使用彩色PIN在公共场所安全登录
Logging safely in public spaces using color PINs
摘要：
如今，我们越来越多地登录许多不同的互联网网站，以访问远程存储在云中的电子邮件或照片等私人数据。这使得我们更加关注数字身份盗窃和密码被窃取的关键记录或肩冲浪攻击。令人惊讶的是，当前登录进行身份验证时的计算机安全瓶颈是用户界面（UI）：当隐藏的间谍摄像机或密钥记录器可能正在记录登录会话时，我们如何安全地输入密码？安全登录需要设计一个安全的人机接口（HCI）来抵御这些攻击。我们描述了一种新颖的方法和系统，其基于通过关联的秘密UI密码输入秘密ID密码，该关联的秘密UI密码向观察者提供零知识。我们演示的原则，使用彩色个人识别号码（PIN）登录系统，并介绍了其各种扩展。
英文摘要：
Nowadays, we are increasingly logging on many different Internet sites to access private data like emails or photos remotely stored in the clouds. This makes us all the more concerned with digital identity theft and passwords being stolen either by key loggers or shoulder-surfing attacks. Quite surprisingly, the current bottleneck of computer security when logging for authentication is the User Interface (UI): How can we enter safely secret passwords when concealed spy cameras or key loggers may be recording the login session? Logging safely requires to design a secure Human Computer Interface (HCI) robust to those attacks. We describe a novel method and system based on entering secret ID passwords by means of associative secret UI passwords that provides zero-knowledge to observers. We demonstrate the principles using a color Personal Identification Numbers (PINs) login system and describes its various extensions.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
