Geographic Hints for Passphrase Authentication
Geographic Hints for Passphrase Authentication
复制标题
密码验证的地理提示
DOI：
10.1109/pst47121.2019.8949033
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
Amirali Salehi
中科院分区：
文献类型：
--
作者：
Alaadin Addas;Julie Thorpe;Amirali Salehi
我们建议并研究使用地理提示来帮助记住密码式的身份验证秘密。地理提示是用户在创建密码短语时选择的地图位置，并在密码短语登录时作为提示向用户显示。我们实现了 GeoHints 系统，并在多会话用户研究 (n=38) 中分析地理提示如何影响密码式秘密的可用性和安全性。该研究涉及测试多个密码短语干扰 - 每个参与者被要求回忆 4 个不同的密码短语。我们的研究表明，虽然地理提示有望减少内存干扰，但 GeoHints（已实施）并不能产生可行的身份验证系统，因为选择密码后 7-11 天的登录成功率为 25%。我们分析了登录错误的根本原因，发现大多数都是由于不准确地回忆自由格式文本输入造成的。这一发现指出了改进系统设计的机会，我们提出了改进建议，我们相信这些改进将带来采用地理提示的可行系统。
We propose and study the use of geographic hints to aid memorability of passphrase-style authentication secrets. Geographic hints are map locations that are selected by the user at the time of passphrase creation, and shown to the user as a hint at the time of passphrase login. We implement the GeoHints system and analyze how geographic hints impact the usability and security of passphrase-style secrets in a multi-session user study (n=38). The study involved testing for multiple passphrase interference-each participant was asked to recall 4 distinct passphrases. Our study indicates that while geographic hints showed promise for reducing memory interference, GeoHints (as implemented) does not produce a viable authentication system, as the login success rate was 25% 7–11 days after passphrase selection. We analyze the root causes of login errors, finding that most were due to inexact recall of free-form text input. This finding points towards opportunities to improve the system design, and we suggest improvements that we believe will lead to viable systems that employ geographic hints.