Love and Authentication

Love and Authentication (2008)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Markus Jakobsson , Erik Stolterman , Susanne Wetzel , Liu Yang

Venue:	In CHI ’08: Proceeding of the twenty-sixth annual SIGCHI conference on Human factors in computing systems
Citations:	17 - 1 self

BibTeX

@INPROCEEDINGS{Jakobsson08loveand,
    author = {Markus Jakobsson and Erik Stolterman and Susanne Wetzel and Liu Yang},
    title = {Love and Authentication},
    booktitle = {In CHI ’08: Proceeding of the twenty-sixth annual SIGCHI conference on Human factors in computing systems},
    year = {2008},
    pages = {197--200},
    publisher = {ACM}
}

OpenURL

Abstract

Passwords are ubiquitous, and users and service providers alike rely on them for their security. However, good passwords may sometimes be hard to remember. For years, security practitioners have battled with the dilemma of how to authenticate people who have forgotten their passwords. Existing approaches suffer from high false positive and false negative rates, where the former is often due to low entropy or public availability of information, whereas the latter often is due to unclear or changing answers, or ambiguous or fault prone entry of the same. Good security questions should be based on long-lived personal preferences and knowledge, and avoid publicly available information. We show that many of the questions used by online matchmaking services are suitable as security questions. We first describe a new user interface approach suitable to such security questions that is offering a reduced risks of incorrect entry. We then detail the findings of experiments aimed at quantifying the security of our proposed method.

Keyphrases

security question service provider security practitioner false negative rate long-lived personal preference new user interface approach available information public availability online matchmaking service fault prone entry good security question reduced risk good password incorrect entry low entropy