The MVP Web-Based Authentication Framework
MVP is a new framework for allowing websites to use diverse knowledge-based authentication schemes. One application is its use in conducting ecologically valid user studies of authentication schemes under the same experimental conditions. The authors introduce MVP and its key characteristics, discuss implementation of several authentication schemes, and report on a user study successfully comparing four schemes. Despite the ubiquity of password systems, knowledge-based authentication remains an important and active research area. Many current systems have low security, and even then users often devise insecure coping strategies in order to compensate for memorability and usability problems. Alternatives such as biometrics or tokens raise other issues such as privacy and loss.