PassMap
PassMap /ˈpæsmæp/ is a map-based graphical password method of authentication, similar to passwords, proposed by National Tsing Hua University researchers. The word PassMap originates from the word password by substituting word with map.
History and usage
[edit]PassMap was proposed by National Tsing Hua University researchers Hung-Min Sun, Yao-Hsin Chen, Chiung-Cheng Fang, and Shih-Ying Chang at the 7th Association for Computing Machinery Symposium on Information, Computer and Communications Security. They defined PassMap as letting a consumer get authenticated by choosing a series of points on a big world map. Their study showed that for people, PassMap passwords are more user-friendly and memorable.[1]
Users are shown Google Maps on their screen, through which they can zoom in to choose any two points they want to become their PassMap password. Since PassMap uses Google Maps, it cannot be used in applications that lack Internet access or Google Maps integration.[2] By default, PassMap's screen is set to the eighth zoom level and is centered on Taiwan. PassMap has no constraints on the zoom level, so consumers are allowed to select dots at unsafer, lower levels, like level 8. It does not normalize error tolerance based on a screen's zoom position.[3] PassMap's effective login percentage is 92.59%.[4]
Commentary
[edit]Ritika Sachdev wrote in the International Journal of Pure and Applied Research in Engineering and Technology that based on psychological studies, people can effortlessly recall the milestones they have visited. Sachdev called PassMap a "highly subjective or customized based password to ensure security".[5]
S. Rajarajan, M. Prabhu, and S. Palanivel praised PassMap for having "good memorability due to the usage of map for the password mechanism". But they noted that, like many graphical passwords, PassMap is susceptible to a shoulder surfing intrusion.[2]
References
[edit]- ^ Sun, Hung-Min; Chen, Yao-Hsin; Fang, Chiung-Cheng; Chang, Shih-Ying (2012). "Pass Map". PassMap: a map based graphical-password authentication system. Association for Computing Machinery. pp. 99–100. doi:10.1145/2414456.2414513. ISBN 9781450316484. S2CID 15673920.
- ^ a b Rajarajan, S.; Prabhu, M.; Palanivel, S.; Karthikeyan, M.P. (2014-03-20). "Gramap: Three Stage Graphical Password Authentication Scheme" (PDF). Journal of Theoretical and Applied Information Technology. 61 (2): 262–269. Archived (PDF) from the original on 2016-03-07. Retrieved 2015-08-16.
- ^ Thorpe, Julie; MacRae, Brent; Salehi-Abari, Amirali (2013). "Usability and Security Evaluation of GeoPass: a Geographic Location-Password Scheme" (PDF). Symposium on Usable Privacy and Security. Archived (PDF) from the original on 2016-03-04. Retrieved 2015-08-16.
- ^ Al-Ameen, Mahdi Nasrullah; Wright, Matthew (2015-02-07). "Multiple-Password Interference in the GeoPass User Authentication Scheme" (PDF). Proceedings 2015 Workshop on Usable Security. Internet Society. doi:10.14722/usec.2015.23004. ISBN 978-1-891562-40-2. S2CID 16989950. Archived from the original (PDF) on 2015-06-04. Retrieved 2015-08-16.
- ^ Sachdev, Ritika (2014). "User Authentication: A Case History" (PDF). International Journal of Pure and Applied Research in Engineering and Technology. 3 (1): 77–84. ISSN 2319-507X. Archived (PDF) from the original on 2015-08-16. Retrieved 2015-08-16.