AvoidPwd: A Mnemonic Password Generation Strategy Based on Keyboard Transformation  

作　　者：Shunying Lyu Qian Yao Jianhua Song 

机构地区：[1]School of Computer Science and Information Engineering,Hubei University,430062 Wuhan,China [2]Engineering and Technical Research Center of Hubei Province in Educational Informatization,430062 Wuhan,China [3]Engineering and Technical Research Center of Hubei Province in Software Engineering,430062 Wuhan,China [4]Engineering Research Center of Hubei Province in Intelligent Government Affairs and Application of Artificial Intelligence,430062 Wuhan,China

出　　处：《China Communications》2022年第10期92-101,共10页中国通信（英文版）

基　　金：supported in part by the National Natural Science Foundation of China (No. 61803149 and No. 61977021);in part by the Technology Innovation Special Program of Hubei Province (No. 2020AEA008);in part by the Hubei Province Project of Key Research Institute of Humanities and Social Sciences at Universities (Research Center of Information Management for Performance Evaluation)

摘　　要：Identity authentication is the first line of defense for network security.Passwords have been the most widely used authentication method in recent years.Although there are security risks in passwords,they will be the primary method in the future due to their simplicity and low cost.Considering the security and usability of passwords,we propose AvoidPwd,which is a novel mnemonic password generation strategy that is based on keyboard transformation.AvoidPwd helps users customize a“route”to bypass an“obstacle”and choose the characters on the“route”as the final password.The“obstacle”is a certain word using any language and the keys adjacent to the“obstacle”are typed with the“Shift”key.A two-part experiment was conducted to examine the memorability and security of the AvoidPwd strategy with other three password strategies and three leaked password sets.The results showed that the passwords generated by the AvoidPwd strategy were more secure than the other leaked password sets.Meanwhile,AvoidPwd outperformed the KbCg,SpIns,and Alphapwd in balancing security and usability.In addition,there are more symbols in the character distribution of AvoidPwd than the other strategies.AvoidPwd is hopeful to solve the security problem that people are difficult to remember symbols and they tend to input letters and digits when creating passwords.

关 键 词：password generation strategy password security mnemonic passwords 

分 类 号：TN918.4[电子电信—通信与信息系统]