The Draw-a-Secret (DAS) Scheme

Authors:
Ian Jermyn, New York University
Alain Mayer, Fabian Monrose, Michael K. Reiter, Bell Labs, Lucent Technologies
Aviel D. Rubin, AT&T Labs--Research

Summary:
This article proposes a different scheme for user authentication. The scheme that allows user to draw a password rather typing in a password. Prior studies show 50% reduction in retention power of words and humans possess an remarkable ability for recalling pictures( lines diagrams / objects).

This scheme uses a grid of squares and the sequence in which the user crosses the grid is used as the password. The advantage of this approach is that unlike text passwords where there is a specific scheme followed in setting the password( there will not be any specific pattern followed by the user. The number of combinations of 12 dots is way to high when compared to textual passwords of length 8.
What constitutes a memorable password? Any memorable text password is set based on the semantic content of the password. Such semantic content is difficult to identify from the DAS.

Discussion:
Interesting idea. This scheme avoids recognition by using grids of squares. This removes errors of recognition.
It would interesting to know if any 2 users have chosen to set the password. The frequency of users getting the same password. My guess is though there are a lot of possibilities of connecting dots, users would choose a pattern that is easy to remember. This could by some alphabets, greek letters, numbers, line diagrams,.. which leaves us with lesser number of variations than originally stated.