Locimetric authentication is a form of graphical authentication in which users validate their identity by selecting predetermined points on a predetermined image. Its primary advantage over the ubiquitous text-based approach stems from users' superior ability to remember visual information over textual information, coupled with the authentication process being transformed to one requiring recognition (instead of recall). Ideally, these differentiations enable users to create more complex passwords, which theoretically are more secure. Yet locimetric authentication has one significant weakness: hot-spots. This term refers to areas of an image that users gravitate towards, and which consequently have a higher probability of being selected. Although many strategies have been proposed to counter the hot-spot problem, one area that has received little attention is that of resolution. The hypothesis here is that high-resolution images would afford the user a larger password space, and consequently any hot-spots would dissipate. We employ an experimental approach, where users generate a series of locimetric passwords on either low- or high-resolution images. Our research reveals the presence of hot-spots even in high-resolution images, albeit at a lower level than that exhibited with low-resolution images. We conclude by reinforcing that other techniques - such as existing or new software controls or training - need to be utilized to mitigate the emergence of hot-spots with the locimetric scheme.
翻译:光度认证是一种图形化认证形式,用户通过在预定图像上选择预定点来验证自己的身份。它对于无处不在的文本基础方法的主要优势在于用户对文本信息的记忆超强能力,加上认证程序被转换为需要识别的密码(而不是回忆)。最理想的是,这些差异使用户能够创建更复杂的密码,理论上比较安全。但地貌认证有一个显著的弱点:热点。这个术语是指用户对低分辨率或高分辨率图像产生一系列测深密码的图像领域,因此,选择高分辨率图像的可能性更大。虽然已经提出了许多战略来应对热点问题,但一个很少受到关注的领域是分辨率。这里的假设是高分辨率图像将为用户提供更大的密码空间,因此任何热点都会消失。我们采用实验方法,用户在低分辨率或高分辨率图像上产生一系列测深的密码。我们的研究表明,即使在高分辨率图像中也存在热点,尽管在较低的水平上,但很少受到关注。这里的假设是,高分辨率图像将给用户提供更大的密码空间,因此任何热点图像将会消失。我们通过低分辨率的模型来强化。