphical password scheme. There are chances of attacks on
graphical password also so to overcome this new technique
introduced login history .The user provides correct login
history image file for authentication providing security against
Various types of attacks.
For user authentication CaRP password used, instead of
text based password. Auser enters into the environment then
user enter the userID after that system generate the image, user
click on particular image and generating click event, if the
click events matches with the system database then user
authentication successful otherwise its fail.

II. BACKGROUND AND RELATED WORK

The main principle for graphical passwords is the
hypothesis that people are better for remembering a images
than words. Visual objects provide a much larger set of usable
passwords. For example user can identify the people which he
knows from thousands of faces. This concept was used to
implement an authentication system for user. As another
example, by choosing sequence of points for image password.
it provides maximum possibilities for user, for the good
resolution image is larger and complex.
Traditional approach for enhancing the graphical
password aim to making password harder to guess. Password
can get attack by a brute force attack. Automatic guessing
attacks and human guessing attacks these methods are used.
DAS [11]does offer a theoretical space comparable
with text passwords, but the possibility that users will prefer
predictable passwords such as symmetric passwords with few
strokes suggests that, the effective space will be considerably
smaller for text passwords,. Similarly, while a key motivation
for DAS was the superior memoability associated with images,
the lack of suitable user studies leaves as an open question
how effectively this can be leveraged in graphical
authentication scheme. Gao, X. Liu, S.Wang, and R. Dai
proposed a graphical captcha scheme with combination of
Captcha for strong resistance to spyware. It is time consuming
process. Graphical password [2] requires advance deployment
than simple captcha.
J. Thorpe and P. C. van Oorschot studied for
discovering new technique which captures arc in both
horizontal and vertical directions. It is less secured. [3].D.
Weinshall studied cognitive authentication scheme to protect
againstbroute force attack for secure authentication process. It
is another longer method [4] for security primitives. S.
Wiedenbeck, studied for cued recall, for making a password
user clicks a sequence of points on image. user reclicks on
same pattern For authentication. But the scheme can be broken
by guessing attack. [5]
4617

IJRITCC | July 2015, Available @ http://www.ijritcc.org

_______________________________________________________________________________________

International Journal on Recent and Innovation Trends in Computing and Communication

Volume: 3 Issue: 7

ISSN: 2321-8169
4617 - 4620

_______________________________________________________________________________________________
III.

PROPOSED SYSTEM

Problem definition-CaRP schemes is click based

graphical password .In a proposed method, to overcome
drawback of security attack on CaRP we proposed a
combination of login history file and CaRP techniques It
enhances the security level for the user during the
authentication.:
IV.

ARCHITECTURE OF PROPOSE WORK

The overall proposed system is in fig 1 .For every new user

first step is registration. Then all the information of the new
registered user is stored to database and login history file is
generated .That login history encrypted file is required When
the user login again into system, When file match .Next step it
will generate AnimalGrid,if the pattern matched then login
session is provide to authenticate user After that user has to
login again, then application request process.
The system architecture is shown in fig.1;

A. Login History Image File

In this process, attributes will select like date time. In second
phase attribute will encrypt and will use for next login. During
login user will decrypt the file and user will login. Here we
can use DES algorithm for encryption and decryption of
login history image file
Algorithms of DES are used as follows:
Encrypts blocks of size 64 bits.
Uses a key of size 56 bits.
Symmetric cipher: apply same key for encryption and
decryption
Apply 16 rounds which all perform the identical
operation
Separate subkey in each round derived from main
key
B.Uploding and Downloading file
When user login into the system if user want to performed
uploading or downloading operation from system then access
is provided to the user with captcha image authorization which
takes place at registration process.
VII.

RESULTS

In this module for new user do the Registration. User gives all
required parameters and specific animal-grid pattern for CaRP.
This is shown in following fig.

Fig.1 System architecture of proposed system.

V.

MATHEMATICAL MODEL

Let system S
S={R, L, Cp, IP, Agird, LH}
Save login history
LH= {U, Date, time}
I={File of login history detail}
I_Encrypt=Encrypted file send to users mail account
I_Encrypt={IE1, IE2, .IEn}
I_Decrypt=decrypted file at time of login
I_Decrypt={ID1, ID2,. IDn}
R=Registration Process LH, AGrid
User name U= {a, b, c..n}
If, I_ Encrypt=I_ Decrypt
Where, Cp generated by user click point on
Agrid={Cp1,Cp2 . Cpn}
then, select particular pattern for Agrid , where
If all condition true
Then login successful
Else Login fail.
VI.

A. Registration for new user :

This is main GUI

IMPLEMENTATION STRATEGY

Following technique and algorithm are used for

implementation of proposed system.

Fig.2 Registration for new user

B. User Login
Firstly user filling login details register him by .Then
multiple users can do registration. Here authentication of user
takes place by using animal-grid pattern and login history file.
C. Login history image and Animal-Grid pattern Match
selection for authentication
For authentication, user should select particular login
history file at which created at previous login seesion.If user
forgot than file it should be available on user mail. For access
4618

IJRITCC | July 2015, Available @ http://www.ijritcc.org

_______________________________________________________________________________________

International Journal on Recent and Innovation Trends in Computing and Communication

Volume: 3 Issue: 7

ISSN: 2321-8169
4617 - 4620

_______________________________________________________________________________________________
to user account animal-grid pattern should be matched for
enhancing security under CaRP scheme.
F. Login History file Matched and Animal-Grid pattern
Matched
If both conditions is matched the access is granted to
user.

Fig. 6. File uploads successfully if captcha login image is

matched
Fig.3. User Login with login history file

VIII.

CONCLUSION

Graphical password is used for picture password

authentication system.For authentication process helps to store
information particular user in the form of image chooses by
the user. User will click on different points on same image
over different Image. Login history and Click based graphical
password scheme provide protection against online dictionary
attacks and relay on passwords that will be threats for
security in online system.
ACKNOWLEDGMENT

Fig.4 Login History file Matched and Animal-Grid pattern

Matched

I like to acknowledge my vigorous thanks to Prof. M.D.Ingale

for providing giving suggestions which helped me a lot in my
research work and I also want to thanks our friends and
classmates for helping me in this research work by giving me
there timely suggestions and feedbacks on my research work.
REFERENCES

Fig.5 Uploading a file

[1] [1] Bin B. Zhu, Jeff Yan, Guanbo Bao, Maowei Yang, and
Ning Xu, Captcha as Graphical passwords- A New Security
Primitive Based on Hard AI Problems, IEEE transactions
On Information Forensics and Security, Vol.
9, No. 6, June 2014.
[2] H. Gao, X. Liu, S.Wang, and R. Dai, A new graphical
password scheme against spyware by using CAPTCHA, in
Proc. Symp. Usable Privacy Security, 2009
[3] J. Thorpe and P. C. van Oorschot, Human-seeded attacks
and exploiting hot spots in graphical passwords, in Proc.
USENIX Security, 2007.
[4] D. Weinshall, Cognitive authentication schemes safe
against spyware, in Proc. IEEE Symp. Security Privacy,
May 2006.
[5] S. Wiedenbeck, J. Waters, J. C. Birget, A. Brodskiy, and N.
Memon, PassPoints: Design and longitudinal evaluation of
a graphical password system, Int. J. HCI, vol. 63, pp.
102127, Jul. 2005.
4619

IJRITCC | July 2015, Available @ http://www.ijritcc.org

_______________________________________________________________________________________

International Journal on Recent and Innovation Trends in Computing and Communication

Volume: 3 Issue: 7

ISSN: 2321-8169
4617 - 4620

_______________________________________________________________________________________________
[6] S. Chiasson, P. C. van Oorschot, and R. Biddle, Graphical
password authentication using cued click points, in Proc.
ESORICS, 2007.
[7] I. Jermyn, A. Mayer, F. Monrose, M. Reiter, and A. Rubin,
The design and analysis of graphical passwords, in Proc.
8th USENIX Security Symp., 1999.
[8] R. Dhamija and A. Perrig, Dj Vu: A user study using
images for authentication, in Proc. 9th USENIX Security,
2000.
[9] (2012, Feb.). The Science behind Passfaces [Online].
Available:http://www.realuser.com/published/ScienceBehin
dPassfaces.pdf
[10] A. E. Dirik, N. Memon, and J.-C. Birget, modeling user
choice in the passpoints graphical password scheme, in
Proc. Symp. Usable Privacy Security, 2007
[11] I. Jermyn, A. Mayer, F. Monrose, M. Reiter, and A. Rubin,
The design and analysis of graphical passwords, in Proc.
8th USENIX Security Symp. 1999

4620
IJRITCC | July 2015, Available @ http://www.ijritcc.org

_______________________________________________________________________________________