
Google Map-Based Password Authentication Systems Using Tolerant Distance and Homomorphic Encryption
Google Map-Based Password Authentication Systems Using Tolerant Distance and Homomorphic Encryption
OUR PROPOSED PROJECT TITLE:
GeoCrypt: A Privacy-Preserving Location-Based Authentication and Secure Data Access System Using Paillier Homomorphic Encryption
IEEE BASE PAPER ABSTRACT:
Passwords are widely used for authentication in Internet applications. Recently, users tend to adopt graphical passwords instead of traditional alphanumeric passwords, since it is much easier for humans to remember images than verbal representations. However, the existing graphical password authentication systems generally suffer from three main issues. 1) It is required to remember and perform complicated operations during the registration/login phases, which significantly limits the systems’ usability; 2) The users’ passwords are simply stored as plaintexts in servers, and thus the security is compromised; 3) The users need to register/login to each server separately when they are applied in multi-server environment. To address the above issues, we propose a user-friendly and secure Google map-based graphical password (FS-GMGP) system using tolerant distance and homomorphic encryption. By using a homomorphic encryption scheme, each user encrypts his password point and response point selected on Google map, while the servers compute and decrypt the distance between the two encrypted points and then compare the resulting value with a tolerant distance for authentication. Moreover, the FS-GMGP system is extended for multi-server environment. The evaluation results and security analysis show that the FS-GMGP and its extended version achieve desirable usability and security in single-server environment and multi-server environment, respectively.
PROJECT OUTPUT VIDEO:
OUR PROPOSED PROJECT ABSTRACT:
The rapid growth of digital services and cloud-based applications has significantly increased the demand for secure and user-friendly authentication mechanisms. Traditional password-based systems are highly vulnerable to attacks such as brute force, phishing, and credential theft, making them insufficient for modern security requirements. To address these challenges, alternative authentication approaches that enhance security while maintaining usability are essential. Location-based authentication has emerged as a promising solution, where geographical coordinates act as a unique credential. However, directly storing or transmitting location data raises serious privacy concerns, as sensitive user information may be exposed to unauthorized entities.
The need for a privacy-preserving authentication mechanism is therefore critical, especially in applications where both security and confidentiality are paramount. Existing location-based systems often rely on plaintext storage or simple matching techniques, which are susceptible to data breaches and reverse engineering. Additionally, secure access to user data, such as personal files, requires robust mechanisms that ensure only authorized users can retrieve their information. This creates a demand for an integrated system that not only authenticates users securely using their location but also protects their data through advanced cryptographic techniques.
To address these issues, this project presents “GeoCrypt: A Privacy-Preserving Location-Based Authentication and Secure Data Access System Using Paillier Homomorphic Encryption.” The system is developed using Java as the core programming language, with JSP, CSS, and JavaScript forming the frontend, and MySQL as the backend database. In this system, users register by selecting a specific location on an interactive map, which is then converted into latitude and longitude coordinates. These coordinates are scaled and encrypted using the Paillier Homomorphic Encryption algorithm before being stored in the database, ensuring that sensitive location data is never stored in plaintext.
During the authentication process, the user provides their spatial coordinates through the map interface. Instead of directly comparing plaintext values, the system performs homomorphic operations on encrypted data, enabling secure distance-based verification without decrypting the stored coordinates. A tolerance threshold is applied to account for minor variations in user input, thereby improving usability while maintaining security. The system also incorporates additional security features such as login attempt tracking, account locking after multiple failed attempts, and IP address logging for audit purposes.
Beyond authentication, the proposed system includes a secure file management module that allows authenticated users to upload and download files. Access control mechanisms ensure that only the rightful owner can access their data, thereby enhancing confidentiality and integrity. Overall, the GeoCrypt system offers a robust, scalable, and privacy-preserving solution that integrates location-based authentication with advanced cryptographic techniques, making it highly suitable for modern secure web applications.
SYSTEM REQUIREMENTS:
HARDWARE REQUIREMENTS:
- System : Pentium i3 Processor.
- Hard Disk : 20 GB.
- Monitor : 15’’ LED.
- Input Devices : Keyboard, Mouse.
- Ram : 8 GB.
SOFTWARE REQUIREMENTS:
- Operating system : Windows 10/11.
- Coding Language : Java.
- Frontend : JSP, CSS, JavaScript.
- JDK Version : JDK 23.0.1.
- IDE Tool : Apache Netbeans IDE 24.
- Tomcat Server Version : Apache Tomcat 9.0.84
- Database : MYSQL 8.0.
REFERENCE:
Zhili Zhou, Ching-Nung Yang, Shaowei Wang, Guoshun Nan, Stelvio Cimato, Yifeng Zheng and Qian Wang, “Google Map-Based Password Authentication Systems Using Tolerant Distance and Homomorphic Encryption”, IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING, VOL. 22, NO. 5, SEPTEMBER/OCTOBER 2025.



