Design of the password-authenticated protocol based on mosaic image test

MosaHIP is the abbreviation of the Mosaic-based Human Interactive Proof. Unfortunately, it has some shortcomings. In this paper, we propose an improved MosaHIP algorithm which is used to generate mosaic image test and guarantee that it can prevent massive automated access to web resources. In addition, it is well known that password-based authentication protocol is vulnerable to dictionary attack. According to Yongzhong He and Zhen Han´s protocol, we propose a novel password-authenticated protocol based on mosaic image test, which increases punitive measures to malicious users. The protocol is able to effectively resist online dictionary attacks mounted by the automated program.