Towards narrative authentication: or, against boring authentication

Authors:
Anil Somayaji;David Mould;Carson Brown
Affiliations:
Carleton University, Ottawa, ON, Canada;Carleton University, Ottawa, ON, Canada;Shopify, Inc., Ottawa, ON, Canada
Venue:
Proceedings of the 2013 workshop on New security paradigms workshop
Year:
2013

Citing 6
Cited 0

ELIZA—a computer program for the study of natural language communication between man and machine

Communications of the ACM
Interactive Storytelling: Techniques for 21st Century Fiction

Interactive Storytelling: Techniques for 21st Century Fiction
PassPoints: design and longitudinal evaluation of a graphical password system

International Journal of Human-Computer Studies - Special isssue: HCI research in privacy and security is critical now
uWave: Accelerometer-based personalized gesture recognition and its applications

Pervasive and Mobile Computing
Affect Detection: An Interdisciplinary Review of Models, Methods, and Their Applications

IEEE Transactions on Affective Computing
Graphical passwords: Learning from the first twelve years

ACM Computing Surveys (CSUR)

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper we propose that what-you-know authentication schemes be built using narrative elements. Specifically, we propose that stories be used as the basis of memory-based user authentication, rather than use a fixed string as the secret for authentication (as is the case with text passwords and PINs). The insight here is that secure text passwords are ``boring'' and, hence, are hard to remember. Narrative is, in contrast, extremely memorable, forming the basis of much of human communication. We present a simple, implementable scheme for narrative authentication using text adventures. We then also examine other strategies for generating and testing knowledge of narrative.