口令重用行为与多维口令体系研究

Research on Password Reuse Behavior and Multidimensional Password System

互联网的迅速发展与网络服务的高度分散,促使广大网民不断注册更多的账户,并导致口令重用行为普遍化,使得用户信息面临泄露的风险。为此,基于2011年底互联网泄密门数据和大学生在线调查数据,分析了网民口令的结构特征和重用行为,并由此设计融入信息维度和分级管理思想的多维口令体系。该体系以根口令-重用码结构为基础,内容维包含多个独立的信息因子,构成口令的可记忆性主体;形式维负责形式变换,以提升口令的复杂性和安全性;时空维用于保障口令的时效性和重用性。对比量化分析结果表明,该口令体系具备良好的记忆性和便捷性,能有效抵御暴力攻击和熟人攻击。

The rapid development of the Internet and highly decentralized network services prompts the majority of Internet users to register more accounts,and causes a high incidence of password reuse,which makes the user information leakage risks facing the domino-style. Based on the data of Internet password leak door at the end of 2011 as well as the college students online survey,this paper analyzes the structural characteristics and reuse behavior of netizen passwords in detail,and thus designs a multidimensional password system which infuses into the information dimensions and classified management. This system,based on the structure of＆quot;seed-reuse code＆quot;,includes three dimensions：the content dimension contains multi-independent＆quot;information factor＆quot;,which constitutes the main part of the password,the formal dimension is responsible for conversion formatting,in order to enhance the complexity and security of the password,and space-time dimension is targeted designed to protect the password timeliness and reusability. Through comparative analysis and quantitative analysis,the password system not only has good memorability and convenience,but also can effectively resist the violent attacks and acquaintances attacks.