{"id":"https://openalex.org/W2598853221","doi":"https://doi.org/10.1145/3052973.3053031","title":"Understanding Human-Chosen PINs","display_name":"Understanding Human-Chosen PINs","publication_year":2017,"publication_date":"2017-03-31","ids":{"openalex":"https://openalex.org/W2598853221","doi":"https://doi.org/10.1145/3052973.3053031","mag":"2598853221"},"language":"en","primary_location":{"id":"doi:10.1145/3052973.3053031","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3052973.3053031","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030674762","display_name":"Ding Wang","orcid":"https://orcid.org/0000-0002-1667-2237"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ding Wang","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047344010","display_name":"Qianchen Gu","orcid":null},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qianchen Gu","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031931063","display_name":"Xinyi Huang","orcid":"https://orcid.org/0000-0003-0070-1707"},"institutions":[{"id":"https://openalex.org/I111753288","display_name":"Fujian Normal University","ror":"https://ror.org/020azk594","country_code":"CN","type":"education","lineage":["https://openalex.org/I111753288"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinyi Huang","raw_affiliation_strings":["Fujian Normal University, Fuzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fujian Normal University, Fuzhou, China","institution_ids":["https://openalex.org/I111753288"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100338689","display_name":"Ping Wang","orcid":"https://orcid.org/0000-0002-8854-2079"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ping Wang","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.4476,"has_fulltext":false,"cited_by_count":81,"citation_normalized_percentile":{"value":0.94339899,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"372","last_page":"385"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9907000064849854,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10828","display_name":"Biometric Identification and Security","score":0.9783999919891357,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/popularity","display_name":"Popularity","score":0.7484582662582397},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7021885514259338},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5298659205436707},{"id":"https://openalex.org/keywords/zipfs-law","display_name":"Zipf's law","score":0.485475093126297},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4274725914001465},{"id":"https://openalex.org/keywords/distribution","display_name":"Distribution (mathematics)","score":0.41171038150787354},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.4004354178905487},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.14360731840133667},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.11107027530670166},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.08468547463417053}],"concepts":[{"id":"https://openalex.org/C2780586970","wikidata":"https://www.wikidata.org/wiki/Q1357284","display_name":"Popularity","level":2,"score":0.7484582662582397},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7021885514259338},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5298659205436707},{"id":"https://openalex.org/C125932096","wikidata":"https://www.wikidata.org/wiki/Q205472","display_name":"Zipf's law","level":2,"score":0.485475093126297},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4274725914001465},{"id":"https://openalex.org/C110121322","wikidata":"https://www.wikidata.org/wiki/Q865811","display_name":"Distribution (mathematics)","level":2,"score":0.41171038150787354},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.4004354178905487},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.14360731840133667},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.11107027530670166},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.08468547463417053},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3052973.3053031","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3052973.3053031","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10","score":0.6899999976158142}],"awards":[{"id":"https://openalex.org/G6819595738","display_name":"\u4e91\u8ba1\u7b97\u73af\u5883\u4e0b\u7684\u533f\u540d\u591a\u56e0\u5b50\u8ba4\u8bc1\u534f\u8bae\u7814\u7a76","funder_award_id":"61472016","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W19073260","https://openalex.org/W129231235","https://openalex.org/W170161968","https://openalex.org/W1550955885","https://openalex.org/W1591095982","https://openalex.org/W1971881814","https://openalex.org/W1994538893","https://openalex.org/W1999471643","https://openalex.org/W2000042664","https://openalex.org/W2007488200","https://openalex.org/W2007953356","https://openalex.org/W2023306951","https://openalex.org/W2028570584","https://openalex.org/W2044798763","https://openalex.org/W2048755632","https://openalex.org/W2055147133","https://openalex.org/W2066959490","https://openalex.org/W2073342447","https://openalex.org/W2100783932","https://openalex.org/W2107274838","https://openalex.org/W2123779747","https://openalex.org/W2135359429","https://openalex.org/W2163006719","https://openalex.org/W2167841977","https://openalex.org/W2171023083","https://openalex.org/W2227908937","https://openalex.org/W2394619600","https://openalex.org/W2411725940","https://openalex.org/W2538793708","https://openalex.org/W2734150319","https://openalex.org/W3102126820","https://openalex.org/W3103362336","https://openalex.org/W4232227427","https://openalex.org/W4285719527","https://openalex.org/W6740916038"],"related_works":["https://openalex.org/W3123832408","https://openalex.org/W2137719806","https://openalex.org/W2368605798","https://openalex.org/W2744330362","https://openalex.org/W2518037665","https://openalex.org/W2096748633","https://openalex.org/W1968625547","https://openalex.org/W2963431268","https://openalex.org/W3131094596","https://openalex.org/W2348524959"],"abstract_inverted_index":{"Personal":[0],"Identification":[1],"Numbers":[2],"(PINs)":[3],"are":[4,15,40,90,125,322],"ubiquitously":[5],"used":[6],"in":[7,36,128,144,185,244],"embedded":[8],"computing":[9],"systems":[10],"where":[11],"user":[12,118,251],"input":[13],"interfaces":[14],"constrained.":[16],"Yet,":[17],"little":[18,274],"attention":[19],"has":[20],"been":[21],"paid":[22],"to":[23,242,324,330],"this":[24,69,219],"important":[25],"kind":[26],"of":[27,82,108,135,140,151,205,213],"authentication":[28],"credentials,":[29],"especially":[30],"for":[31,100,158,221,232,299,304,315],"6-digit":[32,87,222],"PINs":[33,54,85,88,191,199,223,254,287],"which":[34,270],"dominate":[35],"Asian":[37],"countries":[38],"and":[39,80,86,95,112,147,210,218,227,262,303,318],"gaining":[41],"popularity":[42],"worldwide.":[43],"Unsurprisingly,":[44],"many":[45],"fundamental":[46],"questions":[47],"(e.g.,":[48],"what's":[49],"the":[50,77,101,109,161,170,186,233,257],"distribution":[51,79,260],"that":[52,89,123,237,321],"human-chosen":[53,197],"follow?)":[55],"remain":[56],"as":[57,59,173],"intact":[58],"about":[60,202],"fifty":[61],"years":[62],"ago":[63],"when":[64],"they":[65],"first":[66,102,234],"arose.":[67],"In":[68],"work,":[70],"we":[71,271],"conduct":[72,325],"a":[73,105,137,177],"systematic":[74],"investigation":[75],"into":[76],"characteristics,":[78],"security":[81,113,206,214,311],"both":[83,145,250],"4-digit":[84,198],"chosen":[91],"by":[92,159,280,283],"English":[93],"users":[94],"Chinese":[96],"users.":[97],"Particularly,":[98],"we,":[99],"time,":[103,235],"perform":[104],"comprehensive":[106],"comparison":[107],"PIN":[110,129,153,306,326],"characteristics":[111],"between":[114,131],"these":[115,132],"two":[116,133],"distinct":[117,247],"groups.":[119],"Our":[120,292],"results":[121],"show":[122],"there":[124],"great":[126],"differences":[127],"choices":[130],"groups":[134,252],"users,":[136],"small":[138],"number":[139],"popular":[141,165],"patterns":[142],"prevail":[143],"groups,":[146],"surprisingly,":[148],"over":[149],"50%":[150],"every":[152],"datasets":[154],"can":[155,200,276],"be":[156,277],"accounted":[157],"just":[160],"top":[162],"5%~8%":[163],"most":[164],"PINs.":[166,245],"What's":[167],"disturbing":[168],"is":[169,176,224,240],"observation":[171],"that,":[172],"online":[174,208],"guessing":[175,184,209],"much":[178],"more":[179],"serious":[180],"threat":[181],"than":[182],"offline":[183,216],"current":[187],"PIN-based":[188,301],"systems,":[189],"longer":[190],"only":[192],"attain":[193],"marginally":[194],"improved":[195],"security:":[196],"offer":[201],"6.6":[203],"bits":[204,212,226],"against":[207,215],"8.4":[211],"guessing,":[217],"figure":[220],"7.2":[225],"13.2":[228],"bits,":[229],"respectively.":[230],"We,":[231],"reveal":[236],"Zipf's":[238],"law":[239],"likely":[241],"exist":[243],"Despite":[246],"language/cultural":[248],"backgrounds,":[249],"choose":[253],"with":[255,286],"almost":[256],"same":[258],"Zipf":[259,264,293],"function,":[261],"such":[263],"PIN-distribution":[265],"from":[266,288,328],"one":[267],"source":[268],"(about":[269],"may":[272],"know":[273],"information)":[275],"well":[278],"predicted":[279],"real-world":[281],"attackers":[282],"running":[284],"Markov-Chains":[285],"another":[289],"known":[290],"source.":[291],"theory":[294],"would":[295],"have":[296],"foundational":[297],"implications":[298],"analyzing":[300],"protocols":[302],"designing":[305],"creation":[307],"policies,":[308],"while":[309],"our":[310],"measurements":[312],"provide":[313],"guidance":[314],"bank":[316],"agencies":[317],"financial":[319],"authorities":[320],"planning":[323],"migration":[327],"4-digits":[329],"6-digits.":[331]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":12},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":15},{"year":2020,"cited_by_count":10},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1}],"updated_date":"2026-08-11T07:18:39.950985","created_date":"2025-10-10T00:00:00"}