Towards Implicit Visual Memory-Based Authentication - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2017

Towards Implicit Visual Memory-Based Authentication

Markus Duermuth
  • Function : Author
  • PersonId : 932209
Maximilian Golla
  • Function : Author
  • PersonId : 963420
Fatma Deniz
  • Function : Author
  • PersonId : 997948

Abstract

Selecting and remembering secure passwords puts a high cognitive burden on the user, which has adverse effects on usability and security. Authentication schemes based on implicit memory can relieve the user of the burden of actively remembering a secure password. In this paper, we propose a new authentication scheme (MooneyAuth) that relies on implicitly remembering the content of previously seen Mooney images. These images are thresholded two-tone images derived from images containing single objects. Our scheme has two phases: In the enrollment phase, a user is presented with Mooney images, their corresponding original images, and labels. This creates an implicit link between the Mooney image and the object in the user's memory that serves as the authentication secret. In the authentication phase, the user has to label a set of Mooney images, a task that gets performed with substantially fewer mistakes if the images have been seen in the enrollment phase. We applied an information-theoretical approach to compute the eligibility of the user, based on which images were labeled correctly. This new dynamic scoring is substantially better than previously proposed static scoring by considering the surprisal of the observed events. We built a prototype and performed three experiments with 230 and 70 participants over the course of 264 and 21 days, respectively. We show that MooneyAuth outperforms current implicit memory-based schemes, and demonstrates a promising new approach for fallback authentication procedures on the Web.
Fichier principal
Vignette du fichier
MooneyAuth_NDSS_2017_292.pdf (2.33 Mo) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01109765 , version 1 (11-01-2017)

Identifiers

  • HAL Id : hal-01109765 , version 1

Cite

Claude Castelluccia, Markus Duermuth, Maximilian Golla, Fatma Deniz. Towards Implicit Visual Memory-Based Authentication. Network and Distributed System Security Symposium (NDSS), ISOC, Feb 2017, San Diego, United States. ⟨hal-01109765⟩
861 View
1034 Download

Share

Gmail Facebook X LinkedIn More