Tightly-Held and Ephemeral Psychometrics: Password and Passphrase Authentication Utilizing User-Supplied Constructs of Self

TL;DR

This paper explores how passwords and passphrases can be improved as authentication methods by integrating insights from psychology and linguistics, challenging traditional security models.

Contribution

It introduces a novel approach that incorporates user-supplied constructs of self, informed by cognitive and social psychology, into password security models.

Findings

Enhanced understanding of password security through psychological insights

Proposes a new framework for passphrase creation based on self-concepts

Challenges traditional models by emphasizing user psychology in authentication

Abstract

This research investigates the role of passwords and passphrases as valid authentication methodologies. Specifically, this research dispels earlier work that ignores information-theoretic lessons learned from cognitive and social psychology and psycholinguistics, and extends and enriches the current password security model.