University of Surrey

Test tubes in the lab Research in the ATI Dance Research

Cryptanalysis of the convex hull click human identification protocol

Asghar, HJ, Pieprzyk, J, Li, S and Wang, H (2013) Cryptanalysis of the convex hull click human identification protocol International Journal of Information Security, 12 (2). pp. 83-96.

[img]
Preview
PDF (licence)
SRI_deposit_agreement.pdf

Download (33kB)
[img]
Preview
PDF
IJIS2013.pdf
Available under License : See the attached licence file.

Download (1MB)

Abstract

Recently, a convex hull-based human identification protocol was proposed by Sobrado and Birget, whose steps can be performed by humans without additional aid. The main part of the protocol involves the user mentally forming a convex hull of secret icons in a set of graphical icons and then clicking randomly within this convex hull. While some rudimentary security issues of this protocol have been discussed, a comprehensive security analysis has been lacking. In this paper, we analyze the security of this convex hull-based protocol. In particular, we show two probabilistic attacks that reveal the user's secret after the observation of only a handful of authentication sessions. These attacks can be efficiently implemented as their time and space complexities are considerably less than brute force attack. We show that while the first attack can be mitigated through appropriately chosen values of system parameters, the second attack succeeds with a non-negligible probability even with large system parameter values that cross the threshold of usability. © 2012 Springer-Verlag Berlin Heidelberg.

Item Type: Article
Divisions : Faculty of Engineering and Physical Sciences > Computing Science
Authors :
AuthorsEmailORCID
Asghar, HJUNSPECIFIEDUNSPECIFIED
Pieprzyk, JUNSPECIFIEDUNSPECIFIED
Li, SUNSPECIFIEDUNSPECIFIED
Wang, HUNSPECIFIEDUNSPECIFIED
Date : 1 April 2013
Identification Number : 10.1007/s10207-012-0161-x
Related URLs :
Additional Information : The original publication is available at http://www.springerlink.com
Depositing User : Symplectic Elements
Date Deposited : 10 Jul 2013 11:18
Last Modified : 09 Jun 2014 13:11
URI: http://epubs.surrey.ac.uk/id/eprint/775709

Actions (login required)

View Item View Item

Downloads

Downloads per month over past year


Information about this web site

© The University of Surrey, Guildford, Surrey, GU2 7XH, United Kingdom.
+44 (0)1483 300800