Comparing passwords, tokens, and biometrics for user authentication

By Lawrence O'Gorman. Proceedings of the IEEE, 2003

805 citations recorded by the source corpus.

Subfields: Computer Networks and Communications, Information Systems, Signal Processing

View Paper: https://www.semanticscholar.org/paper/67d938d2e7e4f329369537f97ff8f4fdd02ae5b8

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

In Information Systems

In Signal Processing

Citations in the corpus

50 years of biometric research: Accomplishments, challenges, and opportunities (2016, neutral): “Since biometric traits are generally inherent to an individual, there is a strong and reasonably”
A New Biometric Technology Based on Mouse Dynamics (2007, neutral): “Ç”
Face Recognition on Consumer Devices: Reflections on Replay Attacks (2015, background): “Users forget passwords, choose poor passwords, and lose their tokens [19]–[22].”
Smartphone and Smartwatch-Based Biometrics Using Activities of Daily Living (2019, background): “• Average resultant acceleration [1]: the average of the square root of the sum of the square of the x, y, z axis values.”
Biometrics: a tool for information security (2006, neutral): “metrics [15], [73].”
Understanding OSN-based facial disclosure against face authentication systems (2014, background): “These systems provide attractive alternatives of legacy passwords, as face authentication requires zero memory efforts from users and usually has higher entropy than legacy pass-word as users tend to choose easy-to-guess passwords [28].”
A Research Agenda Acknowledging the Persistence of Passwords (2012, background): “End-user authentication technologies involving biometrics and tokens (see O’Gorman [11]), client-side public-key-infrastructure (see Housley and Polk [7]), and graphical variations of passwords (see Biddle et al.”
Security for Industrial Communication Systems (2005, background): “5) Entity Authentication: In entity authentication protocols, an entity proves a claimed identity to another entity [36].”
A comparison of perceived and real shoulder-surfing risks between alphanumeric and graphical passwords (2006, background): “Computer security research tends to focus on the ability of attackers to “crack” password solutions for authentication with little emphasis on usability [16, 25, 29].”
Biometrics: a grand challenge (2004, background): “While there are a number of ways a perpetrator may attack a biometric system [1], there are usually two very serious criticisms against biometric technology that have not been addressed satisfactorily: (i) biometrics are not secrets and (ii) enrolled biometric templates are not revocable.”