IEEE Consumer Electronics Magazine - January/February 2022 - 28

AI-Driven Security Solutions for the Internet of Everything
Registration Phase
First, the user chooses a username. The user
Figure 2. Sample pattern and its smudge showing
connecting nodes of pattern.
formula to login into a system. OP-Grid consists
of a graphical pad enclosed in a matrix of 7 11
grid with an image at the background that
changes every time the module is called. Figure 3
shows the proposed OP-Grid. The creation of the
resultant pattern is done by applying mathematical
operations of addition and subtraction
between the numbers selected by the user at the
time of registration and the numbers given by
the server.
OP-Grid is composed of the three components,
i.e., login pointer (LP), password verifier,
and feature evaluation. Every time when the
user enters a username, an LP will appear, which
shows one of the user's chosen alphabet and
two random numbers between 1 and 5. Any communication
between the user and system for
authentication is protected by secure socket
layer protocol and, thus, is safe from being intercepted.
The user processes the formula and
draws the pattern accordingly to get authenticated.
The password verifier module authenticates
the user only if the result of the arithmetic
operation is correctly aligned with the resultant
pattern drew by the user. The details of OP-Grid
are explained in the next section.
selects two alphabets that are called processalphabets
(PA). The selected PA will hide the
mathematical operation, the first letter will hide
the addition operation and the second letter will
hide the subtraction operation. The user also
selects two numbers between 1 and 5, called process-codes
(PC). PAs and PCs are used every
time to generate a new password pattern by calculating
them with LP numbers.
Working example: Assume that the username
is Ali, PA is A, B and PC is (2,4). Alphabets of
PA will be used to perform the mathematical
operations of addition and subtraction, i.e.,
A ! addition, and B ! subtraction.
Authentication Phase
The user enters the username that was created
at the time of the registration phase. An LP
comprises one letter from user's chosen PA and
two random numbers between 1 and 6 will be
shown. PA letter hides the mathematical operation.
To provide a shield against shoulder-surfing
attack, the LP will be displayed to the user
when user touches the screen of smartphones
and will disappear when the hand leaves the
screen. User will perform that mathematical
operation, which is hidden in the LP of PA displayed
letter, i.e., either addition or subtraction,
between the digits of user-selected PC and the
digits of LP. User will get two numbers after performing
the arithmetic operation, for example, it
is 3 and 5. OP-Grid image of 7 11 grid will be
shown; the user will draw a pattern from the
third column to fifth row, i.e., opposite L-shape
pattern. The pattern drawn by the user will be
checked by the password verifier. User will be
authenticated if the pattern drawn by the user is
verified by the password verifier module and
his/her behavioral features match with the
behaviors in the feature extraction module. The
server will display such PA's and PC's whose
processed results will eventually be able to be
inserted into the OP-Grid of 7 11.
Working Example: Let us suppose that at
Figure 3. Visual way of LP and numbers of the
horizontal and vertical bars generated randomly on
every login to prevent shoulder surfing, guessing
attack, and smudge attack.
28
the time of registration, user chooses Ali as a
username, B and C as his PA's and 4,5 as his
PC's. To login, the user enters his username,
upon screen touch LP will be shown, which
IEEE Consumer Electronics Magazine
IEEE Consumer Electronics Magazine - January/February 2022

Table of Contents for the Digital Edition of IEEE Consumer Electronics Magazine - January/February 2022
