CUDE base Click Point Password Authentication System
Keywords:
Cued Click Points (CCP), Pass Points, Graphical, Passwords, Computer Security, Authentication, Usable Security, User StudyAbstract
We propose and examine the usability and security of Cued Click Points (CCP), a cued-recall graphical password technique. In CCP, users click on one point per image for a sequence of images, with the next image based on the previous click-point. We present the results of an initial user study that revealed positive outcomes. Performance was excellent in terms of speed, accuracy, and the number of errors. Users preferred CCP over PassPoints (Wiedenbeck et al., 2005), stating that selecting and remembering only one point per image was easier and that seeing each image helped trigger their memory of the corresponding point's location. Additionally, we suggest that CCP provides greater security than PassPoints, as the number of images increases the workload for attackers.
References
A. E. Dirik, N. Menon, and J. C. Birget, "Modeling User Choice in the PassPoints Graphical Password Scheme," ACM SOUPS, 2007.
D. Davis, F. Monrose, and M. K. Reiter, "On User Choice in Graphical Password Schemes," 13th USENIX Security Symposium, 2004.
G. E. Blonder, "Graphical Passwords," United States Patent 5,559,961, 1996.
I. Jermyn, A. Mayer, F. Monrose, M. K. Reiter, and A. D. Rubin, "The Design and Analysis of Graphical Passwords," 8th USENIX Security Symposium, 1999.
J. C. Birget, D. Hong, and N. Memon, "Graphical Passwords Based on Robust Discretization," IEEE Trans. Info. Forensics and Security, vol. 1, no. 3, Sept. 2006.
L. F. Cranor and S. Garfinkel, Security and Usability, O'Reilly Media, 2005.
S. Chiasson, R. Biddle, and P. C. van Oorschot, "A Second Look at the Usability of Click-based Graphical Passwords," ACM SOUPS, 2007.
Downloads
How to Cite
Issue
Section
License
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
