PassShapes: utilizing stroke based authentication to increase password memorability
PassShapes: utilizing stroke based authentication to increase password memorability
复制标题
DOI：
10.1145/1463160.1463202
复制
发表时间：
2008-10
期刊：
影响因子：
--
通讯作者：
R. Weiss;A. D. Luca
中科院分区：
文献类型：
--
作者：
R. Weiss;A. D. Luca
如今的身份验证主要依赖于密码或个人识别码(PIN)。因此，普通用户必须记住越来越多的PIN和密码。不幸的是，人类记忆抽象字母数字序列的能力有限。因此，许多人要么忘记它们，要么使用非常简单的工具，这意味着几个安全风险。在这项工作中，提出了一种新的认证方法PassShape。在这个系统中，用户通过绘制由八种不同笔画的任意组合构成的简单几何形状来向计算机系统认证自己。我们认为，使用这种形状将允许更复杂的身份验证令牌，因此更安全，认知负荷更低，可记忆性更高。为了证明这些假设，进行了两项用户研究。记忆性评估表明，当用户多次练习PassShape时，PassShape概念能够增加记忆性。随着时间的推移，这种影响甚至还在增加。此外，还实现了一个原型来进行可用性研究。这两项研究的结果都表明，PassShape方法能够提供一种可用的和令人难忘的身份验证方法。
Authentication today mostly relies on passwords or personal identification numbers (PINs). Therefore the average user has to remember an increasing amount of PINs and passwords. Unfortunately, humans have limited capabilities for remembering abstract alphanumeric sequences. Thus, many people either forget them or use very simple ones, which implies several security risks. In this work, a novel authentication method called PassShapes is presented. In this system users authenticate themselves to a computing system by drawing simple geometric shapes constructed of an arbitrary combination of eight different strokes. We argue that using such shapes will allow more complex and thus more secure authentication tokens with a lower cognitive load and higher memorability. To prove these assumptions, two user studies have been conducted. The memorability evaluation showed that the PassShapes concept is able to increase the memorability when users can practice the PassShapes several times. This effect is even increasing over time. Additionally, a prototype was implemented to conduct a usability study. The results of both studies indicate that the PassShapes approach is able to provide a usable and memorable authentication method.