Path Word: A Multimodal Password Entry Method for Ad-hoc Authentication Based on Digits' Shape and Smooth Pursuit Eye Movements

Almoctar Hassoumi (1) , Pourang Irani (2) , Vsevolod Peysakhovich (3) , Christophe Hurter (1)

1 ENAC - Ecole Nationale de l'Aviation Civile
2 University of Manitoba [Winnipeg]
3 ISAE-SUPAERO - Institut Supérieur de l'Aéronautique et de l'Espace

We present PathWord (PATH passWORD), a multimodal digit entry method for ad-hoc authentication based on known digits shape and user relative eye movements. PathWord is a touch-free, gaze-based input modality, which attempts to decrease shoulder surfing attacks when unlocking a system using PINs. The system uses a modified web camera to detect the user's eye. This enables suppressing direct touch, making it difficult for passer-bys to be aware of the input digits, thus reducing shoulder surfing and smudge attacks. In addition to showing high accuracy rates (Study 1: 87.1% successful entries) and strong confidentiality through detailed evaluations with 42 participants (Study 2), we demonstrate how PathWord considerably diminishes the potential of stolen passwords (on average 2.38% stolen passwords with PathWord vs. over 90% with traditional PIN screen). We show use-cases of PathWord and discuss its advantages over traditional input modalities. We envision PathWord as a method to foster confidence while unlocking a system through gaze gestures.

Mots clés: interaction; eye tracking; touch-free interaction; smooth pursuit

Domaines: Informatique [cs]; Interface homme-machine [cs.HC]

Almoctar Hassoumi, Pourang Irani, Vsevolod Peysakhovich, Christophe Hurter. Path Word: A Multimodal Password Entry Method for Ad-hoc Authentication Based on Digits' Shape and Smooth Pursuit Eye Movements. ICMI '18, 20th ACM International Conference on Multimodal Interaction, Oct 2018, Boulder, United States. pp.268-277, ⟨10.1145/3242969.3243008⟩. ⟨hal-01936330⟩