Cue-Pin-Select, a Secure and Usable Offline Password Scheme - Archive ouverte HAL Accéder directement au contenu
Pré-Publication, Document De Travail Année : 2018

Cue-Pin-Select, a Secure and Usable Offline Password Scheme

Résumé

People struggle to invent safe passwords for many of their typical online activities. This leads to a variety of security problems when they use overly simple passwords or reuse them multiple times with minor modifications. Having different passwords for each service generally requires password managers or memorable (but weak) passwords, introducing other vulnerabilities [10, 18]. Recent research [14, 6] has offered multiple alternatives but those require either rote mem-orization [8] or computation on a physical device [23, 7]. This paper presents the Cue-Pin-Select password family scheme, which uses simple mental operations (counting and character selection) to create a password from a passphrase and the name of the service the password is targeted for. It needs little memorization to create and retrieve passwords, and requires no assistance from any physical device. It is durable and adaptable to different password requirements. It is secure against known threat models, including against adversaries with stolen passwords. A usability test shows the successes of users in real-life conditions over four days.
Fichier principal
Vignette du fichier
uist-cue-pin (5).pdf (1.37 Mo) Télécharger le fichier
uist-cue-pin (3).pdf (1.37 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01781231 , version 1 (21-07-2018)
hal-01781231 , version 2 (28-04-2020)

Identifiants

  • HAL Id : hal-01781231 , version 1

Citer

Nicolas Blanchard, Leila Gabasova, Ted Selker, Eli Sennesh. Cue-Pin-Select, a Secure and Usable Offline Password Scheme. 2018. ⟨hal-01781231v1⟩

Collections

UNIV-PARIS7
525 Consultations
1103 Téléchargements

Partager

Gmail Facebook X LinkedIn More