Paper Info
Title
The Impact of Length and Mathematical Operators on the Usability and Security of System-Assigned One-Time PINs.
Abstract
Over the last decade, several proposals have been made to replace the common personal identification number, or PIN, with often-complicated but theoretically more secure systems. We present a case study of one such system, a specific implementation of system-assigned one-time PINs called PassGrids. We apply various modifications to the basic scheme, allowing us to review usability vs. security trade-offs as a function of the complexity of the authentication scheme. Our results show that most variations of this one-time PIN system are more enjoyable and no more difficult than PINs, although accuracy suffers for the more complicated variants. Some variants increase resilience against observation attacks, but the number of users who write down or otherwise store their password increases with the complexity of the scheme. Our results shed light on the extent to which users are able and willing to tolerate complications to authentication schemes, and provides useful insights for designers of new password schemes.
Year
DOI
Venue
2013
10.1007/978-3-642-41320-9_3
Lecture Notes in Computer Science
Field
DocType
Volume
Psychological resilience,Mathematical Operators,Modular arithmetic,Computer security,Computer science,Threat model,Usability,Password,Authentication scheme,Personal identification number
Conference
7862
ISSN
Citations 
PageRank 
0302-9743
2
0.40
References 
Authors
19
8
Name
Order
Citations
PageRank
Patrick Gage Kelley1167979.74
Saranga Komanduri2109541.21
Michelle L. Mazurek3105957.67
Richard Shay4107343.90
Timothy Vidas571538.49
Lujo Bauer62460120.71
Nicolas Christin72133126.02
Lorrie Faith Cranor86767515.80