Derek Wueppelmann

About

Derek completed a Master’s in Human-Computer Interaction.

Thesis Abstract

The majority of authentication systems use text passwords, as they provide a method of authenticating on a wide variety of devices. Unfortunately, having sufficiently strong passwords does not protect users against phishing or online guessing attacks. In this thesis, we present a new authentication mechanism that uses PGP. We iteratively designed PGP Auth, implemented it, and conducted user testing. Users rated the software highly and indicated that they would be very likely to use the software. They also liked the idea of having a single password to access their accounts and appreciated the security of using PGP as an authentication system. We believe that with a refined user interface, PGP Auth is a viable authentication mechanism that addresses many of the security vulnerabilities of traditional text password authentication. We also provide recommendations to aid in the development of future versions of PGP Auth based on our results.

Research Interests

Derek is currently interested in usable passwords.

Publications

Theses

• Derek Wueppelmann. [Thesis] PGP Auth: Using public key encryption for authentication on the web. Master’s thesis, Human Computer Interaction, Carleton University, 2015.
  [Bibtex]

  @MASTERSTHESIS{wueppelmann2015thesis-carleton,
  author = {Derek Wueppelmann},
  title = {[Thesis] {PGP} {A}uth: Using public key encryption for authentication on the web},
  school = {Human Computer Interaction, Carleton University},
  year = {2015},
  note = {Theses}
  }