Roman V. Yampolskiy

Multitouch Draw a Secret: an Implementation of a Multi-touch Draw-a-secret Password Schema for Windows-based Computers Roman V. Yampolskiy

Draw A Secret password systems have recently come into vogue, primarily in the role of protecting a user?s cellular smart phone from external infiltration in lieu of a password. However, these password systems are only enabled for single touch operation; that is to say, a user may only draw one pattern, with only one finger. Brute forcing these passwords thereby becomes trivial in the context of password complexity. This thesis implements a Draw A Secret system utilizing consumer-grade video hardware to collate multiple patterns synchronously and then authenticate the user at a later point. Care has been given to properly encrypt the results to prevent a malicious third party from infiltrating the authentication stream from a file system perspective.