EAGER: The Game Changer: A New Model for Password Security

我们正在评估一种新的密码安全模型，在该模型中，用户将棋子放在游戏棋盘上(例如，棋子放在棋盘上)。现有系统要么令人难忘，要么安全，但不是两者兼而有之，这一事实激励了我们的方法。我们正在测试14-15岁的高中生，18-30岁的大学生和60-80岁的老年人，我们正在进行两种类型的实验。首先，我们正在测量所有组对两个和四个游戏棋子的密码的记忆(在20分钟的充满延迟之后)。其次，我们正在测试大学生对五个不同密码的记忆，测试时间为12周，游戏在第10周后会发生变化。测试结果有望揭示出一种比现有系统更好的身份验证方法。更具体地说，参与者需要创建他们可以记住的唯一密码。此外，随着密码开始相互干扰，前10周的性能预计会下降，一旦游戏发生变化，他们能够使用新类型的内存，性能将在最后两周大幅上升。我们将在社会科学和计算机安全会议上展示这些成果，并提交给社会学、心理学和安全期刊发表。我们的方法提供了一个根本性的突破，它在数学上是安全的，而且很容易记住。该模式适用于广泛的电子平台，包括智能手机、电脑、自动取款机等高风险电子网关。因此，使用更安全的系统造福社会的潜力应该会产生巨大的影响。

We are evaluating a new model of password security in which users place pieces on a game board (e.g., chess pieces on a chessboard). The fact that existing systems are either memorable or secure, but not both, motivated our approach. We are testing 14-15 year old high school students, college students 18-30, and older adults 60-80, and we are conducting two types of experiments. First, we are measuring all groups' memories for passwords of two and four game pieces (after a 20-minute filled delay). Second, we are testing college students' memories for five different passwords over a 12-week period in which the game changes after week 10. The results are expected to reveal a dramatically better authentication method compared to existing systems. More specifically, participants are expected to create unique passwords that they can remember. Furthermore, performance is expected to decline during the first 10 weeks, as their passwords begin to interfere with one another, and increase dramatically during the final two weeks, once the game changes and they are able to use a new type of memory. We will present the results at social science and computer security conferences, and submit for publication to sociology, psychology, and security journals. Our approach offers a radical breakthrough that is mathematically secure and easy to remember. The model is applicable to a wide range of electronic platforms, including smartphones, computers, ATMs, and other high-risk electronic gateways. Consequently, the potential to benefit society with more secure systems should have an enormous impact.