Question-based authentication using context data

Nosseir, A. and Connor, R. and Revie, C. and Terzis, S. (2006) Question-based authentication using context data. In: Proceedings of the 4th Nordic Conference on Human-Computer Interaction: Changing Roles. ACM International Conference Proceeding Series, 189 . ACM Press, Oslo, Norway, pp. 429-432. ISBN 1-59593-325-5

Abstract

In everyday life there are low risk situations where resources normally need to be protected and thus access to them controlled, but at the same time the implications of occasional unauthorized access are not severe. In these situations using an authentication technique that is expensive or requires significant effort from the user may not be justified. In this paper, we introduce a question-based authentication scheme appropriate for low risk situations. The scheme utilizes the context data already collected within a smart environment to generate the questions. Despite, the limited capabilities of the smart environment used in this experiment our preliminary study shows that using simple questions based on workplace events it is possible to discriminate between genuine users and impostors.

Actions (login required)