Strathprints Home | Open Access | Browse | Search | User area | Copyright | Help | Library Home | SUPrimo

Internet authentication based on personal history - a feasibility test

Nosseir, A. and Connor, R. and Dunlop, M.D. (2005) Internet authentication based on personal history - a feasibility test. In: Proceedings of Customer Focused Mobile Services Workshop at WWW2005. ACM Press. ISBN 1-59593-046-9

[img]
Preview
PDF (strathprints002754.pdf)
Download (246Kb) | Preview

    Abstract

    On the Internet, there is an uneasy tension between the security and usability of authentication mechanisms. An easy three-part classification is: 'something you know' (e.g. password); 'something you hold' (e.g. device holding digital certificate), and 'who you are' (e.g. biometric assessment) [9]. Each of these has well-known problems; passwords are written down, guessable, or forgotten; devices are lost or stolen, and biometric assays alienate users. We have investigated a novel strategy of querying the user based on their personal history (a 'Rip van Winkle' approach.) The sum of this information is large and well-known only to the individual. The volume is too large for impostors to learn; our observation is that, in the emerging environment, it is possible to collate and automatically query such information as an authentication test. We report a proof of concept study based on the automatic generation of questions from electronic 'calendar' information. While users were, surprisingly, unable to answer randomly generated questions any better than impostors, if questions are categorized according to appropriate psychological parameters then significant results can be obtained. We thus demonstrate the potential viability of this concept.

    Item type: Book Section
    ID code: 2754
    Keywords: internet security, password, human memory, user studies, security, usability, identity theft, personal electronic data, user mobility, Electronic computers. Computer science
    Subjects: Science > Mathematics > Electronic computers. Computer science
    Department: Faculty of Science > Computer and Information Sciences
    Professional Services > Learning Services
    Related URLs:
      Depositing user: Strathprints Administrator
      Date Deposited: 29 Mar 2007
      Last modified: 06 Sep 2014 05:20
      URI: http://strathprints.strath.ac.uk/id/eprint/2754

      Actions (login required)

      View Item

      Fulltext Downloads: