21-09-2017, 12:56 PM
Current authentication systems suffer from many weaknesses. Textual passwords are commonly used; however, users do not follow their requirements. Users tend to choose meaningful dictionary words, which make text passwords easy to break and vulnerable to dictionary attacks or brute force attacks. Many graphic passwords available have a password space that is less than or equal to the textual password space. Smart cards or tokens can be stolen. Many biometric authentication has been proposed; however, users tend to resist the use of biometrics because of their intrusion and the effect on their privacy. In addition, biometrics can not be revoked. In this article, we present and evaluate our contribution, ie the 3-D password. The 3-D password is a multifactor authentication scheme. To be authenticated, we present a virtual environment in 3-D where the user navigates and interacts with several objects. The sequence of actions and interactions towards objects within the 3D environment builds the user's 3-D password. The three-dimensional password can combine most of the existing authentication schemes, such as textual passwords, graphical passwords, and various types of biometric data in a three-dimensional virtual environment. The three-dimensional virtual environment design and the type of objects selected determine the three-dimensional password key space.