Pict-Place Authentication: Recognition-based Graphical Password using Image Layout for Better Balance of Security and Operation Time

In this paper, we propose a novel recognition-based graphical authentication (RbGA) scheme, named "Pict-Place authentication" (PPA). RbGA was expected to improve the credential memorability issue of knowledge-based user authentication. However, RbGA has not been widely used owing to its low security and longer operation time. We therefore propose a new RbGA scheme to modify the credential input method in order to improve these issues. In PPA, the credential is input as a layout of multiple images. Based on this idea, we implemented a web-based prototype system and conducted evaluation experiments. The results indicate that PPA has the potential to reduce the operation time and improve theoretical security.