On the Internet, there is an uneasy tension between the security and usability of authentication mechanisms. An easy three-part classification is: 'something you know' (e.g. password); 'something you hold' (e.g. device holding digital certificate), and 'who you are' (e.g. biometric assessment) . Each of these has well-known problems; passwords are written down, guessable, or forgotten; devices are lost or stolen, and biometric assays alienate users. We have investigated a novel strategy of querying the user based on their personal history (a 'Rip van Winkle' approach.) The sum of this information is large and well-known only to the individual. The volume is too large for impostors to learn; our observation is that, in the emerging environment, it is possible to collate and automatically query such information as an authentication test.
|Publication status||Published - 2006|
|Event||ACM Human Computer Interaction Conference - Montreal, Canada|
Duration: 24 Apr 2006 → 27 Apr 2006
|Conference||ACM Human Computer Interaction Conference|
|Period||24/04/06 → 27/04/06|
- internet authentication
- internet security