Title:	PASSWORD CUEING WITH CUE(INK)BLOTS
Author(s):	Karen Renaud , Anthony Mcbryan , Paul Siebert
ISBN:	978-972-8924-63-8
Editors:	Yingcai Xiao and Eleonore ten Thij
Year:	2008
Edition:	Single
Keywords:	Authentication, cueing, visual perception, security.
Type:	Full Paper
First Page:	74
Last Page:	81
Language:	English
Cover:
Full Contents:	click to dowload
Paper Abstract:	People forget passwords daily, and this leads to frustration and potential loss of revenue commercially. Mechanisms for proving identity in the face of forgotten passwords are mostly unsatisfactory, because they are so insecure. The problem is that it is dificult to handle password replacements eficiently. One of two people could be requesting the replacement: the legitimate user or a potential intruder. Unfortunately, the system doesn’t have any way of knowing which it is. Some systems make an effort to confirm identity by using one or more challenge questions. The user provides the answers to these questions at enrolment, and the rationale is that if the requestor can provide the same answer later, it must be the same user. Of course this assumption is flawed because the answers could be discovered or known by an intruder. An alternative to challenge questions, explored in this paper, is the use of an abstract image to elicit a textual description. This description could be used as the password, or as an alternative to the challenge questions. We report on an experiment which tested images as cues.
	Go Back