PursuitPass: A Visual Pursuit-Based User Authentication System

As our lives get more deeply submerged in digital format, ubiquitous access to sensitive data requires more secure and efficient user authentication procedures. Methods that solely relied on password entry were lately enhanced with the use of biometrics. Yet, these techniques can still be tricked by, for example, recordings of the face, voice, and fingerprint cloning. In this paper we introduce PursuitPass, a compact, robust, and efficient visual pursuit-based authentication system. PursuitPass is a user calibration-free method that requires the user to enter a password by visually pursuing moving targets on a small screen, such as a public ATM or a personal mobile phone. Because eye movements are used as input, passwords are better protected against shoulder surfing. Also, since targets can potentially move in unpredictable ways, it naturally imposes a liveness feature that cannot be counterfeited by recordings of the eyes. We investigated four pattern-matching algorithms to match visual pursuit user data with the movement of the targets. Two experiments were conducted. The first experiment aimed to define the best performing matching algorithm and configuration for PursuitPass. The second experiment aimed to evaluate the performance of our prototype. PursuitPass achieved a 96.82% accuracy with an average time of 10.42 s on a series of 4-digit PIN entry trials. (AU)