IoTGazePass: A New Password Scheme for IoT Applications

Authentication is one of the most important security aspects to protect user privacy in computers, internet environments and IoT applications. In this regard, the traditional textual-based password type is the most common means of authentication. However, this type of passwords has many disadvantages such as the hardness of remembering for the powerful passwords and easiness of guessing and cracking for the weak passwords. Moreover, it is also vulnerable to brute force, dictionary attacks and social engineering. Another possible alternative to the textual-based password is the graphical-based password. This type of passwords is partly driven by the fact that humans are able to remember and recognize images and colors better than texts. However, such type of passwords is more vulnerable to shoulder surfing attacks. In order to tackle the weaknesses of existing types of passwords, this paper proposes a new password scheme called IoTGazePass scheme, which is intended to be suitable for IoT applications, taking into the account that the new password must be very easy to remember, very difficult to guess, quicker for accessing and consumes minimum resources, as well as it should be random and changeable.