UCL Discovery
UCL home » Library Services » Electronic resources » UCL Discovery

"Too taxing on the mind!" Authentication Grids Are Not For Everyone

Krol, K; Papanicolaou, C; Vernitski, A; Sasse, A; (2015) "Too taxing on the mind!" Authentication Grids Are Not For Everyone. In: Tryfonas, T and Askoxylakis, I, (eds.) Human Aspects of Information Security, Privacy, and Trust: Third International Conference, HAS 2015, Held as Part of HCI International 2015, Los Angeles, CA, USA, August 2-7, 2015. Proceedings. (pp. 71-82). Springer International Publishing: Switzerland. Green open access

[thumbnail of HCII2015_Vernitski_Authentication-Grid.pdf]
Preview
Text
HCII2015_Vernitski_Authentication-Grid.pdf

Download (692kB) | Preview

Abstract

The security and usability issues associated with passwords have encouraged the development of a plethora of alternative authentication schemes. These aim to provide stronger and/or more usable authentication, but it is hard for the developers to anticipate how users will perform with and react to such schemes. We present a case study of a one-time password entry method called the Vernitski Authentication Grid (VAG), which requires users to enter their password in pairs of characters by finding where the row and the column containing the characters intersect and entering the character from this intersection. We conducted a laboratory user evaluation (n = 36) and found that authentication took 88.6 s on average, with login times decreasing with practice. Participants were faster authenticating on a tablet than on a PC. Overall, participants found using the grid complex and time-consuming. Their stated willingness to use it depended on the context of use, with most participants considering it suitable for accessing infrequently used and high-stakes accounts and systems. While using the grid, 31 out of 36 participants pointed at the characters, rows and columns with their fingers or mouse, which undermines the shoulder-surfing protection that the VAG is meant to offer. Our results demonstrate there cannot be a one-size-fits-all replacement for passwords – usability and security can only be achieved through schemes designed to fit a specific context of use.

Type: Book chapter
Title: "Too taxing on the mind!" Authentication Grids Are Not For Everyone
ISBN-13: 9783319203751
Open access status: An open access version is available from UCL Discovery
DOI: 10.1007/978-3-319-20376-8_7
Publisher version: http://dx.doi.org/10.1007/978-3-319-20376-8_7
Language: English
Additional information: The final publication is available at Springer via http://dx.doi.org/10.1007/978-3-319-20376-8_7.
UCL classification: UCL
UCL > Provost and Vice Provost Offices
UCL > Provost and Vice Provost Offices > UCL BEAMS
UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science
UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science
URI: https://discovery.ucl.ac.uk/id/eprint/1470881
Downloads since deposit
149Downloads
Download activity - last month
Download activity - last 12 months
Downloads by country - last 12 months

Archive Staff Only

View Item View Item