{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,22]],"date-time":"2026-07-22T09:23:55Z","timestamp":1784712235289,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":40,"publisher":"ACM","license":[{"start":{"date-parts":[[2017,4,2]],"date-time":"2017-04-02T00:00:00Z","timestamp":1491091200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61472016"],"award-info":[{"award-number":["61472016"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Key Research and Development Plan","award":["2016YFB0800603"],"award-info":[{"award-number":["2016YFB0800603"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2017,4,2]]},"DOI":"10.1145\/3052973.3053031","type":"proceedings-article","created":{"date-parts":[[2017,3,31]],"date-time":"2017-03-31T12:22:54Z","timestamp":1490962974000},"page":"372-385","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":63,"title":["Understanding Human-Chosen PINs"],"prefix":"10.1145","author":[{"given":"Ding","family":"Wang","sequence":"first","affiliation":[{"name":"Peking University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qianchen","family":"Gu","sequence":"additional","affiliation":[{"name":"Peking University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xinyi","family":"Huang","sequence":"additional","affiliation":[{"name":"Fujian Normal University, Fuzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ping","family":"Wang","sequence":"additional","affiliation":[{"name":"Peking University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2017,4,2]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"China now has 656m mobile web users and 710m total Internet users Aug. 2016. http:\/\/bit.ly\/2avZdlK.  China now has 656m mobile web users and 710m total Internet users Aug. 2016. http:\/\/bit.ly\/2avZdlK."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.41"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1126\/science.1062081"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/MAHC.2010.3"},{"key":"e_1_3_2_1_5_1","unstructured":"N. Berry. PIN analysis Sep. 2012. http:\/\/www.datagenetics.com\/blog\/september32012\/index.html.  N. Berry. PIN analysis Sep. 2012. http:\/\/www.datagenetics.com\/blog\/september32012\/index.html."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.49"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-32946-3_3"},{"key":"e_1_3_2_1_8_1","volume-title":"NIST","author":"Burr W.","year":"2013"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1137\/070710111"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23357"},{"key":"e_1_3_2_1_11_1","unstructured":"EMVCo Ltd. Issuer PIN Security Guidelines 2010. http:\/\/usa.visa.com\/ download\/merchants\/visa-issuer-pin-security-guideline.pdf.  EMVCo Ltd. Issuer PIN Security Guidelines 2010. http:\/\/usa.visa.com\/ download\/merchants\/visa-issuer-pin-security-guideline.pdf."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/2501604.2501617"},{"key":"e_1_3_2_1_13_1","first-page":"1","volume-title":"Proc. HotSec","author":"Flor\u00eancio D.","year":"2007"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813622"},{"key":"e_1_3_2_1_15_1","unstructured":"International Organisation for Standardisation. ISO 9564: Financial services -- Personal Identification Number (PIN) management and security 2011. https:\/\/www.iso.org\/obp\/ui\/#iso:std:54083:en.  International Organisation for Standardisation. ISO 9564: Financial services -- Personal Identification Number (PIN) management and security 2011. https:\/\/www.iso.org\/obp\/ui\/#iso:std:54083:en."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4614-4878-5_3"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1613676.1613679"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijhcs.2006.08.005"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.5555\/1971852.1971853"},{"key":"e_1_3_2_1_20_1","unstructured":"Korean Banks to Possibly Adopt a 6-Digit PIN System Oct. 2015. www.seoulsync.com\/news\/korean-banks-adopt-6-digit-pin-system.  Korean Banks to Possibly Adopt a 6-Digit PIN System Oct. 2015. www.seoulsync.com\/news\/korean-banks-adopt-6-digit-pin-system."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2014.2374352"},{"key":"e_1_3_2_1_22_1","unstructured":"Chip and PIN: Final deadline in UAE Dec. 2014. https:\/\/www.souqalmal.com\/financial-education\/ae-en\/chip-and-pin\/.  Chip and PIN: Final deadline in UAE Dec. 2014. https:\/\/www.souqalmal.com\/financial-education\/ae-en\/chip-and-pin\/."},{"key":"e_1_3_2_1_23_1","unstructured":"L. Lundin. PINs and Passwords Part 1 Aug. 2013. http:\/\/www.sleuthsayers.org\/2013\/08\/pins-and-passwords-part-1.html.  L. Lundin. PINs and Passwords Part 1 Aug. 2013. http:\/\/www.sleuthsayers.org\/2013\/08\/pins-and-passwords-part-1.html."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.50"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/2187836.2187878"},{"key":"e_1_3_2_1_26_1","unstructured":"R. Martin. Amid Widespread Data Breaches in China Jan. 2012. https:\/\/sg.finance.yahoo.com\/news\/Amid-Widespread-Data-Breaches-pennolson-706259476.html.  R. Martin. Amid Widespread Data Breaches in China Jan. 2012. https:\/\/sg.finance.yahoo.com\/news\/Amid-Widespread-Data-Breaches-pennolson-706259476.html."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2015.11.007"},{"key":"e_1_3_2_1_28_1","unstructured":"M. Nicholas. The 10 Biggest Data Breaches of Summer 2016 Sep. 2016. https:\/\/blog.dashlane.com\/biggest-data-breaches-summer-16\/.  M. Nicholas. The 10 Biggest Data Breaches of Summer 2016 Sep. 2016. https:\/\/blog.dashlane.com\/biggest-data-breaches-summer-16\/."},{"key":"e_1_3_2_1_29_1","unstructured":"Reuters. Russia launches China UnionPay credit card Aug. 2014. http:\/\/rt.com\/business\/180696-china-russia-union-pay\/.  Reuters. Russia launches China UnionPay credit card Aug. 2014. http:\/\/rt.com\/business\/180696-china-russia-union-pay\/."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/2702123.2702365"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.08.006"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.tcs.2006.08.042"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516700"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/2858036.2858546"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/2379690.2379702"},{"key":"e_1_3_2_1_36_1","article-title":"Zipf's law in passwords","author":"Wang D.","year":"2016","journal-title":"IEEE Trans. Inform. Foren. Secur."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24177-7_23"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978339"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.8"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2004.81"}],"event":{"name":"ASIA CCS '17: ACM Asia Conference on Computer and Communications Security","location":"Abu Dhabi United Arab Emirates","acronym":"ASIA CCS '17","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3052973.3053031","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3052973.3053031","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T03:03:35Z","timestamp":1750215815000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3052973.3053031"}},"subtitle":["Characteristics, Distribution and Security"],"short-title":[],"issued":{"date-parts":[[2017,4,2]]},"references-count":40,"alternative-id":["10.1145\/3052973.3053031","10.1145\/3052973"],"URL":"https:\/\/doi.org\/10.1145\/3052973.3053031","relation":{},"subject":[],"published":{"date-parts":[[2017,4,2]]},"assertion":[{"value":"2017-04-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}