Issues in User Authentication

Authors:
Sonia Chiasson, Robert Biddle, Carleton University
Ottawa, Ontario, CANADA

Summary:

This paper describes some alternate methods for text based password.

Password Manager: User has to enter a single master password to get access to all the other passwords. The user study of 26 people showed their inaccurate mental models of the password manager and the password itself which caused serious errors.

Mental models: The user interface should convey enough information to be able to predict and understand.

Persuasive technology: The password technology must also be persuasive. Most of the times, the problem comes from the unmotivated user.

Identity theft: Other major problem is identity theft (e.g. phishing). Using the identity of the user for fraudulent purposes.

Discussion:

This paper gives an overview of the certain important problems with user authentication.