EAGER: The Game Changer: A New Model for Password Security

EAGER：游戏规则改变者：密码安全的新模型

• 批准号: 1343141
• 负责人: Ye Zhu
• 金额: $ 20.23万
• 依托单位: Cleveland State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-09-01 至 2016-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1343141&HistoricalAwards=false
• 关键词: EAGER; Game; Changer; New; Model

We are evaluating a new model of password security in which users place pieces on a game board (e.g., chess pieces on a chessboard). The fact that existing systems are either memorable or secure, but not both, motivated our approach. We are testing 14-15 year old high school students, college students 18-30, and older adults 60-80, and we are conducting two types of experiments. First, we are measuring all groups' memories for passwords of two and four game pieces (after a 20-minute filled delay). Second, we are testing college students' memories for five different passwords over a 12-week period in which the game changes after week 10. The results are expected to reveal a dramatically better authentication method compared to existing systems. More specifically, participants are expected to create unique passwords that they can remember. Furthermore, performance is expected to decline during the first 10 weeks, as their passwords begin to interfere with one another, and increase dramatically during the final two weeks, once the game changes and they are able to use a new type of memory. We will present the results at social science and computer security conferences, and submit for publication to sociology, psychology, and security journals. Our approach offers a radical breakthrough that is mathematically secure and easy to remember. The model is applicable to a wide range of electronic platforms, including smartphones, computers, ATMs, and other high-risk electronic gateways. Consequently, the potential to benefit society with more secure systems should have an enormous impact.

我们正在评估一种新的密码安全模型，其中用户将棋子放置在游戏板上（例如，棋盘上的棋子）。现有系统要么是令人难忘的，要么是安全的，但不能两者兼而有之，这一事实激发了我们的方法。我们正在测试14-15岁的高中生、18-30岁的大学生和60-80岁的老年人，我们正在进行两种类型的实验。首先，我们测量所有小组对两个和四个游戏块密码的记忆（在 20 分钟的延迟后）。其次，我们正在测试大学生在 12 周内对 5 个不同密码的记忆，其中游戏在第 10 周后发生变化。结果预计将揭示与现有系统相比明显更好的身份验证方法。更具体地说，参与者应该创建他们可以记住的唯一密码。 此外，在前 10 周内，由于他们的密码开始相互干扰，性能预计会下降；而在最后两周，一旦游戏发生变化并且他们能够使用新型内存，性能就会急剧上升。 我们将在社会科学和计算机安全会议上展示研究结果，并提交到社会学、心理学和安全期刊上发表。 我们的方法提供了根本性的突破，在数学上是安全且易于记忆的。 该模型适用于广泛的电子平台，包括智能手机、计算机、ATM 和其他高风险电子网关。因此，通过更安全的系统造福社会的潜力应该会产生巨大的影响。