On screen randomized blank keyboard

Online banking has become increasingly popular globally because it is so easy and convenient for internet users to manage their bank accounts from anywhere of the world at any time. The internet enhanced the user experience of banking activities dramatically. Online banking users' faces a wide range of security risks such brute force attacks, key logging attacks, shoulder surfing attacks, etc. The design of secure authentication protocols is quite challenging, considering that various kinds of root kits reside in PCs to observe the users behavior and to make PCs untrusted devices. Involving human in authentication protocols is not easy because of their limited capability of computation and memorization. Therefore relying on users to enhance security will degrades the usability. On the other hand relaxing assumptions and vigorous security design to improve the user experience can lead to security breaches that can harm the users trust. In this paper, a password based visual authentication protocol using random blank keyboard with some special symbols associated with each character is proposed. Using this new keyboard, users can enter their credentials. This is effective against the key logging attacks and shoulder surfing attacks by increasing the amount of short term memory required in an attack.