Graphical Password Authentication With Data Hiding

Project Overview

A multi-layer authentication and secure file sharing platform developed as a Final Year Engineering Project. The system combines traditional credential verification, DWT-based image authentication, graphical PIN validation, AES-encrypted file protection, and controlled file sharing workflows to strengthen user security and data privacy. The platform was designed to address common weaknesses in traditional password-based systems while providing a secure environment for encrypted file storage, sharing, and access management through a user-friendly web application.

Problem Statement

Traditional authentication systems rely heavily on text-based passwords, making them vulnerable to brute-force attacks, credential reuse, phishing attempts, shoulder-surfing, and database breaches. Additionally, many file-sharing platforms lack strong authentication mechanisms and advanced encryption controls, exposing sensitive information to unauthorized access. The challenge was to design a secure authentication framework that improves user verification while simultaneously protecting uploaded files through encryption and controlled access management.

Solution Approach

The proposed solution introduces a multi-layer authentication framework that combines traditional credentials with graphical security techniques. Users must successfully complete email-password verification, verification image validation through DWT-based matching, and graphical PIN authentication before gaining access to the system. Once authenticated, users can securely upload files that are automatically encrypted using AES. The platform also incorporates a request-based file-sharing workflow, ensuring that only approved users can access protected resources. By combining authentication, steganography, and encryption, the system delivers enhanced protection against unauthorized access and data exposure.

Architecture Overview

The application follows a modular Flask-based architecture composed of Authentication, Dashboard, File Sharing, AES Encryption, DWT Steganography, Security Monitoring, and Administration modules. User credentials, verification images, graphical PIN mappings, encrypted files, and access requests are managed through a centralized SQLite database. OpenCV and PyWavelets are utilized for image processing and DWT operations, while AES cryptography secures file storage and transfer workflows. The architecture supports secure authentication, encrypted data management, and controlled file access through an integrated web interface.

Tech Stack

Key Features

• Three-stage authentication using password verification, image validation, and graphical PIN matching.
• DWT-based steganography for secure verification image processing and authentication validation.
• AES encryption and decryption for uploaded files and shared resources.
• Secure file upload, approval-based sharing, and protected download workflows.
• User account management and profile administration.
• Request-based access control system for secure file sharing.
• Administrative monitoring of user activities and system operations.
• SQLite-powered backend for credential management, encrypted file storage, and authentication records.
• Secure dashboard for managing files, requests, and account information.
• Enhanced protection against unauthorized access, shoulder-surfing, and credential compromise.

Lessons Learned