Identity Assurance by Citizens’ Non-Volatile Autobiographic Memory #11
--
Generally speaking, hard-to-break passwords are hard-to-remember. But it’s not the fate of what we remember.
It would be easily possible to safely manage many of high-entropy passwords with Expanded Password System that handles characters as images.
Each image or character is represented by the image identifier data which can be of any length.
1. Assume that your password is “CBA123”
2. and that the image ‘C’ is identified as X4s& eI0w, and so on.
3. When you input CBA123, the authentication data that the server receives is not the easy-to-break “CBA123”, but something like “X4s&eI0wdoex7RVb%9Ub3mJvk”, which could be automatically altered periodically or at each access where desired.
By the way, threats of ‘visual-manual attacks on display’ are very different to ‘automated brute force attacks’.
A figure of ’20-bit’, for instance, would be just a bad joke against automated attacks, whereas it would make a pretty tall wall against visual-manual attacks on display.
……………………………………………………………………………………………
*P11 of “Fend Off Cybercrime with Episodic Memory”
