Devices with 3D capabilities are quickly gaining in popularity. In this paper, we propose to bring authentication into the third dimension. We define the concept of a 3D authentication scheme based on physical and psychological advantages of 3D. We implement an example of 3D authentication: 3DPass, to demonstrate the superiority of the 3D approach. Our security analysis of 3DPass demonstrates that 3DPass can exceed the password space of an 8 character alphanumeric password with just 6 choices. Our user study finds that 3DPass has superior memorability versus traditional alphanumeric passwords: 98% vs 83% recall rates after one week. We find that passwords in our scheme can be entered in 21 seconds on average when used with the Oculus Rift. We find that using the Oculus Rift improves entry time compared to a traditional 2D display, despite having no impact on presence (the feeling of “being there”) or user preference.
KeywordsAuthenticationVirtual Reality3D
Li, Z.G., Han, W.L. and Xu, W.Y. (2014) A Large-Scale Empirical Analysis of Chinese Web Passwords. 23rd USENIX Security Symposium (USENIX Security 14), San Diego, 20-22 August 2014, 559-574.
Andrew, S. Patrick, A. Long, C. and Flinn, S. (2003) Hci and Security Systems. Proceedings of CHI’03 Extended Abstracts on Human Factors in Computing Systems, Florida, 05-10 April 2003, 1056-1057.
Blonder, G.E. (1996) Graphical Password. US Patent No. 5559961.
Defetyer, M., Russo, R. and McPartlin, P. (2009) The Picture Superiority Effect in Recognition Memory: A Developmental Study Using the Response Signal Procedure. Cognitive Development, 24, 265-273. https://doi.org/10.1016/j.cogdev.2009.05.002
von Zezschwitz, E., De Luca, A., Brunkow, B. and Hussmann, H. (2015) Swipin: Fast and Secure Pin-Entry on Smartphones. Proceedings of the 33rd Annual ACM Conference on Human Factors in Computing Systems, Seoul, 18-23 April 2015, 1403-1406. https://doi.org/10.1145/2702123.2702212
Bianchi, A., Oakley, I., Kostakos, V. and Kwon, D.S. (2011) The Phone Lock: Audio and Haptic Shoulder-Surfing Resistant Pin Entry Methods for Mobile Devices. Proceedings of the Fifth Interna-tional Conference on Tangible, Embedded, and Embodied Interaction, Funchal, 22-26 January 2011, 197-200. https://doi.org/10.1145/1935701.1935740
De Luca, A., Hertzschuch, K. and Hussmann, H. (2010) Colorpin: Se-curing Pin Entry through Indirect Input. Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, Atlanta, 10-15 April 2010, 1103-1106. https://doi.org/10.1145/1753326.1753490
Alsulaiman, F.A. and El Saddik, A. (2008) Three-Dimensional Password for More Secure Au-Thentication. IEEE Transactions on Instrumentation and Measurement, 57, 1929-1938. https://doi.org/10.1109/TIM.2008.919905
Yu, Z., Olade, I., Liang, H.-N. and Fleming, C. (2016) Usable Authentica-tion Mechanisms for Mobile Devices: An Exploration of 3D Graphical Passwords. 2016 International Conference on Platform Technology and Service (PlatCon), Jeju, 15-17 February 2016, 1-3. https://doi.org/10.1109/PlatCon.2016.7456837
Baños, R.M., Botella, C., Rubió, I., Quero, S., Garcia-Palacios, A. and Alcañiz, M. (2008) Presence and Emotions in Virtual Environments: The Influence of Stereoscopy. CyberPsychology & Be-havior, 11, 1-8. https://doi.org/10.1089/cpb.2007.9936
Baños, R.M., Botella, C., Alcañiz, M., Liaño, V., Guerrero, B. and Rey, B. (2004) Immersion and Emotion: Their Impact on the Sense of Presence. CyberPsychology & Behavior, 7, 734-741. https://doi.org/10.1089/cpb.2004.7.734
Slater, M., Linakis, V., Usoh, M., Kooper, R. and Street, G. (1996) Immersion, Presence, and Performance in Virtual Environments: An Experiment with Tri-Dimensional Chess. In: ACM Vir-tual Reality Software and Technology (VRST). ACM Press, New York, 163-172.
Smith, E.E. Jonides, J., Koeppe, R.A., Awh, E., Schumacher, E.H. and Minoshima, S. (1995) Spatial Versus Object Working Memory: Pet Investigations. Journal of Cognitive Neuroscience, 7, 337-356. https://doi.org/10.1162/jocn.1995.7.3.337
Attree, E.A., Brooks, B.M., Rose, F.D., Andrews, T.K., Leadbetter, A.G. and Cliford, B.R. (1996) Memory Processes and Virtual Environments: I Can’t Re-member What Was There, But I Can Remember How I Got There. Implications for People with Disabilities. Proceedings of the First European Conference on Disability, Virtual Reality and Associated Technologies, Maidenhead, 08-10 July 1996, 117-120.
Tulving, E. (1972) Episodic and Semantic Memory 1. Organization of Memory. London: Academic, 381, 382-404.
Smith, S.M. (1979) Remembering in and out of Context. Journal of Experimental Psychology: Human Learning and Memory, 5, 460. https://doi.org/10.1037/0278-7393.5.5.460
IJsselsteijn, W., de Ridder, H., Freeman, J., Avons, S.E. and Bouwhuis, D. (2001) Effects of Stereoscopic Presentation, Image Motion, and Screen Size on Subjective and Objective Corroborative Measures of Presence. Presence, 10, 298-311. https://doi.org/10.1162/105474601300343621
Hendrix, C. and Barfield, W. (1996) Presence within Virtual Envi-ronments as a Function of Visual Display Parameters. Presence: Teleoperators & Virtual Environments, 5, 274-289. https://doi.org/10.1162/pres.1996.5.3.274
Barfield, W., Hendrix, C. and Bystrom, K.-E. (1999) Effects of Stereopsis and Head Tracking on Performance Using Desktop Virtual Environment Displays. Presence: Teleoperators and Virtual Envi-ronments, 8, 237-240. https://doi.org/10.1162/105474699566198
Tavanti, M. and Lind, M. (2001) 2D vs 3D, Implications on Spatial Memory. Proceedings of the IEEE Symposium on Information Visualization 2001 (INFOVIS’01), Washington DC, 22-23 Oc-tober 2001, 139-145. https://doi.org/10.1109/INFVIS.2001.963291
Isokoski, P. and Martin, B. (2006) Eye Tracker Input in First Person Shooter Games. Proceedings of the 2nd Conference on Communication by Gaze Interaction—COGAIN 2006: Gazing into the Future, Turin, 4-5 September 2006, 78-81.
Davidson, A. (2012) An Evaluation of Visual Gesture Based Controls for Exploring Three Dimensional Environments. PhD Thesis, University of Dublin, Dublin.
Coelho, J.C. and Verbeek, F.J. (2014) Pointing Task Evaluation of Leap Motion Controller in 3D Virtual Environment. Proceedings of the Chi Sparks 2014 Conference, Den Haag, 3 April 2014, 78-85.
Schubert, T., Friedmann, F. and Regenbrecht, H. (2001) The Experience of Presence: Factor Analytic Insights. Presence, 10, 266-281. https://doi.org/10.1162/105474601300343603